last executing test programs: 8.93218022s ago: executing program 4 (id=2107): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000540)={0x0, 0x0, 0x8, 0x0}) 8.903196753s ago: executing program 4 (id=2108): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x50, 0xffffffffffffffff, 0x26d99000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x4, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4c1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb474, 0x8001, 0x4, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@rand_addr=0x64010101, 0x4e21, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) 7.465033802s ago: executing program 2 (id=2114): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) utime(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) 6.53683528s ago: executing program 2 (id=2118): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000540)={0x0, 0x0, 0x8, 0x0}) 6.442210048s ago: executing program 2 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000020000000700000a20000000000a01030000000000000000010000000900010073797ac15500000040000000000000010000000000000200010080000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c0002400000000000000001090001"], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xff05, 0x70bd2c, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20045844}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b0001010400000904"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001", 0x37}], 0x1, 0x0, 0xffffffffffffffe8}, 0x40015) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r3, r3, 0x0, 0x2000006) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f00000000c0)) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) syz_open_dev$I2C(&(0x7f0000000040), 0x7, 0x121100) 3.964487652s ago: executing program 1 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x13, r3, 0x0, r2}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020603310000000000000000fb060000000c000780080012400000ffff05000100060000000500057b769ff9000200000005000400000000110003006861730300000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 3.889213035s ago: executing program 4 (id=2122): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) pwrite64(r0, &(0x7f0000000040)="e9befe", 0x3, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x103}, 0x50) rt_sigtimedwait(&(0x7f0000004380), 0x0, 0xfffffffffffffffc, 0x8) unshare(0x22020600) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) 3.573840459s ago: executing program 1 (id=2124): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2d023b82407fbb8ae52a24b445059869df6095b826013c10bb7745d9edc0ef211452945180b52cc3986fb74d70cdc0194be37b376d2d4798d4e4463d042b1a462e80d80915fcffca56f2e0f5a6b6bff7e43eb6c80c1a8e85c077f4e980c3aa7b4b34562044059224e7280a86d55356ca279765d0943a185ac585ba7355885a40b0f4d02e5afe7b154deb20048d62307273f7069b86987af5b7fd9272d1ed5a9891e493deafa8a98f30c86803d00028221b891d3ae3437e26e9e0bbb0c152036ffebc06c5aa3fe55480e68414e7283793c5f93bf95ee471bf2b70abf696bb304bbecce852fd81439df022489675c1827a96f824378a80ce5338143bbc8fc3b1955bba34f2121cf485212c7cd8b50d81382605d28573b46b376e1092560f6d76c8ee2c4ebd9cf88665cec5acd5c2bb34ed1ce0338a7c1c8583914be1ef3a054e91f35a82147c0ef819f7971e12c18c5314df9e06bbbea133f82e638fd4646fb6a517fe75130f65392e8e1456fff3ae5cc7298b7bd6e7ea141808b4b4ec6930e7ee97e802a9a5c37c7bfaf6f8fd113b1e713e9d07cf0ddddf91965c29dbcc7a6478a071efe498458ee8428baeacd171ca321a88863d747ae8ba633f835401e66c831bec8d66ede3a6be8c9d6cd2e543df191a661d934e115c49db11cd3382aa4c378ea27b37078e4dbd52d5237873388f0b114dbcd77332e3cae456d8a96465a763709b9e33255b9648f186ae462f585dd729676a66e5dcba00b76ef82b9926d820d1f81f2ef2bdedb9727bc9b8420a16af0a3d49bfabaf53637b5712cd1efcfecefea443d99749398406a15af44464330fcc7ae05bc1319a403f17320384adf670171b10572b7a3c29224327d4da0cc98605adb69b143b75f495c3ee34b0e2df6119cdecfc9c14adac77c00225ba394a33c2031f7fd6fd5c51603133fd282b714d0206a61dcbfd9826847751c0828c7258b75739fc0f26cb4f5037652f608bfd156660b8ca43069fdfd27dc658b768b0842a71bd2191064e7c343710b26b4f94900dea847881b9269a250b165aa5b32cb02e853e01df7283f5aae557f555cdd110ffa52c5c702cb214934c5aa8a99c87b2ec9dd6717693827029ad477fa822c84c83303d04a6db313af73b83ef53d0caae2a0de16e13746d092a2e6260638245c57bf2904740ef4d4385b3fd888ea17795c712dbce6a559c71a8425deab805f99ec9f16cf268c5c6cb6cbbefe71115e62c85e9a0940b96a19a49b4a9373250c5b7a2446b4393aaa144ba32a9a0fff5cffc515d48691911a84ef869af3c3b08db4d8e44279b8ecf0753e88e5405897b4050db08c254cf0ff5b69a045bc62049218a573c6a395148454e91072768ddbd4326a0d247a0a4571ea894875a2f899f47487c3d2b62e51d8239633d3421fd79b0c32d05b99256614accf64ee6e2d51a3bdd221e79d6475e6ac68159923977200feba975e290d768d7255416a06c8f161fa39f7a04c4651d420f1d96703cb3773bd2a2a0c37b1603151c4cc47f0699900849509534f8ec5131cfee5d96d598e28d571328ca037a34ba31aa5e6d51fe2604f8316545f129f0ae8e0856888d3315ed22f6246852df12d67e3a64e7891df946b81495189341e9401406037cfb31490fcff4fc0406f2f70e2cabcd0fb8adeec4be909526dfa252a5aee0435df3a07e0897b86eaff8dd190f466b2a81e8a37ffb577bfb5feddefb292809c1d925c2f9cf27380dc78e74d74ceb1d31ebe84bbd2e6ce48dded3c55203966896ad1458d3d3095b9bacf250416ee27aa73a5c5d6ec6b2c9c323759ffe97df44481f796f4762e3245c0a88fd129dbafde688f2c57445665c623025a76748a9931a7f67c53faa4a155c9ba5caa38986462e48db7c580749bd372955244c9d4a17631f24b9b64036de9e97147b7056dcb54652fca36a037d0c3f754a303c594d8e04f706fe75e8f19607e6cc94ac60d83b4fc620a00b52605323391f3e005dcdb9be443b59d89760b605f32c07bef27a326863e07d770e7bb2853354f6404a83d099559e5a25849bd16c6381354ec45df14e3e16099a0cc299256118be93e47c025b01a2fe899c81411c8f6b74808562ecb2f91b8688b1617b93516b29162bf71db6e2dbee1ba98fba3cf6e7f56d90fbf017d2d81d2411515d73272bc167a55770deacb3d79dcfa1cb9c27e27585b521d3900e4fb280c1ba1f9e956bd1326bf162255f66b0189ae648a402e48cc61fdd20fd3a09070c88167730bf80b34cecfcb37a4046552d167f1993990e55e43ee58372455864de62d636d836477fca1ca355bce2eed04ca30751ad642e61862d1e29886b9acc5be9d6ab7e6eab7c89a7ebde051116ae5f12432caa8228c4dddb5221f7f5fafeef8d397ee0c7d94dfcd2fade21947c98bd89b071f4e24dfb43b46f1db5f1276d8d71e3cccca479cb612be6bd02e6f188403b85022ed0e9d42f9c4531a11659bfd144b4a49b6659be2a548658a66d7faa44622742d7c42d7f90caa2ca3a24d10c993a9b1c814f4e0b735615cbd9c00d6bf444d0ae1071f2b74023d2e53b9d2b79f6ddaeadcef3bcc5d13971b7f9c7e72d1a431e1d79234e1dab13ee758f741777d836905c7873de0192ecda15d3a224331fc2222f6793edd69da51befe4f772ec696e4e4e5deba877b52b91d8b7de4fd151e1009134cebf4a353e6219b21f131487b3fba0f4b7e39626c5c7583ed5073086ff735ce19cb786e8d1bf359b4c3a7bc29bbf9d441d914d7e842b88f0868d0f6a6fd41624271ad5e166d677ea5109b6c8e9d2fdfff9e944e9c9ad50b3cde7e3f229e2bbf81c6aaa7b7c8e5700362000b6509942bbed25253e0833a5f7a71975b780472ed6f3da3a2ba162f20b3b90d4a084acbb137129bbd9b65f3e9ba6886241d80ee90dcf7d64050d52e8550f21262a88395ca06b83a5b5d9c05426582c86fe7753019a71ecc84c59fae3239d195246306f153b301629fbc6bd6e3fbc6aff7d35d79c5c8046b61ec70e2b7356c9400477778990364091be2b74bdab711f5561ff137021fdf9e82a35fd5bf85673bbb2944cf1f36a2e25fa4dd948525621f7a14dc3c8d1e1f1ec9d334dddcf7f9487f3d3ec60106becfddc15ece3850215aa3231a543264263757c6417adde58eb6b624096ac5c7b96e4e294cc935ad9315669d03b80522e5b7f6207e325cc5e9a33cdd8d5512aa388e452674a936826d47f23097d33c4e4a1f2f0802a2b9be2a608f2f0ff27f6b041d70d268f848687d45e6e510691ad516c7d7038d4153fb30415e425a4cb9d879aee8ffbca65df46876151af9a583d9a3fb331fb1b616a8007fddba31bee77e420172cd2a2a140a3376db47d7336d958bfa6f4ae80f78310c9043a184258dbaa9bba0c2482d7eb70c2bd94d52587fb92fd80c58110b05ad6eb1623009cd263deb3cb219bfde713ef738dfed0b1c6254177d939e8c358cc69ddfa3e31aa4c3cbfe384d96749217ff3b2b45a15f34403fe327aa2f805d1eaf7ee7f187070032eceba18a11e4ccf7c2e3a4d5c72d1db7b0bb5dc2354ae7eb27dedb91a5571203835b482353950220ad39f21334135c6fdd22a71c6119ce5dfa292a71ad296b141663210872c192aa228e21068d717235f1186234de39e69e5904ead38314ef69b86a656371d9987d327a7064fc6e1acd7f822165b1e42da9bff573db1eaf2563552bf6dbb6591031883f5cf7e22d1f2e2522e5bb88fc4bdece187d7f2612886a7f314895d43dd2c9e1b731aec39014028590ea0c76f1cd7d71c96ed45ce31d5e38f38a36a95d54708875dd99d8612275450a700251c7f21742d31b9be6de5fcf63b7b639ff746f31537694b3005ddf6cc8375f25bd782bc784943b72bd19f938a449fe0a617b5b1430a4d506e3bf0a1f118b6e45e9e6a3515efd9ecd1a964c5459921b01a0cacf0d4e4659f06ee2e53123a2241b583072f91af6b82f51fa14622ead00697b2f511e7f54cc4e8b015bd03b4ebae849ec9f7738d945450ff8363aee60678b80a86e93326f6a87d73b1a114f6f6186e2a4365d66d5b74df15280c4060ec847da5a1baf1706e7a373f2ec73ad755bffdd5813cf5ce8cf8b07d4ac8b324293b7248145b35b13fe638f902c5e8147084c221591cefa221573080f49ed7b3479e9c81c4ec2e5e8df89ce0266f6023327aae85f74fc70085398ca9749a1b8467d3d2d7bdcfc4bb9af62721a4cf55a5d2600210eeda03de3b9353725eb991583d7226debf7e3d4b06d89c41599b3687d56571c6c810882e1060510b0e6480b4e3d8705c858e24897dd8bd936f9a16bd626b98dd55696aa2dea3c0a12a6b12f5befba90ea487134453b5a8e863b5446565730e9d84e019d664654568c3448bbddd8cccc15e4615addae0d732dafe6f54b229cd5689396720d0010dfea3f9e6d9793b51be5c4e39659e8eb604ec15ee7ae2a2961a8b815d9417795cdde0702d6cf7dcdc16f02365d7eee5dfc7a0a9ea3957672f00a209fb845e782777ef9e5c9e7aa7926bb93c3486a8612e222ddc9709d9a2acef6c60db859c4fd39f365bb22f90edd04f891fd3ccdff35c5eac56ec49d02063a7859aa14c938d575fb85cc26a3f3fb3ef4d8ce576e927dc54c27702aff904e133a6869ac4384ca6ce273d1a7f3b4ffb570dd097e607ade6733262b527c508e4ff7e09bb56432c36a38065c582210252efc06aa0d3fe0ea99e97e6ee88f80ad33bcb2cd0570b8f97488bfe09d4560b9ab44ec7ea5726d291460ab46d32922c1b37067425ff9abc8a4bf810879114dc266a575e1ddcbfd6ef2c51b624091b3ebe68ededfd94f883ae674b1f00be817a559b3c6376aa68f039628ae425191b7c7ba60e73b0fa3c4fe5533b4f8fe0b21f61a5f9e520e22cdbebd929048552b6d8d1d5c18fa9900b7786462e7e4d738e57485e9a6dd14a0fd37f0256613317df8ec3518c7eee50c59070a7276f8b0575426887f2cb5be122cc766a25a07132ef01611d0c2d3f16de29a8c0f39a3a5a3e9596b61fd4e518bcc52cdd2d87605ce9d9c5f2a6d4e11d2f94575b0d5de72d0b97d0a2cf32b5465c6a4ddb62d61b97f2331341c9d448ec775180f858394f2c0b2ee982b9f867d73f97d0e0e3b275ef49c7c262c4d6f5fac787edafaa8b79410b1288a0b52afd93c8584ff9d61eddfa0cada98bd3c200fc708078098764bbe304c44d62eff132415a917c022c9f7466318017da7b4649eb0fae58fcb716a1f295d84dd9ec14218beb0372c041aaa4421a8f75eaef5115f0f32aca8fd30fde0e9e08972e23faf5381eb18c626c0ce920261461c3dfe7f1e8b35ca16f7283de3af4bba5c384e256cd369568214101a8e27c94531a81fe4fba595a4455f8724eebea716d1a4940b3d787fc4bd6ad8aa403fceb74f316fb5a816890646338efb6f13aba195f127aa1b1107bf303b1f997c74d6f4f664d708f58c3b3ca063825405ad7a61260debf4b220443b6537f5ae94820ec62901944cc9023e655f82e0e31a13f351ed0336cbcfda8ae0b20025fb33e49f011f6aa708140cffefbd06f9b90fefc6f9d79f67495ff0b1a2f1ff075eda3fdd800088fc0583dc0e1e9f7f02673da61cc4466a2559d70cd90e453b11449442eb11f444e1203bc38754f7ad0d93bb91e40f9cd490d2dd5d7e2571c460718f94d4c61751c119fedbbbd28d7716ccb6aaa8bafae3756926ae8fccf3c5397a", 0xff8}, {&(0x7f0000000540)="43735ec9", 0x4}, {&(0x7f0000000080)="58c22ba236", 0x5}, {&(0x7f00000000c0)="c8e42e6c3e2f0376003d347c6e0000009168387c2718f90da03b6bc48b25b767deee4ab0db4d10b808", 0xe}], 0x4, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4062, 0xfde}, {&(0x7f0000000240)=""/41, 0x29}], 0x2}, 0x20002140) 3.523687576s ago: executing program 4 (id=2126): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/51, 0x33}], 0x1, 0xe, 0x1000) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000100), 0x0, 0x28048011) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="000f00"/16], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r8, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 3.440813573s ago: executing program 1 (id=2127): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0x1, 0xf, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0xffff, 0x6}}}, 0x24}}, 0x0) unshare(0x20000400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, &(0x7f00000000c0)) 3.357491871s ago: executing program 2 (id=2129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000091) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000140), 0x18) sendmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1", 0x3}], 0x1}}], 0x1, 0x4) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff", 0x3f, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@getspdinfo={0x0, 0x25, 0x300, 0x70bd27, 0x25dfdbfe, 0x0, ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) unshare(0x20000400) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000080)={0xc, 0x2d00, 0x8, 0x7, 0x17, "15114d69c1a2c220"}) getsockopt$inet_tcp_int(r7, 0x6, 0xc, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) 3.248040674s ago: executing program 1 (id=2130): pipe2$9p(&(0x7f0000000080), 0x800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r1, 0x100000000000000, 0x0, 0x400001) 3.240564018s ago: executing program 3 (id=2131): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) modify_ldt$read(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) fsopen(0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020800454c001c000000"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80effe0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0xfffffffffffffffc) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x40040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf53af528cfe3c67f}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 3.110844624s ago: executing program 1 (id=2132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000480)='GPL\x00'}, 0x94) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x30, 0xe9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0xe8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x4, {0xa, 0x25, 0x25, 0x0, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf8, 0xe, 0x4, {0xa, 0x25, 0x25, 0x2c5816, 0x4, 0x3a85}}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r2, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00100c00"], 0x0, 0x0, 0x0}, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) clock_settime(0x17, &(0x7f0000000240)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(r4, 0x0, 0x2, &(0x7f00000000c0)) 3.041225933s ago: executing program 0 (id=2133): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='(', 0x1}], 0x1, 0x0, 0x0, 0x80d1}], 0x1, 0x4006881) io_setup(0xff, &(0x7f0000000380)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 2.599278887s ago: executing program 4 (id=2134): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = epoll_create(0x401) syz_clone3(&(0x7f0000001000)={0x88100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x2a) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)="0a0dd70e3c265b5fb0f83f307731e0fd2a1fc1c1ef9d910b45273f2d249667243d0e91e8898e44332c", 0x29) 2.598052008s ago: executing program 3 (id=2135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x34, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) 2.526163958s ago: executing program 0 (id=2136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf250000000000000000000000000000000164010102000000000000000000070000000080a000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00`i'], 0x68}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "eee9e1", 0x16, 0x32, 0x1, @private1, @mcast2, {[], "d83d2d5b3d488b22a71357895f1fc249b9c7f5cc2ce9"}}}}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000380)={0x300a, r1}, 0x0) r3 = io_uring_setup(0x4626, &(0x7f0000000140)={0x0, 0x21f8, 0x2, 0xffffffff, 0x32c}) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000280)={{r0}, 0x2, &(0x7f0000000000)=[0x2, 0x6], 0x0, 0xa, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb53}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 2.34406064s ago: executing program 3 (id=2137): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r0, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001c00)="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", 0xff8}, {&(0x7f0000000540)="43735ec9", 0x4}, {&(0x7f0000000080)="58c22ba236", 0x5}, {&(0x7f00000000c0)="c8e42e6c3e2f0376003d347c6e0000009168387c2718f90da03b6bc48b25b767deee4ab0db4d10b808", 0xe}], 0x4, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4062, 0xfde}, {&(0x7f0000000240)=""/41, 0x29}], 0x2}, 0x20002140) 2.223743164s ago: executing program 4 (id=2138): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_pidfd_open(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) syz_usb_connect$sierra_net(0x3, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b07, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x80000}) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffefffe}, 0x94) socket$inet6(0xa, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 2.196916364s ago: executing program 3 (id=2139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x1, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) unshare(0x40300) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) socket$key(0xf, 0x3, 0x2) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) shutdown(r0, 0x1) 2.095729394s ago: executing program 0 (id=2140): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0x0, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) dup3(r1, r4, 0x6700000000000000) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 1.95721449s ago: executing program 3 (id=2141): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = syz_open_dev$loop(0x0, 0x7, 0xe0942) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f8002ed1f3c4da06963dd89d130e0f0374c32a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2, 0x4, 0x17, 0x14, "803939a0657b30cba8646a4161bbfc7a3c23ea662f5834ad6f6036503ac01a7b31569057f0affaa397b710f89634d8b851a6bdb0596b56a8939700a4c8134c01", "f6d3721583f9d43b0438b83bc84bb3728cb26efe56a694ac81f61fcb54462bf7", [0x3b, 0x1000]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x4, 0x200, 0x87, 0x3ff, 0xd4ae, 0xffff, 0x10000, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r5, 0x4}, &(0x7f0000000180)=0x8) 1.689426913s ago: executing program 3 (id=2142): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file4/file7/file6\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x103, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x320, 0x5, 0x9, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x2, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x4, 0x6, 0x6, 0x1, 0x40], [0x8, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x5, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0xe], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x85, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x7, 0x6, 0xac8, 0xc2, 0xf6b, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0x4, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x7, 0x7fff, 0x10000, 0x7f, 0x2, 0x1, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x7fffffff, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0xfc, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0x6, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 843.711801ms ago: executing program 0 (id=2143): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x60000002}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000080)={0x0, 0xa, 0xc0000, {r0}}, 0x20) unshare(0x4000200) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f00000001c0), 0x0, 0x1000, 0x7, 0x0) 649.666915ms ago: executing program 1 (id=2144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0080, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x24000111}, 0x800) socket$inet6(0x10, 0x800, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x800010, 0x0, 0x2, 0xfffffffffffffffa, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x3410c0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r5, r6, 0x0, 0x201f00) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f0000000640)={{}, 'port1\x00', 0x54, 0x151c67, 0x7, 0x102, 0x1ff, 0x0, 0xe, 0x0, 0x4, 0x4}) r8 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000400)=""/172, 0xac}], 0x1, 0x80000001, 0x3) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000300)=0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 566.185339ms ago: executing program 0 (id=2145): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mmap$snddsp_status(&(0x7f0000002000/0x4000)=nil, 0x1000, 0x200000b, 0x30, 0xffffffffffffffff, 0x82000000) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 501.035444ms ago: executing program 2 (id=2146): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) modify_ldt$read(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) fsopen(0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020800454c001c000000"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80effe0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0xfffffffffffffffc) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x40040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf53af528cfe3c67f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 291.575971ms ago: executing program 0 (id=2147): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r0, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 0s ago: executing program 2 (id=2148): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x1, 0x1a}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="022202000000b118"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 0] audit: type=1326 audit(1776968657.745:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.633509][ T5898] usb 1-1: Manufacturer: syz [ 428.658990][ T30] audit: type=1326 audit(1776968657.745:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.683753][ T30] audit: type=1326 audit(1776968657.745:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.684546][ T5898] usb 1-1: SerialNumber: syz [ 428.716979][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.718361][ T30] audit: type=1326 audit(1776968657.745:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.735014][ T5971] usb 2-1: USB disconnect, device number 85 [ 428.760322][T12905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.773359][T12905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.774314][ T30] audit: type=1326 audit(1776968657.745:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.806281][ T30] audit: type=1326 audit(1776968657.745:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.812233][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.839940][ T30] audit: type=1326 audit(1776968657.745:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.850897][ T5898] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 428.876131][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 428.886198][ T5898] usb 1-1: MIDIStreaming interface descriptor not found [ 428.887473][ T30] audit: type=1326 audit(1776968657.755:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9879c819 code=0x7ffc0000 [ 428.894183][ T9] usb 5-1: Product: syz [ 428.934402][ T9] usb 5-1: SerialNumber: syz [ 429.075042][T12893] pim6reg: entered allmulticast mode [ 429.091171][T12893] pim6reg: left allmulticast mode [ 429.163115][ T5997] usb 1-1: USB disconnect, device number 75 [ 429.247249][ T5971] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 429.409197][ T5971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.419608][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.432648][ T5971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.442019][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.453133][ T5971] usb 2-1: config 0 descriptor?? [ 429.462199][ T5971] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 429.469687][ T5899] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 429.627259][ T5899] usb 4-1: device descriptor read/64, error -71 [ 429.878365][ T5899] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 429.947274][ T5997] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 429.996608][T12897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.005580][T12897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.014709][ T9] cdc_ncm 5-1:1.0: failed to get mac address [ 430.020953][ T5899] usb 4-1: device descriptor read/64, error -71 [ 430.097257][ T5997] usb 1-1: Using ep0 maxpacket: 32 [ 430.104199][ T5997] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 430.113623][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.146047][ T5997] usb 1-1: selecting invalid altsetting 3 [ 430.147794][ T5899] usb usb4-port1: attempt power cycle [ 430.152233][ T5997] comedi comedi5: could not set alternate setting 3 in high speed [ 430.167545][ T5997] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 430.184699][ T5997] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 430.215556][ T9] cdc_ncm 5-1:1.0: bind() failure [ 430.224911][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 430.232307][ T9] cdc_ncm 5-1:1.1: bind() failure [ 430.381776][ T5997] usb 2-1: USB disconnect, device number 86 [ 430.428810][ T9] usb 5-1: USB disconnect, device number 64 [ 430.507256][ T5899] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 430.527861][ T5899] usb 4-1: device descriptor read/8, error -71 [ 430.586557][T12927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'. [ 430.595958][T12927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 430.767856][ T5899] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 430.807934][ T5899] usb 4-1: device descriptor read/8, error -71 [ 430.868802][T12942] netlink: 'syz.2.1782': attribute type 4 has an invalid length. [ 430.938097][ T5899] usb usb4-port1: unable to enumerate USB device [ 431.307928][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 431.459611][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 431.472057][ T24] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 431.481426][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.489627][ T24] usb 5-1: Product: syz [ 431.493955][ T24] usb 5-1: Manufacturer: syz [ 431.498661][ T24] usb 5-1: SerialNumber: syz [ 431.509170][ T24] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 431.638033][ T5997] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 431.752905][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.767772][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.797959][ T5997] usb 2-1: Using ep0 maxpacket: 16 [ 431.804795][ T5997] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 431.813920][ T5997] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.824507][ T5997] usb 2-1: config 0 has no interface number 0 [ 431.833563][ T5997] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 431.842813][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.851202][ T5997] usb 2-1: Product: syz [ 431.855404][ T5997] usb 2-1: Manufacturer: syz [ 431.860179][ T5997] usb 2-1: SerialNumber: syz [ 431.867505][ T5997] usb 2-1: config 0 descriptor?? [ 431.919612][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 431.947479][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 431.959955][ T24] usb 5-1: media controller created [ 431.984541][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.994425][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.013819][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.100390][T12950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.130761][T12950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.157186][ T5997] usb 2-1: USB disconnect, device number 87 [ 432.256911][ T24] usb 5-1: USB disconnect, device number 65 [ 432.602785][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 432.688020][ T5899] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 432.750645][ T5898] usb 1-1: USB disconnect, device number 76 [ 432.807369][T12967] x_tables: duplicate underflow at hook 2 [ 432.879740][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 432.907229][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 432.920746][ T5899] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 432.940602][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 432.947169][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.967170][ T5899] usb 4-1: Product: syz [ 432.971395][ T5899] usb 4-1: Manufacturer: syz [ 432.976019][ T5899] usb 4-1: SerialNumber: syz [ 432.989445][ T5899] usb 4-1: config 0 descriptor?? [ 433.008576][T12956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 433.016287][T12956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 433.099916][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.111372][ T24] usb 5-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 433.123393][ T24] usb 5-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 433.136058][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 433.146728][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.157305][ T24] usb 5-1: Product: syz [ 433.157408][ T5898] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 433.161612][ T24] usb 5-1: Manufacturer: syz [ 433.174594][ T24] usb 5-1: SerialNumber: syz [ 433.302345][ T5899] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 433.321975][ T5899] usb 4-1: USB disconnect, device number 80 [ 433.332072][ T5898] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.345520][ T5898] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 433.359520][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.369878][ T5898] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.382409][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 433.393832][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 433.409375][ T5898] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 433.428713][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 433.448108][ T5898] usb 1-1: Product: syz [ 433.456371][ T5898] usb 1-1: Manufacturer: syz [ 433.466006][T12967] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 433.475509][ T5898] cdc_wdm 1-1:1.0: skipping garbage [ 433.481923][ T5898] cdc_wdm 1-1:1.0: skipping garbage [ 433.495706][ T5898] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 433.502721][ T5898] cdc_wdm 1-1:1.0: Unknown control protocol [ 433.551560][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 433.696082][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.706416][ T5913] usb 1-1: USB disconnect, device number 77 [ 433.708144][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.906904][ T24] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 433.946476][ T24] usb 5-1: USB disconnect, device number 66 [ 434.577219][ T5899] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 434.717369][ T24] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 434.739789][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.760828][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.791268][ T5899] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.801728][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.820252][ T5899] usb 4-1: config 0 descriptor?? [ 434.831920][ T5899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 434.871308][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 434.884150][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.902768][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 434.910569][ T24] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 434.920839][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.942195][ T24] usb 1-1: config 0 descriptor?? [ 434.982157][T13006] binder: 13000:13006 ioctl c08c5336 200000000500 returned -22 [ 435.043495][ T5899] usb 4-1: USB disconnect, device number 81 [ 435.357675][ T24] hid_parser_main: 96 callbacks suppressed [ 435.357699][ T24] thrustmaster 0003:044F:B323.001A: unknown main item tag 0x6 [ 435.385207][ T24] thrustmaster 0003:044F:B323.001A: invalid report_size 26545 [ 435.393823][ T24] thrustmaster 0003:044F:B323.001A: item 0 2 1 7 parsing failed [ 435.404318][ T24] thrustmaster 0003:044F:B323.001A: parse failed [ 435.411042][ T24] thrustmaster 0003:044F:B323.001A: probe with driver thrustmaster failed with error -22 [ 435.440130][T13013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1805'. [ 435.473909][T13013] syzkaller1: entered promiscuous mode [ 435.480080][T13013] syzkaller1: entered allmulticast mode [ 435.498314][ T5913] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 435.563859][ T24] usb 1-1: USB disconnect, device number 78 [ 435.670475][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.685515][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.714473][ T5913] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.736977][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.776214][ T5913] usb 4-1: config 0 descriptor?? [ 435.799575][ T5913] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 435.834733][T13032] x_tables: duplicate underflow at hook 4 [ 436.130433][ T5913] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 436.309149][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 436.321204][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 436.331882][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 436.359367][ T5913] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 436.368908][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.378211][ T5913] usb 2-1: Product: syz [ 436.382740][ T5913] usb 2-1: Manufacturer: syz [ 436.387811][ T5913] usb 2-1: SerialNumber: syz [ 436.394781][ T5913] usb 2-1: config 0 descriptor?? [ 436.622621][ T5913] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 436.824197][ T5913] usb 2-1: USB disconnect, device number 88 [ 436.861717][ T5898] usb 4-1: USB disconnect, device number 82 [ 437.357238][ T5898] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 437.580278][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 437.580293][ T30] audit: type=1326 audit(1776968666.745:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.1.1816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc237d9c819 code=0x0 [ 440.066224][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.073081][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.755602][T13073] FAULT_INJECTION: forcing a failure. [ 440.755602][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 440.768336][T13073] CPU: 0 UID: 0 PID: 13073 Comm: syz.1.1822 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.768355][T13073] Tainted: [L]=SOFTLOCKUP [ 440.768359][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.768366][T13073] Call Trace: [ 440.768372][T13073] [ 440.768377][T13073] dump_stack_lvl+0xe8/0x150 [ 440.768398][T13073] should_fail_ex+0x412/0x560 [ 440.768420][T13073] should_failslab+0xa8/0x100 [ 440.768435][T13073] ? skb_clone+0x212/0x3a0 [ 440.768447][T13073] kmem_cache_alloc_noprof+0x87/0x650 [ 440.768464][T13073] skb_clone+0x212/0x3a0 [ 440.768477][T13073] __netlink_deliver_tap+0x404/0x850 [ 440.768494][T13073] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.768504][T13073] netlink_deliver_tap+0x19c/0x1b0 [ 440.768514][T13073] netlink_sendskb+0x68/0x140 [ 440.768530][T13073] netlink_rcv_skb+0x2b6/0x4b0 [ 440.768540][T13073] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 440.768556][T13073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.768573][T13073] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.768582][T13073] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.768594][T13073] netlink_unicast+0x75c/0x8e0 [ 440.768619][T13073] netlink_sendmsg+0x813/0xb40 [ 440.768634][T13073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.768646][T13073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 440.768657][T13073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.768671][T13073] ____sys_sendmsg+0x972/0x9f0 [ 440.768683][T13073] ? __might_fault+0xaf/0x130 [ 440.768698][T13073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.768714][T13073] ? import_iovec+0x73/0xa0 [ 440.768728][T13073] ___sys_sendmsg+0x2a5/0x360 [ 440.768738][T13073] ? __lock_acquire+0x6b5/0x2cf0 [ 440.768756][T13073] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.768784][T13073] ? __fget_files+0x2a/0x420 [ 440.768794][T13073] ? __fget_files+0x3a0/0x420 [ 440.768809][T13073] __x64_sys_sendmsg+0x1bd/0x2a0 [ 440.768822][T13073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.768838][T13073] ? __pfx_ksys_write+0x10/0x10 [ 440.768855][T13073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.768865][T13073] do_syscall_64+0x15f/0xf80 [ 440.768879][T13073] ? trace_irq_disable+0x3b/0x140 [ 440.768893][T13073] ? clear_bhb_loop+0x40/0x90 [ 440.768906][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.768916][T13073] RIP: 0033:0x7fc237d9c819 [ 440.768928][T13073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.768937][T13073] RSP: 002b:00007fc238b74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.768949][T13073] RAX: ffffffffffffffda RBX: 00007fc238015fa0 RCX: 00007fc237d9c819 [ 440.768956][T13073] RDX: 00000000040040d4 RSI: 0000200000000200 RDI: 0000000000000003 [ 440.768963][T13073] RBP: 00007fc238b74090 R08: 0000000000000000 R09: 0000000000000000 [ 440.768970][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.768976][T13073] R13: 00007fc238016038 R14: 00007fc238015fa0 R15: 00007fc23813fa48 [ 440.768992][T13073] [ 441.448740][T13089] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13089 comm: syz.3.1827) [ 441.457205][ T5899] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 441.471298][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 441.479907][ T30] audit: type=1800 audit(1776968670.655:2903): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1827" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=55074 res=0 errno=0 [ 441.629221][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.640772][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.654980][ T5899] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 441.665289][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.675470][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.686539][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.707236][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 441.720409][ T5899] usb 5-1: config 0 descriptor?? [ 441.734564][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.788186][ T9] usb 2-1: config 0 descriptor?? [ 441.801814][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 442.004887][ T993] usb 2-1: USB disconnect, device number 89 [ 442.447258][ T993] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 442.501330][T13111] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 442.571784][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.601618][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.626317][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1835'. [ 442.629186][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.651223][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.653704][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.678071][ T993] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.687568][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.693497][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.704890][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.705775][ T993] usb 2-1: config 0 descriptor?? [ 442.722804][ T993] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 442.735727][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'. [ 442.736381][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.794399][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.814091][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.830575][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.845026][ T5899] sony 0003:054C:024B.001B: unknown main item tag 0x0 [ 442.855682][ T5899] sony 0003:054C:024B.001B: reserved main item tag 0xd [ 442.869690][ T5899] sony 0003:054C:024B.001B: unexpected long global item [ 442.882148][ T5899] sony 0003:054C:024B.001B: parse failed [ 442.888499][ T5899] sony 0003:054C:024B.001B: probe with driver sony failed with error -22 [ 442.953360][T13125] FAULT_INJECTION: forcing a failure. [ 442.953360][T13125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.982542][T13125] CPU: 1 UID: 0 PID: 13125 Comm: syz.0.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.982562][T13125] Tainted: [L]=SOFTLOCKUP [ 442.982566][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.982573][T13125] Call Trace: [ 442.982578][T13125] [ 442.982583][T13125] dump_stack_lvl+0xe8/0x150 [ 442.982604][T13125] should_fail_ex+0x412/0x560 [ 442.982622][T13125] _copy_from_user+0x2d/0xb0 [ 442.982635][T13125] generic_map_update_batch+0x648/0x990 [ 442.982652][T13125] ? __pfx_generic_map_update_batch+0x10/0x10 [ 442.982663][T13125] ? __fget_files+0x2a/0x420 [ 442.982677][T13125] ? __pfx_generic_map_update_batch+0x10/0x10 [ 442.982688][T13125] bpf_map_do_batch+0x39b/0x630 [ 442.982705][T13125] __sys_bpf+0x7c1/0x950 [ 442.982719][T13125] ? __pfx___sys_bpf+0x10/0x10 [ 442.982739][T13125] ? ksys_write+0x242/0x270 [ 442.982752][T13125] ? __pfx_ksys_write+0x10/0x10 [ 442.982766][T13125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.982777][T13125] __x64_sys_bpf+0x7c/0x90 [ 442.982789][T13125] do_syscall_64+0x15f/0xf80 [ 442.982803][T13125] ? trace_irq_disable+0x3b/0x140 [ 442.982816][T13125] ? clear_bhb_loop+0x40/0x90 [ 442.982829][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.982839][T13125] RIP: 0033:0x7fd2a9b9c819 [ 442.982850][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.982859][T13125] RSP: 002b:00007fd2aaada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.982871][T13125] RAX: ffffffffffffffda RBX: 00007fd2a9e15fa0 RCX: 00007fd2a9b9c819 [ 442.982878][T13125] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 442.982885][T13125] RBP: 00007fd2aaada090 R08: 0000000000000000 R09: 0000000000000000 [ 442.982891][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.982898][T13125] R13: 00007fd2a9e16038 R14: 00007fd2a9e15fa0 R15: 00007fd2a9f3fa48 [ 442.982913][T13125] [ 443.295416][T13128] tun0: tun_chr_ioctl cmd 1074025677 [ 443.313067][T13128] tun0: linktype set to 270 [ 443.481975][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.494844][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.392345][ T5899] usb 5-1: USB disconnect, device number 67 [ 444.409696][ T5997] usb 2-1: USB disconnect, device number 90 [ 444.927275][ T5997] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 444.965412][T13157] FAULT_INJECTION: forcing a failure. [ 444.965412][T13157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.995845][T13157] CPU: 1 UID: 0 PID: 13157 Comm: syz.0.1850 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.995872][T13157] Tainted: [L]=SOFTLOCKUP [ 444.995879][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.995889][T13157] Call Trace: [ 444.995896][T13157] [ 444.995903][T13157] dump_stack_lvl+0xe8/0x150 [ 444.995933][T13157] should_fail_ex+0x412/0x560 [ 444.995969][T13157] _copy_to_user+0x31/0xb0 [ 444.995991][T13157] simple_read_from_buffer+0xe1/0x170 [ 444.996013][T13157] proc_fail_nth_read+0x1bb/0x230 [ 444.996037][T13157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.996058][T13157] ? rw_verify_area+0x2a6/0x4d0 [ 444.996078][T13157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.996101][T13157] vfs_read+0x20c/0xa70 [ 444.996127][T13157] ? __pfx___mutex_lock+0x10/0x10 [ 444.996154][T13157] ? __pfx_vfs_read+0x10/0x10 [ 444.996179][T13157] ? __fget_files+0x2a/0x420 [ 444.996202][T13157] ? __fget_files+0x3a0/0x420 [ 444.996220][T13157] ? __fget_files+0x2a/0x420 [ 444.996248][T13157] ksys_read+0x150/0x270 [ 444.996273][T13157] ? __pfx_ksys_read+0x10/0x10 [ 444.996303][T13157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.996324][T13157] do_syscall_64+0x15f/0xf80 [ 444.996348][T13157] ? trace_irq_disable+0x3b/0x140 [ 444.996372][T13157] ? clear_bhb_loop+0x40/0x90 [ 444.996396][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.996415][T13157] RIP: 0033:0x7fd2a9b5d04e [ 444.996434][T13157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.996450][T13157] RSP: 002b:00007fd2aaad9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.996470][T13157] RAX: ffffffffffffffda RBX: 00007fd2aaada6c0 RCX: 00007fd2a9b5d04e [ 444.996484][T13157] RDX: 000000000000000f RSI: 00007fd2aaada0a0 RDI: 0000000000000004 [ 444.996497][T13157] RBP: 00007fd2aaada090 R08: 0000000000000000 R09: 0000000000000000 [ 444.996509][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.996521][T13157] R13: 00007fd2a9e16038 R14: 00007fd2a9e15fa0 R15: 00007fd2a9f3fa48 [ 444.996551][T13157] [ 445.299512][ T5997] usb 2-1: not running at top speed; connect to a high speed hub [ 445.308778][ T5997] usb 2-1: config 2 has an invalid interface number: 36 but max is 1 [ 445.317471][ T5997] usb 2-1: config 2 has an invalid interface number: 26 but max is 1 [ 445.325931][ T5997] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 445.338173][ T5997] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 445.347067][ T5997] usb 2-1: config 2 has no interface number 0 [ 445.353466][ T5997] usb 2-1: config 2 has no interface number 1 [ 445.359619][ T5997] usb 2-1: config 2 interface 36 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 445.371808][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 445.382626][ T5997] usb 2-1: config 2 interface 36 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 445.393572][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has an endpoint descriptor with address 0x7A, changing to 0xA [ 445.405162][ T5997] usb 2-1: config 2 interface 36 altsetting 7 endpoint 0xA has an invalid bInterval 200, changing to 4 [ 445.416383][ T5997] usb 2-1: config 2 interface 36 altsetting 7 endpoint 0xA has invalid maxpacket 1272, setting to 1023 [ 445.427763][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 445.446907][ T5997] usb 2-1: config 2 interface 36 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 445.468957][ T5997] usb 2-1: config 2 interface 36 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 445.496142][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 445.518324][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 445.535328][T13162] FAULT_INJECTION: forcing a failure. [ 445.535328][T13162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.540434][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 445.560496][T13162] CPU: 0 UID: 0 PID: 13162 Comm: syz.4.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.560526][T13162] Tainted: [L]=SOFTLOCKUP [ 445.560534][T13162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.560545][T13162] Call Trace: [ 445.560553][T13162] [ 445.560560][T13162] dump_stack_lvl+0xe8/0x150 [ 445.560595][T13162] should_fail_ex+0x412/0x560 [ 445.560628][T13162] prepare_alloc_pages+0x22a/0x650 [ 445.560667][T13162] __alloc_frozen_pages_noprof+0x12f/0x380 [ 445.560695][T13162] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 445.560725][T13162] ? __pfx_policy_nodemask+0x10/0x10 [ 445.560751][T13162] ? __pfx___mutex_lock+0x10/0x10 [ 445.560776][T13162] ? aa_file_perm+0x50e/0x15e0 [ 445.560798][T13162] alloc_pages_mpol+0x235/0x490 [ 445.560836][T13162] alloc_pages_noprof+0xac/0x2a0 [ 445.560862][T13162] anon_pipe_write+0xc06/0x1480 [ 445.560890][T13162] ? __pfx_aa_file_perm+0x10/0x10 [ 445.560930][T13162] ? __pfx_anon_pipe_write+0x10/0x10 [ 445.560959][T13162] ? apparmor_file_permission+0x1f4/0x300 [ 445.560986][T13162] ? bpf_lsm_file_permission+0x9/0x20 [ 445.561009][T13162] ? security_file_permission+0x75/0x260 [ 445.561041][T13162] vfs_write+0x61d/0xb90 [ 445.561069][T13162] ? __pfx_vfs_write+0x10/0x10 [ 445.561097][T13162] ? __fget_files+0x2a/0x420 [ 445.561121][T13162] ksys_write+0x150/0x270 [ 445.561145][T13162] ? __pfx_ksys_write+0x10/0x10 [ 445.561170][T13162] ? __secure_computing+0xe1/0x2a0 [ 445.561197][T13162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.561217][T13162] do_syscall_64+0x15f/0xf80 [ 445.561239][T13162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.561259][T13162] ? clear_bhb_loop+0x40/0x90 [ 445.561281][T13162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.561300][T13162] RIP: 0033:0x7f374559c819 [ 445.561319][T13162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.561334][T13162] RSP: 002b:00007f37463f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.561354][T13162] RAX: ffffffffffffffda RBX: 00007f3745816090 RCX: 00007f374559c819 [ 445.561366][T13162] RDX: 0000000000011000 RSI: 0000200000000340 RDI: 0000000000000007 [ 445.561378][T13162] RBP: 00007f37463f9090 R08: 0000000000000000 R09: 0000000000000000 [ 445.561390][T13162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.561400][T13162] R13: 00007f3745816128 R14: 00007f3745816090 R15: 00007f374593fa48 [ 445.561429][T13162] [ 445.647558][ T5997] usb 2-1: config 2 interface 36 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 446.009153][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 446.032222][ T5997] usb 2-1: config 2 interface 36 altsetting 7 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 446.061693][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 446.072931][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 446.083930][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 446.095038][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 446.106084][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 446.117507][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 446.128523][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 446.139626][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 446.151390][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 446.163018][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 446.174311][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 446.185633][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has an endpoint descriptor with address 0x17, changing to 0x7 [ 446.197856][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 446.209337][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 446.221027][ T5997] usb 2-1: config 2 interface 26 altsetting 128 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 446.234866][ T5997] usb 2-1: config 2 interface 36 has no altsetting 0 [ 446.242033][ T5997] usb 2-1: config 2 interface 26 has no altsetting 0 [ 446.253112][ T5997] usb 2-1: New USB device found, idVendor=12d1, idProduct=d5d1, bcdDevice=b7.02 [ 446.263377][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.271878][ T5997] usb 2-1: Product: И [ 446.280864][ T5997] usb 2-1: Manufacturer: 澊⟟ꟷ䠢鑢㫈迟璘竽৳ⵄⴱ㉉봤啙錏悎 [ 446.316850][ T5997] usb 2-1: SerialNumber: 椨㓣殉ั㒐ᑽ믧蟊⫱璑챓祥꾞㉊聈ዷַ뻍箶撩簌ま䵧㫟౉⇫鱏椇꽤ᮂ샪᫏찱喭뷽쨔쒂ೱ끆䀺琪쎕ꆽഉ䞔뛎䆛੕ [ 446.349188][T13143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.547914][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 446.769080][T13143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.780949][T13143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.788528][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 446.800091][ T5997] option 2-1:2.36: GSM modem (1-port) converter detected [ 446.853830][ T5997] usb 2-1: USB disconnect, device number 91 [ 446.878390][ T5997] option 2-1:2.36: device disconnected [ 446.878670][ T5899] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 446.979212][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.011201][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.026386][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 447.041574][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.054982][ T24] usb 5-1: config 0 descriptor?? [ 447.060018][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 447.071230][ T5899] usb 1-1: config 0 has no interfaces? [ 447.071734][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 447.089964][ T5899] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 447.105233][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.115553][ T5899] usb 1-1: Product: syz [ 447.127200][ T5899] usb 1-1: Manufacturer: syz [ 447.145043][ T5899] usb 1-1: SerialNumber: syz [ 447.158755][ T5899] usb 1-1: config 0 descriptor?? [ 447.289167][ T24] usb 5-1: USB disconnect, device number 68 [ 447.374062][T13172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.415721][T13172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.458700][T13189] loop7: detected capacity change from 0 to 524287999 [ 447.554567][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.603445][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.732758][T13202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.752914][ T5913] usb 1-1: USB disconnect, device number 79 [ 447.759447][T13202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.784565][T13205] FAULT_INJECTION: forcing a failure. [ 447.784565][T13205] name failslab, interval 1, probability 0, space 0, times 0 [ 447.788269][T13202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.806780][T13202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.816019][T13205] CPU: 1 UID: 0 PID: 13205 Comm: syz.0.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.816047][T13205] Tainted: [L]=SOFTLOCKUP [ 447.816054][T13205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.816065][T13205] Call Trace: [ 447.816074][T13205] [ 447.816082][T13205] dump_stack_lvl+0xe8/0x150 [ 447.816116][T13205] should_fail_ex+0x412/0x560 [ 447.816148][T13205] should_failslab+0xa8/0x100 [ 447.816173][T13205] ? skb_clone+0x212/0x3a0 [ 447.816194][T13205] kmem_cache_alloc_noprof+0x87/0x650 [ 447.816216][T13205] ? __netlink_lookup+0xc6/0x8b0 [ 447.816240][T13205] skb_clone+0x212/0x3a0 [ 447.816264][T13205] __netlink_deliver_tap+0x404/0x850 [ 447.816293][T13205] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.816314][T13205] netlink_deliver_tap+0x19c/0x1b0 [ 447.816333][T13205] netlink_unicast+0x730/0x8e0 [ 447.816369][T13205] netlink_sendmsg+0x813/0xb40 [ 447.816397][T13205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.816420][T13205] ? aa_sock_msg_perm+0xf1/0x1b0 [ 447.816440][T13205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.816465][T13205] ____sys_sendmsg+0x972/0x9f0 [ 447.816486][T13205] ? __might_fault+0xaf/0x130 [ 447.816512][T13205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.816541][T13205] ? import_iovec+0x73/0xa0 [ 447.816566][T13205] ___sys_sendmsg+0x2a5/0x360 [ 447.816585][T13205] ? __lock_acquire+0x6b5/0x2cf0 [ 447.816616][T13205] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.816670][T13205] ? __fget_files+0x2a/0x420 [ 447.816688][T13205] ? __fget_files+0x3a0/0x420 [ 447.816713][T13205] __x64_sys_sendmsg+0x1bd/0x2a0 [ 447.816733][T13205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.816759][T13205] ? __pfx_ksys_write+0x10/0x10 [ 447.816786][T13205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.816805][T13205] do_syscall_64+0x15f/0xf80 [ 447.816832][T13205] ? trace_irq_disable+0x3b/0x140 [ 447.816856][T13205] ? clear_bhb_loop+0x40/0x90 [ 447.816885][T13205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.816903][T13205] RIP: 0033:0x7fd2a9b9c819 [ 447.816921][T13205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.816937][T13205] RSP: 002b:00007fd2aaada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.816955][T13205] RAX: ffffffffffffffda RBX: 00007fd2a9e15fa0 RCX: 00007fd2a9b9c819 [ 447.816966][T13205] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 447.816976][T13205] RBP: 00007fd2aaada090 R08: 0000000000000000 R09: 0000000000000000 [ 447.816987][T13205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.816997][T13205] R13: 00007fd2a9e16038 R14: 00007fd2a9e15fa0 R15: 00007fd2a9f3fa48 [ 447.817024][T13205] [ 448.137328][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 448.180636][T13203] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 448.319262][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.333683][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 448.347085][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.356518][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.367682][ T24] usb 5-1: config 0 descriptor?? [ 448.374966][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 448.567239][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 448.658530][ T5898] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 448.748731][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 448.763662][ T9] usb 2-1: string descriptor 0 read error: -22 [ 448.778006][ T9] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 448.799415][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.827387][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 448.840099][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 448.863164][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 448.872117][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.872146][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.872191][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 448.872216][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 448.872260][ T5898] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 448.872283][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.875365][ T5898] usb 1-1: config 0 descriptor?? [ 448.978383][T13217] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 449.457481][ T5898] usb 1-1: USB disconnect, device number 80 [ 449.460590][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 449.550165][ T9] hid_parser_main: 515 callbacks suppressed [ 449.550184][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 449.672136][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 449.711890][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 449.731540][ T5899] usb 5-1: USB disconnect, device number 69 [ 449.787434][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 449.839957][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 449.873970][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 449.903704][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 450.007877][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 450.050583][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 450.076980][ T9] razer 0003:1532:010D.001C: unknown main item tag 0x0 [ 450.331135][ T9] razer 0003:1532:010D.001C: failed to enable macro keys: -71 [ 450.386327][ T9] razer 0003:1532:010D.001C: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.1-1/input0 [ 450.448642][ T9] usb 2-1: USB disconnect, device number 92 [ 450.577359][ T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 450.748962][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.788890][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 450.822575][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.882743][ T24] usb 1-1: config 0 descriptor?? [ 450.922708][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 451.097129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 451.361116][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 451.373620][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 451.401148][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 451.420853][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 451.429754][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 451.437754][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 451.445526][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 451.454332][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 451.464808][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 451.474059][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 451.490823][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 451.501008][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 451.512050][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 451.519416][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 451.532774][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 451.540678][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 451.550810][ T24] pwc: Registered as video103. [ 451.558615][ T5899] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 451.562798][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 451.593444][ T24] usb 1-1: USB disconnect, device number 81 [ 451.729412][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.749402][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.764055][ T5899] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 451.773633][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.787508][ T5899] usb 5-1: config 0 descriptor?? [ 451.804534][ T5899] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 452.008265][ T5899] usb 5-1: USB disconnect, device number 70 [ 452.122366][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.140599][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.160965][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.179054][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.458289][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 452.619775][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.630869][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 452.644028][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.653295][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.661404][ T5899] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 452.673067][ T9] usb 5-1: config 0 descriptor?? [ 452.681268][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 452.818301][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 452.828283][ T5899] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 452.836768][ T5899] usb 2-1: config 0 has no interface number 0 [ 452.844448][ T5899] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 452.856288][ T5899] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.883270][ T5899] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 452.912697][ T5899] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 452.935792][ T5899] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.967991][ T5899] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 452.988336][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.005828][ T5899] usb 2-1: Product: syz [ 453.014765][ T5899] usb 2-1: Manufacturer: syz [ 453.024710][ T5899] usb 2-1: SerialNumber: syz [ 453.043495][ T5899] usb 2-1: config 0 descriptor?? [ 453.330943][ T5899] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 453.471590][T13316] fuse: Bad value for 'user_id' [ 453.476707][T13316] fuse: Bad value for 'user_id' [ 453.664389][ T5971] usb 5-1: USB disconnect, device number 71 [ 453.714305][ T9] usb 2-1: USB disconnect, device number 93 [ 453.723506][ T5899] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 453.921367][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 453.962115][ T5899] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.018805][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.059000][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.109140][T13318] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 454.153297][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.382276][ T5899] usb 1-1: USB disconnect, device number 82 [ 454.797203][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 454.983978][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 455.027053][ T9] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 455.065400][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.120831][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.32 [ 455.153723][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.189699][ T9] usb 2-1: Product: syz [ 455.203096][ T9] usb 2-1: Manufacturer: syz [ 455.241827][ T9] usb 2-1: SerialNumber: syz [ 455.534972][ T9] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 455.602183][T13338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'. [ 455.657359][ T24] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 455.669056][T13338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.734489][T13338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.771421][T13338] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1911'. [ 455.791900][T13353] binder: BINDER_SET_CONTEXT_MGR already set [ 455.818480][T13353] binder: 13352:13353 ioctl 4018620d 200000004a80 returned -16 [ 455.854525][ T24] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 455.873588][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.907028][ T24] usb 1-1: Product: syz [ 455.920386][ T24] usb 1-1: Manufacturer: syz [ 455.927483][ T993] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 455.941929][ T24] usb 1-1: SerialNumber: syz [ 455.969688][ T24] usb 1-1: config 0 descriptor?? [ 455.988354][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 456.107254][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 456.119776][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 456.147915][ T29] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 456.163979][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.178358][ T993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.189736][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 456.201801][ T993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 456.212113][ T993] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 456.221526][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.232405][ T993] usb 4-1: config 0 descriptor?? [ 456.240533][T13350] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 456.337180][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 456.345214][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 456.360727][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 456.380975][ T29] usb 5-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 456.396129][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.405416][ T29] usb 5-1: Product: syz [ 456.414683][ T29] usb 5-1: Manufacturer: syz [ 456.427376][ T29] usb 5-1: SerialNumber: syz [ 456.446241][ T29] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 456.455391][ T29] usb 5-1: MIDIStreaming interface descriptor not found [ 456.473793][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 456.482035][ T5852] Bluetooth: hci5: unexpected event 0x10 length: 71 > 1 [ 456.713816][ T5899] usb 4-1: USB disconnect, device number 84 [ 456.718940][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 456.738507][ T50] Bluetooth: hci5: hardware error 0x51 [ 456.903659][ T24] gspca_stk1135: reg_w 0x5 err -71 [ 456.912477][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 456.936100][ T24] gspca_stk1135: Sensor write failed [ 456.943987][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 456.950996][ T24] gspca_stk1135: Sensor write failed [ 456.956510][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 456.963018][ T24] gspca_stk1135: Sensor read failed [ 456.969036][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 456.975530][ T24] gspca_stk1135: Sensor read failed [ 456.983509][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 456.990391][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 456.996902][ T24] gspca_stk1135: Sensor read failed [ 457.003192][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 457.009831][ T24] gspca_stk1135: Sensor read failed [ 457.015158][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 457.022092][ T24] gspca_stk1135: Sensor write failed [ 457.030074][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 457.036625][ T24] gspca_stk1135: Sensor write failed [ 457.043489][ T24] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 457.055627][ T24] usb 1-1: USB disconnect, device number 83 [ 457.443194][ T10] usb 2-1: USB disconnect, device number 94 [ 457.527221][ T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 457.689202][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.699780][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.713115][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 457.722758][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.735801][ T24] usb 4-1: config 0 descriptor?? [ 457.741222][ T993] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 457.752574][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 457.909767][ T993] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.940795][ T993] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.963545][ T993] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 457.979300][ T993] usb 1-1: Product: syz [ 457.983836][ T993] usb 1-1: SerialNumber: syz [ 457.992214][ T5899] usb 4-1: USB disconnect, device number 85 [ 458.134991][T13378] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1921'. [ 458.399392][T13382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.427824][T13382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.437397][ T5899] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 458.464363][ T993] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 458.484239][ T993] cdc_ncm 1-1:1.0: bind() failure [ 458.536811][ T993] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 458.555955][ T993] cdc_ncm 1-1:1.1: bind() failure [ 458.596004][ T993] usb 1-1: USB disconnect, device number 84 [ 458.642507][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.662424][T13385] bridge0: entered promiscuous mode [ 458.673924][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 458.688504][T13385] vlan2: entered promiscuous mode [ 458.699876][T13385] bridge0: port 3(vlan2) entered blocking state [ 458.712979][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.723252][T13385] bridge0: port 3(vlan2) entered disabled state [ 458.734409][T13385] vlan2: entered allmulticast mode [ 458.739953][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.754837][T13385] bridge0: entered allmulticast mode [ 458.772059][ T5899] usb 4-1: config 0 descriptor?? [ 458.785264][T13385] vlan2: left allmulticast mode [ 458.801354][ T5899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 458.811712][T13385] bridge0: left allmulticast mode [ 458.831234][ T24] usb 5-1: USB disconnect, device number 72 [ 459.428475][T13395] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 459.697254][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 459.807468][ T5899] usb 4-1: USB disconnect, device number 86 [ 459.827231][ T24] usb 5-1: device descriptor read/64, error -71 [ 460.087429][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 460.231068][ T24] usb 5-1: device descriptor read/64, error -71 [ 460.327230][ T5899] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 460.347673][ T24] usb usb5-port1: attempt power cycle [ 460.456169][ T30] audit: type=1400 audit(1776968689.625:2904): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=13404 comm="syz.0.1930" [ 460.547363][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 460.554772][ T5899] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 460.563929][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.574454][ T5899] usb 4-1: config 0 descriptor?? [ 460.583785][ T5899] as10x_usb: device has been detected [ 460.590445][ T5899] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 460.610181][ T5899] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 460.652004][ T30] audit: type=1326 audit(1776968689.825:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9b9c819 code=0x0 [ 460.685713][ T5899] as10x_usb: error during firmware upload part1 [ 460.687265][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 460.692698][ T5899] Registered device nBox DVB-T Dongle [ 460.717869][ T24] usb 5-1: device descriptor read/8, error -71 [ 460.756586][T13409] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1930'. [ 460.967247][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 461.000683][ T24] usb 5-1: device descriptor read/8, error -71 [ 461.107953][ T24] usb usb5-port1: unable to enumerate USB device [ 461.324923][ T5899] usb 4-1: USB disconnect, device number 87 [ 461.430046][ T5899] Unregistered device nBox DVB-T Dongle [ 461.430936][T13420] FAULT_INJECTION: forcing a failure. [ 461.430936][T13420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.450845][ T5899] as10x_usb: device has been disconnected [ 461.479395][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.3.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.479432][T13420] Tainted: [L]=SOFTLOCKUP [ 461.479438][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.479449][T13420] Call Trace: [ 461.479458][T13420] [ 461.479465][T13420] dump_stack_lvl+0xe8/0x150 [ 461.479498][T13420] should_fail_ex+0x412/0x560 [ 461.479529][T13420] _copy_to_iter+0x589/0x17d0 [ 461.479559][T13420] ? __pfx__copy_to_iter+0x10/0x10 [ 461.479577][T13420] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 461.479598][T13420] ? lockdep_hardirqs_on+0x7a/0x110 [ 461.479619][T13420] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 461.479640][T13420] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 461.479667][T13420] __skb_datagram_iter+0xf8/0x980 [ 461.479690][T13420] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 461.479717][T13420] skb_copy_datagram_iter+0xb5/0x240 [ 461.479741][T13420] netlink_recvmsg+0x2c3/0xa50 [ 461.479768][T13420] ? __pfx_netlink_recvmsg+0x10/0x10 [ 461.479790][T13420] ? __lock_acquire+0x6b5/0x2cf0 [ 461.479818][T13420] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.479837][T13420] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 461.479857][T13420] ? security_socket_recvmsg+0x7e/0x2c0 [ 461.479880][T13420] ? __pfx_netlink_recvmsg+0x10/0x10 [ 461.479899][T13420] sock_recvmsg+0x172/0x1b0 [ 461.479926][T13420] ____sys_recvmsg+0x1e6/0x4a0 [ 461.479955][T13420] ? __pfx_____sys_recvmsg+0x10/0x10 [ 461.479990][T13420] ? import_iovec+0x73/0xa0 [ 461.480013][T13420] ___sys_recvmsg+0x215/0x590 [ 461.480031][T13420] ? get_pid_task+0x20/0x1f0 [ 461.480056][T13420] ? __pfx____sys_recvmsg+0x10/0x10 [ 461.480082][T13420] ? __fget_files+0x2a/0x420 [ 461.480116][T13420] ? __fget_files+0x3a0/0x420 [ 461.480144][T13420] __x64_sys_recvmsg+0x1ba/0x2a0 [ 461.480167][T13420] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 461.480196][T13420] ? __pfx_ksys_write+0x10/0x10 [ 461.480226][T13420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.480245][T13420] do_syscall_64+0x15f/0xf80 [ 461.480268][T13420] ? trace_irq_disable+0x3b/0x140 [ 461.480291][T13420] ? clear_bhb_loop+0x40/0x90 [ 461.480313][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.480331][T13420] RIP: 0033:0x7fa6eaf9c819 [ 461.480348][T13420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.480364][T13420] RSP: 002b:00007fa6ebeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 461.480384][T13420] RAX: ffffffffffffffda RBX: 00007fa6eb215fa0 RCX: 00007fa6eaf9c819 [ 461.480398][T13420] RDX: 0000000000012140 RSI: 0000200000000380 RDI: 0000000000000003 [ 461.480410][T13420] RBP: 00007fa6ebeee090 R08: 0000000000000000 R09: 0000000000000000 [ 461.480429][T13420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.480441][T13420] R13: 00007fa6eb216038 R14: 00007fa6eb215fa0 R15: 00007fa6eb33fa48 [ 461.480470][T13420] [ 462.263615][T13423] tipc: Resetting bearer [ 462.317489][ T5899] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 462.477392][ T993] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 462.488580][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.539465][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.631997][ T5899] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.689466][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.765812][ T5899] usb 4-1: config 0 descriptor?? [ 462.806340][ T5899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 463.030775][ T24] usb 4-1: USB disconnect, device number 88 [ 463.319065][ T6600] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.366820][ T6600] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.406086][ T6600] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.429652][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 463.448261][ T6600] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.459728][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 463.479556][ T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 463.753437][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.816813][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 463.951871][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.053952][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.093447][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 464.124697][ T24] usb 4-1: config 0 descriptor?? [ 464.159629][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 464.312543][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.340845][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.372520][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.420603][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.460160][T13474] binder: 13472:13474 ioctl c0306201 200000000040 returned -22 [ 464.481018][T13474] binder: 13472:13474 ioctl c0306201 200000000640 returned -22 [ 464.495528][T13480] program syz.1.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.502148][T13474] binder: 13472:13474 ioctl 1260 2000000001c0 returned -22 [ 464.526014][T13480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1946'. [ 465.177996][ T993] usb 2-1: device descriptor read/64, error -71 [ 465.184583][ T24] usb 4-1: USB disconnect, device number 89 [ 465.427415][ T993] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 465.498988][T13497] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 465.591151][T13497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.617219][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 465.635571][ T993] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 465.667432][ T993] usb 2-1: config 0 has no interface number 0 [ 465.696853][ T993] usb 2-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 465.760507][ T993] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 465.804427][ T993] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 465.821591][T13506] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1954'. [ 465.833979][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.845349][ T30] audit: type=1326 audit(1776968695.015:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.3.1954" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6eaf9c819 code=0x0 [ 465.867523][ T993] usb 2-1: Product: syz [ 465.873530][ T993] usb 2-1: Manufacturer: syz [ 465.879176][ T993] usb 2-1: SerialNumber: syz [ 465.892017][ T993] usb 2-1: config 0 descriptor?? [ 465.923771][ T993] asix 2-1:0.188: probe with driver asix failed with error -22 [ 466.127676][T13514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.163639][T13514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.357215][ T993] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 466.509506][ T993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 466.518361][ T993] usb 5-1: not running at top speed; connect to a high speed hub [ 466.527928][ T993] usb 5-1: config 11 has an invalid interface number: 100 but max is 1 [ 466.536250][ T993] usb 5-1: config 11 has an invalid interface number: 47 but max is 1 [ 466.544908][ T993] usb 5-1: config 11 has no interface number 0 [ 466.551170][ T993] usb 5-1: config 11 has no interface number 1 [ 466.557246][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 466.557643][ T993] usb 5-1: config 11 interface 100 has no altsetting 0 [ 466.572029][ T993] usb 5-1: config 11 interface 47 has no altsetting 0 [ 466.580999][ T993] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=6d.bf [ 466.590398][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.598627][ T993] usb 5-1: Product: syz [ 466.602957][ T993] usb 5-1: Manufacturer: syz [ 466.607748][ T993] usb 5-1: SerialNumber: syz [ 466.717418][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 466.731378][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 466.737129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 466.750966][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 466.758628][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 466.769401][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.780386][ T9] usb 1-1: config 0 descriptor?? [ 466.872997][ T993] usb 5-1: USB disconnect, device number 77 [ 467.575616][ T9] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 467.736032][ T5899] usb 2-1: USB disconnect, device number 96 [ 467.870403][ T30] audit: type=1326 audit(1776968697.045:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 467.965543][ T30] audit: type=1326 audit(1776968697.045:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.020843][ T30] audit: type=1326 audit(1776968697.075:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.095139][ T30] audit: type=1326 audit(1776968697.075:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.151051][ T30] audit: type=1326 audit(1776968697.075:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.218195][ T9] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -71 [ 468.221856][ T30] audit: type=1326 audit(1776968697.075:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.270360][ T30] audit: type=1326 audit(1776968697.075:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.298944][ T30] audit: type=1326 audit(1776968697.075:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.299519][ T9] usb 1-1: USB disconnect, device number 85 [ 468.322740][ T993] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 468.336622][ T30] audit: type=1326 audit(1776968697.075:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc237d9c819 code=0x7ffc0000 [ 468.597286][ T29] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 468.760495][ T29] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 468.786342][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.818199][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.855225][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 468.868060][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.884988][ T29] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.895702][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.908532][ T29] usb 4-1: config 0 descriptor?? [ 468.914434][T13559] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 469.342424][T13559] IPVS: set_ctl: invalid protocol: 8483 111.111.108.0:0 [ 469.361878][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 469.368756][T13584] FAULT_INJECTION: forcing a failure. [ 469.368756][T13584] name failslab, interval 1, probability 0, space 0, times 0 [ 469.371249][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 469.397708][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.0.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.397738][T13584] Tainted: [L]=SOFTLOCKUP [ 469.397745][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.397757][T13584] Call Trace: [ 469.397765][T13584] [ 469.397773][T13584] dump_stack_lvl+0xe8/0x150 [ 469.397808][T13584] should_fail_ex+0x412/0x560 [ 469.397841][T13584] should_failslab+0xa8/0x100 [ 469.397868][T13584] __kmalloc_cache_noprof+0x88/0x660 [ 469.397889][T13584] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 469.397913][T13584] ? sctp_add_bind_addr+0x8c/0x370 [ 469.397940][T13584] sctp_add_bind_addr+0x8c/0x370 [ 469.397966][T13584] sctp_copy_local_addr_list+0x314/0x4f0 [ 469.397992][T13584] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 469.398015][T13584] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 469.398040][T13584] ? sctp_v6_is_any+0x64/0x80 [ 469.398064][T13584] ? sctp_copy_one_addr+0x93/0x360 [ 469.398090][T13584] sctp_bind_addr_copy+0xb3/0x3c0 [ 469.398113][T13584] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 469.398136][T13584] sctp_connect_new_asoc+0x2ff/0x6b0 [ 469.398167][T13584] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 469.398198][T13584] ? __local_bh_enable_ip+0xd0/0x130 [ 469.398222][T13584] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 469.398245][T13584] ? security_sctp_bind_connect+0x7e/0x2c0 [ 469.398273][T13584] sctp_sendmsg+0x1528/0x2c10 [ 469.398313][T13584] ? __pfx_sctp_sendmsg+0x10/0x10 [ 469.398342][T13584] ? aa_sk_perm+0x6d5/0x900 [ 469.398367][T13584] ? __might_fault+0xaf/0x130 [ 469.398393][T13584] ? __pfx_aa_sk_perm+0x10/0x10 [ 469.398421][T13584] ? sock_rps_record_flow+0x19/0x350 [ 469.398442][T13584] ? __pfx_inet_sendmsg+0x10/0x10 [ 469.398462][T13584] ? inet_sendmsg+0x2f4/0x370 [ 469.398482][T13584] ? __pfx_inet_sendmsg+0x10/0x10 [ 469.398502][T13584] __sys_sendto+0x5de/0x710 [ 469.398528][T13584] ? __pfx___sys_sendto+0x10/0x10 [ 469.398544][T13584] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 469.398582][T13584] ? __fget_files+0x3a0/0x420 [ 469.398611][T13584] ? ksys_write+0x242/0x270 [ 469.398634][T13584] ? __pfx_ksys_write+0x10/0x10 [ 469.398659][T13584] __x64_sys_sendto+0xde/0x100 [ 469.398683][T13584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.398700][T13584] do_syscall_64+0x15f/0xf80 [ 469.398723][T13584] ? trace_irq_disable+0x3b/0x140 [ 469.398745][T13584] ? clear_bhb_loop+0x40/0x90 [ 469.398767][T13584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.398785][T13584] RIP: 0033:0x7fd2a9b9c819 [ 469.398800][T13584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.398813][T13584] RSP: 002b:00007fd2aaada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 469.398831][T13584] RAX: ffffffffffffffda RBX: 00007fd2a9e15fa0 RCX: 00007fd2a9b9c819 [ 469.398842][T13584] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005 [ 469.398852][T13584] RBP: 00007fd2aaada090 R08: 000020000005ffe4 R09: 000000000000001c [ 469.398862][T13584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.398871][T13584] R13: 00007fd2a9e16038 R14: 00007fd2a9e15fa0 R15: 00007fd2a9f3fa48 [ 469.398895][T13584] [ 469.857398][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 469.991586][ T29] usb 4-1: USB disconnect, device number 90 [ 470.028897][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 470.040098][ T10] usb 5-1: string descriptor 0 read error: -22 [ 470.046856][ T10] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 470.086533][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.706406][ T10] hid_parser_main: 3989 callbacks suppressed [ 470.706433][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.739418][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.761567][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.773522][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.797481][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.808250][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.816492][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.825319][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.832580][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.840594][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.847882][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.855419][ T10] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 470.939822][ T10] razer 0003:1532:010D.001E: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.4-1/input0 [ 471.134498][ T10] usb 5-1: USB disconnect, device number 78 [ 471.284131][T13617] team0: Device gtp0 is of different type [ 471.495878][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 471.495897][ T30] audit: type=1326 audit(1776968700.665:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.554353][ T30] audit: type=1326 audit(1776968700.695:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.599001][ T30] audit: type=1326 audit(1776968700.695:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.623335][ T30] audit: type=1326 audit(1776968700.695:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.673777][ T30] audit: type=1326 audit(1776968700.695:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.714533][ T30] audit: type=1326 audit(1776968700.695:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.748986][ T30] audit: type=1326 audit(1776968700.695:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.775300][ T30] audit: type=1326 audit(1776968700.705:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.798946][ T30] audit: type=1326 audit(1776968700.705:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 471.837537][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 471.881333][ T30] audit: type=1326 audit(1776968700.705:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.3.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 472.093484][T13637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.102870][ T993] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 472.118415][T13637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.257236][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 472.264828][ T993] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 472.273463][ T29] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 472.281114][ T993] usb 5-1: config 0 has no interface number 0 [ 472.287342][ T993] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.299490][ T993] usb 5-1: config 0 interface 85 has no altsetting 0 [ 472.310251][ T993] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 472.320149][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.328232][ T993] usb 5-1: Product: syz [ 472.332601][ T993] usb 5-1: Manufacturer: syz [ 472.337467][ T993] usb 5-1: SerialNumber: syz [ 472.345255][ T993] usb 5-1: config 0 descriptor?? [ 472.447176][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 472.453996][ T29] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 472.462776][ T29] usb 2-1: config 179 has no interface number 0 [ 472.469736][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 472.481674][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 472.493130][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.504468][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 472.514768][ T29] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 472.528560][ T29] usb 2-1: config 179 interface 65 has no altsetting 0 [ 472.535540][ T29] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 472.546921][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.580788][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input45 [ 472.713957][T13644] IPVS: Error connecting to the multicast addr [ 472.800897][ T5899] usb 2-1: USB disconnect, device number 98 [ 472.800930][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 472.872911][T13649] tipc: Enabled bearer , priority 0 [ 472.939464][T13649] tipc: Resetting bearer [ 473.023989][T13652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.042243][T13652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.053964][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 473.079882][ T993] appletouch 5-1:0.85: Geyser mode initialized. [ 473.099798][ T993] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input44 [ 473.507879][ T29] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 473.631832][T13665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.649375][T13665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.668359][T13665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2008'. [ 473.692540][T13665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.702706][ T29] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 473.712978][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 473.725885][ T29] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 473.735590][ T29] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 473.744315][ T29] usb 4-1: Product: syz [ 473.749548][T13665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.770648][ T29] usb 4-1: Manufacturer: syz [ 473.776151][ T29] usb 4-1: SerialNumber: syz [ 473.790298][ T29] usb 4-1: config 0 descriptor?? [ 473.803679][ T29] usb 4-1: selecting invalid altsetting 0 [ 474.031112][ T10] usb 4-1: USB disconnect, device number 92 [ 474.282504][T13670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 474.306502][T13670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2009'. [ 474.325897][T13670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2009'. [ 474.401947][T13674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.425995][T13674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.628223][ T10] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 474.788788][ T10] usb 2-1: config index 0 descriptor too short (expected 22619, got 97) [ 474.798241][ T10] usb 2-1: config 19 has too many interfaces: 115, using maximum allowed: 32 [ 474.807459][ T10] usb 2-1: config 19 has an invalid descriptor of length 233, skipping remainder of the config [ 474.819537][ T10] usb 2-1: config 19 has 0 interfaces, different from the descriptor's value: 115 [ 474.834390][ T10] usb 2-1: New USB device found, idVendor=10fd, idProduct=3913, bcdDevice=7e.ce [ 474.847034][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.865478][ T10] usb 2-1: Product: syz [ 474.875268][ T5899] usb 5-1: USB disconnect, device number 79 [ 474.885842][ T10] usb 2-1: Manufacturer: syz [ 474.913108][ T10] usb 2-1: SerialNumber: syz [ 474.956028][ T5899] appletouch 5-1:0.85: input: appletouch disconnected [ 475.104693][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 475.237671][ T10] usb 2-1: USB disconnect, device number 99 [ 475.260280][T13685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.292653][T13685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.312027][T13685] program syz.2.2015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.325578][T13685] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 475.382844][T13688] can: request_module (can-proto-4) failed. [ 475.687069][T13701] syzkaller0: entered promiscuous mode [ 475.692771][T13701] syzkaller0: entered allmulticast mode [ 475.707265][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 475.867212][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 475.874618][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 475.884738][ T10] usb 5-1: config 236 has an invalid interface number: 54 but max is 0 [ 475.893171][ T10] usb 5-1: config 236 has no interface number 0 [ 475.909497][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=f6.39 [ 475.918799][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.926831][ T10] usb 5-1: Product: syz [ 475.931445][ T10] usb 5-1: Manufacturer: syz [ 475.936090][ T10] usb 5-1: SerialNumber: syz [ 476.153587][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.174508][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.279827][T13694] xt_CT: No such helper "syz1" [ 476.501328][T13714] input: syz1 as /devices/virtual/input/input46 [ 476.640594][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 476.686409][T13719] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2025'. [ 477.047299][ T5899] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 477.146549][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 477.146587][ T30] audit: type=1326 audit(1776968706.315:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.224113][ T30] audit: type=1326 audit(1776968706.315:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.246843][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 477.253920][ T30] audit: type=1326 audit(1776968706.365:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.277844][ T5899] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 477.286064][ T5899] usb 2-1: config 0 has no interface number 0 [ 477.293292][ T5899] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.303490][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2030'. [ 477.304321][ T5899] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 477.323127][ T30] audit: type=1326 audit(1776968706.365:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.380097][ T5899] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 477.390580][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 477.403909][ T30] audit: type=1326 audit(1776968706.365:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.431972][ T5899] usb 2-1: Product: syz [ 477.439754][ T5899] usb 2-1: SerialNumber: syz [ 477.458949][ T5899] usb 2-1: config 0 descriptor?? [ 477.503520][ T5899] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 477.529296][ T30] audit: type=1326 audit(1776968706.365:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.571865][ T5899] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input47 [ 477.640857][ T30] audit: type=1326 audit(1776968706.365:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.682923][ T30] audit: type=1326 audit(1776968706.365:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.749297][ C0] cm109_urb_ctl_callback: 124 callbacks suppressed [ 477.749317][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.763029][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.770410][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.778243][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.785456][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.792768][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.800046][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.807278][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.814481][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.822059][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 477.845800][ T5899] usb 2-1: USB disconnect, device number 100 [ 477.851930][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 477.861179][ T30] audit: type=1326 audit(1776968706.365:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.892095][ T5899] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 477.916965][ T30] audit: type=1326 audit(1776968706.365:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 477.991590][T13737] vlan2: entered promiscuous mode [ 477.997977][T13737] ip6gretap0: entered promiscuous mode [ 478.005137][T13737] macvlan2: entered promiscuous mode [ 478.019052][T13737] vlan2: left promiscuous mode [ 478.024285][T13737] ip6gretap0: left promiscuous mode [ 478.332518][T13741] input: syz1 as /devices/virtual/input/input48 [ 478.482051][T13743] FAULT_INJECTION: forcing a failure. [ 478.482051][T13743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.515194][T13743] CPU: 0 UID: 0 PID: 13743 Comm: syz.2.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.515221][T13743] Tainted: [L]=SOFTLOCKUP [ 478.515228][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.515235][T13743] Call Trace: [ 478.515240][T13743] [ 478.515246][T13743] dump_stack_lvl+0xe8/0x150 [ 478.515267][T13743] should_fail_ex+0x412/0x560 [ 478.515286][T13743] _copy_from_user+0x2d/0xb0 [ 478.515299][T13743] __se_sys_splice+0x28d/0x490 [ 478.515316][T13743] ? __pfx___se_sys_splice+0x10/0x10 [ 478.515330][T13743] ? __x64_sys_splice+0x21/0xf0 [ 478.515341][T13743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.515352][T13743] do_syscall_64+0x15f/0xf80 [ 478.515365][T13743] ? trace_irq_disable+0x3b/0x140 [ 478.515379][T13743] ? clear_bhb_loop+0x40/0x90 [ 478.515391][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.515401][T13743] RIP: 0033:0x7f0b9879c819 [ 478.515413][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.515422][T13743] RSP: 002b:00007f0b99599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 478.515434][T13743] RAX: ffffffffffffffda RBX: 00007f0b98a15fa0 RCX: 00007f0b9879c819 [ 478.515441][T13743] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 478.515447][T13743] RBP: 00007f0b99599090 R08: 0000000000000010 R09: 0000000000000000 [ 478.515454][T13743] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 478.515460][T13743] R13: 00007f0b98a16038 R14: 00007f0b98a15fa0 R15: 00007f0b98b3fa48 [ 478.515475][T13743] [ 478.861294][ T10] usb 5-1: USB disconnect, device number 80 [ 478.952603][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 478.963582][T13757] FAULT_INJECTION: forcing a failure. [ 478.963582][T13757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.982081][T13757] CPU: 0 UID: 0 PID: 13757 Comm: syz.4.2039 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.982108][T13757] Tainted: [L]=SOFTLOCKUP [ 478.982115][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.982126][T13757] Call Trace: [ 478.982133][T13757] [ 478.982140][T13757] dump_stack_lvl+0xe8/0x150 [ 478.982177][T13757] should_fail_ex+0x412/0x560 [ 478.982208][T13757] _copy_to_user+0x31/0xb0 [ 478.982230][T13757] simple_read_from_buffer+0xe1/0x170 [ 478.982258][T13757] proc_fail_nth_read+0x1bb/0x230 [ 478.982281][T13757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.982303][T13757] ? rw_verify_area+0x2a6/0x4d0 [ 478.982323][T13757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.982343][T13757] vfs_read+0x20c/0xa70 [ 478.982368][T13757] ? __pfx___mutex_lock+0x10/0x10 [ 478.982392][T13757] ? __pfx_vfs_read+0x10/0x10 [ 478.982414][T13757] ? __fget_files+0x2a/0x420 [ 478.982436][T13757] ? __fget_files+0x3a0/0x420 [ 478.982452][T13757] ? __fget_files+0x2a/0x420 [ 478.982477][T13757] ksys_read+0x150/0x270 [ 478.982499][T13757] ? __pfx_ksys_read+0x10/0x10 [ 478.982526][T13757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.982547][T13757] do_syscall_64+0x15f/0xf80 [ 478.982570][T13757] ? trace_irq_disable+0x3b/0x140 [ 478.982594][T13757] ? clear_bhb_loop+0x40/0x90 [ 478.982616][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.982633][T13757] RIP: 0033:0x7f374555d04e [ 478.982651][T13757] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 478.982666][T13757] RSP: 002b:00007f37463f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.982686][T13757] RAX: ffffffffffffffda RBX: 00007f37463f96c0 RCX: 00007f374555d04e [ 478.982699][T13757] RDX: 000000000000000f RSI: 00007f37463f90a0 RDI: 0000000000000005 [ 478.982710][T13757] RBP: 00007f37463f9090 R08: 0000000000000000 R09: 0000000000000000 [ 478.982720][T13757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.982730][T13757] R13: 00007f3745816128 R14: 00007f3745816090 R15: 00007f374593fa48 [ 478.982758][T13757] [ 479.321561][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.335843][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.346867][T13764] netlink: 'syz.4.2043': attribute type 10 has an invalid length. [ 479.674322][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 480.273929][T13782] FAULT_INJECTION: forcing a failure. [ 480.273929][T13782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.359563][T13782] CPU: 1 UID: 0 PID: 13782 Comm: syz.1.2050 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.359590][T13782] Tainted: [L]=SOFTLOCKUP [ 480.359594][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.359601][T13782] Call Trace: [ 480.359606][T13782] [ 480.359611][T13782] dump_stack_lvl+0xe8/0x150 [ 480.359635][T13782] should_fail_ex+0x412/0x560 [ 480.359655][T13782] _copy_from_user+0x2d/0xb0 [ 480.359668][T13782] core_sys_select+0x6fd/0xc30 [ 480.359704][T13782] ? __pfx_core_sys_select+0x10/0x10 [ 480.359750][T13782] ? __pfx_set_user_sigmask+0x10/0x10 [ 480.359767][T13782] ? kmem_cache_free+0x182/0x650 [ 480.359779][T13782] ? fd_install+0x94/0x3d0 [ 480.359792][T13782] __se_sys_pselect6+0x267/0x320 [ 480.359810][T13782] ? __pfx___se_sys_pselect6+0x10/0x10 [ 480.359825][T13782] ? __pfx_ksys_write+0x10/0x10 [ 480.359843][T13782] ? __x64_sys_pselect6+0x21/0xf0 [ 480.359857][T13782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.359868][T13782] do_syscall_64+0x15f/0xf80 [ 480.359888][T13782] ? trace_irq_disable+0x3b/0x140 [ 480.359901][T13782] ? clear_bhb_loop+0x40/0x90 [ 480.359914][T13782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.359924][T13782] RIP: 0033:0x7fc237d9c819 [ 480.359934][T13782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.359943][T13782] RSP: 002b:00007fc235ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 480.359955][T13782] RAX: ffffffffffffffda RBX: 00007fc238016090 RCX: 00007fc237d9c819 [ 480.359963][T13782] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 480.359969][T13782] RBP: 00007fc235ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 480.359976][T13782] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 480.359982][T13782] R13: 00007fc238016128 R14: 00007fc238016090 R15: 00007fc23813fa48 [ 480.359997][T13782] [ 480.691935][T13796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.725754][T13796] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 480.760131][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'. [ 481.076064][T13795] syzkaller0: entered promiscuous mode [ 481.115303][T13795] syzkaller0: entered allmulticast mode [ 481.229458][T13801] bridge1: entered promiscuous mode [ 481.271941][T13798] syzkaller0: left promiscuous mode [ 481.284921][T13798] syzkaller0: left allmulticast mode [ 481.458093][T13814] fuse: Unknown parameter ']QW(: 7ߊ!!ۢ9ăiV' [ 482.004471][T13816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2059'. [ 482.748235][ T5899] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 482.940595][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.958059][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 482.995695][ T5899] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 483.015074][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.038543][ T5899] usb 4-1: config 0 descriptor?? [ 483.257913][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.299973][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.567493][ T5899] hid_parser_main: 3991 callbacks suppressed [ 483.567518][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.612049][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.638871][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.676878][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.696111][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.735399][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.806726][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.846514][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.886029][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.912195][ T5899] saitek 0003:06A3:0621.001F: unknown main item tag 0x0 [ 483.987486][ T5899] saitek 0003:06A3:0621.001F: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 484.036545][ T5899] usb 4-1: USB disconnect, device number 93 [ 484.636179][T13838] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 484.808751][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 484.808765][ T30] audit: type=1326 audit(1776968713.965:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 484.839220][ T30] audit: type=1326 audit(1776968713.965:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 484.885404][ T30] audit: type=1326 audit(1776968713.965:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 484.922102][ T30] audit: type=1326 audit(1776968713.965:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 484.952145][ T30] audit: type=1326 audit(1776968713.965:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 484.975063][ T30] audit: type=1326 audit(1776968713.965:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 484.997612][ T30] audit: type=1326 audit(1776968713.965:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 485.020552][ T30] audit: type=1326 audit(1776968713.965:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 485.043240][ T30] audit: type=1326 audit(1776968713.965:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 485.065977][ T30] audit: type=1326 audit(1776968713.965:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 486.836194][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 487.297244][ T5899] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 487.478926][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 487.501873][T13861] vivid-000: disconnect [ 487.507911][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.521507][T13860] vivid-000: reconnect [ 487.525917][ T5899] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 487.550181][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.593683][ T5899] usb 4-1: config 0 descriptor?? [ 487.736748][T13866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2073'. [ 488.065249][ T5899] isku 0003:1E7D:319C.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 488.245314][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'. [ 488.454946][ T29] usb 4-1: USB disconnect, device number 94 [ 489.057658][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2088'. [ 489.069545][T13904] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 489.181604][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 489.345638][T13910] sctp: [Deprecated]: syz.1.2092 (pid 13910) Use of int in maxseg socket option. [ 489.345638][T13910] Use struct sctp_assoc_value instead [ 490.180887][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 490.180905][ T30] audit: type=1326 audit(1776968719.355:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.204549][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 490.234616][ T30] audit: type=1326 audit(1776968719.355:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.272575][ T30] audit: type=1326 audit(1776968719.355:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.298166][ T30] audit: type=1326 audit(1776968719.355:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.324752][ T30] audit: type=1326 audit(1776968719.355:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.347814][ T30] audit: type=1326 audit(1776968719.365:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.357355][ T5899] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 490.380245][ T30] audit: type=1326 audit(1776968719.365:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.405622][ T30] audit: type=1326 audit(1776968719.365:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.429885][ T30] audit: type=1326 audit(1776968719.365:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.452964][ T30] audit: type=1326 audit(1776968719.365:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.4.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374559c819 code=0x7ffc0000 [ 490.528994][ T5899] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.542052][ T5899] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 490.558738][T13951] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 490.571100][ T5899] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 490.580605][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 490.588794][ T5899] usb 4-1: SerialNumber: syz [ 490.599985][ T5899] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 490.608988][ T5899] usb-storage 4-1:1.0: USB Mass Storage device detected [ 490.620299][ T5899] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 490.628746][ T5899] scsi host1: usb-storage 4-1:1.0 [ 490.684045][T13956] netlink: 'syz.4.2105': attribute type 10 has an invalid length. [ 490.701086][T13946] loop7: detected capacity change from 0 to 524287999 [ 491.103127][T13963] syzkaller0: entered promiscuous mode [ 491.110908][T13963] syzkaller0: entered allmulticast mode [ 491.201938][T13973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.216189][T13973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.348274][ T993] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 491.529452][ T993] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 491.553804][ T993] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 491.571058][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.586152][ T993] usb 2-1: Product: syz [ 491.598466][ T993] usb 2-1: Manufacturer: syz [ 491.607436][ T993] usb 2-1: SerialNumber: syz [ 491.631165][ T993] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 491.883052][ T29] usb 4-1: USB disconnect, device number 95 [ 492.043627][ T993] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.055766][ T993] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 492.065068][ T993] usb 2-1: media controller created [ 492.088488][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.499266][ T5899] usb 2-1: USB disconnect, device number 101 [ 493.177412][T13993] loop7: detected capacity change from 0 to 524287999 [ 493.391039][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'. [ 493.420577][T14001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.437064][T14001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.776318][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 495.788152][T14003] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2119'. [ 495.807363][T14003] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 495.921442][T14008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.939775][T14010] FAULT_INJECTION: forcing a failure. [ 495.939775][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 495.948198][T14008] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2120'. [ 495.985045][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.3.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.985075][T14010] Tainted: [L]=SOFTLOCKUP [ 495.985082][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.985092][T14010] Call Trace: [ 495.985099][T14010] [ 495.985107][T14010] dump_stack_lvl+0xe8/0x150 [ 495.985137][T14010] should_fail_ex+0x412/0x560 [ 495.985170][T14010] should_failslab+0xa8/0x100 [ 495.985193][T14010] ? fcntl_dirnotify+0x248/0x6a0 [ 495.985219][T14010] kmem_cache_alloc_noprof+0x87/0x650 [ 495.985240][T14010] ? fcntl_dirnotify+0x1d8/0x6a0 [ 495.985263][T14010] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 495.985298][T14010] fcntl_dirnotify+0x248/0x6a0 [ 495.985322][T14010] ? ksys_write+0x1e6/0x270 [ 495.985350][T14010] do_fcntl+0x77e/0x1a20 [ 495.985376][T14010] ? __fget_files+0x2a/0x420 [ 495.985395][T14010] ? __pfx_do_fcntl+0x10/0x10 [ 495.985424][T14010] ? __fget_files+0x2a/0x420 [ 495.985444][T14010] ? __fget_files+0x2a/0x420 [ 495.985469][T14010] ? bpf_lsm_file_fcntl+0x9/0x20 [ 495.985495][T14010] __se_sys_fcntl+0xc8/0x150 [ 495.985517][T14010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.985537][T14010] do_syscall_64+0x15f/0xf80 [ 495.985559][T14010] ? trace_irq_disable+0x3b/0x140 [ 495.985583][T14010] ? clear_bhb_loop+0x40/0x90 [ 495.985605][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.985624][T14010] RIP: 0033:0x7fa6eaf9c819 [ 495.985641][T14010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.985656][T14010] RSP: 002b:00007fa6ebeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 495.985676][T14010] RAX: ffffffffffffffda RBX: 00007fa6eb215fa0 RCX: 00007fa6eaf9c819 [ 495.985690][T14010] RDX: 0000000000000002 RSI: 0000000000000402 RDI: 0000000000000003 [ 495.985701][T14010] RBP: 00007fa6ebeee090 R08: 0000000000000000 R09: 0000000000000000 [ 495.985712][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.985723][T14010] R13: 00007fa6eb216038 R14: 00007fa6eb215fa0 R15: 00007fa6eb33fa48 [ 495.985752][T14010] [ 496.385702][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2127'. [ 496.395795][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 496.421834][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 496.701350][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 496.701367][ T30] audit: type=1326 audit(1776968725.875:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 496.766673][ T30] audit: type=1326 audit(1776968725.875:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 496.802278][ T30] audit: type=1326 audit(1776968725.975:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 496.836788][ T30] audit: type=1326 audit(1776968726.005:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 496.865722][ T30] audit: type=1326 audit(1776968726.005:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 496.889792][ T30] audit: type=1326 audit(1776968726.005:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 496.969871][ T30] audit: type=1326 audit(1776968726.005:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 497.020111][ T30] audit: type=1326 audit(1776968726.005:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 497.068647][ T30] audit: type=1326 audit(1776968726.035:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 497.098136][ T30] audit: type=1326 audit(1776968726.035:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6eaf9c819 code=0x7ffc0000 [ 497.121733][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 497.197195][ T993] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 497.283077][T14047] bridge2: entered promiscuous mode [ 497.295902][T14047] bridge2: entered allmulticast mode [ 497.320791][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 497.379358][ T993] usb 2-1: unable to get BOS descriptor or descriptor too short [ 497.393546][ T993] usb 2-1: not running at top speed; connect to a high speed hub [ 497.448330][ T993] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 497.516107][ T993] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 497.555374][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.613729][ T993] usb 2-1: Product: syz [ 497.639303][ T993] usb 2-1: Manufacturer: syz [ 497.670640][ T993] usb 2-1: SerialNumber: syz [ 497.912237][T14043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.951169][T14043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.032513][ T993] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 498.062218][T14068] FAULT_INJECTION: forcing a failure. [ 498.062218][T14068] name failslab, interval 1, probability 0, space 0, times 0 [ 498.157420][T14068] CPU: 1 UID: 0 PID: 14068 Comm: syz.0.2140 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.157450][T14068] Tainted: [L]=SOFTLOCKUP [ 498.157457][T14068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.157468][T14068] Call Trace: [ 498.157476][T14068] [ 498.157484][T14068] dump_stack_lvl+0xe8/0x150 [ 498.157517][T14068] should_fail_ex+0x412/0x560 [ 498.157549][T14068] should_failslab+0xa8/0x100 [ 498.157575][T14068] __kmalloc_cache_noprof+0x88/0x660 [ 498.157598][T14068] ? fuse_iomap_writeback_range+0xa9c/0x18b0 [ 498.157625][T14068] ? do_raw_spin_unlock+0xf5/0x210 [ 498.157653][T14068] fuse_iomap_writeback_range+0xa9c/0x18b0 [ 498.157693][T14068] iomap_writeback_folio+0x15f2/0x2740 [ 498.157738][T14068] iomap_writepages+0x167/0x2e0 [ 498.157763][T14068] ? __pfx_iomap_writepages+0x10/0x10 [ 498.157794][T14068] fuse_writepages+0x2ef/0x3f0 [ 498.157818][T14068] ? __lock_acquire+0x6b5/0x2cf0 [ 498.157845][T14068] ? __pfx_fuse_writepages+0x10/0x10 [ 498.157889][T14068] ? __lock_acquire+0x6b5/0x2cf0 [ 498.157915][T14068] ? __pfx_fuse_writepages+0x10/0x10 [ 498.157941][T14068] do_writepages+0x32e/0x550 [ 498.157981][T14068] __writeback_single_inode+0x133/0x10e0 [ 498.158002][T14068] ? do_raw_spin_unlock+0xf5/0x210 [ 498.158028][T14068] writeback_single_inode+0x4ac/0xdc0 [ 498.158057][T14068] write_inode_now+0x1c2/0x290 [ 498.158079][T14068] ? __pfx_write_inode_now+0x10/0x10 [ 498.158135][T14068] ? get_pid_task+0x20/0x1f0 [ 498.158156][T14068] ? get_pid_task+0x20/0x1f0 [ 498.158173][T14068] ? get_pid_task+0x20/0x1f0 [ 498.158200][T14068] fuse_flush+0x2b8/0x8a0 [ 498.158229][T14068] ? __pfx_fuse_flush+0x10/0x10 [ 498.158250][T14068] ? __lock_acquire+0x6b5/0x2cf0 [ 498.158276][T14068] ? ksys_write+0x1e6/0x270 [ 498.158330][T14068] ? __pfx_fuse_flush+0x10/0x10 [ 498.158351][T14068] filp_flush+0xbd/0x190 [ 498.158371][T14068] filp_close+0x1d/0x40 [ 498.158386][T14068] do_dup2+0x5a2/0x750 [ 498.158406][T14068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.158421][T14068] __x64_sys_dup3+0x7a/0x90 [ 498.158439][T14068] do_syscall_64+0x15f/0xf80 [ 498.158458][T14068] ? trace_irq_disable+0x3b/0x140 [ 498.158477][T14068] ? clear_bhb_loop+0x40/0x90 [ 498.158495][T14068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.158510][T14068] RIP: 0033:0x7fd2a9b9c819 [ 498.158524][T14068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.158538][T14068] RSP: 002b:00007fd2aaab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 498.158556][T14068] RAX: ffffffffffffffda RBX: 00007fd2a9e16090 RCX: 00007fd2a9b9c819 [ 498.158566][T14068] RDX: 6700000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 498.158577][T14068] RBP: 00007fd2aaab9090 R08: 0000000000000000 R09: 0000000000000000 [ 498.158586][T14068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.158594][T14068] R13: 00007fd2a9e16128 R14: 00007fd2a9e16090 R15: 00007fd2a9f3fa48 [ 498.158617][T14068] [ 498.922511][ T993] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 499.031925][ T993] usb 2-1: USB disconnect, device number 102 [ 499.147298][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 499.319638][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.368145][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 499.424018][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.443897][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 499.475064][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.545101][T14078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 499.592491][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.621112][T14089] bond4: entered allmulticast mode [ 499.668723][T14089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.840650][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.854185][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.898517][ T6602] wlan0: Trigger new scan to find an IBSS to join [ 500.146452][ T6600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.223537][ T31] INFO: task kworker/1:3:5879 blocked for more than 143 seconds. [ 500.233125][ T31] Tainted: G L syzkaller #0 [ 500.247643][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.264780][ T31] task:kworker/1:3 state:D stack:21504 pid:5879 tgid:5879 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 500.277331][ T31] Workqueue: usb_hub_wq hub_event [ 500.282448][ T31] Call Trace: [ 500.285795][ T31] [ 500.292387][ T31] __schedule+0x17b4/0x5680 [ 500.296992][ T31] ? kasan_save_stack+0x3e/0x60 [ 500.303394][ T31] ? __driver_probe_device+0x1ef/0x380 [ 500.309507][ T31] ? bus_for_each_drv+0x258/0x2f0 [ 500.315058][ T31] ? __device_attach+0x2c5/0x450 [ 500.321761][ T31] ? device_initial_probe+0xa1/0xd0 [ 500.328655][ T31] ? usb_set_configuration+0x1a87/0x2110 [ 500.334543][ T31] ? usb_generic_driver_probe+0x8d/0x150 [ 500.341776][ T31] ? really_probe+0x267/0xaf0 [ 500.347341][ T31] ? __device_attach_driver+0x279/0x430 [ 500.353098][ T31] ? __device_attach+0x2c5/0x450 [ 500.360086][ T31] ? look_up_lock_class+0x57/0x110 [ 500.365410][ T31] ? __pfx___schedule+0x10/0x10 [ 500.380416][ T31] ? schedule+0x90/0x360 [ 500.399101][ T31] schedule+0x164/0x360 [ 500.409245][ T31] schedule_timeout+0xc3/0x2c0 [ 500.420022][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 500.431399][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.442389][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.454098][ T31] ? wait_for_completion+0x274/0x5e0 [ 500.466016][ T31] wait_for_completion+0x2cc/0x5e0 [ 500.478365][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 500.490613][ T31] i2c_del_adapter+0x5c0/0x790 [ 500.501586][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 500.512937][ T31] ? kfree+0x4d/0x640 [ 500.522351][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 500.532596][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 500.551022][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 500.580857][ T31] cxusb_probe+0x60f/0x710 [ 500.598195][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.611752][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 500.622920][ T31] usb_probe_interface+0x659/0xc70 [ 500.634463][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 500.655173][ T31] really_probe+0x267/0xaf0 [ 500.671941][ T31] __driver_probe_device+0x1ef/0x380 [ 500.687949][ T31] driver_probe_device+0x4f/0x240 [ 500.700316][ T31] __device_attach_driver+0x279/0x430 [ 500.712438][ T31] bus_for_each_drv+0x258/0x2f0 [ 500.722351][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 500.734680][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 500.746782][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.762195][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 500.775810][ T31] __device_attach+0x2c5/0x450 [ 500.800416][ T31] ? __pfx___device_attach+0x10/0x10 [ 500.819610][ T31] ? _raw_spin_unlock+0x28/0x50 [ 500.837490][ T31] device_initial_probe+0xa1/0xd0 [ 500.858015][ T31] bus_probe_device+0x12a/0x220 [ 500.880921][ T31] device_add+0x7e9/0xbb0 [ 500.891761][ T31] usb_set_configuration+0x1a87/0x2110 [ 500.906281][ T31] usb_generic_driver_probe+0x8d/0x150 [ 500.919434][ T31] usb_probe_device+0x1c4/0x3b0 [ 500.931135][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 500.943040][ T31] really_probe+0x267/0xaf0 [ 500.955247][ T31] __driver_probe_device+0x1ef/0x380 [ 500.967965][ T31] driver_probe_device+0x4f/0x240 [ 500.980372][ T31] __device_attach_driver+0x279/0x430 [ 500.992949][ T31] bus_for_each_drv+0x258/0x2f0 [ 501.004673][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 501.021046][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 501.033365][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 501.045480][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 501.060621][ T31] __device_attach+0x2c5/0x450 [ 501.070907][ T31] ? __pfx___device_attach+0x10/0x10 [ 501.087202][ T31] ? _raw_spin_unlock+0x28/0x50 [ 501.100314][ T31] device_initial_probe+0xa1/0xd0 [ 501.111263][ T31] bus_probe_device+0x12a/0x220 [ 501.124367][ T31] device_add+0x7e9/0xbb0 [ 501.133505][ T31] usb_new_device+0xa08/0x16f0 [ 501.145159][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 501.157194][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.169337][ T31] hub_event+0x2a1c/0x4f30 [ 501.181766][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 501.195928][ T31] ? __pfx_hub_event+0x10/0x10 [ 501.209469][ T31] ? process_scheduled_works+0xa70/0x1860 [ 501.224244][ T31] ? process_scheduled_works+0xa70/0x1860 [ 501.238891][ T31] ? process_scheduled_works+0xa70/0x1860 [ 501.251698][ T31] process_scheduled_works+0xb5d/0x1860 [ 501.267173][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.283280][ T31] ? assign_work+0x3d5/0x5e0 [ 501.293875][ T31] worker_thread+0xa53/0xfc0 [ 501.309035][ T31] kthread+0x388/0x470 [ 501.320767][ T31] ? __pfx_worker_thread+0x10/0x10 [ 501.332971][ T31] ? __pfx_kthread+0x10/0x10 [ 501.352945][ T31] ret_from_fork+0x514/0xb70 [ 501.369006][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 501.389479][ T31] ? __switch_to+0xc79/0x1410 [ 501.412499][ T31] ? __pfx_kthread+0x10/0x10 [ 501.427245][ T31] ret_from_fork_asm+0x1a/0x30 [ 501.450943][ T31] [ 501.464500][ T31] [ 501.464500][ T31] Showing all locks held in the system: [ 501.532283][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.542816][ T24] usb 4-1: USB disconnect, device number 96 [ 501.557602][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.557716][ T31] 3 locks held by kworker/1:0/24: [ 501.616982][ T31] #0: ffff888022aad940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 501.691078][ T31] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 501.736454][ T31] #2: ffff88802a5061d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 501.757005][ T31] 1 lock held by khungtaskd/31: [ 501.763954][ T31] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 501.775935][ T31] 2 locks held by getty/5604: [ 501.780997][ T31] #0: ffff888036c5f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 501.796702][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 501.812899][ T31] 5 locks held by kworker/1:3/5879: [ 501.818730][ T31] #0: ffff888022aad940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 501.830784][ T31] #1: ffffc90004637c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 501.843161][ T31] #2: ffff88802a4511d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 501.852602][ T31] #3: ffff8880792861d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 501.863056][ T31] #4: ffff888020b261a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 501.872870][ T31] 8 locks held by kworker/u8:9/6600: [ 501.878808][ T31] #0: ffff88801be9e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 501.890292][ T31] #1: ffffc9000546fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 501.910685][ T31] #2: ffffffff8fdd5528 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 501.937213][ T31] #3: ffff888028c2f128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 501.965774][ T31] #4: ffff888028c2b258 (&devlink->lock_key#15){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 501.976852][ T31] #5: ffffffff8fde3e40 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830 [ 502.003590][ T31] #6: ffff88805f208d90 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x588/0x22c0 [ 502.018330][ T31] #7: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 502.030979][ T31] 2 locks held by kworker/u8:10/6602: [ 502.036415][ T31] #0: ffff88801dbb7140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 502.047633][ T31] #1: ffffc9000538fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 502.060295][ T31] 5 locks held by kworker/u8:14/6610: [ 502.065729][ T31] 3 locks held by kworker/u8:15/6612: [ 502.071190][ T31] #0: ffff88801ae9c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 502.082943][ T31] #1: ffffc90007007c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 502.094216][ T31] #2: ffffffff8fde3e40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 502.103250][ T31] 4 locks held by udevd/6746: [ 502.108063][ T31] #0: ffff888044aef518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 502.116884][ T31] #1: ffff8880477df880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 502.126422][ T31] #2: ffff8880598405a8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 502.136124][ T31] #3: ffff8880792861d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 502.149856][ T31] 2 locks held by dhcpcd/14100: [ 502.154792][ T31] #0: ffff88802b13c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 502.164544][ T31] #1: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 502.175739][ T31] [ 502.181873][ T31] ============================================= [ 502.181873][ T31] [ 502.199040][ T31] NMI backtrace for cpu 0 [ 502.199063][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 502.199089][ T31] Tainted: [L]=SOFTLOCKUP [ 502.199096][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.199107][ T31] Call Trace: [ 502.199115][ T31] [ 502.199123][ T31] dump_stack_lvl+0xe8/0x150 [ 502.199156][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 502.199175][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.199204][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 502.199226][ T31] sys_info+0x135/0x170 [ 502.199255][ T31] watchdog+0xfd3/0x1030 [ 502.199284][ T31] ? watchdog+0x1c9/0x1030 [ 502.199312][ T31] kthread+0x388/0x470 [ 502.199333][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.199353][ T31] ? __pfx_kthread+0x10/0x10 [ 502.199374][ T31] ret_from_fork+0x514/0xb70 [ 502.199403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 502.199425][ T31] ? __switch_to+0xc79/0x1410 [ 502.199448][ T31] ? __pfx_kthread+0x10/0x10 [ 502.199470][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.199503][ T31] [ 502.199520][ T31] Sending NMI from CPU 0 to CPUs 1: [ 502.315494][ C1] NMI backtrace for cpu 1 [ 502.315515][ C1] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 502.315537][ C1] Tainted: [L]=SOFTLOCKUP [ 502.315543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.315553][ C1] RIP: 0010:__lock_acquire+0x6c6/0x2cf0 [ 502.315581][ C1] Code: bc 00 00 00 4c 8b 74 24 08 4c 89 f7 4c 89 ee ba 08 00 00 00 e8 5b 44 00 00 31 ed 85 c0 0f 84 6d 0d 00 00 83 3d ba 4d aa 18 00 <75> 13 48 63 44 24 18 48 0f a3 05 cb bd a6 12 0f 83 8a 1e 00 00 49 [ 502.315594][ C1] RSP: 0018:ffffc90000a08730 EFLAGS: 00000046 [ 502.315608][ C1] RAX: 0000000000000001 RBX: ffff88803626c980 RCX: ffffffff93e998e8 [ 502.315620][ C1] RDX: 0000000000000008 RSI: ffff88803626c960 RDI: ffff88803626bd80 [ 502.315630][ C1] RBP: 0000000000000000 R08: ffffffff81771256 R09: ffffffff8e95cce0 [ 502.315641][ C1] R10: ffffc90000a08a38 R11: ffffffff81b105c0 R12: 00000000ffffff03 [ 502.315653][ C1] R13: ffff88803626c960 R14: ffff88803626bd80 R15: 0000000000000002 [ 502.315664][ C1] FS: 000055558084c540(0000) GS:ffff888125314000(0000) knlGS:0000000000000000 [ 502.315677][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.315687][ C1] CR2: 0000562c451744b0 CR3: 00000000754b8000 CR4: 00000000003526f0 [ 502.315701][ C1] Call Trace: [ 502.315708][ C1] [ 502.315716][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315733][ C1] ? lock_acquire+0x106/0x350 [ 502.315756][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315770][ C1] ? lock_acquire+0x106/0x350 [ 502.315793][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315807][ C1] lock_acquire+0x106/0x350 [ 502.315828][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315846][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315860][ C1] ? sock_read_iter+0x251/0x320 [ 502.315878][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315893][ C1] unwind_next_frame+0xc3/0x2550 [ 502.315908][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315924][ C1] ? unwind_next_frame+0xa6/0x2550 [ 502.315945][ C1] ? sock_recvmsg+0x155/0x1b0 [ 502.315964][ C1] ? sock_read_iter+0x251/0x320 [ 502.315981][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.316001][ C1] arch_stack_walk+0x11b/0x150 [ 502.316019][ C1] ? sock_read_iter+0x251/0x320 [ 502.316038][ C1] stack_trace_save+0xa9/0x100 [ 502.316057][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 502.316076][ C1] ? kasan_save_track+0x4f/0x80 [ 502.316093][ C1] ? kasan_save_track+0x3e/0x80 [ 502.316110][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 502.316131][ C1] kasan_save_track+0x3e/0x80 [ 502.316146][ C1] ? kasan_save_track+0x3e/0x80 [ 502.316162][ C1] ? kasan_save_free_info+0x46/0x50 [ 502.316175][ C1] ? __kasan_slab_free+0x5c/0x80 [ 502.316192][ C1] ? slab_free_after_rcu_debug+0x12a/0x220 [ 502.316213][ C1] ? rcu_core+0x7cd/0x1070 [ 502.316234][ C1] ? handle_softirqs+0x22a/0x840 [ 502.316255][ C1] ? do_softirq+0x76/0xd0 [ 502.316273][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 502.316293][ C1] ? tcp_recvmsg+0x1e4/0x7e0 [ 502.316312][ C1] ? sock_recvmsg+0x155/0x1b0 [ 502.316330][ C1] ? sock_read_iter+0x251/0x320 [ 502.316361][ C1] ? kfree+0x1c5/0x640 [ 502.316376][ C1] kasan_save_free_info+0x46/0x50 [ 502.316390][ C1] __kasan_slab_free+0x5c/0x80 [ 502.316407][ C1] slab_free_after_rcu_debug+0x12a/0x220 [ 502.316428][ C1] ? rcu_core+0x751/0x1070 [ 502.316448][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 502.316469][ C1] rcu_core+0x7cd/0x1070 [ 502.316495][ C1] ? __pfx_rcu_core+0x10/0x10 [ 502.316515][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 502.316534][ C1] ? sched_clock_cpu+0x74/0x440 [ 502.316553][ C1] handle_softirqs+0x22a/0x840 [ 502.316574][ C1] ? do_softirq+0x76/0xd0 [ 502.316595][ C1] ? tcp_recvmsg+0x1e4/0x7e0 [ 502.316614][ C1] do_softirq+0x76/0xd0 [ 502.316633][ C1] [ 502.316639][ C1] [ 502.316645][ C1] __local_bh_enable_ip+0xf8/0x130 [ 502.316666][ C1] tcp_recvmsg+0x1e4/0x7e0 [ 502.316686][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 502.316708][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 502.316728][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 502.316748][ C1] ? sock_rps_record_flow+0x19/0x350 [ 502.316766][ C1] ? inet_recvmsg+0xb3/0x120 [ 502.316781][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 502.316798][ C1] sock_recvmsg+0x155/0x1b0 [ 502.316819][ C1] sock_read_iter+0x251/0x320 [ 502.316837][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 502.316859][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 502.316878][ C1] ? security_file_permission+0x75/0x260 [ 502.316902][ C1] vfs_read+0x582/0xa70 [ 502.316918][ C1] ? debug_object_free+0x2d7/0x490 [ 502.316946][ C1] ? __pfx_vfs_read+0x10/0x10 [ 502.316970][ C1] ksys_read+0x150/0x270 [ 502.316988][ C1] ? __pfx_ksys_read+0x10/0x10 [ 502.317007][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.317024][ C1] do_syscall_64+0x15f/0xf80 [ 502.317043][ C1] ? clear_bhb_loop+0x40/0x90 [ 502.317060][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.317077][ C1] RIP: 0033:0x7fadae957997 [ 502.317091][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 502.317103][ C1] RSP: 002b:00007ffd29eecd90 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 502.317118][ C1] RAX: ffffffffffffffda RBX: 000055558084c540 RCX: 00007fadae957997 [ 502.317130][ C1] RDX: 0000000000000004 RSI: 00007ffd29eecdec RDI: 0000000000000003 [ 502.317140][ C1] RBP: 00007ffd29eed290 R08: 0000000000000000 R09: 0000000000000000 [ 502.317150][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 502.317159][ C1] R13: 00007ffd29eecdec R14: 00007ffd29eece80 R15: 0000000000000000 [ 502.317176][ C1] [ 502.877764][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 502.884638][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 502.895342][ T31] Tainted: [L]=SOFTLOCKUP [ 502.899682][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.909749][ T31] Call Trace: [ 502.913037][ T31] [ 502.915983][ T31] vpanic+0x56c/0xa60 [ 502.919989][ T31] ? __pfx___schedule+0x10/0x10 [ 502.924863][ T31] ? __pfx_vpanic+0x10/0x10 [ 502.929420][ T31] panic+0xc5/0xd0 [ 502.933243][ T31] ? __pfx_panic+0x10/0x10 [ 502.937678][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 502.943091][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 502.949270][ T31] watchdog+0x102c/0x1030 [ 502.953675][ T31] ? watchdog+0x1c9/0x1030 [ 502.958119][ T31] kthread+0x388/0x470 [ 502.962212][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.966889][ T31] ? __pfx_kthread+0x10/0x10 [ 502.971538][ T31] ret_from_fork+0x514/0xb70 [ 502.976140][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 502.981252][ T31] ? __switch_to+0xc79/0x1410 [ 502.985929][ T31] ? __pfx_kthread+0x10/0x10 [ 502.990522][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.995295][ T31] [ 502.999008][ T31] Kernel Offset: disabled [ 503.003320][ T31] Rebooting in 86400 seconds..