last executing test programs: 10.572106689s ago: executing program 3 (id=9694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[], 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200400c5) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) socket$kcm(0x10, 0x2, 0x0) 9.412415741s ago: executing program 3 (id=9699): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009002420"], 0x0) r1 = syz_usb_connect$lan78xx(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x23, 0xb7, {0xb7, 0x2, "45e06bb29ea64c5ed032f8dc31b4fe29b0ea952fa1c01a87259f7f2e30958b1573cd8ac4d44da97d5ef7fc243f42d586485ddb09a33fb315d2ee7718776a90fe65ef425359e3383d74629b9e3aa2acba8eacd93233cd30e2d846f1cdbe14b8b23decbb128307ac4a342a856f8c4dbb7294f4b1e15f1e9d1e95cad7671e57010e5f93f54feabe4bc05453b04c2521ce7c83425306b60b4e0cd978a6c563e52470881ae7f70020197e38122e3002999485f57dd9b0e2"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x40, 0x13, 0x30, "e4fa3e8651cd61738fbd6190e6cee716c677dc589583feecb27cc5739656dfb06fa9597074165b090fa584f6847abffe"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0xc54}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x1e07}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "e804f2401831972fc013ff1a5f301cc652a091fac2fc31fdbdfa038fed2d715da208867828b25ef3d50e4a9c28c1cb"}}) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x8, 0x400000) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a00)={0x0, &(0x7f0000000540)=[@out_dx={0x6a, 0x28, {0x8ad, 0x417f882fd8d8eb9f, 0x7fff}}, @set_irq_handler={0xc8, 0x20, {0x23}}, @code={0xa, 0x56, {"c4c29145f30f01d13e4572acb805000000b9dd0000000f01d966baf80cb878ad8e8fef66bafc0cb0d1ee420f01c5670f01d136440f01734a400faef0c4222906aff77f0000"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xf0, {0x0, 0x2, [@uexit={0x0, 0x18, 0x7}, @in_dx={0x69, 0x20, {0xc5d5}}, @nested_load_syzos={0x136, 0x20, {0x2}}, @rdmsr={0x66, 0x18, {0x96a}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x6002, 0xfffffffffffffffe, 0xffffffff, 0x7}}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x1, 0x5}}]}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x3, 0x8}}, @cpuid={0x64, 0x18, {0xe313, 0x7}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0xe3c0}}, @set_irq_handler={0xc8, 0x20, {0xc6, 0x1}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0x9d4}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xe7}}, @wr_drn={0x68, 0x20, {0x7, 0x7fffffff}}, @nested_amd_vmsave={0x183, 0x18}, @uexit={0x0, 0x18, 0xffffffffffffffe9}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x8f, 0x1}}, @nested_load_code={0x12e, 0x7a, {0x1, "66b820010f00d8260fc7b345fbfc6fb9800000c00f3235004000000f3066b8f9008ed8b805000000b9cb1b2dcf0f01d966baf80cb810f9d98cef66bafc0ced66b897000f00d066baf80cb8a0ff0283ef66bafc0c66ed66b832000f00d8c4c1fde730"}}, @code={0xa, 0x82, {"66440f71f500b9800000c00f3235000800000f30b805000000b9e06000000f01c164a300800000000000003626dd3248b8ab000000000000000f23d00f21f835200000070f23f8c443fd01e55f42f76cdb8666bad004b091ee48b8e09648c5000000000f23d80f21f835400000400f23f8"}}, @wrmsr={0x65, 0x20, {0x8fb}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xd97, 0x1}}], 0x4aa}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000a80)=@riscv64_v={0x8030000009000015, &(0x7f0000000a40)=0x5}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000500)=[0xa6, 0xd]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000010101020000000000000000020000091800018014000180080001360000000000000000ac1414bb140019800800010006000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) 9.242797371s ago: executing program 4 (id=9701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000e0000002000000000000000000000000fc0100000000b58ebf210000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000000600000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000002200000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000"], 0xf0}}, 0x844) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x404840) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa4000000060a09040000000000000000020000007800048020000180080001006c6f670014000280070002405c4000000600044000080000540001800a0001006d617463680000004400028008000240000000002c000300346384ea362eefeec3c408bf3afba7aea68ac4de901d71dbb01843fcb3eaa0221283bd05c74e44300a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xcc}}, 0x0) 7.454344834s ago: executing program 4 (id=9706): fanotify_init(0x200, 0x0) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x1843) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000100)={r6}) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c3", 0x8c}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/92, 0xe0}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/49, 0x31}], 0x3}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x550, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x50c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd6}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x10001}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x3e8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3d8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x1bc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "6af31ee0cc1290dc2d649e4d01d0c75fdbfe77cfe3be6eddac4c7564d929e9bb6efd39b60e0672332b7878cadf8407eed149f44229c415310089909beff982839d09637c9d409fb45d202372d9cb144ec07f96e9a16d27acaf8880a4ad773b487509cdc474bf10f1fe3f1e7549a8fce900b515d5cc40c0d75c3ccb2d5ca4909285d6d83d0dc1bffa55a78927a10e14e56a50443339bfb192026d4875587cad951148048e21db97b43733eb99f78999d904cf88eedeb4a15b364f88725d2ef3f8d45c3cca5af4e590220401b60d31efd4dde414397772110016072102f71b56ea59b8dd"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xab}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x1f8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "43c7357b284e078b6067d4979b094d9171a30263c872ea624aaf95e79cbf0d37ace1a818b98f425f4cbca122b1aad88b769bb748bf31d6ec71b465b7624e594eb9288e7dd1fabc8d31802b0e348c59b27287947475c172ea6526194711d6e6e59d0a8b308aad054d35550abd3d0fab8d4c509f21751c87a09e744e264d79d9d74d6006e9"}, @NFTA_DATA_VALUE={0x2d, 0x1, "4a59854950f871d34b7ccaadd4fb32a2c991328a9367e3a2b3f4e222e2ee60bb55f6550b64a285d0c1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "236a0d54cebde3fde71fa1de5dfb7683dc31dacb2e2d903141ba363c0a33eed176871e9e4c67a7437813a2f788ce060342e03bb0ea1a5308356909d1194484b1343b5e30690d3cd75690379b6f1d33f5ad6b48666e68723ce3a26f4275a8675a4717ed40a3ed42e8c2bf77d30501af3d8f677cdebd85b3454707fd2f611e50e9b536f75ea78ead3a01f402832ee88ca9febdaaf3bce0bf"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x34}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6d}, @NFTA_INNER_NUM={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x578}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000f70100008000000000fc27250000", @ANYRES32=0x0, @ANYBLOB="7d150400000000002400128009000100766c616e000000001400028006000100040000000600050088a8000008000500", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0x4}, {0xfff1, 0xfff2}, {0xffe0, 0xfff3}}}, 0x24}}, 0x40000) 6.479633478s ago: executing program 4 (id=9711): syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500200000040fa04014240000102030109028b00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d020087002009040100000102200009040101010102200006240201033e10240105c4030300c1990309000000cd"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x25000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) epoll_create1(0x5d0fe7d3c220f198) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4000002, r2, 0x0, 0x500}, 0x38) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000001180)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001100)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}]}) gettimeofday(0xfffffffffffffffe, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=r3], 0x48) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0xc0a85320, &(0x7f00000000c0)={0x1080}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1d, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000083000000bf0900000000000055090100000000009500000000000000bf980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000a00)={'veth1_to_bond\x00', 0x200}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000004, 0x71d, 0x405, 0xe, 0x80, 0x11, 0x0, 0x8000000000000000, 0x2, 0x0, 0x3, 0x800, 0x4, 0xffffffffffffffff], 0x0, 0x194d40}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, &(0x7f0000000d40), 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000c40)}) 5.808839547s ago: executing program 3 (id=9712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, 0x0, 0x24000800) 5.707976329s ago: executing program 3 (id=9713): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000311d0a040cc1705237530010203010902120001030e60090904500400e42a38f7"], 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000500)=0x0, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0xfffffffffffffff5, 0x154, {0x7, 0x28, 0x0, 0x441410, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, 0x0) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) socket(0x10, 0x803, 0x0) socket(0x21, 0x6, 0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffe, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r9, r10, r11, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060103000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c69666163650000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r15, r13, &(0x7f00000003c0)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbbe4, 0x8, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x0, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) clock_gettime(0xffffffea, 0x0) syz_ublk_setup_queues(r8, r13, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x767f, 0x8000, 0x1, 0x2000008, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0d, 0x20, 0x2, 0x40021a, 0x0, r8}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r12, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 5.484772478s ago: executing program 1 (id=9716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000e0000002000000000000000000000000fc0100000000b58ebf210000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000000600000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000002200000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000"], 0xf0}}, 0x844) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x404840) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa4000000060a09040000000000000000020000007800048020000180080001006c6f670014000280070002405c4000000600044000080000540001800a0001006d617463680000004400028008000240000000002c000300346384ea362eefeec3c408bf3afba7aea68ac4de901d71dbb01843fcb3eaa0221283bd05c74e44300a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xcc}}, 0x0) 4.252562931s ago: executing program 4 (id=9722): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x40305839, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "e700"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x0, 0xe, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x2, "e911"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = socket$pptp(0x18, 0x1, 0x2) accept(r6, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x2f) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r8, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0xfffffffffffffffe, 0x2, {0xffffffdfffffffff, 0x4, 0x0, '\x00', {0x7ff, 0x80801, 0x79, 0x10, 0x0, 0x0, 0x8000, '\x00', 0x6, 0x8000000000000001, 0x100000000000001, 0x3, {0xa, 0x6}, {0x4000000000006, 0xca}, {0x2000004, 0xd}, {0x5, 0xa00}, 0x2002, 0x6, 0x8, 0x7}}}}) write$FUSE_INIT(r8, &(0x7f0000000000)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x20, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x3, 0x300f, 0x6, 0x0, 0x3, 0x1dce1ae40b296b00, 0x7}}) 4.148216227s ago: executing program 1 (id=9723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 3.876714389s ago: executing program 1 (id=9724): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100677461700000240a00"/40, @ANYRES32=r3], 0x5c}}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f00007ed000/0x2000)=nil, 0x2000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.478596703s ago: executing program 1 (id=9726): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x444}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d2058ea5dcec77b644cb4927e43838cb632b09b823885e5729f163bdc6ab9725aa575d034c67d1985e0d1ac60f597a2747c3d6d6a366b9ab1f791d0ef4196371671865ad407d3d21586847479d116ebcd97848f0d846b4995eeb5aeed68a3", 0x149}], 0x1}}], 0x2, 0x42054) 2.370021437s ago: executing program 1 (id=9727): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4c881}, 0x40) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[]) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x7ff, 0x0, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000002, 0x0, 0xffffffffffeffffa}, {0x626ab0b8}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0xf58b, 0xfffffffe, 0x8}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.222740724s ago: executing program 3 (id=9730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) io_setup(0xff, &(0x7f0000000380)=0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x220080, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @loopback, 0x1}, 0x1c) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, 0x0}]) 2.067451117s ago: executing program 2 (id=9731): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400000000d200000000000000d1cd3dd412247189e2964c42dcebf4a7b26323cd3a3b5b399fb1dd359c39acfa7459d018ad27c3125718b160a08d1fb7ae3519220bc1a9f542fa5af84f5d2a57776f7c8b0cd846aa432e9cb1670e7436cd7b0dc06bfee9b4d81ca9f609d152ed3b0c9677b3eed85b983a1efeb183075c97d34e59fde0568009145aa4d23a834a7dcaa022928a8c1b413076034fbc", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.993119857s ago: executing program 2 (id=9732): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015"], 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x5244534b, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.980887357s ago: executing program 3 (id=9733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000e0000002000000000000000000000000fc0100000000b58ebf210000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000000600000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000002200000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000"], 0xf0}}, 0x844) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x404840) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa4000000060a09040000000000000000020000007800048020000180080001006c6f670014000280070002405c4000000600044000080000540001800a0001006d617463680000004400028008000240000000002c000300346384ea362eefeec3c408bf3afba7aea68ac4de901d71dbb01843fcb3eaa0221283bd05c74e44300a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xcc}}, 0x0) 1.894480165s ago: executing program 2 (id=9734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 1.743211818s ago: executing program 2 (id=9735): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4603090701810000000000000003003e00f9ffffffd80100000000000040000000000000000301000000000000320d00000500380003"], 0xff) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) unshare(0x58061980) ioctl$PPPIOCSACTIVE(r1, 0x4004743c, &(0x7f0000000240)={0x0, 0x0}) unshare(0x8000000) 1.53290666s ago: executing program 2 (id=9736): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000001880)={0x3, r3, 0xfff, 0x3ff, 0x2, 0x944}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdf, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0xfffffe00, 0x1005, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0xe5, 0x8, 0xff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x646, 0x3ff, 0x101}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x6, 0x3ff, 0x6}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000000040)={r10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x6, 0x401f, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 1.104485891s ago: executing program 0 (id=9737): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020500090e00ff8000000000fedbdf2505000600002000000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000000c02000060050005002b0000000a"], 0x70}, 0x1, 0x7}, 0x0) 854.591645ms ago: executing program 0 (id=9738): r0 = socket$inet6(0xa, 0x80002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x10004003adc1ea3, &(0x7f0000ffd000/0x1000)=nil, 0x6fc5870cb559d04c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x1}, 0x1c) 839.689864ms ago: executing program 4 (id=9739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) (fail_nth: 10) 651.978648ms ago: executing program 4 (id=9740): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000311d0a040cc1705237530010203010902120001030e60090904500400e42a38f7"], 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000500)=0x0, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0xfffffffffffffff5, 0x154, {0x7, 0x28, 0x0, 0x441410, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, 0x0) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) socket(0x10, 0x803, 0x0) socket(0x21, 0x6, 0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffe, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r9, r10, r11, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060103000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c69666163650000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r15, r13, &(0x7f00000003c0)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbbe4, 0x8, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x0, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) clock_gettime(0xffffffea, 0x0) syz_ublk_setup_queues(r8, r13, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x767f, 0x8000, 0x1, 0x2000008, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0d, 0x20, 0x2, 0x40021a, 0x0, r8}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r12, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 568.638857ms ago: executing program 0 (id=9741): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x1, [{@broadcast}, {@dev={0xac, 0x14, 0x14, 0x20}}]}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) (async, rerun: 32) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x620000, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000180)={0x0, r11, r8}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (async) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}, [@IFLA_MAP={0x24, 0xe, {0xea, 0xc, 0x1ce65358, 0x761, 0xa, 0x73}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) 386.385121ms ago: executing program 0 (id=9742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 195.545332ms ago: executing program 0 (id=9743): r0 = io_uring_setup(0x654e, &(0x7f0000000200)={0x0, 0xca4a, 0x40, 0x3, 0x6}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required={0x3, 0xf}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 127.125657ms ago: executing program 2 (id=9744): unshare(0x8040480) connect$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb2, 0x1c080, 0xa, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x2, 0x3}}, 0x20) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14}}, 0xc4}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xc00000001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000540)={0x18000000, 0x1, 0x4, 0x0, 0xad}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0xffffffff, 0x7fff, 0x34324152, 0x5, 0x2, [{0x6, 0x3}, {0x8, 0x4000000}, {0x8, 0x21}, {0xc91, 0x80000000}, {0x6, 0x9}, {0x4, 0x1000c}, {0x802, 0x2}, {0xfffffffe}], 0xb, 0x5, 0x8, 0x1, 0x5}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x170}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x7, 0x0, 0x0) 1.939084ms ago: executing program 0 (id=9745): r0 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) read$midi(r0, &(0x7f00000002c0)=""/91, 0x5b) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket(0x2b, 0x1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNGETVNETLE(r3, 0xc0189436, &(0x7f0000001200)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x1e0, 0x318, 0x1e0, 0x278, 0x148, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0xffffff00, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x20004800) syslog(0x3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@delchain={0x24, 0x65, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1b, 0xfff1}, {0x6, 0x6}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0xdd47350fbb86cda9}, 0x20040000) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() fcntl$setownex(r9, 0xf, &(0x7f0000000240)={0x2, r10}) fcntl$notify(r9, 0x402, 0x80000027) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x140, 0x0) 0s ago: executing program 1 (id=9746): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r8, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101"], 0x0) kernel console output (not intermixed with test programs): 08] usb 4-1: SerialNumber: syz [ 1711.938581][ T3455] bond0: entered promiscuous mode [ 1711.972514][ T3455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.001837][ T808] usb 4-1: unit 2 not found! [ 1713.018319][ T808] usb 4-1: unit 0 not found! [ 1713.176547][ T3474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9424'. [ 1713.182600][ T808] usb 4-1: USB disconnect, device number 124 [ 1713.275703][ T3478] netlink: 'syz.3.9426': attribute type 8 has an invalid length. [ 1713.297934][ T3474] netlink: 'syz.4.9424': attribute type 7 has an invalid length. [ 1713.312369][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.372553][ T3474] netlink: 'syz.4.9424': attribute type 8 has an invalid length. [ 1713.422262][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9424'. [ 1713.625367][ T3485] FAULT_INJECTION: forcing a failure. [ 1713.625367][ T3485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.663637][ T3485] CPU: 1 UID: 0 PID: 3485 Comm: syz.0.9427 Tainted: G L syzkaller #0 PREEMPT(full) [ 1713.663664][ T3485] Tainted: [L]=SOFTLOCKUP [ 1713.663671][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1713.663680][ T3485] Call Trace: [ 1713.663687][ T3485] [ 1713.663694][ T3485] dump_stack_lvl+0xe8/0x150 [ 1713.663719][ T3485] should_fail_ex+0x412/0x560 [ 1713.663743][ T3485] _copy_to_user+0x31/0xb0 [ 1713.663764][ T3485] copy_siginfo_to_user+0x22/0xc0 [ 1713.663782][ T3485] x64_setup_rt_frame+0x77b/0xcb0 [ 1713.663823][ T3485] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1713.663852][ T3485] arch_do_signal_or_restart+0x442/0x840 [ 1713.663876][ T3485] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1713.663915][ T3485] exit_to_user_mode_loop+0xa9/0x680 [ 1713.663931][ T3485] ? rcu_is_watching+0x15/0xb0 [ 1713.663951][ T3485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.663969][ T3485] do_syscall_64+0x353/0x580 [ 1713.663986][ T3485] ? trace_irq_disable+0x3b/0x140 [ 1713.664009][ T3485] ? clear_bhb_loop+0x40/0x90 [ 1713.664028][ T3485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.664045][ T3485] RIP: 0033:0x7f429ab9ce57 [ 1713.664061][ T3485] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1713.664075][ T3485] RSP: 002b:00007f429baf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1713.664094][ T3485] RAX: 0000000000000133 RBX: 00007f429ae16090 RCX: 00007f429ab9ce59 [ 1713.664106][ T3485] RDX: 0000000000000001 RSI: 0000200000002480 RDI: 0000000000000004 [ 1713.664116][ T3485] RBP: 00007f429baf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.664126][ T3485] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.664137][ T3485] R13: 00007f429ae16128 R14: 00007f429ae16090 R15: 00007f429af3fa48 [ 1713.664163][ T3485] [ 1713.918053][ T3493] netlink: 'syz.3.9432': attribute type 4 has an invalid length. [ 1714.150111][ T3493] netlink: 'syz.3.9432': attribute type 4 has an invalid length. [ 1714.494457][ T808] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1714.613717][T16331] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1714.796692][T16331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1714.806325][T16331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.816865][T16331] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1714.827358][T16331] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1714.851340][T16331] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1714.863335][T16331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.871678][T16331] usb 4-1: Product: syz [ 1714.876325][T16331] usb 4-1: Manufacturer: syz [ 1714.881090][T16331] usb 4-1: SerialNumber: syz [ 1715.722524][ T3520] fuse: Invalid rootmode [ 1715.846859][T16331] usb 4-1: unit 2 not found! [ 1715.862603][T16331] usb 4-1: unit 0 not found! [ 1715.961097][T16331] usb 4-1: USB disconnect, device number 125 [ 1716.058354][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1716.199869][ T3527] netlink: zone id is out of range [ 1716.331589][ T3527] netlink: set zone limit has 4 unknown bytes [ 1716.933968][ T3539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1716.953727][ T3539] netlink: 'syz.3.9443': attribute type 7 has an invalid length. [ 1716.984082][ T3539] netlink: 'syz.3.9443': attribute type 8 has an invalid length. [ 1717.008002][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1717.052935][ T3539] syz_tun: entered promiscuous mode [ 1717.075187][ T3539] syz_tun: left promiscuous mode [ 1717.147003][ T3546] netlink: 'syz.1.9446': attribute type 11 has an invalid length. [ 1717.504272][T16331] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1717.603820][ T5710] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1717.702108][T16331] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1717.762399][T16331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.791091][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1717.827561][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.830139][ T3554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9445'. [ 1717.849746][T16331] usb 5-1: Product: syz [ 1717.863792][T16331] usb 5-1: Manufacturer: syz [ 1717.889414][ T5710] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1717.906936][T16331] usb 5-1: SerialNumber: syz [ 1717.923332][T16331] usb 5-1: config 0 descriptor?? [ 1717.932538][ T3554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9445'. [ 1717.946682][ T5710] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1717.972196][T16331] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1718.003047][ T5710] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1718.003071][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.003089][ T5710] usb 4-1: Product: syz [ 1718.003103][ T5710] usb 4-1: Manufacturer: syz [ 1718.003135][ T5710] usb 4-1: SerialNumber: syz [ 1718.219333][ T3548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.220615][ T3548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.244185][ T3561] fuse: Bad value for 'rootmode' [ 1718.289126][ T3548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1718.365710][ T3556] fuse: Unknown parameter 'ÑOëqNm/>„"Ѷ«cÃú0x000000000000000d' [ 1718.396401][ T3548] bond0: left promiscuous mode [ 1718.432435][T16331] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1718.452837][T16331] sq905c 5-1:0.0: Get version command failed [ 1718.470354][T16331] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1718.489652][T16331] usb 5-1: USB disconnect, device number 71 [ 1718.780010][ T3569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.791079][ T3569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.984598][T16331] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1719.111225][ T5710] usb 4-1: unit 2 not found! [ 1719.131365][ T5710] usb 4-1: unit 0 not found! [ 1719.234312][ T3579] FAULT_INJECTION: forcing a failure. [ 1719.234312][ T3579] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.247746][ T5710] usb 4-1: USB disconnect, device number 126 [ 1719.266390][ T3579] CPU: 1 UID: 0 PID: 3579 Comm: syz.0.9456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1719.266415][ T3579] Tainted: [L]=SOFTLOCKUP [ 1719.266422][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1719.266432][ T3579] Call Trace: [ 1719.266440][ T3579] [ 1719.266448][ T3579] dump_stack_lvl+0xe8/0x150 [ 1719.266473][ T3579] should_fail_ex+0x412/0x560 [ 1719.266497][ T3579] should_failslab+0xa8/0x100 [ 1719.266516][ T3579] __kmalloc_noprof+0xe8/0x760 [ 1719.266539][ T3579] ? copy_splice_read+0x16f/0xaa0 [ 1719.266565][ T3579] copy_splice_read+0x16f/0xaa0 [ 1719.266584][ T3579] ? __pfx_pipe_to_null+0x10/0x10 [ 1719.266718][ T3579] ? pipe_unlock+0x56/0x80 [ 1719.266740][ T3579] ? splice_from_pipe+0x124/0x190 [ 1719.266761][ T3579] ? __pfx_pipe_to_null+0x10/0x10 [ 1719.266782][ T3579] ? __pfx_copy_splice_read+0x10/0x10 [ 1719.266806][ T3579] ? register_lock_class+0x31/0x2e0 [ 1719.266828][ T3579] ? file_end_write+0xd8/0x250 [ 1719.266849][ T3579] ? direct_splice_actor+0x10c/0x160 [ 1719.266871][ T3579] ? __pfx_copy_splice_read+0x10/0x10 [ 1719.266890][ T3579] splice_direct_to_actor+0x478/0xc70 [ 1719.266919][ T3579] ? __pfx_direct_splice_actor+0x10/0x10 [ 1719.266947][ T3579] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1719.266976][ T3579] do_splice_direct+0x195/0x290 [ 1719.266999][ T3579] ? __pfx_do_splice_direct+0x10/0x10 [ 1719.267020][ T3579] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1719.267043][ T3579] ? bpf_lsm_file_permission+0x9/0x20 [ 1719.267065][ T3579] ? security_file_permission+0x75/0x260 [ 1719.267086][ T3579] ? rw_verify_area+0x255/0x4d0 [ 1719.267110][ T3579] do_sendfile+0x535/0x7d0 [ 1719.267128][ T3579] ? __pfx_vfs_write+0x10/0x10 [ 1719.267155][ T3579] ? __pfx_do_sendfile+0x10/0x10 [ 1719.267173][ T3579] ? __fget_files+0x3a0/0x420 [ 1719.267201][ T3579] __se_sys_sendfile64+0x144/0x1a0 [ 1719.267229][ T3579] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1719.267255][ T3579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.267273][ T3579] do_syscall_64+0x174/0x580 [ 1719.267291][ T3579] ? trace_irq_disable+0x3b/0x140 [ 1719.267315][ T3579] ? clear_bhb_loop+0x40/0x90 [ 1719.267334][ T3579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.267351][ T3579] RIP: 0033:0x7f429ab9ce59 [ 1719.267370][ T3579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.267384][ T3579] RSP: 002b:00007f429bb14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1719.267401][ T3579] RAX: ffffffffffffffda RBX: 00007f429ae15fa0 RCX: 00007f429ab9ce59 [ 1719.267414][ T3579] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1719.267423][ T3579] RBP: 00007f429bb14090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.267432][ T3579] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.267442][ T3579] R13: 00007f429ae16038 R14: 00007f429ae15fa0 R15: 00007f429af3fa48 [ 1719.267469][ T3579] [ 1719.563365][ T808] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1719.628802][ T3580] netlink: zone id is out of range [ 1719.660661][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1719.772896][ T808] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1719.811467][ T3580] netlink: set zone limit has 4 unknown bytes [ 1719.822866][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.861105][ T3587] FAULT_INJECTION: forcing a failure. [ 1719.861105][ T3587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1719.880410][ T3569] binder: BINDER_SET_CONTEXT_MGR already set [ 1719.888422][ T808] usb 5-1: config 0 descriptor?? [ 1719.897130][ T3588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1719.913140][ T808] cp210x 5-1:0.0: cp210x converter detected [ 1719.919598][ T3569] binder: 3568:3569 ioctl 4018620d 200000004a80 returned -16 [ 1719.936096][ T3587] CPU: 0 UID: 0 PID: 3587 Comm: syz.0.9457 Tainted: G L syzkaller #0 PREEMPT(full) [ 1719.936119][ T3587] Tainted: [L]=SOFTLOCKUP [ 1719.936126][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1719.936135][ T3587] Call Trace: [ 1719.936142][ T3587] [ 1719.936149][ T3587] dump_stack_lvl+0xe8/0x150 [ 1719.936173][ T3587] should_fail_ex+0x412/0x560 [ 1719.936196][ T3587] prepare_alloc_pages+0x22a/0x650 [ 1719.936229][ T3587] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1719.936255][ T3587] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1719.936292][ T3587] __alloc_pages_noprof+0x10/0x100 [ 1719.936316][ T3587] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1719.936342][ T3587] ? __kmalloc_noprof+0x37d/0x760 [ 1719.936364][ T3587] ? copy_splice_read+0x16f/0xaa0 [ 1719.936381][ T3587] ? __kmalloc_noprof+0x1b8/0x760 [ 1719.936405][ T3587] copy_splice_read+0x19f/0xaa0 [ 1719.936434][ T3587] ? __pfx_copy_splice_read+0x10/0x10 [ 1719.936454][ T3587] ? trace_kmalloc+0x2a/0xf0 [ 1719.936473][ T3587] ? look_up_lock_class+0x57/0x110 [ 1719.936492][ T3587] ? register_lock_class+0x31/0x2e0 [ 1719.936510][ T3587] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1719.936537][ T3587] ? alloc_pipe_info+0x373/0x4d0 [ 1719.936560][ T3587] ? __pfx_copy_splice_read+0x10/0x10 [ 1719.936576][ T3587] splice_direct_to_actor+0x478/0xc70 [ 1719.936605][ T3587] ? __pfx_direct_splice_actor+0x10/0x10 [ 1719.936631][ T3587] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1719.936668][ T3587] do_splice_direct+0x195/0x290 [ 1719.936690][ T3587] ? __pfx_do_splice_direct+0x10/0x10 [ 1719.936709][ T3587] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1719.936733][ T3587] ? bpf_lsm_file_permission+0x9/0x20 [ 1719.936753][ T3587] ? security_file_permission+0x75/0x260 [ 1719.936774][ T3587] ? rw_verify_area+0x255/0x4d0 [ 1719.936797][ T3587] do_sendfile+0x535/0x7d0 [ 1719.936814][ T3587] ? __pfx_vfs_write+0x10/0x10 [ 1719.936840][ T3587] ? __pfx_do_sendfile+0x10/0x10 [ 1719.936857][ T3587] ? __fget_files+0x3a0/0x420 [ 1719.936885][ T3587] __se_sys_sendfile64+0x144/0x1a0 [ 1719.936905][ T3587] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1719.936929][ T3587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.936947][ T3587] do_syscall_64+0x174/0x580 [ 1719.936963][ T3587] ? trace_irq_disable+0x3b/0x140 [ 1719.936985][ T3587] ? clear_bhb_loop+0x40/0x90 [ 1719.937004][ T3587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.937020][ T3587] RIP: 0033:0x7f429ab9ce59 [ 1719.937035][ T3587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.937049][ T3587] RSP: 002b:00007f429bb14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1719.937066][ T3587] RAX: ffffffffffffffda RBX: 00007f429ae15fa0 RCX: 00007f429ab9ce59 [ 1719.937078][ T3587] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1719.937088][ T3587] RBP: 00007f429bb14090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.937099][ T3587] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.937110][ T3587] R13: 00007f429ae16038 R14: 00007f429ae15fa0 R15: 00007f429af3fa48 [ 1719.937135][ T3587] [ 1719.941402][ T3588] netlink: 'syz.1.9458': attribute type 7 has an invalid length. [ 1720.271241][ T808] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 1720.298234][ T3588] netlink: 'syz.1.9458': attribute type 8 has an invalid length. [ 1720.318429][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1720.480365][ T808] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 1720.493674][ T808] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 1720.509555][ T808] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1720.615011][T18291] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1720.657230][ T5696] usb 5-1: USB disconnect, device number 72 [ 1720.690515][ T5696] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1720.715107][ T5696] cp210x 5-1:0.0: device disconnected [ 1720.774781][T18291] usb 1-1: Using ep0 maxpacket: 16 [ 1720.791847][T18291] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1720.803508][ T808] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1720.810028][T18291] usb 1-1: config 7 has an invalid interface number: 139 but max is 0 [ 1720.827255][T18291] usb 1-1: config 7 has no interface number 0 [ 1720.834517][T18291] usb 1-1: config 7 interface 139 has no altsetting 0 [ 1720.845488][T18291] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=4f.3c [ 1720.855238][T18291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.863261][T18291] usb 1-1: Product: syz [ 1720.870830][T18291] usb 1-1: Manufacturer: syz [ 1720.879881][T18291] usb 1-1: SerialNumber: syz [ 1720.973583][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1720.990209][ T808] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1721.008718][ T808] usb 4-1: config 0 has no interface number 0 [ 1721.020436][ T808] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1721.043729][ T808] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1721.044000][ T2034] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1721.056341][ T808] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1721.084250][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.093264][ T808] usb 4-1: Product: syz [ 1721.099063][ T808] usb 4-1: Manufacturer: syz [ 1721.104288][ T808] usb 4-1: SerialNumber: syz [ 1721.112517][ T808] usb 4-1: config 0 descriptor?? [ 1721.120879][ T808] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1721.129895][ T5696] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1721.216173][ T2034] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1721.225409][ T2034] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.237210][ T2034] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1721.246674][ T2034] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1721.261827][ T2034] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1721.271634][ T2034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.280929][ T2034] usb 2-1: Product: syz [ 1721.285243][ T2034] usb 2-1: Manufacturer: syz [ 1721.289880][ T2034] usb 2-1: SerialNumber: syz [ 1721.307341][ T5696] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1721.318427][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.328091][ T5696] usb 5-1: Product: syz [ 1721.332425][ T5696] usb 5-1: Manufacturer: syz [ 1721.338416][ T808] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 1721.345810][ T5696] usb 5-1: SerialNumber: syz [ 1721.351063][ T808] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 1721.362111][ T5696] usb 5-1: config 0 descriptor?? [ 1721.373357][ T5696] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1721.612941][ T3607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.622115][ T3607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.638138][ T3607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1721.711684][ T1639] usb 4-1: USB disconnect, device number 127 [ 1721.735822][ T5696] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1721.752447][ T5696] sq905c 5-1:0.0: Get version command failed [ 1721.761117][ T5696] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1721.773217][ T5696] usb 5-1: USB disconnect, device number 73 [ 1722.189574][ T2034] usb 2-1: unit 2 not found! [ 1722.194814][ T2034] usb 2-1: unit 0 not found! [ 1722.246016][ T3624] netlink: 'syz.2.9469': attribute type 8 has an invalid length. [ 1722.290344][ T2034] usb 2-1: USB disconnect, device number 76 [ 1722.387030][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1722.506267][ T3629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9472'. [ 1722.517046][ T3629] netlink: 'syz.4.9472': attribute type 7 has an invalid length. [ 1722.526267][ T3629] netlink: 'syz.4.9472': attribute type 8 has an invalid length. [ 1722.534865][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9472'. [ 1722.550485][ T3629] syz_tun: entered promiscuous mode [ 1722.562392][ T3629] syz_tun: left promiscuous mode [ 1722.644359][ T2034] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1722.815385][ T2034] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1722.825616][ T2034] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1722.836363][ T2034] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1722.852595][ T2034] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1722.889606][ T2034] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1722.966037][ T2034] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1723.000516][ T2034] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1723.011844][ T2034] usb 2-1: Product: syz [ 1723.019496][ T2034] usb 2-1: Manufacturer: syz [ 1723.038008][ T2034] cdc_wdm 2-1:1.0: skipping garbage [ 1723.044951][ T2034] cdc_wdm 2-1:1.0: skipping garbage [ 1723.056849][ T2034] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1723.062845][ T2034] cdc_wdm 2-1:1.0: Unknown control protocol [ 1723.220720][ T3651] fuse: Bad value for 'rootmode' [ 1723.330716][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.337349][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.343780][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.350391][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.356833][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.363419][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.369689][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.376281][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.382543][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.389141][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.395525][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.402123][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.408383][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.414985][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.421220][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.427809][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.435101][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.441707][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.448269][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1723.454856][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1723.464486][ T5710] usb 2-1: USB disconnect, device number 77 [ 1723.470416][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1723.538023][T18291] mct_u232 1-1:7.139: MCT U232 converter detected [ 1723.566519][T18291] mct_u232 ttyUSB0: expected endpoint missing [ 1723.592951][T18291] usb 1-1: USB disconnect, device number 30 [ 1723.616898][T18291] mct_u232 1-1:7.139: device disconnected [ 1723.933827][T18291] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1724.096487][T18291] usb 1-1: Using ep0 maxpacket: 32 [ 1724.125762][T18291] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1724.141491][T18291] usb 1-1: config 0 has no interface number 0 [ 1724.156128][ T3664] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000 [ 1724.157895][T16331] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1724.172706][T18291] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1724.193018][ T3662] netlink: 'syz.1.9483': attribute type 8 has an invalid length. [ 1724.221188][T18291] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1724.268956][T18291] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1724.306565][T18291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.331264][T18291] usb 1-1: Product: syz [ 1724.352906][T18291] usb 1-1: Manufacturer: syz [ 1724.370204][T18291] usb 1-1: SerialNumber: syz [ 1724.375683][T16331] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1724.393226][T18291] usb 1-1: config 0 descriptor?? [ 1724.395207][T16331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.426462][T16331] usb 5-1: Product: syz [ 1724.440952][T16331] usb 5-1: Manufacturer: syz [ 1724.454202][T18291] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1724.454953][T16331] usb 5-1: SerialNumber: syz [ 1724.500119][T16331] usb 5-1: config 0 descriptor?? [ 1724.524702][T16331] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1724.563908][ T5710] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1724.640561][T18291] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1724.662216][T18291] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 1724.727892][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.748664][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.760217][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.775170][ T5710] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1724.795426][ T3659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1724.805850][ T5710] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1724.819960][ T5710] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1724.836639][ T5710] usb 4-1: Manufacturer: syz [ 1724.871366][ T5710] usb 4-1: config 0 descriptor?? [ 1724.903923][ T5696] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1724.999408][T16331] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1725.012504][T16331] sq905c 5-1:0.0: Get version command failed [ 1725.025294][T16331] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1725.068678][T16331] usb 5-1: USB disconnect, device number 74 [ 1725.167808][T32402] usb 1-1: USB disconnect, device number 31 [ 1725.262747][ T30] audit: type=1400 audit(1781280576.998:14358): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=3670 comm="syz.1.9486" [ 1725.631055][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1725.641450][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1725.893802][T32402] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1726.056388][T32402] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1726.067544][T32402] usb 5-1: config 8 has an invalid interface number: 251 but max is 0 [ 1726.075985][T32402] usb 5-1: config 8 has no interface number 0 [ 1726.082196][T32402] usb 5-1: config 8 interface 251 has no altsetting 0 [ 1726.092488][T32402] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=6e.41 [ 1726.102559][T32402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.110724][T32402] usb 5-1: Product: syz [ 1726.115037][T32402] usb 5-1: Manufacturer: syz [ 1726.119680][T32402] usb 5-1: SerialNumber: syz [ 1726.352461][T32402] usb 5-1: USB disconnect, device number 75 [ 1726.698345][ T3691] fuse: Unknown parameter 'use00000000000000000000' [ 1726.909813][ T3695] netlink: 'syz.4.9495': attribute type 8 has an invalid length. [ 1727.039379][ T3698] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 1727.168586][T18291] usb 4-1: USB disconnect, device number 2 [ 1727.473791][T32402] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1727.585971][ T2034] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1727.658899][T32402] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1727.698102][T32402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.727968][T32402] usb 5-1: Product: syz [ 1727.739797][T32402] usb 5-1: Manufacturer: syz [ 1727.752564][T32402] usb 5-1: SerialNumber: syz [ 1727.759094][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1727.765471][ T2034] usb 1-1: Using ep0 maxpacket: 32 [ 1727.810099][T32402] usb 5-1: config 0 descriptor?? [ 1727.811103][ T2034] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1727.816718][ T5696] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1727.856760][T32402] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1727.873079][ T5696] usb 2-1: can't read configurations, error -71 [ 1727.882945][ T2034] usb 1-1: config 0 has no interface number 0 [ 1727.916073][ T2034] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1727.951578][ T2034] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1727.981223][ T2034] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1728.000823][ T2034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.014901][ T2034] usb 1-1: Product: syz [ 1728.019100][ T2034] usb 1-1: Manufacturer: syz [ 1728.036733][ T3717] tipc: Enabling of bearer rejected, already enabled [ 1728.045364][ T2034] usb 1-1: SerialNumber: syz [ 1728.082775][ T2034] usb 1-1: config 0 descriptor?? [ 1728.096713][ T3701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.100395][ T2034] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1728.154118][ T3701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.189908][ T3701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1728.299226][ T2034] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1728.320136][ T2034] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 1728.335221][T32402] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1728.356182][T32402] sq905c 5-1:0.0: Get version command failed [ 1728.384850][T32402] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1728.407711][T16330] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1728.411100][T32402] usb 5-1: USB disconnect, device number 76 [ 1728.577613][T16330] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1728.597087][T16330] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1728.618270][T16330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1728.639582][T16330] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1728.661375][T16330] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1728.676330][T16330] usb 4-1: Product: syz [ 1728.684703][T16330] usb 4-1: Manufacturer: syz [ 1728.692710][T16330] usb 4-1: SerialNumber: syz [ 1728.717004][ T2034] usb 1-1: USB disconnect, device number 32 [ 1728.727911][T16330] usb 4-1: config 0 descriptor?? [ 1728.766429][T16330] usb 4-1: selecting invalid altsetting 0 [ 1728.825817][ T3721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9505'. [ 1728.835404][ T3721] netlink: 'syz.1.9505': attribute type 7 has an invalid length. [ 1728.843226][ T3721] netlink: 'syz.1.9505': attribute type 8 has an invalid length. [ 1728.851949][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9505'. [ 1728.929919][ T3721] syz_tun: entered promiscuous mode [ 1728.968328][ T3721] syz_tun: left promiscuous mode [ 1728.996532][ T3723] netlink: 'syz.4.9506': attribute type 8 has an invalid length. [ 1729.006306][ T3718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.043036][ T3718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.084566][ T2034] usb 4-1: USB disconnect, device number 3 [ 1729.267661][ T3728] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000 [ 1729.363855][ T3731] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1729.453533][ T2034] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1729.583854][T32402] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1729.615635][ T2034] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.633669][ T2034] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1729.663686][T16330] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1729.680063][ T2034] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1729.704021][ T2034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1729.712195][ T2034] usb 4-1: Product: syz [ 1729.723454][ T2034] usb 4-1: Manufacturer: syz [ 1729.728088][ T2034] usb 4-1: SerialNumber: syz [ 1729.751733][T32402] usb 2-1: device descriptor read/all, error -61 [ 1729.773584][ T5696] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1729.824134][T16330] usb 5-1: Using ep0 maxpacket: 32 [ 1729.832563][T16330] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1729.841800][T16330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.850158][T16330] usb 5-1: Product: syz [ 1729.854731][T16330] usb 5-1: Manufacturer: syz [ 1729.859330][T16330] usb 5-1: SerialNumber: syz [ 1729.866959][T16330] usb 5-1: config 0 descriptor?? [ 1729.893658][T32402] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1729.955480][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1729.963474][T11968] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1729.972767][ T5696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.986314][ T5696] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1730.008330][ T5696] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1730.023551][T32402] usb 2-1: device descriptor read/64, error -71 [ 1730.035002][ T5696] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1730.044149][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.052144][ T5696] usb 3-1: Product: syz [ 1730.056696][ T5696] usb 3-1: Manufacturer: syz [ 1730.061361][ T5696] usb 3-1: SerialNumber: syz [ 1730.068476][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.075488][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.134953][T32402] usb usb2-port1: attempt power cycle [ 1730.146788][T16330] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 077 [ 1730.339351][ T30] audit: type=1400 audit(1781280582.078:14359): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=3741 comm="syz.0.9513" [ 1730.483499][T32402] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1730.514085][T32402] usb 2-1: device descriptor read/8, error -71 [ 1730.773812][T32402] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1730.794281][T32402] usb 2-1: device descriptor read/8, error -71 [ 1730.904110][T32402] usb usb2-port1: unable to enumerate USB device [ 1730.991340][ T5696] usb 3-1: unit 2 not found! [ 1730.998023][ T5696] usb 3-1: unit 0 not found! [ 1731.073923][ T2034] usb 4-1: USB disconnect, device number 4 [ 1731.099571][ T5696] usb 3-1: USB disconnect, device number 24 [ 1731.179369][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1731.182376][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.208733][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.221258][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.232299][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.248956][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.259436][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.271578][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.282252][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.293173][ T3757] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1731.544083][ T2034] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1731.710610][ T2034] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1731.731574][ T2034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.748663][ T2034] usb 4-1: Product: syz [ 1731.757072][ T2034] usb 4-1: Manufacturer: syz [ 1731.766263][ T2034] usb 4-1: SerialNumber: syz [ 1731.781914][ T3763] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9517'. [ 1731.784921][ T2034] usb 4-1: config 0 descriptor?? [ 1731.817616][ T2034] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1731.983563][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1731.990751][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1732.021251][ T3758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.031718][ T3758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.051775][ T3758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1732.114408][ T3758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1732.138835][ T3758] geneve3: left promiscuous mode [ 1732.348106][ T2034] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1732.373616][ T2034] sq905c 4-1:0.0: Get version command failed [ 1732.392449][ T2034] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 1732.612679][ T3766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9518'. [ 1732.645857][ T1639] usb 5-1: USB disconnect, device number 77 [ 1732.657704][ T3766] netlink: 'syz.1.9518': attribute type 7 has an invalid length. [ 1732.689488][ T3766] netlink: 'syz.1.9518': attribute type 8 has an invalid length. [ 1732.714003][T11968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1732.748775][ T3766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9518'. [ 1732.749317][T11968] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1732.812442][T11968] usb 1-1: can't read configurations, error -71 [ 1732.826177][ T3766] syz_tun: entered promiscuous mode [ 1732.885323][ T3766] syz_tun: left promiscuous mode [ 1732.961379][T32402] usb 4-1: USB disconnect, device number 5 [ 1733.514196][ T1639] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1733.683687][ T1639] usb 2-1: Using ep0 maxpacket: 32 [ 1733.695000][ T1639] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1733.707760][ T1639] usb 2-1: config 0 has no interface number 0 [ 1733.717288][ T1639] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1733.734117][ T1639] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1733.755450][ T1639] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1733.770067][ T1639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.785900][ T1639] usb 2-1: Product: syz [ 1733.792647][ T1639] usb 2-1: Manufacturer: syz [ 1733.800274][ T1639] usb 2-1: SerialNumber: syz [ 1733.810159][ T1639] usb 2-1: config 0 descriptor?? [ 1733.826237][ T1639] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1733.914008][ T2034] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1734.037223][ T1639] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 1734.048986][ T1639] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 1734.067593][ T2034] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1734.082542][ T2034] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.101346][ T2034] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1734.117796][ T2034] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1734.146767][ T2034] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1734.163765][ T2034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.181785][ T2034] usb 5-1: Product: syz [ 1734.189850][ T2034] usb 5-1: Manufacturer: syz [ 1734.198203][ T2034] usb 5-1: SerialNumber: syz [ 1734.411424][T16330] usb 2-1: USB disconnect, device number 84 [ 1734.785430][ T3796] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000 [ 1735.133610][T32402] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1735.249079][ T2034] usb 5-1: unit 2 not found! [ 1735.275346][ T2034] usb 5-1: unit 0 not found! [ 1735.323081][T32402] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.360633][T32402] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1735.408550][T32402] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1735.441598][T32402] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1735.479646][T32402] usb 3-1: Manufacturer: syz [ 1735.515197][ T2034] usb 5-1: USB disconnect, device number 78 [ 1735.528094][T32402] usb 3-1: config 0 descriptor?? [ 1735.595642][ T3814] net_ratelimit: 1017 callbacks suppressed [ 1735.595654][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1735.637103][ T3806] syzkaller0: entered promiscuous mode [ 1735.668144][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1735.710701][ T3815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9530'. [ 1735.712660][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1735.734142][ T3806] syzkaller0: entered allmulticast mode [ 1735.781500][ T3815] netlink: 'syz.0.9530': attribute type 7 has an invalid length. [ 1735.819195][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1735.850993][ T3815] netlink: 'syz.0.9530': attribute type 8 has an invalid length. [ 1735.884488][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1735.905671][ T3815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9530'. [ 1735.932716][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1735.984531][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1736.045710][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1736.093644][T16330] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1736.110859][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1736.192726][ T3814] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1736.282556][T16330] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1736.360013][T16330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.407055][T16330] usb 4-1: Product: syz [ 1736.425626][T16330] usb 4-1: Manufacturer: syz [ 1736.425644][T16330] usb 4-1: SerialNumber: syz [ 1736.440831][T16330] usb 4-1: config 0 descriptor?? [ 1736.452488][T16330] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1736.660723][ T3818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.700705][ T3818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.808210][ T3818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1736.953722][T16330] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1737.005917][T16330] sq905c 4-1:0.0: Get version command failed [ 1737.055339][T16330] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 1737.793769][ T5696] usb 3-1: USB disconnect, device number 25 [ 1738.619765][ T3834] FAULT_INJECTION: forcing a failure. [ 1738.619765][ T3834] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.666877][ T3834] CPU: 0 UID: 0 PID: 3834 Comm: syz.1.9538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1738.666905][ T3834] Tainted: [L]=SOFTLOCKUP [ 1738.666909][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1738.666915][ T3834] Call Trace: [ 1738.666920][ T3834] [ 1738.666925][ T3834] dump_stack_lvl+0xe8/0x150 [ 1738.666950][ T3834] should_fail_ex+0x412/0x560 [ 1738.666966][ T3834] should_failslab+0xa8/0x100 [ 1738.666979][ T3834] __kmalloc_cache_noprof+0x88/0x660 [ 1738.666995][ T3834] ? fuse_lookup_name+0x1d0/0x8b0 [ 1738.667045][ T3834] fuse_lookup_name+0x1d0/0x8b0 [ 1738.667058][ T3834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.667072][ T3834] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1738.667085][ T3834] ? fuse_lock_inode+0xd3/0x120 [ 1738.667103][ T3834] ? __lock_acquire+0x6b5/0x2cf0 [ 1738.667122][ T3834] fuse_lookup+0x213/0x4e0 [ 1738.667139][ T3834] ? __pfx_fuse_lookup+0x10/0x10 [ 1738.667152][ T3834] ? do_raw_spin_lock+0x12b/0x2f0 [ 1738.667172][ T3834] ? do_raw_spin_unlock+0xf5/0x210 [ 1738.667187][ T3834] ? _raw_spin_unlock+0x28/0x50 [ 1738.667202][ T3834] ? d_alloc+0x144/0x190 [ 1738.667218][ T3834] lookup_one_qstr_excl+0x12d/0x360 [ 1738.667235][ T3834] filename_create+0x20e/0x370 [ 1738.667253][ T3834] ? __pfx_filename_create+0x10/0x10 [ 1738.667269][ T3834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.667281][ T3834] filename_mkdirat+0xd2/0x510 [ 1738.667294][ T3834] ? __pfx_filename_mkdirat+0x10/0x10 [ 1738.667311][ T3834] ? do_getname+0x151/0x250 [ 1738.667321][ T3834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.667331][ T3834] __se_sys_mkdirat+0x35/0x150 [ 1738.667341][ T3834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.667351][ T3834] do_syscall_64+0x174/0x580 [ 1738.667361][ T3834] ? trace_irq_disable+0x3b/0x140 [ 1738.667376][ T3834] ? clear_bhb_loop+0x40/0x90 [ 1738.667389][ T3834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.667398][ T3834] RIP: 0033:0x7f247219ce59 [ 1738.667408][ T3834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.667416][ T3834] RSP: 002b:00007f2473137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1738.667427][ T3834] RAX: ffffffffffffffda RBX: 00007f2472415fa0 RCX: 00007f247219ce59 [ 1738.667435][ T3834] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 1738.667443][ T3834] RBP: 00007f2473137090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.667450][ T3834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.667456][ T3834] R13: 00007f2472416038 R14: 00007f2472415fa0 R15: 00007f247253fa48 [ 1738.667472][ T3834] [ 1739.026428][T22664] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1740.024286][T16330] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1740.184100][T16330] usb 3-1: Using ep0 maxpacket: 32 [ 1740.209373][T16330] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1740.218018][T16330] usb 3-1: config 0 has no interface number 0 [ 1740.225530][T16330] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1740.238359][T16330] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1740.285290][T16330] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1740.295093][T16330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.324100][T16330] usb 3-1: Product: syz [ 1740.328378][T16330] usb 3-1: Manufacturer: syz [ 1740.350440][T16330] usb 3-1: SerialNumber: syz [ 1740.367605][T16330] usb 3-1: config 0 descriptor?? [ 1740.377687][T16330] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1740.599225][T16330] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 1740.608165][T16330] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 1740.990408][ T5696] usb 3-1: USB disconnect, device number 26 [ 1741.585790][T16330] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1741.746955][T16330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1741.758198][T16330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.772845][T16330] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1741.792677][T16330] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1741.827597][T16330] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1741.843668][T16330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.861262][T16330] usb 2-1: Product: syz [ 1741.873507][T16330] usb 2-1: Manufacturer: syz [ 1741.879779][T16330] usb 2-1: SerialNumber: syz [ 1742.827779][T16330] usb 2-1: unit 2 not found! [ 1742.843054][T16330] usb 2-1: unit 0 not found! [ 1742.914182][T16330] usb 2-1: USB disconnect, device number 85 [ 1742.971470][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1743.100190][ T3856] input: syz1 as /devices/virtual/input/input173 [ 1743.259185][T16330] usb 4-1: USB disconnect, device number 6 [ 1743.490276][ T3866] FAULT_INJECTION: forcing a failure. [ 1743.490276][ T3866] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.502967][ T3866] CPU: 1 UID: 0 PID: 3866 Comm: syz.0.9549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1743.502992][ T3866] Tainted: [L]=SOFTLOCKUP [ 1743.502998][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1743.503008][ T3866] Call Trace: [ 1743.503015][ T3866] [ 1743.503023][ T3866] dump_stack_lvl+0xe8/0x150 [ 1743.503047][ T3866] should_fail_ex+0x412/0x560 [ 1743.503069][ T3866] should_failslab+0xa8/0x100 [ 1743.503086][ T3866] ? batadv_tt_local_add+0x371/0x2a80 [ 1743.503107][ T3866] kmem_cache_alloc_noprof+0x87/0x650 [ 1743.503126][ T3866] ? batadv_tt_local_table_transmit_size+0x1e/0x240 [ 1743.503144][ T3866] ? batadv_tt_local_table_transmit_size+0x1e/0x240 [ 1743.503169][ T3866] batadv_tt_local_add+0x371/0x2a80 [ 1743.503196][ T3866] ? __pfx_batadv_bla_tx+0x10/0x10 [ 1743.503296][ T3866] ? __pfx_batadv_tt_local_add+0x10/0x10 [ 1743.503319][ T3866] ? batadv_get_vid+0x183/0x2b0 [ 1743.503340][ T3866] batadv_interface_tx+0x807/0x1630 [ 1743.503372][ T3866] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1743.503408][ T3866] dev_hard_start_xmit+0x2cd/0x830 [ 1743.503442][ T3866] __dev_queue_xmit+0x14d9/0x3950 [ 1743.503467][ T3866] ? __dev_queue_xmit+0x2b6/0x3950 [ 1743.503492][ T3866] ? _copy_from_iter+0x21b/0x1670 [ 1743.503512][ T3866] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1743.503527][ T3866] ? sock_alloc_send_pskb+0x896/0x990 [ 1743.503551][ T3866] ? __pfx__copy_from_iter+0x10/0x10 [ 1743.503584][ T3866] ? __pfx_packet_parse_headers+0x10/0x10 [ 1743.503605][ T3866] ? packet_xmit+0x68/0x320 [ 1743.503625][ T3866] packet_sendmsg+0x3c81/0x4fb0 [ 1743.503671][ T3866] ? unwind_next_frame+0xa6/0x2550 [ 1743.503711][ T3866] ? __pfx_packet_sendmsg+0x10/0x10 [ 1743.503730][ T3866] ? aa_sk_perm+0x6d5/0x900 [ 1743.503758][ T3866] ? __pfx_aa_sk_perm+0x10/0x10 [ 1743.503777][ T3866] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1743.503804][ T3866] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1743.503826][ T3866] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1743.503849][ T3866] ____sys_sendmsg+0x972/0x9f0 [ 1743.503874][ T3866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1743.503898][ T3866] ? import_iovec+0x73/0xa0 [ 1743.503920][ T3866] ___sys_sendmsg+0x2a5/0x360 [ 1743.503936][ T3866] ? __lock_acquire+0x6b5/0x2cf0 [ 1743.503957][ T3866] ? __pfx____sys_sendmsg+0x10/0x10 [ 1743.504006][ T3866] ? __fget_files+0x2a/0x420 [ 1743.504024][ T3866] ? __fget_files+0x3a0/0x420 [ 1743.504052][ T3866] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1743.504070][ T3866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1743.504096][ T3866] ? __pfx_ksys_write+0x10/0x10 [ 1743.504125][ T3866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.504144][ T3866] do_syscall_64+0x174/0x580 [ 1743.504161][ T3866] ? trace_irq_disable+0x3b/0x140 [ 1743.504183][ T3866] ? clear_bhb_loop+0x40/0x90 [ 1743.504204][ T3866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.504220][ T3866] RIP: 0033:0x7f429ab9ce59 [ 1743.504236][ T3866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.504249][ T3866] RSP: 002b:00007f429bb14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.504266][ T3866] RAX: ffffffffffffffda RBX: 00007f429ae15fa0 RCX: 00007f429ab9ce59 [ 1743.504278][ T3866] RDX: 0000000020008014 RSI: 0000200000000640 RDI: 0000000000000004 [ 1743.504288][ T3866] RBP: 00007f429bb14090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.504298][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.504307][ T3866] R13: 00007f429ae16038 R14: 00007f429ae15fa0 R15: 00007f429af3fa48 [ 1743.504335][ T3866] [ 1743.906820][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9551'. [ 1744.091239][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9554'. [ 1744.231169][ T3887] net_ratelimit: 1014 callbacks suppressed [ 1744.231185][ T3887] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1744.283626][ T5710] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1744.453555][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 1744.464113][T18291] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1744.484362][ T5710] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1744.512052][ T5710] usb 2-1: config 0 has no interface number 0 [ 1744.534600][ T5710] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1744.558589][ T5710] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1744.581836][ T5710] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1744.599201][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.617529][ T5710] usb 2-1: Product: syz [ 1744.631475][ T5710] usb 2-1: Manufacturer: syz [ 1744.643803][ T5710] usb 2-1: SerialNumber: syz [ 1744.643855][T16330] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1744.663049][ T5710] usb 2-1: config 0 descriptor?? [ 1744.685246][ T5710] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1744.704523][T18291] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1744.735170][T18291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.760852][T18291] usb 3-1: Product: syz [ 1744.783709][T18291] usb 3-1: Manufacturer: syz [ 1744.795065][T18291] usb 3-1: SerialNumber: syz [ 1744.825212][T18291] usb 3-1: config 0 descriptor?? [ 1744.837506][T16330] usb 1-1: Using ep0 maxpacket: 16 [ 1744.858720][T16330] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1744.871972][T16330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.882345][T18291] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1744.886129][ T5710] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 1744.896078][T16330] usb 1-1: Product: syz [ 1744.902055][T16330] usb 1-1: Manufacturer: syz [ 1744.908982][T16330] usb 1-1: SerialNumber: syz [ 1744.926119][ T5710] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 1745.129004][ T3885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.160981][ T3885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.169326][ T3890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.197920][ T3890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.223057][ T3890] loop4: detected capacity change from 0 to 2640 [ 1745.242797][ T3885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1745.251142][ T3890] buffer_io_error: 15 callbacks suppressed [ 1745.251156][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.301219][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.329516][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.356547][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.380559][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.399716][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.412206][T18291] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1745.434813][T18291] sq905c 3-1:0.0: Get version command failed [ 1745.441556][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.455646][T18291] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 1745.466338][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.481882][T18291] usb 3-1: USB disconnect, device number 27 [ 1745.489383][ T3890] ldm_validate_partition_table(): Disk read failed. [ 1745.509180][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.532748][ T3890] Buffer I/O error on dev loop4, logical block 0, async page read [ 1745.544358][ T3890] Dev loop4: unable to read RDB block 0 [ 1745.552131][ T3890] loop4: unable to read partition table [ 1745.554580][ T5710] usb 2-1: USB disconnect, device number 86 [ 1745.588343][ T3890] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1745.618684][ T5001] ldm_validate_partition_table(): Disk read failed. [ 1745.626929][ T5001] Dev loop4: unable to read RDB block 0 [ 1745.633098][ T5001] loop4: unable to read partition table [ 1745.651449][T16330] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1745.669070][T16330] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1745.715966][T16330] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1745.810542][T16330] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1745.845422][T16330] usb 1-1: USB disconnect, device number 35 [ 1745.886372][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1746.054377][ T5696] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1746.132998][ T3910] IPVS: length: 197 != 24 [ 1746.174139][ T2034] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1746.214149][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 1746.225086][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1746.251439][ T5696] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 1746.265952][ T5696] usb 4-1: config 9 has no interface number 0 [ 1746.279168][ T5696] usb 4-1: config 9 interface 57 has no altsetting 0 [ 1746.300690][ T5696] usb 4-1: string descriptor 0 read error: -22 [ 1746.308273][ T5696] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1746.319864][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.345275][ T2034] usb 5-1: Using ep0 maxpacket: 8 [ 1746.355849][ T2034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.377867][ T2034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.411592][ T2034] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1746.432568][ T2034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.446615][ T3916] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1746.457357][ T2034] usb 5-1: config 0 descriptor?? [ 1746.523490][ T5710] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1746.712187][ T5696] video4linux radio48: keene_cmd_main failed (-71) [ 1746.738851][ T5696] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 1746.758319][ T5696] usb 4-1: USB disconnect, device number 7 [ 1746.855933][ T30] audit: type=1400 audit(1781280598.598:14360): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=3912 comm="syz.2.9566" [ 1746.886781][ T2034] logitech 0003:046D:C20E.0050: rdesc size test failed for formula gp [ 1746.926891][ T2034] logitech 0003:046D:C20E.0050: unbalanced collection at end of report description [ 1746.965453][ T2034] logitech 0003:046D:C20E.0050: parse failed [ 1746.971687][ T2034] logitech 0003:046D:C20E.0050: probe with driver logitech failed with error -22 [ 1747.015975][ T3934] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1747.137263][ T3936] netlink: 'syz.3.9572': attribute type 8 has an invalid length. [ 1747.147643][ T2034] usb 5-1: USB disconnect, device number 79 [ 1747.563611][ T1639] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1747.683467][ T2034] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1747.738255][ T1639] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1747.760995][ T1639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.778664][ T1639] usb 2-1: Product: syz [ 1747.788897][ T1639] usb 2-1: Manufacturer: syz [ 1747.800920][ T1639] usb 2-1: SerialNumber: syz [ 1747.813312][ T1639] usb 2-1: config 0 descriptor?? [ 1747.840219][ T1639] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1747.876883][ T2034] usb 4-1: Using ep0 maxpacket: 32 [ 1747.886554][ T2034] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1747.907247][ T2034] usb 4-1: config 0 has no interface number 0 [ 1747.924884][T11968] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1747.937262][ T2034] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1747.953711][ T2034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.975372][ T2034] usb 4-1: Product: syz [ 1747.979589][ T2034] usb 4-1: Manufacturer: syz [ 1747.994285][ T2034] usb 4-1: SerialNumber: syz [ 1748.012070][ T2034] usb 4-1: config 0 descriptor?? [ 1748.027220][ T2034] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1748.059166][ T3940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.079131][ T3940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.089949][T11968] usb 1-1: Using ep0 maxpacket: 8 [ 1748.099449][T11968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1748.116328][T11968] usb 1-1: config 247 has an invalid interface number: 20 but max is 0 [ 1748.125911][T11968] usb 1-1: config 247 has no interface number 0 [ 1748.134010][ T3940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1748.148085][T11968] usb 1-1: config 247 interface 20 has no altsetting 0 [ 1748.160782][T11968] usb 1-1: string descriptor 0 read error: -22 [ 1748.168491][T11968] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 1748.188259][T11968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.252728][T11968] go7007 1-1:247.20: probe with driver go7007 failed with error -12 [ 1748.264631][ T3950] xt_hashlimit: size too large, truncated to 1048576 [ 1748.265391][ T2034] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1748.322691][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.329905][ T3940] bridge0: port 2(bridge_slave_1) entered listening state [ 1748.337307][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.344498][ T3940] bridge0: port 1(bridge_slave_0) entered listening state [ 1748.358427][ T2034] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1748.368775][ T1639] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1748.382078][ T1639] sq905c 2-1:0.0: Get version command failed [ 1748.401123][ T1639] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1748.466644][T11968] usb 1-1: USB disconnect, device number 36 [ 1748.730946][T11968] usb 2-1: USB disconnect, device number 87 [ 1748.913045][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1748.925640][T16330] usb 4-1: USB disconnect, device number 8 [ 1748.953361][T16330] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1748.987737][T16330] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1749.025020][T16330] quatech2 4-1:0.51: device disconnected [ 1749.120898][ T3954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1749.309861][ T3958] netlink: zone id is out of range [ 1749.327626][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1749.348132][ T5710] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1749.375091][ T5710] usb 3-1: can't read configurations, error -71 [ 1749.398844][ T3958] netlink: set zone limit has 4 unknown bytes [ 1749.463927][T18293] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1749.532772][ T3970] netlink: 'syz.4.9584': attribute type 8 has an invalid length. [ 1749.570644][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.609201][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.636665][T18293] usb 1-1: Using ep0 maxpacket: 16 [ 1749.644550][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.674693][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.694057][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.725045][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.746121][T18293] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 1749.756112][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.775655][T18293] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1749.805665][ T5710] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1749.805792][T18293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 1749.825138][T18293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 1749.826008][ T3973] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1749.836493][T18293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1749.882268][T18293] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1749.899515][T18293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.911245][ T3979] tipc: Enabling of bearer rejected, failed to enable media [ 1749.925140][T18293] usb 1-1: config 0 descriptor?? [ 1749.943027][T18293] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input174 [ 1750.216715][ T1639] usb 1-1: USB disconnect, device number 37 [ 1750.806319][ T5696] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1750.845395][T16331] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1750.904495][ T5710] usb 3-1: device descriptor read/64, error -71 [ 1750.918768][ T3998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1750.967422][ T5696] usb 2-1: config 0 has no interfaces? [ 1750.974966][ T5696] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1750.999468][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.015864][ T5710] usb usb3-port1: attempt power cycle [ 1751.026878][ T5696] usb 2-1: config 0 descriptor?? [ 1751.037998][T16331] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1751.053563][T16331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.076013][T16331] usb 5-1: Product: syz [ 1751.086481][T16331] usb 5-1: Manufacturer: syz [ 1751.094013][T16331] usb 5-1: SerialNumber: syz [ 1751.111242][T16331] usb 5-1: config 0 descriptor?? [ 1751.126846][T16331] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1751.243079][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.272270][T11968] usb 2-1: USB disconnect, device number 88 [ 1751.280741][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.338859][ T3994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.358276][ T3994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.374096][ T5710] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1751.399998][ T3994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1751.475098][T18293] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1751.528360][T16331] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1751.543313][T16331] sq905c 5-1:0.0: Get version command failed [ 1751.556963][T16331] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1751.579765][T16331] usb 5-1: USB disconnect, device number 80 [ 1751.608806][ T30] audit: type=1400 audit(1781280603.348:14361): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=3990 comm="syz.2.9592" [ 1751.644554][T18293] usb 1-1: Using ep0 maxpacket: 16 [ 1751.662419][T18293] usb 1-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1751.700196][T18293] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1751.717878][T18293] usb 1-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 1751.732382][T18293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.752475][T18293] usb 1-1: Product: á ‰ [ 1751.761848][T18293] usb 1-1: Manufacturer: ä Š [ 1751.772188][T18293] usb 1-1: SerialNumber: Г [ 1751.885597][ T4011] netlink: 'syz.1.9597': attribute type 8 has an invalid length. [ 1752.004480][T18293] usbhid 1-1:1.0: can't add hid device: -71 [ 1752.015116][T18293] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1752.041747][T18293] usb 1-1: USB disconnect, device number 38 [ 1752.514550][T11968] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1752.745188][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1752.766129][ T5710] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1752.790779][ T5710] usb 3-1: can't read configurations, error -71 [ 1753.196114][ T4034] Invalid logical block size (1348566290) [ 1753.214886][ T4036] xt_bpf: check failed: parse error [ 1753.280533][ T4038] netlink: 'syz.3.9605': attribute type 7 has an invalid length. [ 1753.306104][ T4038] netlink: 'syz.3.9605': attribute type 7 has an invalid length. [ 1753.413985][ T1639] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1753.592429][ T1639] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1753.622359][ T1639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.645391][ T1639] usb 1-1: Product: syz [ 1753.658982][ T1639] usb 1-1: Manufacturer: syz [ 1753.678244][ T1639] usb 1-1: SerialNumber: syz [ 1753.747954][T28919] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1753.765620][T16330] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1753.884012][ T5710] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1753.947991][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1753.954108][T16330] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1753.979900][T16330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.011458][ T5710] usb 3-1: config index 0 descriptor too short (expected 63876, got 142) [ 1754.021270][T16330] usb 2-1: Product: syz [ 1754.042904][T16330] usb 2-1: Manufacturer: syz [ 1754.048234][ T5710] usb 3-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.048256][ T5710] usb 3-1: config 73 has 1 interface, different from the descriptor's value: 6 [ 1754.048288][ T5710] usb 3-1: config 73 interface 0 has no altsetting 0 [ 1754.054114][ T5710] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1754.193072][T16330] usb 2-1: SerialNumber: syz [ 1754.208591][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.208960][ T1639] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 1754.251282][T16330] usb 2-1: config 0 descriptor?? [ 1754.260124][ T5710] usb 3-1: Product: syz [ 1754.285983][ T5710] usb 3-1: Manufacturer: syz [ 1754.295067][T16330] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1754.298120][ T5710] usb 3-1: SerialNumber: syz [ 1754.317968][ T4049] net_ratelimit: 1819 callbacks suppressed [ 1754.317972][ T4051] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.317983][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.331202][ T1639] usb 1-1: USB disconnect, device number 39 [ 1754.358272][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.366509][ T5710] usb 3-1: selecting invalid altsetting 1 [ 1754.387158][ T5710] usb 3-1: unit 6 not found! [ 1754.398599][ T5710] usb 3-1: unit 0 not found! [ 1754.444545][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.463135][ T4051] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.463330][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.525479][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.534531][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.552253][ T4051] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.623136][ T4051] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.658130][ T5710] snd-usb-audio 3-1:73.0: probe with driver snd-usb-audio failed with error -22 [ 1754.691081][ T4047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1754.691337][ T5710] usb 3-1: USB disconnect, device number 31 [ 1754.716767][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.716925][ T4051] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1754.865349][T16330] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1755.115555][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:73.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1755.131509][T16330] sq905c 2-1:0.0: Get version command failed [ 1755.159043][T16330] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1755.277435][T11968] usb 2-1: USB disconnect, device number 89 [ 1757.264557][T16330] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1757.323557][T16331] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1757.426810][T16330] usb 2-1: Using ep0 maxpacket: 8 [ 1757.435533][T16330] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1757.446780][T16330] usb 2-1: config 2 has no interface number 0 [ 1757.456187][T16330] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1757.470268][T16330] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1757.480903][T16330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.502159][T16330] usb 2-1: Product: syz [ 1757.510655][T16330] usb 2-1: Manufacturer: syz [ 1757.520511][T16330] usb 2-1: SerialNumber: syz [ 1757.748606][ T30] audit: type=1400 audit(1781280609.488:14362): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=4077 comm="syz.2.9617" [ 1757.777381][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.796703][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.902827][T16331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1757.953248][T16331] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1757.971571][T16331] usb 3-1: can't read configurations, error -71 [ 1758.070594][T16330] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1758.113314][T16330] usb 2-1: USB disconnect, device number 90 [ 1758.918253][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.925425][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.063817][T16330] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1759.205406][T16330] usb 1-1: device descriptor read/64, error -71 [ 1759.329950][ T4049] net_ratelimit: 1615 callbacks suppressed [ 1759.329968][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.354937][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.365642][ T4097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.417560][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.427389][ T4097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.466660][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.476967][T16330] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1759.500672][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.517839][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.528972][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.549357][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.612678][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.621904][T16330] usb 1-1: device descriptor read/64, error -71 [ 1759.635944][ T4049] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1759.735461][T16330] usb usb1-port1: attempt power cycle [ 1760.002298][ T345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.044821][ T345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.074315][T16330] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1760.108203][ T345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.148129][ T345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.154172][T16330] usb 1-1: device descriptor read/8, error -71 [ 1760.423673][T16330] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1760.475722][T16330] usb 1-1: device descriptor read/8, error -71 [ 1760.533983][T18291] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1760.614609][T16330] usb usb1-port1: unable to enumerate USB device [ 1760.697420][T18291] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1760.747371][T18291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.788901][T18291] usb 4-1: Product: syz [ 1760.810628][T18291] usb 4-1: Manufacturer: syz [ 1760.832430][T18291] usb 4-1: SerialNumber: syz [ 1760.869443][T18291] usb 4-1: config 0 descriptor?? [ 1760.910221][T18291] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1761.126543][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.185462][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.288892][ T4111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1761.448402][T18291] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1761.473521][T18291] sq905c 4-1:0.0: Get version command failed [ 1761.501799][T18291] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 1761.685049][ T4123] veth0_to_team: entered promiscuous mode [ 1762.063952][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.071214][ C1] bridge0: topology change detected, propagating [ 1762.077840][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.085062][ C1] bridge0: topology change detected, propagating [ 1762.154952][ T4127] syzkaller0: entered promiscuous mode [ 1763.055845][ T30] audit: type=1326 audit(1781280614.798:14363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.149583][ T30] audit: type=1326 audit(1781280614.818:14364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.209370][ T30] audit: type=1326 audit(1781280614.818:14365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.238557][ T5696] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1763.278865][ T30] audit: type=1326 audit(1781280614.818:14366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.391333][ T30] audit: type=1326 audit(1781280614.818:14367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.531833][ T30] audit: type=1326 audit(1781280614.818:14368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.575308][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1763.603976][ T5696] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1763.611626][ T5696] usb 2-1: can't read configurations, error -71 [ 1763.618140][ T30] audit: type=1326 audit(1781280614.818:14369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.778409][ T30] audit: type=1326 audit(1781280614.818:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.4.9631" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e159ce59 code=0x7ffc0000 [ 1763.952669][ T30] audit: type=1400 audit(1781280615.248:14371): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=4132 comm="syz.1.9630" [ 1764.228972][T18291] usb 4-1: USB disconnect, device number 9 [ 1765.253576][T18291] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1765.896224][ T4173] fuse: Unknown parameter 'ÑOëqNm/>„"Ѷ«cÃú0x000000000000000d' [ 1765.951238][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9642'. [ 1767.137176][ T4194] netlink: 'syz.2.9647': attribute type 10 has an invalid length. [ 1767.144675][T18291] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1767.232866][ T4195] netlink: 'syz.2.9647': attribute type 10 has an invalid length. [ 1767.293108][ T5710] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1767.339684][ T4194] team0: Port device dummy0 added [ 1767.465923][ T4195] team0: Port device dummy0 removed [ 1767.489809][ T4195] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1767.507189][ T5710] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1767.537649][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.565448][ T5710] usb 1-1: Product: syz [ 1767.582963][ T5710] usb 1-1: Manufacturer: syz [ 1767.600050][ T5710] usb 1-1: SerialNumber: syz [ 1767.654747][ T5710] usb 1-1: config 0 descriptor?? [ 1767.690137][ T5710] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1767.819033][ T30] audit: type=1400 audit(1781280619.558:14372): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=4187 comm="syz.1.9645" [ 1767.885657][ T4192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1767.975224][ T4192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.165424][ T4191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1768.234195][ T5710] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1768.293007][ T5710] sq905c 1-1:0.0: Get version command failed [ 1768.354255][ T5710] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 1768.447499][T18293] usb 1-1: USB disconnect, device number 44 [ 1768.810548][ T4214] net_ratelimit: 1210 callbacks suppressed [ 1768.810561][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1768.847146][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1768.881794][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1768.892027][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1768.922331][ T4211] input: syz0 as /devices/virtual/input/input175 [ 1768.948357][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1768.995006][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1769.127537][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1769.165432][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1769.192633][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1769.238205][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1769.453796][T18293] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1769.737108][ T4223] fuse: Unknown parameter 'ÑOëqNm/>„"Ѷ«cÃú0x000000000000000d' [ 1770.021461][T18291] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1770.060088][T18291] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1770.081952][T18291] usb 2-1: can't read configurations, error -71 [ 1770.429205][ T4238] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9657'. [ 1770.654187][ T1639] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1770.847251][ T1639] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1770.880930][ T1639] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1770.920221][ T1639] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1770.982744][ T1639] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1771.017921][ T1639] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1771.044218][ T3363] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1771.087009][ T1639] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1771.106451][ T1639] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1771.130583][ T1639] usb 3-1: Product: syz [ 1771.140698][ T1639] usb 3-1: Manufacturer: syz [ 1771.158325][ T1639] cdc_wdm 3-1:1.0: skipping garbage [ 1771.187351][ T1639] cdc_wdm 3-1:1.0: skipping garbage [ 1771.211950][ T1639] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1771.254505][ T1639] cdc_wdm 3-1:1.0: Unknown control protocol [ 1771.415760][T11968] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1771.635737][T11968] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1771.656070][T11968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.699224][T11968] usb 2-1: config 0 descriptor?? [ 1772.131534][T18293] usb 3-1: USB disconnect, device number 34 [ 1772.367576][T11968] usb 2-1: Cannot set autoneg [ 1772.383042][T11968] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1772.434818][T11968] usb 2-1: USB disconnect, device number 96 [ 1772.704511][ T5710] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1772.868954][ T5710] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1772.897973][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.925092][ T5710] usb 1-1: Product: syz [ 1772.941355][ T5710] usb 1-1: Manufacturer: syz [ 1772.941458][ T5710] usb 1-1: SerialNumber: syz [ 1772.949944][ T5710] usb 1-1: config 0 descriptor?? [ 1772.977868][ T5710] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1773.153832][T16331] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1773.177210][ T4256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.206147][ T4263] fuse: Unknown parameter 'ÑOëqNm/>„"Ѷ«cÃú0x000000000000000d' [ 1773.220719][ T4256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.251325][ T4256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1773.381387][ T5710] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1773.399150][ T5710] sq905c 1-1:0.0: Get version command failed [ 1773.412859][ T5710] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 1773.445098][ T5710] usb 1-1: USB disconnect, device number 46 [ 1773.524848][ T30] audit: type=1400 audit(1781280625.268:14373): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=4260 comm="syz.2.9665" [ 1773.804059][T16330] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1773.816262][ T4214] net_ratelimit: 1742 callbacks suppressed [ 1773.816278][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.816402][ T4218] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.862748][ T4218] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.863011][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.899959][ T4218] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.900157][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.943504][T16330] usb 2-1: device descriptor read/64, error -71 [ 1773.956317][ T4218] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.956513][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.979702][ T4218] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1773.979944][ T4214] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1774.123482][T18293] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1774.214104][T16330] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1774.273450][T18293] usb 5-1: Using ep0 maxpacket: 16 [ 1774.282454][T18293] usb 5-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1774.291893][T18293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.307796][T18293] usb 5-1: Product: syz [ 1774.312238][T18293] usb 5-1: Manufacturer: syz [ 1774.317533][T18293] usb 5-1: SerialNumber: syz [ 1774.363526][T16330] usb 2-1: device descriptor read/64, error -71 [ 1774.477023][T16330] usb usb2-port1: attempt power cycle [ 1774.542763][ T4279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.557766][ T4279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.572363][ T4279] loop4: detected capacity change from 0 to 2640 [ 1774.582180][ T4279] buffer_io_error: 27 callbacks suppressed [ 1774.582217][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.601747][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.610608][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.620615][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.630972][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.639596][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.649252][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.672096][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.680826][ T4279] ldm_validate_partition_table(): Disk read failed. [ 1774.687876][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.697107][ T4279] Buffer I/O error on dev loop4, logical block 0, async page read [ 1774.708347][ T4279] Dev loop4: unable to read RDB block 0 [ 1774.716784][ T4279] loop4: unable to read partition table [ 1774.726242][ T4279] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1774.757383][T18293] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1774.778101][T18293] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1774.820616][T18293] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1774.829396][T16330] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1774.867109][T16330] usb 2-1: device descriptor read/8, error -71 [ 1774.943043][T18293] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1775.011320][T18293] usb 5-1: USB disconnect, device number 82 [ 1775.061509][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1775.143490][T16330] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1775.175072][T16330] usb 2-1: device descriptor read/8, error -71 [ 1775.293844][T16330] usb usb2-port1: unable to enumerate USB device [ 1775.625335][T16330] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1775.787606][T16330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1775.801937][T16330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.826692][T16330] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1775.854558][T16330] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1775.907121][T16330] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1775.945266][T16330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.972995][T16330] usb 5-1: Product: syz [ 1775.986958][T16331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1775.999046][T16330] usb 5-1: Manufacturer: syz [ 1776.010469][T16330] usb 5-1: SerialNumber: syz [ 1776.018007][T16331] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1776.029577][ T5710] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1776.037215][T16331] usb 3-1: can't read configurations, error -71 [ 1776.198362][ T5710] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1776.238289][ T5710] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1776.273035][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1776.330062][ T5710] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1776.376391][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1776.387293][T16331] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1776.421163][ T5710] usb 4-1: Product: syz [ 1776.459288][ T5710] usb 4-1: Manufacturer: syz [ 1776.482572][ T5710] usb 4-1: SerialNumber: syz [ 1776.520866][ T5710] usb 4-1: config 0 descriptor?? [ 1776.559275][T16331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1776.571257][ T5710] usb 4-1: selecting invalid altsetting 0 [ 1776.602685][T16331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.667821][T16331] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1776.707412][T16331] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1776.757249][T16330] usb 5-1: unit 2 not found! [ 1776.764814][T16330] usb 5-1: unit 0 not found! [ 1776.800860][T16331] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1776.818959][T16331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.832309][T16331] usb 3-1: Product: syz [ 1776.837223][T16331] usb 3-1: Manufacturer: syz [ 1776.845677][ T4317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9682'. [ 1776.852079][T16331] usb 3-1: SerialNumber: syz [ 1776.884803][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.926287][T16330] usb 5-1: USB disconnect, device number 83 [ 1776.943145][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.036788][ T5710] usb 4-1: USB disconnect, device number 10 [ 1777.070735][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1777.379755][ T4321] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9683'. [ 1777.714122][T16330] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1777.875505][T16330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.894985][T16330] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1777.917661][T16330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1777.936961][T16330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1777.956667][T16330] usb 4-1: Product: syz [ 1777.968417][T16330] usb 4-1: Manufacturer: syz [ 1777.990075][T16330] usb 4-1: SerialNumber: syz [ 1778.110206][T16331] usb 3-1: unit 2 not found! [ 1778.127155][T16331] usb 3-1: unit 0 not found! [ 1778.259730][T16331] usb 3-1: USB disconnect, device number 36 [ 1778.270273][T18293] usb 4-1: USB disconnect, device number 11 [ 1778.392464][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1778.804164][T18293] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1778.883689][ T1639] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1778.885939][T16331] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1779.065701][T16331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1779.074869][T16331] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.087484][T16331] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1779.097361][T16331] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1779.115022][T16331] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1779.131238][T16331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.141496][T16331] usb 5-1: Product: syz [ 1779.146335][T16331] usb 5-1: Manufacturer: syz [ 1779.151049][T16331] usb 5-1: SerialNumber: syz [ 1779.194177][ T30] audit: type=1400 audit(1781280630.938:14374): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=4341 comm="syz.2.9691" [ 1779.204255][T16330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1779.570984][T16331] usb 5-1: unit 2 not found! [ 1779.587357][T16331] usb 5-1: unit 0 not found! [ 1779.736309][T16331] usb 5-1: USB disconnect, device number 84 [ 1779.828867][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9696'. [ 1779.881580][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1780.325626][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9700'. [ 1780.388739][ T1639] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1780.490152][T16330] usb 4-1: device descriptor read/64, error -71 [ 1780.594032][ T1639] usb 2-1: Using ep0 maxpacket: 32 [ 1780.606002][ T1639] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1780.621419][ T1639] usb 2-1: config 0 has no interface number 0 [ 1780.636910][ T1639] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1780.669785][ T1639] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1780.701272][ T1639] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1780.747912][ T1639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.754623][T16331] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1780.756970][T16330] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1780.790705][ T1639] usb 2-1: Product: syz [ 1780.840503][ T1639] usb 2-1: Manufacturer: syz [ 1780.848309][ T1639] usb 2-1: SerialNumber: syz [ 1780.859836][ T1639] usb 2-1: config 0 descriptor?? [ 1780.984585][T16331] usb 1-1: Using ep0 maxpacket: 8 [ 1780.984994][T16330] usb 4-1: Using ep0 maxpacket: 32 [ 1781.003283][T16331] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1781.018774][T16330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.021530][T16331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1781.046484][T16331] usb 1-1: Product: syz [ 1781.054390][T16330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.055196][T16331] usb 1-1: Manufacturer: syz [ 1781.074581][T16331] usb 1-1: SerialNumber: syz [ 1781.091433][T16331] usb 1-1: config 0 descriptor?? [ 1781.091803][T16330] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1781.118322][T16330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.143703][T16331] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1781.144931][T16330] usb 4-1: config 0 descriptor?? [ 1781.189715][T16330] hub 4-1:0.0: USB hub found [ 1781.343088][ T1639] radio-si470x 2-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 1781.361822][ T1639] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1781.389695][T16330] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1781.504365][T16331] gspca_sn9c2028: read1 error -71 [ 1781.514102][T16331] gspca_sn9c2028: read1 error -71 [ 1781.519205][T16331] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1781.537318][T16331] usb 1-1: USB disconnect, device number 48 [ 1781.549569][ T1639] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1781.570312][ T1639] radio-si470x 2-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 1781.586936][T18293] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1781.599555][ T1639] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 1781.614069][T18293] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1781.634852][T18293] usb 3-1: can't read configurations, error -71 [ 1781.665034][ T1639] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1781.678369][ T1639] usb 2-1: USB disconnect, device number 101 [ 1781.838782][T16330] hid-generic 0003:046D:C31C.0051: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1782.107403][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1782.147911][ T4398] FAULT_INJECTION: forcing a failure. [ 1782.147911][ T4398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1782.168400][ T4395] bond0 (unregistering): Released all slaves [ 1782.175390][ T4398] CPU: 1 UID: 0 PID: 4398 Comm: syz.0.9707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1782.175415][ T4398] Tainted: [L]=SOFTLOCKUP [ 1782.175421][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1782.175431][ T4398] Call Trace: [ 1782.175438][ T4398] [ 1782.175446][ T4398] dump_stack_lvl+0xe8/0x150 [ 1782.175473][ T4398] should_fail_ex+0x412/0x560 [ 1782.175500][ T4398] prepare_alloc_pages+0x22a/0x650 [ 1782.175531][ T4398] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1782.175559][ T4398] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1782.175599][ T4398] __alloc_pages_noprof+0x10/0x100 [ 1782.175623][ T4398] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1782.175658][ T4398] ? __kmalloc_noprof+0x37d/0x760 [ 1782.175682][ T4398] ? copy_splice_read+0x16f/0xaa0 [ 1782.175702][ T4398] ? __kmalloc_noprof+0x1b8/0x760 [ 1782.175727][ T4398] copy_splice_read+0x19f/0xaa0 [ 1782.175748][ T4398] ? __pfx_pipe_to_null+0x10/0x10 [ 1782.175776][ T4398] ? splice_from_pipe+0x124/0x190 [ 1782.175797][ T4398] ? __pfx_pipe_to_null+0x10/0x10 [ 1782.175819][ T4398] ? __pfx_copy_splice_read+0x10/0x10 [ 1782.175844][ T4398] ? register_lock_class+0x31/0x2e0 [ 1782.175866][ T4398] ? file_end_write+0xd8/0x250 [ 1782.175888][ T4398] ? direct_splice_actor+0x10c/0x160 [ 1782.175910][ T4398] ? __pfx_copy_splice_read+0x10/0x10 [ 1782.175929][ T4398] splice_direct_to_actor+0x478/0xc70 [ 1782.175959][ T4398] ? __pfx_direct_splice_actor+0x10/0x10 [ 1782.175987][ T4398] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1782.176018][ T4398] do_splice_direct+0x195/0x290 [ 1782.176042][ T4398] ? __pfx_do_splice_direct+0x10/0x10 [ 1782.176063][ T4398] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1782.176086][ T4398] ? bpf_lsm_file_permission+0x9/0x20 [ 1782.176108][ T4398] ? security_file_permission+0x75/0x260 [ 1782.176132][ T4398] ? rw_verify_area+0x255/0x4d0 [ 1782.176156][ T4398] do_sendfile+0x535/0x7d0 [ 1782.176175][ T4398] ? __pfx_vfs_write+0x10/0x10 [ 1782.176202][ T4398] ? __pfx_do_sendfile+0x10/0x10 [ 1782.176220][ T4398] ? __fget_files+0x3a0/0x420 [ 1782.176249][ T4398] __se_sys_sendfile64+0x144/0x1a0 [ 1782.176270][ T4398] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1782.176295][ T4398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.176314][ T4398] do_syscall_64+0x174/0x580 [ 1782.176333][ T4398] ? trace_irq_disable+0x3b/0x140 [ 1782.176356][ T4398] ? clear_bhb_loop+0x40/0x90 [ 1782.176376][ T4398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.176393][ T4398] RIP: 0033:0x7f429ab9ce59 [ 1782.176411][ T4398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.176425][ T4398] RSP: 002b:00007f429bb14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1782.176443][ T4398] RAX: ffffffffffffffda RBX: 00007f429ae15fa0 RCX: 00007f429ab9ce59 [ 1782.176455][ T4398] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1782.176466][ T4398] RBP: 00007f429bb14090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.176476][ T4398] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.176488][ T4398] R13: 00007f429ae16038 R14: 00007f429ae15fa0 R15: 00007f429af3fa48 [ 1782.176515][ T4398] [ 1782.611406][ T4402] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1782.628738][ T4376] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 1782.848241][ T4376] usb 4-1: device firmware changed [ 1782.871541][ T5710] usb 4-1: USB disconnect, device number 13 [ 1782.889268][ T4408] kvm: pic: non byte write [ 1783.025542][T11968] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1783.053540][ T5710] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1783.213769][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 1783.222871][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.246735][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.266909][ T5710] usb 4-1: New USB device found, idVendor=6172, idProduct=2377, bcdDevice= 0.00 [ 1783.282749][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.293726][T16331] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1783.324285][ T5710] usb 4-1: config 0 descriptor?? [ 1783.346352][ T5710] hub 4-1:0.0: USB hub found [ 1783.458039][T16331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1783.471783][T16331] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.490353][T16331] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1783.507486][T16331] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1783.559711][ T5710] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1783.579714][T16331] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1783.604521][T16331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.617327][ T5710] usbhid 4-1:0.0: can't add hid device: -71 [ 1783.629347][ T5710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1783.641890][T16331] usb 5-1: Product: syz [ 1783.652498][T16331] usb 5-1: Manufacturer: syz [ 1783.667199][T16331] usb 5-1: SerialNumber: syz [ 1783.679126][ T5710] usb 4-1: USB disconnect, device number 14 [ 1783.911352][ T4425] sg_write: data in/out 360512/136 bytes for SCSI command 0x0-- guessing data in; [ 1783.911352][ T4425] program syz.2.9715 not setting count and/or reply_len properly [ 1783.960475][ T4425] FAULT_INJECTION: forcing a failure. [ 1783.960475][ T4425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.019880][ T4425] CPU: 0 UID: 0 PID: 4425 Comm: syz.2.9715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1784.019907][ T4425] Tainted: [L]=SOFTLOCKUP [ 1784.019913][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1784.019923][ T4425] Call Trace: [ 1784.019930][ T4425] [ 1784.019940][ T4425] dump_stack_lvl+0xe8/0x150 [ 1784.019965][ T4425] should_fail_ex+0x412/0x560 [ 1784.019996][ T4425] _copy_from_iter+0x1d3/0x1670 [ 1784.020022][ T4425] ? pfn_valid+0x125/0x4c0 [ 1784.020035][ T4425] ? pfn_valid+0x440/0x4c0 [ 1784.020043][ T4425] ? __pfx__copy_from_iter+0x10/0x10 [ 1784.020054][ T4425] ? bvec_try_merge_page+0x186/0x280 [ 1784.020067][ T4425] ? bio_add_page+0x415/0x6f0 [ 1784.020077][ T4425] copy_page_from_iter+0x220/0x2d0 [ 1784.020090][ T4425] blk_rq_map_user_iov+0xa12/0x1810 [ 1784.020112][ T4425] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 1784.020135][ T4425] ? import_ubuf+0xfb/0x1d0 [ 1784.020148][ T4425] blk_rq_map_user_io+0x2ae/0x440 [ 1784.020163][ T4425] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 1784.020180][ T4425] ? sg_common_write+0xba7/0x13e0 [ 1784.020196][ T4425] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1784.020211][ T4425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1784.020222][ T4425] ? sg_build_indirect+0x5fa/0x850 [ 1784.020239][ T4425] sg_common_write+0xcff/0x13e0 [ 1784.020259][ T4425] ? __pfx_sg_common_write+0x10/0x10 [ 1784.020273][ T4425] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1784.020288][ T4425] ? ___ratelimit+0x58c/0x8d0 [ 1784.020307][ T4425] sg_write+0xaf2/0xf00 [ 1784.020322][ T4425] ? __pfx_sg_write+0x10/0x10 [ 1784.020334][ T4425] ? __pfx_aa_file_perm+0x10/0x10 [ 1784.020357][ T4425] ? bpf_lsm_file_permission+0x9/0x20 [ 1784.020371][ T4425] ? security_file_permission+0x75/0x260 [ 1784.020383][ T4425] ? rw_verify_area+0x255/0x4d0 [ 1784.020398][ T4425] ? __pfx_sg_write+0x10/0x10 [ 1784.020409][ T4425] vfs_write+0x29a/0xb90 [ 1784.020427][ T4425] ? __pfx_vfs_write+0x10/0x10 [ 1784.020442][ T4425] ? __fget_files+0x2a/0x420 [ 1784.020455][ T4425] ? __fget_files+0x2a/0x420 [ 1784.020466][ T4425] ? __fget_files+0x3a0/0x420 [ 1784.020480][ T4425] ? __fget_files+0x2a/0x420 [ 1784.020495][ T4425] ksys_write+0x150/0x270 [ 1784.020510][ T4425] ? __pfx_ksys_write+0x10/0x10 [ 1784.020528][ T4425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.020539][ T4425] do_syscall_64+0x174/0x580 [ 1784.020550][ T4425] ? clear_bhb_loop+0x40/0x90 [ 1784.020561][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.020571][ T4425] RIP: 0033:0x7effe939ce59 [ 1784.020581][ T4425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.020589][ T4425] RSP: 002b:00007effea19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1784.020600][ T4425] RAX: ffffffffffffffda RBX: 00007effe9615fa0 RCX: 00007effe939ce59 [ 1784.020608][ T4425] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000005 [ 1784.020614][ T4425] RBP: 00007effea19f090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.020620][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.020625][ T4425] R13: 00007effe9616038 R14: 00007effe9615fa0 R15: 00007effe973fa48 [ 1784.020640][ T4425] [ 1784.493554][ T5710] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1784.922658][ T30] audit: type=1400 audit(1781280636.658:14375): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=4419 comm="syz.3.9713" [ 1785.104067][ T3363] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1785.127083][T16331] usb 5-1: unit 2 not found! [ 1785.152670][T16331] usb 5-1: unit 0 not found! [ 1785.303589][T11968] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1785.343241][T16331] usb 5-1: USB disconnect, device number 85 [ 1785.373973][ T5696] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1785.439538][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1785.475803][T11968] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 1785.500154][T11968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.526086][T11968] usb 3-1: config 0 descriptor?? [ 1785.536101][ T5696] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1785.556909][ T5696] usb 1-1: config 0 has no interface number 0 [ 1785.569087][T11968] usb 3-1: selecting invalid altsetting 1 [ 1785.579503][ T5696] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25955, setting to 64 [ 1785.597157][T11968] flexcop_usb: set interface failed. [ 1785.613135][T11968] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 1785.631945][ T5696] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1785.634738][ T4450] netlink: 'syz.1.9724': attribute type 1 has an invalid length. [ 1785.649255][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1785.660657][ T5696] usb 1-1: Manufacturer: syz [ 1785.666056][ T5696] usb 1-1: SerialNumber: syz [ 1785.679288][ T5696] usb 1-1: config 0 descriptor?? [ 1785.685206][ T4444] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1785.753870][T16331] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1785.782499][T32402] usb 3-1: USB disconnect, device number 39 [ 1785.801177][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9724'. [ 1785.830911][ T4452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1785.853186][ T4450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9724'. [ 1785.869377][ T4452] bond3: (slave bond4): making interface the new active one [ 1785.893052][ T4452] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1785.926811][ T5696] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 1785.945520][T16331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.968402][ T5696] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1785.980506][T16331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.996602][ T5696] usb 1-1: USB disconnect, device number 50 [ 1786.002761][T16331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1786.036692][T16331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1786.055629][T16331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.079255][T16331] usb 5-1: config 0 descriptor?? [ 1786.456494][ T4458] FAULT_INJECTION: forcing a failure. [ 1786.456494][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.470142][ T4458] CPU: 0 UID: 0 PID: 4458 Comm: syz.2.9725 Tainted: G L syzkaller #0 PREEMPT(full) [ 1786.470169][ T4458] Tainted: [L]=SOFTLOCKUP [ 1786.470183][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1786.470193][ T4458] Call Trace: [ 1786.470201][ T4458] [ 1786.470209][ T4458] dump_stack_lvl+0xe8/0x150 [ 1786.470236][ T4458] should_fail_ex+0x412/0x560 [ 1786.470262][ T4458] should_failslab+0xa8/0x100 [ 1786.470281][ T4458] __kmalloc_cache_noprof+0x88/0x660 [ 1786.470303][ T4458] ? __asan_memset+0x22/0x50 [ 1786.470322][ T4458] ? alloc_netdev_mqs+0xbf0/0x1210 [ 1786.470343][ T4458] ? __xdp_rxq_info_reg+0x171/0x280 [ 1786.470364][ T4458] alloc_netdev_mqs+0xbf0/0x1210 [ 1786.470390][ T4458] rtnl_create_link+0x31f/0xd70 [ 1786.470416][ T4458] rtnl_newlink_create+0x277/0xb70 [ 1786.470433][ T4458] ? __pfx___nla_validate_parse+0x10/0x10 [ 1786.470463][ T4458] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1786.470483][ T4458] ? __pfx___mutex_lock+0x10/0x10 [ 1786.470513][ T4458] ? ns_capable+0x89/0xe0 [ 1786.470534][ T4458] rtnl_newlink+0x166a/0x1bb0 [ 1786.470571][ T4458] ? __pfx_rtnl_newlink+0x10/0x10 [ 1786.470590][ T4458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.470642][ T4458] ? kasan_quarantine_put+0xbb/0x1f0 [ 1786.470663][ T4458] ? lockdep_hardirqs_on+0x7a/0x110 [ 1786.470684][ T4458] ? nlmon_xmit+0xb0/0x100 [ 1786.470700][ T4458] ? kmem_cache_free+0x182/0x650 [ 1786.470732][ T4458] ? __lock_acquire+0x6b5/0x2cf0 [ 1786.470754][ T4458] ? __dev_queue_xmit+0x2b6/0x3950 [ 1786.470775][ T4458] ? __local_bh_enable_ip+0xd0/0x130 [ 1786.470792][ T4458] ? lockdep_hardirqs_on+0x7a/0x110 [ 1786.470808][ T4458] ? __dev_queue_xmit+0x2b6/0x3950 [ 1786.470824][ T4458] ? __local_bh_enable_ip+0xd0/0x130 [ 1786.470838][ T4458] ? __dev_queue_xmit+0x2b6/0x3950 [ 1786.470863][ T4458] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1786.470898][ T4458] ? __pfx_rtnl_newlink+0x10/0x10 [ 1786.470919][ T4458] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1786.470943][ T4458] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1786.470964][ T4458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1786.470983][ T4458] ? ref_tracker_free+0x693/0x840 [ 1786.471006][ T4458] ? __pfx_ref_tracker_free+0x10/0x10 [ 1786.471035][ T4458] netlink_rcv_skb+0x232/0x4b0 [ 1786.471060][ T4458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1786.471082][ T4458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1786.471117][ T4458] ? netlink_deliver_tap+0x2e/0x1b0 [ 1786.471139][ T4458] ? netlink_deliver_tap+0x2e/0x1b0 [ 1786.471166][ T4458] netlink_unicast+0x75c/0x8e0 [ 1786.471204][ T4458] netlink_sendmsg+0x813/0xb40 [ 1786.471231][ T4458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1786.471251][ T4458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1786.471276][ T4458] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1786.471302][ T4458] ____sys_sendmsg+0x972/0x9f0 [ 1786.471320][ T4458] ? __might_fault+0xaf/0x130 [ 1786.471347][ T4458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1786.471373][ T4458] ? import_iovec+0x73/0xa0 [ 1786.471397][ T4458] ___sys_sendmsg+0x2a5/0x360 [ 1786.471413][ T4458] ? __lock_acquire+0x6b5/0x2cf0 [ 1786.471435][ T4458] ? __pfx____sys_sendmsg+0x10/0x10 [ 1786.471486][ T4458] ? __fget_files+0x2a/0x420 [ 1786.471504][ T4458] ? __fget_files+0x3a0/0x420 [ 1786.471533][ T4458] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1786.471553][ T4458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1786.471580][ T4458] ? __pfx_ksys_write+0x10/0x10 [ 1786.471610][ T4458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.471628][ T4458] do_syscall_64+0x174/0x580 [ 1786.471645][ T4458] ? trace_irq_disable+0x3b/0x140 [ 1786.471667][ T4458] ? clear_bhb_loop+0x40/0x90 [ 1786.471687][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.471703][ T4458] RIP: 0033:0x7effe939ce59 [ 1786.471720][ T4458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.471733][ T4458] RSP: 002b:00007effea19f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1786.471751][ T4458] RAX: ffffffffffffffda RBX: 00007effe9615fa0 RCX: 00007effe939ce59 [ 1786.471762][ T4458] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1786.471773][ T4458] RBP: 00007effea19f090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.471783][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1786.471793][ T4458] R13: 00007effe9616038 R14: 00007effe9615fa0 R15: 00007effe973fa48 [ 1786.471821][ T4458] [ 1786.969008][T16331] plantronics 0003:047F:FFFF.0052: reserved main item tag 0xd [ 1786.977061][T16331] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1786.985194][T16331] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1787.014695][T16331] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1787.155175][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.164203][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1787.172917][ T5710] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1787.177750][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.181537][ T5710] usb 4-1: can't read configurations, error -71 [ 1787.350354][ T4446] fuse: Bad value for 'fd' [ 1787.368721][ T4472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1787.394256][T16330] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1787.467704][ T4475] Invalid logical block size (1380209483) [ 1787.483710][T16331] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1787.506857][ T4480] net_ratelimit: 286 callbacks suppressed [ 1787.506868][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.543929][T16330] usb 2-1: Using ep0 maxpacket: 32 [ 1787.553221][T16330] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1787.562923][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.595368][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.632408][T16330] usb 2-1: config 0 has no interface number 0 [ 1787.640493][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.671254][T16330] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1787.682487][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.684516][T16330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.703614][T16330] usb 2-1: Product: syz [ 1787.709895][T16330] usb 2-1: Manufacturer: syz [ 1787.715798][ T4486] Invalid argument reading file caps for ./file0 [ 1787.725453][T16330] usb 2-1: SerialNumber: syz [ 1787.746780][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.761822][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.781031][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.785197][T16330] usb 2-1: config 0 descriptor?? [ 1787.800991][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1787.807733][T16330] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1787.822241][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1788.022183][T16330] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1788.064023][T16330] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1788.534961][T16330] usb 5-1: reset high-speed USB device number 86 using dummy_hcd [ 1788.826253][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1788.828472][T16331] usb 2-1: USB disconnect, device number 102 [ 1788.892799][T16331] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1788.959082][T16331] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1788.990623][T16331] quatech2 2-1:0.51: device disconnected [ 1789.091521][ T4506] netlink: 'syz.0.9742': attribute type 8 has an invalid length. [ 1789.434310][T16330] usb 5-1: device descriptor read/64, error -71 [ 1789.548025][ T4510] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1789.694012][T16330] usb 5-1: reset high-speed USB device number 86 using dummy_hcd [ 1789.738276][ T4517] [ 1789.740612][ T4517] ===================================================== [ 1789.747581][ T4517] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1789.755123][ T4517] syzkaller #0 Tainted: G L [ 1789.761078][ T4517] ----------------------------------------------------- [ 1789.768016][ T4517] syz.0.9745/4517 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1789.775662][ T4517] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1789.784293][ T4517] [ 1789.784293][ T4517] and this task is already holding: [ 1789.791650][ T4517] ffff888098bc5d20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1789.800258][ T4517] which would create a new lock dependency: [ 1789.806128][ T4517] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1789.813731][ T4517] [ 1789.813731][ T4517] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1789.823160][ T4517] (&dev->event_lock#2){..-.}-{3:3} [ 1789.823186][ T4517] [ 1789.823186][ T4517] ... which became SOFTIRQ-irq-safe at: [ 1789.836048][ T4517] lock_acquire+0x106/0x350 [ 1789.840633][ T4517] _raw_spin_lock_irqsave+0x40/0x60 [ 1789.845910][ T4517] input_event+0x71/0xc0 [ 1789.850225][ T4517] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 1789.855905][ T4517] __usb_hcd_giveback_urb+0x376/0x540 [ 1789.861396][ T4517] dummy_timer+0xbc0/0x4650 [ 1789.865975][ T4517] __hrtimer_run_queues+0x3c0/0xa20 [ 1789.871246][ T4517] hrtimer_run_softirq+0x17a/0x240 [ 1789.876431][ T4517] handle_softirqs+0x22a/0x840 [ 1789.881263][ T4517] __irq_exit_rcu+0xca/0x220 [ 1789.885930][ T4517] irq_exit_rcu+0x9/0x30 [ 1789.890247][ T4517] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1789.895950][ T4517] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1789.902006][ T4517] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1789.907714][ T4517] dummy_urb_enqueue+0x58a/0x780 [ 1789.912730][ T4517] usb_hcd_submit_urb+0x328/0x1b70 [ 1789.917914][ T4517] atp_open+0x60/0x90 [ 1789.921968][ T4517] input_open_device+0x1f8/0x3b0 [ 1789.926977][ T4517] mousedev_open_device+0xcc/0x150 [ 1789.932160][ T4517] mousedev_open+0x2ef/0x4a0 [ 1789.936827][ T4517] chrdev_open+0x4cd/0x5e0 [ 1789.941318][ T4517] do_dentry_open+0x822/0x13a0 [ 1789.946153][ T4517] vfs_open+0x3b/0x340 [ 1789.950296][ T4517] path_openat+0x2e08/0x3860 [ 1789.954962][ T4517] do_file_open+0x23e/0x4a0 [ 1789.959536][ T4517] do_sys_openat2+0x113/0x200 [ 1789.964331][ T4517] __x64_sys_openat+0x138/0x170 [ 1789.969284][ T4517] do_syscall_64+0x174/0x580 [ 1789.973949][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.979915][ T4517] [ 1789.979915][ T4517] to a SOFTIRQ-irq-unsafe lock: [ 1789.986982][ T4517] (tasklist_lock){.+.+}-{3:3} [ 1789.987006][ T4517] [ 1789.987006][ T4517] ... which became SOFTIRQ-irq-unsafe at: [ 1789.999614][ T4517] ... [ 1789.999623][ T4517] lock_acquire+0x106/0x350 [ 1790.006780][ T4517] _raw_read_lock+0x36/0x50 [ 1790.011370][ T4517] __do_wait+0xde/0x740 [ 1790.015604][ T4517] do_wait+0x1e7/0x510 [ 1790.019745][ T4517] kernel_wait+0xd6/0x1c0 [ 1790.024146][ T4517] call_usermodehelper_exec_work+0xbe/0x230 [ 1790.030117][ T4517] process_scheduled_works+0xb5d/0x1860 [ 1790.035734][ T4517] worker_thread+0xa53/0xfc0 [ 1790.040398][ T4517] kthread+0x389/0x470 [ 1790.044536][ T4517] ret_from_fork+0x514/0xb70 [ 1790.049200][ T4517] ret_from_fork_asm+0x1a/0x30 [ 1790.054034][ T4517] [ 1790.054034][ T4517] other info that might help us debug this: [ 1790.054034][ T4517] [ 1790.064247][ T4517] Chain exists of: [ 1790.064247][ T4517] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1790.064247][ T4517] [ 1790.077303][ T4517] Possible interrupt unsafe locking scenario: [ 1790.077303][ T4517] [ 1790.085660][ T4517] CPU0 CPU1 [ 1790.091012][ T4517] ---- ---- [ 1790.096382][ T4517] lock(tasklist_lock); [ 1790.100615][ T4517] local_irq_disable(); [ 1790.107351][ T4517] lock(&dev->event_lock#2); [ 1790.114588][ T4517] lock(&f_owner->lock); [ 1790.121419][ T4517] [ 1790.124890][ T4517] lock(&dev->event_lock#2); [ 1790.129757][ T4517] [ 1790.129757][ T4517] *** DEADLOCK *** [ 1790.129757][ T4517] [ 1790.137882][ T4517] 5 locks held by syz.0.9745/4517: [ 1790.142973][ T4517] #0: ffff888011aa0410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1790.152116][ T4517] #1: ffff8880611b5080 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb4c/0x3860 [ 1790.162281][ T4517] #2: ffffffff9a4af9f8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 1790.171746][ T4517] #3: ffff888076cb5998 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1790.181382][ T4517] #4: ffff888098bc5d20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1790.190414][ T4517] [ 1790.190414][ T4517] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1790.200805][ T4517] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1790.206621][ T4517] IN-SOFTIRQ-W at: [ 1790.210935][ T4517] lock_acquire+0x106/0x350 [ 1790.217596][ T4517] _raw_spin_lock_irqsave+0x40/0x60 [ 1790.224955][ T4517] input_event+0x71/0xc0 [ 1790.231354][ T4517] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 1790.239058][ T4517] __usb_hcd_giveback_urb+0x376/0x540 [ 1790.246587][ T4517] dummy_timer+0xbc0/0x4650 [ 1790.253248][ T4517] __hrtimer_run_queues+0x3c0/0xa20 [ 1790.260607][ T4517] hrtimer_run_softirq+0x17a/0x240 [ 1790.267873][ T4517] handle_softirqs+0x22a/0x840 [ 1790.274787][ T4517] __irq_exit_rcu+0xca/0x220 [ 1790.281528][ T4517] irq_exit_rcu+0x9/0x30 [ 1790.287918][ T4517] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1790.295706][ T4517] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1790.303843][ T4517] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1790.311637][ T4517] dummy_urb_enqueue+0x58a/0x780 [ 1790.318731][ T4517] usb_hcd_submit_urb+0x328/0x1b70 [ 1790.325999][ T4517] atp_open+0x60/0x90 [ 1790.332137][ T4517] input_open_device+0x1f8/0x3b0 [ 1790.339235][ T4517] mousedev_open_device+0xcc/0x150 [ 1790.346503][ T4517] mousedev_open+0x2ef/0x4a0 [ 1790.353258][ T4517] chrdev_open+0x4cd/0x5e0 [ 1790.359847][ T4517] do_dentry_open+0x822/0x13a0 [ 1790.366769][ T4517] vfs_open+0x3b/0x340 [ 1790.372997][ T4517] path_openat+0x2e08/0x3860 [ 1790.379746][ T4517] do_file_open+0x23e/0x4a0 [ 1790.386413][ T4517] do_sys_openat2+0x113/0x200 [ 1790.393271][ T4517] __x64_sys_openat+0x138/0x170 [ 1790.400288][ T4517] do_syscall_64+0x174/0x580 [ 1790.407039][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.415089][ T4517] INITIAL USE at: [ 1790.419226][ T4517] lock_acquire+0x106/0x350 [ 1790.425793][ T4517] _raw_spin_lock_irqsave+0x40/0x60 [ 1790.433060][ T4517] input_inject_event+0xa4/0x330 [ 1790.440159][ T4517] kbd_led_trigger_activate+0xbc/0x100 [ 1790.447750][ T4517] led_trigger_set+0x535/0x960 [ 1790.454582][ T4517] led_trigger_set_default+0x260/0x2a0 [ 1790.462115][ T4517] led_classdev_register_ext+0x787/0x9c0 [ 1790.469815][ T4517] input_leds_connect+0x517/0x790 [ 1790.476909][ T4517] input_register_device+0xce0/0x1140 [ 1790.484348][ T4517] atkbd_connect+0x71e/0xa10 [ 1790.491002][ T4517] serio_driver_probe+0x82/0xb0 [ 1790.497915][ T4517] really_probe+0x267/0xaf0 [ 1790.504486][ T4517] __driver_probe_device+0x1ef/0x380 [ 1790.511844][ T4517] driver_probe_device+0x4f/0x240 [ 1790.518932][ T4517] __driver_attach+0x34c/0x640 [ 1790.525758][ T4517] bus_for_each_dev+0x23b/0x2c0 [ 1790.532678][ T4517] serio_handle_event+0x1af/0xf80 [ 1790.539770][ T4517] process_scheduled_works+0xb5d/0x1860 [ 1790.547383][ T4517] worker_thread+0xa53/0xfc0 [ 1790.554037][ T4517] kthread+0x389/0x470 [ 1790.560183][ T4517] ret_from_fork+0x514/0xb70 [ 1790.566835][ T4517] ret_from_fork_asm+0x1a/0x30 [ 1790.573666][ T4517] } [ 1790.576405][ T4517] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1790.585773][ T4517] -> (&client->buffer_lock){....}-{3:3} { [ 1790.591664][ T4517] INITIAL USE at: [ 1790.595710][ T4517] lock_acquire+0x106/0x350 [ 1790.602116][ T4517] _raw_spin_lock_irq+0x3d/0x50 [ 1790.608863][ T4517] evdev_read+0x37d/0xcb0 [ 1790.615085][ T4517] vfs_read+0x20c/0xa70 [ 1790.621136][ T4517] ksys_read+0x150/0x270 [ 1790.627273][ T4517] do_syscall_64+0x174/0x580 [ 1790.633760][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.641552][ T4517] } [ 1790.644208][ T4517] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1790.652592][ T4517] ... acquired at: [ 1790.656548][ T4517] _raw_spin_lock+0x2e/0x40 [ 1790.661211][ T4517] evdev_pass_values+0xb9/0xbd0 [ 1790.666217][ T4517] evdev_events+0x1e6/0x340 [ 1790.670883][ T4517] input_pass_values+0x288/0x890 [ 1790.675977][ T4517] input_event_dispose+0x330/0x6b0 [ 1790.681245][ T4517] input_inject_event+0x1dc/0x330 [ 1790.686429][ T4517] evdev_write+0x325/0x4c0 [ 1790.690998][ T4517] vfs_write+0x29a/0xb90 [ 1790.695397][ T4517] ksys_write+0x150/0x270 [ 1790.699882][ T4517] do_syscall_64+0x174/0x580 [ 1790.704625][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.710675][ T4517] [ 1790.712981][ T4517] -> (&new->fa_lock){....}-{3:3} { [ 1790.718177][ T4517] INITIAL USE at: [ 1790.722137][ T4517] lock_acquire+0x106/0x350 [ 1790.728445][ T4517] _raw_write_lock_irq+0x3d/0x50 [ 1790.735100][ T4517] fasync_remove_entry+0xf1/0x1c0 [ 1790.741845][ T4517] lease_modify+0x4f7/0x6c0 [ 1790.748066][ T4517] locks_remove_file+0x5f0/0xf70 [ 1790.754722][ T4517] __fput+0x3ae/0xa60 [ 1790.760423][ T4517] task_work_run+0x1d9/0x270 [ 1790.766732][ T4517] get_signal+0x11eb/0x1330 [ 1790.772952][ T4517] arch_do_signal_or_restart+0xbc/0x840 [ 1790.780219][ T4517] exit_to_user_mode_loop+0xa9/0x680 [ 1790.787224][ T4517] do_syscall_64+0x353/0x580 [ 1790.793540][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.801160][ T4517] INITIAL READ USE at: [ 1790.805570][ T4517] lock_acquire+0x106/0x350 [ 1790.812240][ T4517] _raw_read_lock_irqsave+0x48/0x60 [ 1790.819598][ T4517] kill_fasync+0x199/0x4d0 [ 1790.826176][ T4517] lease_break_callback+0x26/0x30 [ 1790.833376][ T4517] __break_lease+0x81f/0x1ea0 [ 1790.840215][ T4517] do_dentry_open+0xf23/0x13a0 [ 1790.847134][ T4517] vfs_open+0x3b/0x340 [ 1790.853355][ T4517] path_openat+0x2e08/0x3860 [ 1790.860118][ T4517] do_file_open+0x23e/0x4a0 [ 1790.866807][ T4517] do_open_execat+0x12b/0x580 [ 1790.873643][ T4517] alloc_bprm+0x28/0x5c0 [ 1790.880045][ T4517] do_execveat_common+0x175/0x690 [ 1790.887231][ T4517] __x64_sys_execve+0x97/0xc0 [ 1790.894163][ T4517] do_syscall_64+0x174/0x580 [ 1790.900912][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.908963][ T4517] } [ 1790.911532][ T4517] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1790.920319][ T4517] ... acquired at: [ 1790.924201][ T4517] _raw_read_lock_irqsave+0x48/0x60 [ 1790.929652][ T4517] kill_fasync+0x199/0x4d0 [ 1790.934236][ T4517] evdev_pass_values+0x627/0xbd0 [ 1790.939332][ T4517] evdev_events+0x1e6/0x340 [ 1790.943991][ T4517] input_pass_values+0x288/0x890 [ 1790.949090][ T4517] input_event_dispose+0x330/0x6b0 [ 1790.954374][ T4517] input_inject_event+0x1dc/0x330 [ 1790.959555][ T4517] evdev_write+0x325/0x4c0 [ 1790.964126][ T4517] vfs_write+0x29a/0xb90 [ 1790.968537][ T4517] ksys_write+0x150/0x270 [ 1790.973025][ T4517] do_syscall_64+0x174/0x580 [ 1790.977768][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.983827][ T4517] [ 1790.986138][ T4517] -> (&f_owner->lock){....}-{3:3} { [ 1790.991338][ T4517] INITIAL USE at: [ 1790.995213][ T4517] lock_acquire+0x106/0x350 [ 1791.001260][ T4517] _raw_write_lock_irq+0x3d/0x50 [ 1791.007742][ T4517] __f_setown+0x67/0x370 [ 1791.013535][ T4517] generic_setlease+0xacf/0xfd0 [ 1791.019948][ T4517] do_fcntl_add_lease+0x35e/0x470 [ 1791.026519][ T4517] fcntl_setlease+0x123/0x180 [ 1791.032742][ T4517] do_fcntl+0x8b3/0x1a20 [ 1791.038533][ T4517] __se_sys_fcntl+0xc8/0x150 [ 1791.044677][ T4517] do_syscall_64+0x174/0x580 [ 1791.050813][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.058252][ T4517] INITIAL READ USE at: [ 1791.062563][ T4517] lock_acquire+0x106/0x350 [ 1791.069043][ T4517] _raw_read_lock_irqsave+0x48/0x60 [ 1791.076222][ T4517] send_sigio+0x38/0x370 [ 1791.082453][ T4517] kill_fasync+0x24d/0x4d0 [ 1791.088865][ T4517] lease_break_callback+0x26/0x30 [ 1791.095881][ T4517] __break_lease+0x81f/0x1ea0 [ 1791.102543][ T4517] do_dentry_open+0xf23/0x13a0 [ 1791.109288][ T4517] vfs_open+0x3b/0x340 [ 1791.115342][ T4517] path_openat+0x2e08/0x3860 [ 1791.121926][ T4517] do_file_open+0x23e/0x4a0 [ 1791.128418][ T4517] do_open_execat+0x12b/0x580 [ 1791.135080][ T4517] alloc_bprm+0x28/0x5c0 [ 1791.141318][ T4517] do_execveat_common+0x175/0x690 [ 1791.148334][ T4517] __x64_sys_execve+0x97/0xc0 [ 1791.154995][ T4517] do_syscall_64+0x174/0x580 [ 1791.161563][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.169432][ T4517] } [ 1791.171915][ T4517] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1791.180751][ T4517] ... acquired at: [ 1791.184534][ T4517] _raw_read_lock_irqsave+0x48/0x60 [ 1791.189894][ T4517] send_sigio+0x38/0x370 [ 1791.194293][ T4517] kill_fasync+0x24d/0x4d0 [ 1791.198865][ T4517] lease_break_callback+0x26/0x30 [ 1791.204046][ T4517] __break_lease+0x81f/0x1ea0 [ 1791.208882][ T4517] do_dentry_open+0xf23/0x13a0 [ 1791.213808][ T4517] vfs_open+0x3b/0x340 [ 1791.218030][ T4517] path_openat+0x2e08/0x3860 [ 1791.222783][ T4517] do_file_open+0x23e/0x4a0 [ 1791.227444][ T4517] do_open_execat+0x12b/0x580 [ 1791.232281][ T4517] alloc_bprm+0x28/0x5c0 [ 1791.236683][ T4517] do_execveat_common+0x175/0x690 [ 1791.241865][ T4517] __x64_sys_execve+0x97/0xc0 [ 1791.246699][ T4517] do_syscall_64+0x174/0x580 [ 1791.251446][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.257496][ T4517] [ 1791.259806][ T4517] [ 1791.259806][ T4517] the dependencies between the lock to be acquired [ 1791.259814][ T4517] and SOFTIRQ-irq-unsafe lock: [ 1791.273288][ T4517] -> (tasklist_lock){.+.+}-{3:3} { [ 1791.278397][ T4517] HARDIRQ-ON-R at: [ 1791.282358][ T4517] lock_acquire+0x106/0x350 [ 1791.288493][ T4517] _raw_read_lock+0x36/0x50 [ 1791.294635][ T4517] __do_wait+0xde/0x740 [ 1791.300422][ T4517] do_wait+0x1e7/0x510 [ 1791.306122][ T4517] kernel_wait+0xd6/0x1c0 [ 1791.312090][ T4517] call_usermodehelper_exec_work+0xbe/0x230 [ 1791.319623][ T4517] process_scheduled_works+0xb5d/0x1860 [ 1791.326806][ T4517] worker_thread+0xa53/0xfc0 [ 1791.333027][ T4517] kthread+0x389/0x470 [ 1791.338731][ T4517] ret_from_fork+0x514/0xb70 [ 1791.344952][ T4517] ret_from_fork_asm+0x1a/0x30 [ 1791.351348][ T4517] SOFTIRQ-ON-R at: [ 1791.355309][ T4517] lock_acquire+0x106/0x350 [ 1791.361441][ T4517] _raw_read_lock+0x36/0x50 [ 1791.367578][ T4517] __do_wait+0xde/0x740 [ 1791.373368][ T4517] do_wait+0x1e7/0x510 [ 1791.379094][ T4517] kernel_wait+0xd6/0x1c0 [ 1791.385062][ T4517] call_usermodehelper_exec_work+0xbe/0x230 [ 1791.392593][ T4517] process_scheduled_works+0xb5d/0x1860 [ 1791.399769][ T4517] worker_thread+0xa53/0xfc0 [ 1791.405991][ T4517] kthread+0x389/0x470 [ 1791.411694][ T4517] ret_from_fork+0x514/0xb70 [ 1791.417928][ T4517] ret_from_fork_asm+0x1a/0x30 [ 1791.424327][ T4517] INITIAL USE at: [ 1791.428207][ T4517] lock_acquire+0x106/0x350 [ 1791.434256][ T4517] _raw_write_lock_irq+0x3d/0x50 [ 1791.440740][ T4517] copy_process+0x2b4c/0x4440 [ 1791.446963][ T4517] kernel_clone+0x2d7/0x940 [ 1791.453010][ T4517] user_mode_thread+0x110/0x180 [ 1791.459403][ T4517] rest_init+0x23/0x300 [ 1791.465104][ T4517] start_kernel+0x38a/0x3e0 [ 1791.471248][ T4517] x86_64_start_reservations+0x24/0x30 [ 1791.478358][ T4517] x86_64_start_kernel+0x143/0x1c0 [ 1791.485016][ T4517] common_startup_64+0x13e/0x147 [ 1791.491504][ T4517] INITIAL READ USE at: [ 1791.495818][ T4517] lock_acquire+0x106/0x350 [ 1791.502301][ T4517] _raw_read_lock+0x36/0x50 [ 1791.508788][ T4517] __do_wait+0xde/0x740 [ 1791.514923][ T4517] do_wait+0x1e7/0x510 [ 1791.520973][ T4517] kernel_wait+0xd6/0x1c0 [ 1791.527285][ T4517] call_usermodehelper_exec_work+0xbe/0x230 [ 1791.535171][ T4517] process_scheduled_works+0xb5d/0x1860 [ 1791.542705][ T4517] worker_thread+0xa53/0xfc0 [ 1791.549275][ T4517] kthread+0x389/0x470 [ 1791.555326][ T4517] ret_from_fork+0x514/0xb70 [ 1791.561896][ T4517] ret_from_fork_asm+0x1a/0x30 [ 1791.568642][ T4517] } [ 1791.571126][ T4517] ... key at: [] tasklist_lock+0x18/0x40 [ 1791.578914][ T4517] ... acquired at: [ 1791.582696][ T4517] _raw_read_lock+0x36/0x50 [ 1791.587361][ T4517] send_sigio+0x101/0x370 [ 1791.591850][ T4517] dnotify_handle_event+0x169/0x440 [ 1791.597208][ T4517] fsnotify+0x1831/0x1ae0 [ 1791.601692][ T4517] path_openat+0x15c2/0x3860 [ 1791.606438][ T4517] do_file_open+0x23e/0x4a0 [ 1791.611109][ T4517] do_sys_openat2+0x113/0x200 [ 1791.615939][ T4517] __x64_sys_openat+0x138/0x170 [ 1791.620954][ T4517] do_syscall_64+0x174/0x580 [ 1791.625798][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.631852][ T4517] [ 1791.634163][ T4517] [ 1791.634163][ T4517] stack backtrace: [ 1791.640044][ T4517] CPU: 0 UID: 0 PID: 4517 Comm: syz.0.9745 Tainted: G L syzkaller #0 PREEMPT(full) [ 1791.640065][ T4517] Tainted: [L]=SOFTLOCKUP [ 1791.640070][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1791.640079][ T4517] Call Trace: [ 1791.640085][ T4517] [ 1791.640092][ T4517] dump_stack_lvl+0xe8/0x150 [ 1791.640109][ T4517] __lock_acquire+0x2a94/0x2cf0 [ 1791.640131][ T4517] ? send_sigio+0x101/0x370 [ 1791.640148][ T4517] lock_acquire+0x106/0x350 [ 1791.640160][ T4517] ? send_sigio+0x101/0x370 [ 1791.640180][ T4517] _raw_read_lock+0x36/0x50 [ 1791.640198][ T4517] ? send_sigio+0x101/0x370 [ 1791.640213][ T4517] send_sigio+0x101/0x370 [ 1791.640231][ T4517] dnotify_handle_event+0x169/0x440 [ 1791.640247][ T4517] fsnotify+0x1831/0x1ae0 [ 1791.640268][ T4517] ? fsnotify+0x74c/0x1ae0 [ 1791.640282][ T4517] ? __pfx_fsnotify+0x10/0x10 [ 1791.640297][ T4517] ? do_raw_spin_unlock+0xf5/0x210 [ 1791.640314][ T4517] ? d_make_persistent+0x10c/0x180 [ 1791.640332][ T4517] ? shmem_mknod+0x2ea/0x360 [ 1791.640346][ T4517] path_openat+0x15c2/0x3860 [ 1791.640372][ T4517] ? __pfx_path_openat+0x10/0x10 [ 1791.640388][ T4517] ? __x64_sys_openat+0x138/0x170 [ 1791.640407][ T4517] do_file_open+0x23e/0x4a0 [ 1791.640425][ T4517] ? __pfx_do_file_open+0x10/0x10 [ 1791.640447][ T4517] ? _raw_spin_unlock+0x28/0x50 [ 1791.640463][ T4517] ? alloc_fd+0x64b/0x6c0 [ 1791.640480][ T4517] do_sys_openat2+0x113/0x200 [ 1791.640494][ T4517] ? __se_sys_futex+0x3a8/0x450 [ 1791.640509][ T4517] ? __pfx_do_sys_openat2+0x10/0x10 [ 1791.640524][ T4517] ? __fget_files+0x2a/0x420 [ 1791.640538][ T4517] ? __pfx___se_sys_futex+0x10/0x10 [ 1791.640553][ T4517] __x64_sys_openat+0x138/0x170 [ 1791.640568][ T4517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.640582][ T4517] do_syscall_64+0x174/0x580 [ 1791.640596][ T4517] ? trace_irq_disable+0x3b/0x140 [ 1791.640613][ T4517] ? clear_bhb_loop+0x40/0x90 [ 1791.640633][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.640646][ T4517] RIP: 0033:0x7f429ab9ce59 [ 1791.640660][ T4517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.640671][ T4517] RSP: 002b:00007f429bad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1791.640685][ T4517] RAX: ffffffffffffffda RBX: 00007f429ae16180 RCX: 00007f429ab9ce59 [ 1791.640695][ T4517] RDX: 0000000000000140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1791.640704][ T4517] RBP: 00007f429ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1791.640713][ T4517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1791.640721][ T4517] R13: 00007f429ae16218 R14: 00007f429ae16180 R15: 00007f429af3fa48 [ 1791.640735][ T4517] [ 1792.083672][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.094655][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.134220][T18291] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1792.284116][T16330] usb 5-1: device not accepting address 86, error -71 [ 1792.375856][T18291] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1792.387394][T18291] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1792.415798][T18291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1792.436317][T18291] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1792.455123][T18291] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1792.470466][T18291] usb 2-1: Product: syz [ 1792.482980][T18291] usb 2-1: Manufacturer: syz [ 1792.495860][T18291] usb 2-1: SerialNumber: syz [ 1792.513151][T18291] usb 2-1: config 0 descriptor?? [ 1792.520646][ T4480] net_ratelimit: 1924 callbacks suppressed [ 1792.520656][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.540638][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.554368][T18291] usb 2-1: can't set config #0, error -71 [ 1792.563133][T18291] usb 2-1: USB disconnect, device number 103 [ 1792.573209][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.587618][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.602275][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.612724][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.623941][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.633266][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.643156][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1792.654673][ T4480] ip_tunnel_core: Dead loop on virtual device gre1 (net 1562), fix it urgently! [ 1793.075008][T18293] usb 5-1: USB disconnect, device number 86