last executing test programs: 10.896292671s ago: executing program 2 (id=3859): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x3350c2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e) r3 = dup(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffbfef}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x8, r4}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r7, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r7, &(0x7f0000000180), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) io_setup(0x0, &(0x7f0000004200)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x1, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r10}]) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000005580)="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", 0x1003}, {&(0x7f0000000740)="903f1d01e9cac03022adfc5d54c6af246af429db1f33f4898257a7e1fcd9e811f022c3be5c95a6c3bcbf528a8f6111cd982f92cd0f1e12bcd111a7206a21a0f9bf271d763b328b8fc33b22965f6c313bcb16e8dd4816228ec94beece9ae98afe524d7281f7a14ccecb378ca35ed32eaecad5d2f0fe114527f8fe96354a236a8ae0d3b6e95c488f94415a2713b63c65dd141c00000000", 0x96}, {&(0x7f0000000140)="8764", 0x2}, {&(0x7f00000002c0)="aceda51c608f14ec874aaad4a52b1804b4ff8d83ffadad1944e09f48b10f290650277ed40ab15d4693991c3597a14c8c30929e", 0x33}, {&(0x7f0000000300)="bae175039a80b87a510e50ce81", 0xd}, {&(0x7f0000000440)="4d8471caf67eb7ed05a88a24c6da0d36c2d44e2e826ce05b0e6af579429b46a2f965d542910ebbe702dde70f64dfb75a8bc8f8d195ae808fdbd4fd3a378a5261212ef93fc0723780c8357500c7e71df91628f366a7d73220400c44448bb961399484b9b8f8750a60ea021bc9ddad6c258e87ac7a08c04e23e651ac25af8e5767351e87ee1ffe9892f6e6e6d7d05aa5b4a711f5a7f35f34bc5339be443bc301b966592c25863b315a4e7e088a03b36066e33b93450e2c736827", 0xb9}, {&(0x7f0000000500)="d278c95c47d02196c721f67d7c4a01b13a74cfe21e92a61f407fb3f07c5470ffbdbed912e8490a570f19419b75f92e69be85e0d19800b9d89e9c72dffc8289ac69f569e39bfa4459b33431b546b69ef42f1ab215a552c54dbca7183845b14609b3363077d8dd25338653b563071371f69b5a125ed5be4a160854c8c165e2e95397196f3a03609e1ca14e827803f92803f37d476741f241264ab44020d84e02fac8546eebc6ddb3df", 0xa8}, {&(0x7f0000000340)}, {&(0x7f0000004580)="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", 0x1000}], 0x9}, 0x20008850) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 10.266925954s ago: executing program 2 (id=3864): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x1, 0x1}, {0x4a, 0x2}, @cond=[{0xffff, 0x706, 0xfffb, 0x1, 0x100, 0x4}, {0x9, 0x8, 0x4, 0x59, 0x5}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) (fail_nth: 16) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x24040800) 9.180558898s ago: executing program 2 (id=3869): r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.726166147s ago: executing program 2 (id=3871): ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x20, 0x34, 0x3e}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB=' 0\x00+\n\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x14000, 0x8a, 0x20}, 0x18) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03010100000000000000130000000e0001"], 0x34}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000140007800500140007000000080012400005000009"], 0x60}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) 7.248817338s ago: executing program 0 (id=3875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000004c0)="b9800000c00f3235010000000f300f01c82e660fc7b345f900000f5a89d5000000260f2fa007000000b8ffffffff0f23d00f21f8351000000c0f23f80f005309262e363e0f01c9f2f2f365f08156cd00000000360f01df", 0x57}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000005c0)={"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"}) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0xe) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x8004b709, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a6", 0x2a) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xe3, 0x7d, 0x20, 0x8ca, 0x111, 0xa99b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcffffff5f0000000800030085000000"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 6.43986318s ago: executing program 4 (id=3877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, &(0x7f0000000240)) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) getpgrp(r6) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x3a, 0x0, 0xee00}, {0x4, 0x0, 0x0, 0x1, 0x1000, 0x52}, {0x0, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xfd}]}]}, 0x17c}}, 0x0) 6.300460155s ago: executing program 4 (id=3879): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=0x0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (fail_nth: 5) 5.745815588s ago: executing program 3 (id=3880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x4) dup2(r6, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, 0x0) 5.144096045s ago: executing program 4 (id=3881): r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.122452764s ago: executing program 1 (id=3882): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 4.940369408s ago: executing program 4 (id=3883): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0x10fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x40800000000000, 0x800000000000000}}, [@algo_comp={0x1044, 0x3, {{'deflate\x00'}, 0x7fe0, "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"}}]}, 0x10fc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000000, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r7, &(0x7f00000003c0)=""/159, 0x9f, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) 4.329106582s ago: executing program 0 (id=3884): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x800, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000fb00000000000000000063176666cbe1f0fca4936fccf074a580a4396f982f9bf611d0da513302f5ab94c861c49cca5f53d9e93ad6c8f3268121142f34e8635d"], 0x50080) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x2, 0x400c8460, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x4, 0xfffffffc}}, 0x50) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 4.317538216s ago: executing program 1 (id=3885): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup3(r3, r2, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0xc4c03d16, 0x1) 4.13145135s ago: executing program 1 (id=3886): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000180)={0x2000, 0xb000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0xf000, 0x111000}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001d40)={0x0, 0x0}, &(0x7f0000001d80)=0xc) lstat(&(0x7f00000097c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001f40)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000002040)=0xe8) getresgid(&(0x7f0000002080), &(0x7f00000020c0)=0x0, &(0x7f0000002100)) syz_fuse_handle_req(r2, &(0x7f0000002200)="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", 0x2000, &(0x7f000000a900)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0x2010000, 0x9, 0x7fff, 0x6, 0x7713, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000140)={0x18, 0x0, 0x2db, {0x7}}, &(0x7f0000000280)={0x18, 0x0, 0x5, {0xb1b5}}, &(0x7f00000002c0)={0x18, 0x0, 0xffffffffffffffff, {0x3}}, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0x1, {0xff}}, &(0x7f0000000380)={0x28, 0xfffffffffffffff5, 0x2, {{0x91, 0x0, 0x2, 0xffffffffffffffff}}}, &(0x7f0000000480)={0x60, 0x0, 0x2d36bd1d, {{0x1, 0x80000000, 0xfffffffffffffffe, 0x60f, 0x3, 0xfffffffd, 0x2, 0x6}}}, &(0x7f0000000500)={0x18, 0xffffffffffffffda, 0x200, {0xe}}, &(0x7f0000000540)={0x21, 0x0, 0x1, {'/proc/partitions\x00'}}, &(0x7f0000001600)={0x20, 0x0, 0x5, {0x0, 0x2}}, &(0x7f0000001700)={0x78, 0x0, 0x9, {0xfdbd, 0xefb, 0x0, {0x2, 0x8, 0x6, 0x6, 0x2000000000000009, 0xd71, 0x9, 0x7, 0x9, 0x8000, 0x5, 0x0, 0x0, 0x3, 0x5}}}, &(0x7f0000001780)={0x90, 0x0, 0x0, {0x1, 0x1, 0x3, 0x8, 0x8, 0x8, {0x0, 0x3, 0x8ded, 0x2, 0xfffffffffffffff9, 0x1fffffffc, 0x8, 0x4010, 0x1, 0xc000, 0xb, 0xee01, 0x0, 0x7, 0x3ff}}}, &(0x7f0000001840)={0x48, 0x0, 0xff13, [{0x5, 0x3, 0x5, 0x1, 'team\x00'}, {0x1, 0x8, 0x0, 0x7fffffff}]}, &(0x7f0000009240)={0x548, 0x0, 0x3f, [{{0x6, 0x2, 0xfffffffffffffff7, 0x1ff, 0x6, 0xfff, {0x3, 0x3, 0x8, 0xa, 0x4, 0x100, 0x8, 0x7f, 0xffff, 0xc000, 0x100, 0x0, 0x0, 0xffff, 0x1}}, {0x3, 0x100000000, 0xc, 0x81, '/dev/nullb0\x00'}}, {{0x6, 0x2, 0x86f, 0xffffffffffffffff, 0x2, 0x81, {0x1, 0x90, 0x1, 0x1, 0x55c, 0xb, 0x2, 0xf41e, 0xe3ee, 0xf000, 0x0, 0x0, 0x0, 0xb5, 0x7}}, {0x2, 0x2, 0x5, 0x598e, 'team\x00'}}, {{0x6, 0x2, 0xf, 0x8, 0x8, 0x4, {0x3, 0x0, 0xfd, 0x0, 0x1, 0x4, 0x5, 0x4, 0x3, 0x6000, 0x98, 0x0, 0x0, 0x0, 0x1}}, {0x5, 0x2, 0x19, 0x7a09, '/proc/sys/vm/drop_caches\x00'}}, {{0x4, 0x1, 0x9, 0xc00, 0x8, 0x2, {0x1, 0xe, 0x8001, 0x80, 0x9, 0xffffffffffffff01, 0x8000, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x5, 0x7}}, {0x6, 0x100000000, 0xc, 0x6, '/dev/nullb0\x00'}}, {{0x2, 0x2, 0x2, 0x4f61, 0x4, 0x0, {0x1, 0x7, 0x7, 0x8, 0x3, 0xae, 0x48e8, 0xf63, 0x0, 0x1000, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0xfb}}, {0x1, 0x0, 0x5, 0x7, 'team\x00'}}, {{0x3, 0x3, 0xc, 0x2e7, 0x80000001, 0x36, {0x6, 0xc, 0x4, 0x9, 0x37, 0x3ab6, 0x6, 0x5, 0x1000000, 0x1000, 0x8, 0x0, 0x0, 0x6, 0x5}}, {0x5, 0x4, 0x3, 0x7a, '\'\xbc,'}}, {{0x5, 0x0, 0x7, 0x9, 0x2, 0x2a8b40, {0x1, 0xc, 0x1, 0x100000000, 0x0, 0x9, 0x4, 0xfffffffb, 0x3, 0xd000, 0x10001, 0x0, 0x0, 0x0, 0x6}}, {0x6, 0x6, 0x19, 0x52a, '/proc/sys/vm/drop_caches\x00'}}, {{0x4, 0x3, 0x4, 0x6, 0x8, 0x5, {0x6, 0xffffffffffffffff, 0xb81, 0x6, 0x6, 0x6, 0x8, 0xb, 0x7fff, 0x1000, 0x40000, 0x0, 0x0, 0x2, 0x4f2685ce}}, {0x3, 0x9, 0x0, 0xffffffff}}]}, &(0x7f0000001e40)={0xa0, 0x0, 0x9, {{0x2, 0x1, 0x9, 0x4154, 0xff, 0x5024, {0x6, 0xfffffffffffffff8, 0xa6af, 0x9, 0x9, 0x2, 0x6, 0x9, 0x7, 0x1000, 0x9, r5, r6, 0xe1, 0x8}}, {0x0, 0x4}}}, &(0x7f0000001f00)={0x20, 0xfffffffffffffff5, 0x51436e02, {0x2, 0x0, 0x496, 0x81}}, &(0x7f000000a7c0)={0x130, 0x0, 0x7, {0x8, 0x3be, 0x0, '\x00', {0x100, 0xe, 0x7, 0x40, r7, r8, 0x6000, '\x00', 0xc, 0x2, 0xcc8, 0x7fffffffffffffff, {0x6, 0x4}, {0x0, 0x1ff}, {0x20, 0x7}, {0xfff, 0x7}, 0x80000001, 0x1, 0x9, 0x2}}}}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0xb, 0xd8b8, 0x4, 0x8, 0x7, 0x4, 0x9, 0x5}, &(0x7f0000000240)={0x12, 0x0, 0x620e83b1, 0x2ca0000000000000, 0x8000000000000000, 0x7fffffffffffffff, 0x2, 0x2}, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0xf50, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440), 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) r10 = socket$key(0xf, 0x3, 0x2) recvmmsg(r10, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) clock_gettime(0x0, &(0x7f0000000300)) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) 3.878313042s ago: executing program 0 (id=3887): r0 = socket(0x10, 0x803, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0x7, 0xffe0}, {0x10, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) write$char_usb(r7, &(0x7f0000001300)='7', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x54}}, 0x8800) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) chroot(&(0x7f0000000000)='./file0/file0\x00') 3.442557851s ago: executing program 2 (id=3888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0x1100, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x40800000000000, 0x800000000000000}}, [@algo_comp={0x1046, 0x3, {{'deflate\x00'}, 0x7ff0, "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"}}]}, 0x1100}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000000, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r7, &(0x7f00000003c0)=""/159, 0x9f, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) 3.028075713s ago: executing program 1 (id=3889): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x8e}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) write$P9_RLERRORu(r7, 0x0, 0xd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r2, &(0x7f0000000040)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x1) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x1f, 0xfffffffffffff000, 0x2000}) 2.878551684s ago: executing program 3 (id=3890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d0001"], 0x1c}], 0x1}, 0x310) 2.848470846s ago: executing program 4 (id=3891): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[], 0xfffffffffffffff4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000500)=[{0x1, '\x00', @st={0x4, [{0x1, @svalue=0x2}, {0x1, @svalue=0x5}, {0x1, @uvalue=0x3}, {0x1, @uvalue=0x3}]}, 0x3}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0xfffffffffffffffb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x8, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x25000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r4, 0x8140aecc, &(0x7f0000000580)) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.439258848s ago: executing program 3 (id=3892): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0xfc, {0xfc, 0x30, "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"}}, &(0x7f0000000180)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "ba9c5f8e7e18306ea3fa8cea894deea307b9a6dd063ab72bbece60aaf734e46b1222929805254da6c0fe0ffad1f79dce6356a27d266f1ff5a3e6e497528a16f6e08c265c0285abfd613c7c137c7263457428adde04c92750f697d9acb2c682c4df5e45fded911b00b74abfc882fa692c9cbf42944db0f9b8cf369eb3095cab93a92d04ca493ab09154c5eb3aa104626a0d4820529ef41b5972b80830f0e84872c521b90cf26f723bf88980afb76928da0f0ff0f25f3e328106ba675cf07df524623688ab146830e53f6e"}}, &(0x7f0000000280)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ab274fb6417fa885639355d1c7756856"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x2, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f88636570a509dd94184a21fb858a41d"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6d, 0x8, 0x45, 0xca, "6682e6ef", "7346e548"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x2, 0x74, 0x0, 0x1, 0x6}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x0, 0x15, 0xe6, "5a7f2536b60de97d9032a97622d0cfd095cfefab584610eee4b00bb1461173dbde28adb803a4a454f5363bbd7f28892f8d2b44b06e1dfed6516497f17445d506cd233c5efa9a66370efb325dc1cd3c3cc84b768753b75610ca1d763b9d1e7f9898c830bbcaa877da29c5a77045c5ab7d5bbdc1a5b84c5923032bfbf1234e08c340b88537de78e01bc840832a00fc6e5090d5a2c00c384cacdb394a68f72765db9fea50c6b5c60f5e187f1a8593db92bd9acc09d6ff3de7fb14480396794bcc769db7aa020cea44c77d497a00756895d918cfbec32edb9e8f15694539ab1e32d6bb4329314b5e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4a}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0xb, 0x2, "bd0f"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xfffc}, &(0x7f0000000680)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x19, 0x2, "90ca"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x41}}) 2.036792984s ago: executing program 1 (id=3893): socket$netlink(0x10, 0x3, 0x0) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x28, '\x00', @buffer={"67156e93446a62b429dbc528411c5c2e13dcf1eed699475586a0f96baf9718c4", 0x20}, 0x802}]}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x20000000, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000500)=0x5, 0x4) sendto$inet6(r5, 0x0, 0x60, 0x40000, 0x0, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(0xffffffffffffffff, 0x6f3e, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/188, 0xbc}, {0x0}], 0x4, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r6 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000", @ANYRESDEC=r0, @ANYBLOB="8d7fd4a2a5833a7573fa585399c5a2aa03cc329f5f5c0f6b91368fe25ca81cbfd56aa2ca4e92426e16c116c89fc77db42a96311d081d5df2a68a99e1e2cf637b3759beff77ec0ceed70200f84748f8304259f4601671a8628eb282e424d4256a8e4b521bf6954e9d11821c3f8044b30057015e952a974f12e1226fa25e5960ae1a7b506666b17a57d1d0e81241ed59b937d9367e2e09e91487196b60d74497f2ee2ef1c9f85cd3cb5a5c90006c668c3e5654a32fae911f5aa3c46be179a021ed12621df4ba2d6f252466ec06b697fe8009c87b169be3a9df89117b51bfd35d7818c4b411eaaba726048a7b5c423bb95ee82237133379f545deb32f75147baea13e9b243f0a8e64db8515d87f04bf7a411a840fb48fb6d10493d41a6d7ec676a6225da4793c5339570ac9e2c5f22b96ce96d1c13d1dee016f8e64235a7aca7fa6e7b64b6ba810b665d5a5f4769ff6cc01c1a70a815b1049f0284aa055fcf5"], 0x44}}, 0x0) 1.548600056s ago: executing program 2 (id=3894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000004c0)="b9800000c00f3235010000000f300f01c82e660fc7b345f900000f5a89d5000000260f2fa007000000b8ffffffff0f23d00f21f8351000000c0f23f80f005309262e363e0f01c9f2f2f365f08156cd00000000360f01df", 0x57}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000005c0)={"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"}) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0xe) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x8004b709, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a6", 0x2a) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xe3, 0x7d, 0x20, 0x8ca, 0x111, 0xa99b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcffffff5f0000000800030085000000"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 956.554303ms ago: executing program 0 (id=3895): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 944.233949ms ago: executing program 3 (id=3896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000002c0012800b00010062726964676500001c00028e0c00200000000000000000000c001f00feffffffffffffff0b5fb7009db8a3d34e8d10c86edeb8a098cdb56b4c973a1722f3"], 0x4c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x0, 0x32, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x400e010) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@deltclass={0x88, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xe, 0xb}, {0x2, 0xc}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000640)) close(r8) r9 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0x2}}], 0x18, 0x4c00}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @local}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)='\'', 0x1}, {&(0x7f0000000200)="aac1e464f484be0d86a4fb7a4c3e81", 0xf}], 0x2}, 0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000001040)={0x0, 0x8}) 731.204762ms ago: executing program 0 (id=3897): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x800, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000fb00000000000000000063176666cbe1f0fca4936fccf074a580a4396f982f9bf611d0da513302f5ab94c861c49cca5f53d9e93ad6c8f3268121142f34e8635d"], 0x50080) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x2, 0x400c8460, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x4, 0xfffffffc}}, 0x50) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 640.299714ms ago: executing program 4 (id=3898): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'wg0\x00', @ifru_settings={0x3, 0x0, @raw_hdlc=0x0}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000058d000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000380)={0xf, {"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", 0x1000}}, 0x1006) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="13000000360081084e89a67e88d5d306c09b8e082a434f27aba3003b12c5e2ed26017ec0bd6e4c9731be3d8c98085cd6940f5c11d80e829df121136862d598000964c2db03d7983bb824417cccd47fbdd4ae77cb074b6a0fcac4d6d2ae21920200893263f854e8eb378cfc4eb836b6cb4372f95f273cd3174eedf5", 0x7b}], 0x1}, 0x8000) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r5, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='./file0\x00') sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc4) 542.990367ms ago: executing program 0 (id=3899): socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r2 = syz_clone(0x842411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x1, &(0x7f0000000080)) 503.526555ms ago: executing program 3 (id=3900): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) setpriority(0x1, r0, 0x7) 378.882µs ago: executing program 3 (id=3901): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x80000000, 0x7, 0x2, {0xa, @sliced={0x1, [0x5, 0x1, 0x7, 0x6, 0x7, 0x3, 0x5, 0x800, 0xfffa, 0x1, 0x9, 0x6, 0x0, 0x101, 0xe7, 0x40, 0x3, 0xfff, 0x4000, 0x7, 0x101, 0x3, 0x1, 0xfffa, 0x9, 0x2, 0x8, 0x6, 0x401, 0xb, 0x1, 0x9, 0x7, 0xd82, 0x5, 0x6, 0x1, 0x7, 0xb2, 0x1, 0xd, 0x7, 0xf, 0x101, 0x1, 0x200, 0x4]}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@overlay={0x1, 0xa, 0x4, 0x2000, 0x1, {0x0, 0xea60}, {0x2, 0x1, 0x1, 0x4, 0x8, 0x1, "16a683cf"}, 0x7fe, 0x3, {}, 0x4, 0x0, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000401, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff00"/47], 0xb8}}, 0x8000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 0s ago: executing program 1 (id=3902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): 682568][T17977] [ 1072.677242][T17982] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1072.686317][T17982] bridge6: entered promiscuous mode [ 1072.693138][T17982] bridge6: entered allmulticast mode [ 1073.300622][ T5892] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1073.450225][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 1073.457917][ T5892] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1073.468298][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1073.494617][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1073.514501][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1073.537618][ T5892] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.570073][ T5892] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1073.582434][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.621654][ T5892] usbtmc 2-1:16.0: bulk endpoints not found [ 1073.661732][ T29] audit: type=1326 audit(1773256931.298:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18003 comm="syz.0.3512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f042fb9c799 code=0x0 [ 1073.853663][T11030] usb 2-1: USB disconnect, device number 47 [ 1074.369360][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3512'. [ 1074.423116][ T5951] usb 3-1: USB disconnect, device number 21 [ 1074.638634][T18018] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1074.647613][T11030] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 1074.837263][T18018] bridge3: entered promiscuous mode [ 1074.845545][T18018] bridge3: entered allmulticast mode [ 1074.894719][T11030] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1074.943128][T11030] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1075.038510][T11030] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.087167][T11030] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1075.224993][T11030] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.280244][T11030] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23 [ 1075.672477][T11030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.723126][T11030] usbtmc 2-1:16.0: bulk endpoints not found [ 1075.731799][T11030] ati_remote 2-1:16.0: ati_remote_probe: Unexpected endpoint_in [ 1075.934176][ T5951] usb 2-1: USB disconnect, device number 48 [ 1076.729405][T18037] FAULT_INJECTION: forcing a failure. [ 1076.729405][T18037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.774329][T18037] CPU: 1 UID: 0 PID: 18037 Comm: syz.4.3519 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.774354][T18037] Tainted: [L]=SOFTLOCKUP [ 1076.774359][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1076.774367][T18037] Call Trace: [ 1076.774373][T18037] [ 1076.774382][T18037] dump_stack_lvl+0xe8/0x150 [ 1076.774409][T18037] should_fail_ex+0x412/0x560 [ 1076.774431][T18037] _copy_from_iter+0x1d3/0x1670 [ 1076.774449][T18037] ? rcu_is_watching+0x15/0xb0 [ 1076.774470][T18037] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1076.774486][T18037] ? __build_skb+0x62/0x440 [ 1076.774505][T18037] ? __build_skb+0x62/0x440 [ 1076.774522][T18037] ? __pfx__copy_from_iter+0x10/0x10 [ 1076.774541][T18037] ? __build_skb+0x2a2/0x440 [ 1076.774558][T18037] ? netlink_sendmsg+0x650/0xb40 [ 1076.774576][T18037] ? skb_put+0x11b/0x210 [ 1076.774595][T18037] netlink_sendmsg+0x6c0/0xb40 [ 1076.774617][T18037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.774634][T18037] ? __fget_files+0x2a/0x420 [ 1076.774653][T18037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1076.774672][T18037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1076.774688][T18037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.774705][T18037] __sys_sendto+0x672/0x710 [ 1076.774725][T18037] ? __pfx___sys_sendto+0x10/0x10 [ 1076.774741][T18037] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1076.774767][T18037] ? __fget_files+0x3a0/0x420 [ 1076.774790][T18037] ? ksys_write+0x242/0x270 [ 1076.774805][T18037] ? __pfx_ksys_write+0x10/0x10 [ 1076.774821][T18037] __x64_sys_sendto+0xde/0x100 [ 1076.774840][T18037] do_syscall_64+0x14d/0xf80 [ 1076.774852][T18037] ? trace_irq_disable+0x3b/0x150 [ 1076.774870][T18037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.774891][T18037] ? clear_bhb_loop+0x40/0x90 [ 1076.774907][T18037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.774928][T18037] RIP: 0033:0x7fc9a559c799 [ 1076.774948][T18037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.774967][T18037] RSP: 002b:00007fc9a37f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1076.774990][T18037] RAX: ffffffffffffffda RBX: 00007fc9a5815fa0 RCX: 00007fc9a559c799 [ 1076.775006][T18037] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 1076.775019][T18037] RBP: 00007fc9a37f6090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 1076.775028][T18037] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1076.775036][T18037] R13: 00007fc9a5816038 R14: 00007fc9a5815fa0 R15: 00007fc9a593fa48 [ 1076.775055][T18037] [ 1077.112310][T18040] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 1077.210011][T12204] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.585444][T18051] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1077.624946][T18051] bridge2: entered promiscuous mode [ 1077.641184][T18051] bridge2: entered allmulticast mode [ 1077.900354][ T5892] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1078.062205][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.249206][ T5892] usb 2-1: config 0 has no interfaces? [ 1078.275554][ T5892] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1078.310962][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.341429][ T5892] usb 2-1: config 0 descriptor?? [ 1078.900049][ T5892] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1078.947914][ T5912] usb 2-1: USB disconnect, device number 49 [ 1078.980211][T13661] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1079.033171][ T990] dummy0: left promiscuous mode [ 1079.115115][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.125598][ T5892] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1079.139285][ T5892] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1079.221205][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.241224][T13661] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1079.252430][T13661] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.269987][T13661] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1079.289588][T13661] usb 5-1: config 1 has no interface number 1 [ 1079.310255][ T5892] usb 3-1: config 0 descriptor?? [ 1079.315464][T13661] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1079.532412][T18080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.683811][T13661] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1079.754692][T13661] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1079.765349][T13661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.834822][T13661] usb 5-1: Product: syz [ 1079.870297][T13661] usb 5-1: Manufacturer: syz [ 1079.888370][T13661] usb 5-1: SerialNumber: syz [ 1080.156375][T18072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.201501][T18072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.233387][T18072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.297221][T18072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.366649][T18072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.431466][T18072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.471751][T13661] usb 5-1: Failed to set altset [ 1080.499826][T13661] usb 5-1: 0:2: cannot create sequencer device [ 1080.529623][T13661] usb 5-1: Failed to set altset [ 1080.664454][T13661] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1080.702170][T13661] usb 5-1: USB disconnect, device number 54 [ 1080.933176][T18091] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 1080.975530][T18091] bridge7: entered promiscuous mode [ 1081.043062][T18091] bridge7: entered allmulticast mode [ 1081.531903][ T5912] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1081.741774][ T5912] usb 2-1: config 226 has an invalid interface number: 44 but max is 2 [ 1081.760243][ T5912] usb 2-1: config 226 has an invalid interface number: 26 but max is 2 [ 1081.768729][ T5912] usb 2-1: config 226 has an invalid interface number: 144 but max is 2 [ 1081.785528][ T5912] usb 2-1: config 226 has no interface number 0 [ 1081.792639][ T5912] usb 2-1: config 226 has no interface number 1 [ 1081.798978][ T5912] usb 2-1: config 226 has no interface number 2 [ 1081.805936][ T5912] usb 2-1: config 226 interface 44 altsetting 3 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1081.824528][ T5912] usb 2-1: config 226 interface 44 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1081.836180][ T5912] usb 2-1: config 226 interface 44 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1081.847547][ T5912] usb 2-1: config 226 interface 44 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1081.858871][ T5912] usb 2-1: config 226 interface 44 altsetting 3 endpoint 0x5 has invalid maxpacket 1991, setting to 64 [ 1081.891820][ T5912] usb 2-1: config 226 interface 44 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1081.964658][ T5892] usb 3-1: string descriptor 0 read error: -71 [ 1081.976687][ T5912] usb 2-1: config 226 interface 44 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1082.001428][ T5892] usb 3-1: USB disconnect, device number 22 [ 1082.027920][ T5912] usb 2-1: config 226 interface 26 altsetting 14 endpoint 0xF has invalid maxpacket 34393, setting to 1024 [ 1082.040376][ T5912] usb 2-1: config 226 interface 26 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 1082.051602][ T5912] usb 2-1: config 226 interface 26 altsetting 14 has a duplicate endpoint with address 0x6, skipping [ 1082.082443][ T5912] usb 2-1: config 226 interface 26 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 1082.098239][ T5912] usb 2-1: config 226 interface 26 altsetting 14 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1082.110247][ T5912] usb 2-1: config 226 interface 26 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 1082.168642][ T5912] usb 2-1: config 226 interface 26 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 1082.196628][ T5912] usb 2-1: config 226 interface 144 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 1082.255343][ T5912] usb 2-1: config 226 interface 144 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 1082.279458][ T5912] usb 2-1: config 226 interface 44 has no altsetting 0 [ 1082.297219][ T5912] usb 2-1: config 226 interface 26 has no altsetting 0 [ 1082.330701][ T5912] usb 2-1: config 226 interface 144 has no altsetting 0 [ 1082.352151][ T5912] usb 2-1: Dual-Role OTG device on HNP port [ 1082.366018][ T5912] usb 2-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=6d.69 [ 1082.391485][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.419258][ T5912] usb 2-1: Product: syz [ 1082.428055][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1082.442089][ T5912] usb 2-1: Manufacturer: 꼨ä‚뢵簎♛ã”륑㬈⸜堢籤埊ꕓ痵㋜犔誌ൽŔ㹉꤃唎᷶緂孠ᵹꃾä«á‰Šî…°îŸç¼¿ì¸™æŽ…䷋ࠂ똸닎碘ア煰廾碦뱳·ࠬâªâš³ê¼½çˆ¢ê‚¾è´ïººâ¥šæ¸—庿ᑘ쪆餛ण솠᧞˶ីꅙ銣쿻Ⰺ橖ä´å…”餋﫦঑ѳ㜈溥绾΢㠺楤敵ổè™â€£ïº¯ê°ë¨»æ§½ [ 1082.489010][T18116] kvm: apic: phys broadcast and lowest prio [ 1082.531396][ T5912] usb 2-1: SerialNumber: syz [ 1082.790904][ T5912] sierra 2-1:226.44: Sierra USB modem converter detected [ 1082.846390][ T5912] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1082.866159][ T5912] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1082.887847][ T5912] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 1082.906933][T18133] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1082.954364][ T5912] usb 2-1: USB disconnect, device number 50 [ 1083.054153][ T5912] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1083.163707][ T5912] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1083.207280][ T5912] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 1083.390464][T11030] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1083.405929][ T5912] sierra 2-1:226.44: device disconnected [ 1083.608773][T11030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.780277][T11030] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1083.820157][T11030] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1083.870932][T11030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.906539][T11030] usb 3-1: config 0 descriptor?? [ 1084.109981][ T5867] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1084.150358][ T5951] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1084.306049][ T5867] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1084.325760][ T5867] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1084.336491][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 1084.343784][ T5951] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1084.356124][ T5951] usb 2-1: config 0 has no interface number 0 [ 1084.382981][ T5867] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1084.396891][ T5951] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1084.417324][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.440372][ T5951] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1084.484405][ T5951] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1084.496635][T18145] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1084.517995][ T5867] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1084.536884][ T5951] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1084.560368][ T5951] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1084.569778][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.584190][ T5951] usb 2-1: Product: syz [ 1084.588487][ T5951] usb 2-1: Manufacturer: syz [ 1084.596471][ T5912] hid_parser_main: 41 callbacks suppressed [ 1084.596495][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1084.725301][T18145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.738578][T18145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.758351][ T5951] usb 2-1: SerialNumber: syz [ 1084.774311][ T5951] usb 2-1: config 0 descriptor?? [ 1084.784671][T18145] batadv0: entered promiscuous mode [ 1084.801456][T18147] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1084.806480][T18145] vlan2: entered promiscuous mode [ 1084.814099][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1084.839684][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1084.898419][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1084.936948][T18153] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1084.950350][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1084.968095][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1084.992560][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1085.139210][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1085.165925][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1085.192837][ T5912] hid-generic 0006:0004:0009.0054: unknown main item tag 0x0 [ 1085.217967][ T5892] usb 4-1: USB disconnect, device number 123 [ 1085.233713][ T5912] hid-generic 0006:0004:0009.0054: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1085.530685][ T5951] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 1085.555625][ T5951] ipheth 2-1:0.196: probe with driver ipheth failed with error -110 [ 1086.158317][T18165] ucma_write: process 251 (syz.4.3559) changed security contexts after opening file descriptor, this is not allowed. [ 1086.590140][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1086.750317][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1086.764791][T11030] usb 3-1: string descriptor 0 read error: -71 [ 1086.785723][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.790272][T11030] usb 3-1: USB disconnect, device number 23 [ 1086.846367][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1086.867360][ T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1086.898542][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.943242][ T9] usb 1-1: config 0 descriptor?? [ 1086.965976][T18187] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3565'. [ 1086.981593][ T5867] usb 2-1: USB disconnect, device number 51 [ 1087.440351][ T9] usb 1-1: string descriptor 0 read error: -71 [ 1087.462248][ T9] usb 1-1: USB disconnect, device number 62 [ 1087.907152][ T9] hid-generic 0006:0004:0009.0055: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1087.935833][T18218] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.3571'. [ 1087.957990][T18221] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1087.970081][T18221] bridge4: entered promiscuous mode [ 1087.978238][T18221] bridge4: entered allmulticast mode [ 1088.365536][T18230] syzkaller0: entered promiscuous mode [ 1088.380067][T18230] syzkaller0: entered allmulticast mode [ 1088.419997][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1088.433279][T18232] FAULT_INJECTION: forcing a failure. [ 1088.433279][T18232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.523827][T18196] tipc: Failed to remove unknown binding: 66,1,1/0:1378652798/1378652800 [ 1088.584355][T18229] tipc: Failed to remove unknown binding: 66,1,1/0:4164507324/4164507326 [ 1088.637361][T18232] CPU: 1 UID: 0 PID: 18232 Comm: syz.0.3575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.637386][T18232] Tainted: [L]=SOFTLOCKUP [ 1088.637393][T18232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1088.637403][T18232] Call Trace: [ 1088.637409][T18232] [ 1088.637415][T18232] dump_stack_lvl+0xe8/0x150 [ 1088.637438][T18232] should_fail_ex+0x412/0x560 [ 1088.637457][T18232] _copy_from_iter+0x1d3/0x1670 [ 1088.637482][T18232] ? __pfx__copy_from_iter+0x10/0x10 [ 1088.637497][T18232] ? sock_alloc_send_pskb+0x896/0x990 [ 1088.637518][T18232] ? __pfx__copy_from_iter+0x10/0x10 [ 1088.637535][T18232] ? page_copy_sane+0x16a/0x270 [ 1088.637553][T18232] copy_page_from_iter+0xdd/0x170 [ 1088.637573][T18232] skb_copy_datagram_from_iter+0x306/0x710 [ 1088.637594][T18232] packet_sendmsg+0x37e4/0x50f0 [ 1088.637620][T18232] ? __lock_acquire+0x6b5/0x2cf0 [ 1088.637642][T18232] ? __lock_acquire+0x6b5/0x2cf0 [ 1088.637667][T18232] ? aa_sk_perm+0x6d5/0x900 [ 1088.637681][T18232] ? __pfx_packet_sendmsg+0x10/0x10 [ 1088.637702][T18232] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1088.637723][T18232] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1088.637740][T18232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1088.637754][T18232] ? __pfx_packet_sendmsg+0x10/0x10 [ 1088.637770][T18232] __sys_sendto+0x672/0x710 [ 1088.637790][T18232] ? __pfx___sys_sendto+0x10/0x10 [ 1088.637806][T18232] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1088.637828][T18232] ? __fget_files+0x3a0/0x420 [ 1088.637856][T18232] ? ksys_write+0x242/0x270 [ 1088.637871][T18232] ? __pfx_ksys_write+0x10/0x10 [ 1088.637887][T18232] __x64_sys_sendto+0xde/0x100 [ 1088.637914][T18232] do_syscall_64+0x14d/0xf80 [ 1088.637925][T18232] ? trace_irq_disable+0x3b/0x150 [ 1088.637943][T18232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.637955][T18232] ? clear_bhb_loop+0x40/0x90 [ 1088.637970][T18232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.637983][T18232] RIP: 0033:0x7f042fb9c799 [ 1088.637995][T18232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.638007][T18232] RSP: 002b:00007f04309c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1088.638022][T18232] RAX: ffffffffffffffda RBX: 00007f042fe16090 RCX: 00007f042fb9c799 [ 1088.638031][T18232] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1088.638040][T18232] RBP: 00007f04309c4090 R08: 0000200000000140 R09: 0000000000000014 [ 1088.638048][T18232] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 1088.638056][T18232] R13: 00007f042fe16128 R14: 00007f042fe16090 R15: 00007f042ff3fa48 [ 1088.638074][T18232] [ 1089.147674][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1089.157879][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1089.196513][ T9] usb 5-1: config 0 has no interface number 0 [ 1089.231061][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1089.244337][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.262694][ T9] usb 5-1: Product: syz [ 1089.281450][ T9] usb 5-1: Manufacturer: syz [ 1089.330213][ T9] usb 5-1: SerialNumber: syz [ 1089.438930][ T9] usb 5-1: config 0 descriptor?? [ 1089.462234][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1089.492734][ T9] usb 5-1: selecting invalid altsetting 1 [ 1089.539240][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1089.547057][ T5912] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1089.576030][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1089.607651][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1089.616564][ T9] usb 5-1: media controller created [ 1089.647988][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.700030][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 1089.707610][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1089.718587][ T5912] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1089.730366][ T5912] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.753074][T18224] program syz.4.3573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.762714][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1089.769711][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1089.778419][T18224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3573'. [ 1089.798177][ T5912] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1089.808443][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1089.828419][ T5912] usb 3-1: config 128 has no interface number 0 [ 1089.844311][ T5912] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.862107][T11030] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1089.870974][ T5912] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1089.890302][ T5912] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1089.902457][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.913555][ T9] usb 5-1: USB disconnect, device number 55 [ 1089.920857][T13661] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1089.953961][ T5912] usb 3-1: Product: syz [ 1089.958211][ T5912] usb 3-1: Manufacturer: syz [ 1089.970791][ T5912] usb 3-1: SerialNumber: syz [ 1090.029165][T11030] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1090.059016][T11030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.080450][T11030] usb 4-1: Product: syz [ 1090.084818][T11030] usb 4-1: Manufacturer: syz [ 1090.085329][T13661] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1090.116972][T13661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.119919][T11030] usb 4-1: SerialNumber: syz [ 1090.125439][T13661] usb 1-1: Product: syz [ 1090.134752][T13661] usb 1-1: Manufacturer: syz [ 1090.139677][T13661] usb 1-1: SerialNumber: syz [ 1090.147698][T11030] usb 4-1: config 0 descriptor?? [ 1090.149501][T13661] usb 1-1: config 0 descriptor?? [ 1090.189706][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.201339][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.352970][ T5912] usb 3-1: USB disconnect, device number 24 [ 1090.374995][T13661] usb 1-1: ignoring: probably an ADSL modem [ 1090.557299][ T5867] hid_parser_main: 24 callbacks suppressed [ 1090.557324][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.577388][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.583693][T18246] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1090.594256][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.594294][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.594320][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.594386][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.594412][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.594439][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.594466][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.594519][ T5867] hid-generic 0006:0004:0009.0056: unknown main item tag 0x0 [ 1090.611440][ T5867] hid-generic 0006:0004:0009.0056: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1090.777344][T13661] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1090.866493][T18240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.879498][T18240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.892134][T11030] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1090.900386][T11030] usb 4-1: Firmware version (0.0) predates our first public release. [ 1090.908734][T11030] usb 4-1: Please update to version 0.2 or newer [ 1091.163537][T18261] tipc: Failed to remove unknown binding: 66,1,1/0:38211971/38211973 [ 1091.326541][T11030] usb 4-1: Firmware: build [ 1091.465891][T18264] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3579'. [ 1091.526750][T18267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.568074][T11030] usb 4-1: USB disconnect, device number 124 [ 1091.601072][T18267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.890460][ T5951] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1092.055842][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1092.067543][ T5951] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.090269][ T5951] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1092.119960][ T5951] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 220, changing to 7 [ 1092.164958][ T5951] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1092.211977][ T5951] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1092.237808][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.287729][ T5951] usb 2-1: Product: syz [ 1092.317946][ T5951] usb 2-1: Manufacturer: syz [ 1092.344131][ T5951] usb 2-1: SerialNumber: syz [ 1092.358624][ T5912] hid-generic 0006:0004:0009.0057: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1092.386484][T18269] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1092.570865][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 1092.819636][ T5951] usb 2-1: USB disconnect, device number 52 [ 1092.902874][ T9] usb 1-1: USB disconnect, device number 63 [ 1093.142264][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 1093.250679][ T29] audit: type=1326 audit(1773256950.848:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1093.410067][ T29] audit: type=1326 audit(1773256950.848:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1093.410831][ T5912] hid-generic 0006:0004:0009.0058: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1093.525529][ T29] audit: type=1326 audit(1773256950.848:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1093.585267][ T29] audit: type=1326 audit(1773256950.848:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1093.609602][ T29] audit: type=1326 audit(1773256950.858:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1093.640414][ T29] audit: type=1326 audit(1773256950.858:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1093.663606][ T29] audit: type=1326 audit(1773256950.858:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1093.703583][T18292] FAULT_INJECTION: forcing a failure. [ 1093.703583][T18292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.716987][T18292] CPU: 1 UID: 0 PID: 18292 Comm: syz.2.3594 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.717021][T18292] Tainted: [L]=SOFTLOCKUP [ 1093.717034][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1093.717046][T18292] Call Trace: [ 1093.717054][T18292] [ 1093.717064][T18292] dump_stack_lvl+0xe8/0x150 [ 1093.717100][T18292] should_fail_ex+0x412/0x560 [ 1093.717130][T18292] _copy_to_user+0x31/0xb0 [ 1093.717163][T18292] simple_read_from_buffer+0xe1/0x170 [ 1093.717198][T18292] proc_fail_nth_read+0x1bb/0x230 [ 1093.717232][T18292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1093.717265][T18292] ? rw_verify_area+0x2a6/0x4d0 [ 1093.717287][T18292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1093.717318][T18292] vfs_read+0x20c/0xa70 [ 1093.717339][T18292] ? fdget_pos+0x246/0x320 [ 1093.717373][T18292] ? __pfx___mutex_lock+0x10/0x10 [ 1093.717397][T18292] ? __pfx_vfs_read+0x10/0x10 [ 1093.717421][T18292] ? __fget_files+0x2a/0x420 [ 1093.717455][T18292] ? __fget_files+0x3a0/0x420 [ 1093.717484][T18292] ? __fget_files+0x2a/0x420 [ 1093.717522][T18292] ksys_read+0x150/0x270 [ 1093.717548][T18292] ? __pfx_ksys_read+0x10/0x10 [ 1093.717582][T18292] do_syscall_64+0x14d/0xf80 [ 1093.717602][T18292] ? trace_irq_disable+0x3b/0x150 [ 1093.717631][T18292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.717653][T18292] ? clear_bhb_loop+0x40/0x90 [ 1093.717688][T18292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.717710][T18292] RIP: 0033:0x7fe5f935cfce [ 1093.717730][T18292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1093.717749][T18292] RSP: 002b:00007fe5fa23cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1093.717773][T18292] RAX: ffffffffffffffda RBX: 00007fe5fa23d6c0 RCX: 00007fe5f935cfce [ 1093.717788][T18292] RDX: 000000000000000f RSI: 00007fe5fa23d0a0 RDI: 0000000000000004 [ 1093.717800][T18292] RBP: 00007fe5fa23d090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.717813][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1093.717825][T18292] R13: 00007fe5f9616038 R14: 00007fe5f9615fa0 R15: 00007fe5f973fa48 [ 1093.717866][T18292] [ 1093.937051][T13661] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1094.120346][T13661] usb 2-1: Using ep0 maxpacket: 16 [ 1094.127877][T13661] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1094.215916][T13661] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1094.227104][ T29] audit: type=1326 audit(1773256950.858:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1094.249962][ T5951] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1094.290246][T13661] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1094.330395][T13661] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1094.345139][ T29] audit: type=1326 audit(1773256950.858:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1094.368156][T13661] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1094.377394][T13661] usb 2-1: config 0 has no interface number 0 [ 1094.384033][T13661] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1094.399967][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 1094.404688][ T29] audit: type=1326 audit(1773256950.858:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.3.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f76b899c799 code=0x7ffc0000 [ 1094.412049][ T5951] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1094.438983][T13661] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1094.797383][ T5951] usb 5-1: config 0 has no interface number 0 [ 1094.810279][ T5951] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1094.811515][T13661] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1094.852096][ T5951] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1094.888571][T13661] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1094.908577][ T5951] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1094.921178][ T5951] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1094.940331][T13661] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1094.942381][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.953864][T13661] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1094.964456][ T5951] usb 5-1: Product: syz [ 1094.975854][ T5951] usb 5-1: Manufacturer: syz [ 1094.994178][ T5951] usb 5-1: SerialNumber: syz [ 1095.038748][ T5951] usb 5-1: config 0 descriptor?? [ 1095.069327][T13661] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1095.085624][T13661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.128451][T13661] usb 2-1: Product: syz [ 1095.146493][T13661] usb 2-1: Manufacturer: syz [ 1095.192684][T13661] usb 2-1: SerialNumber: syz [ 1095.216790][T13661] usb 2-1: config 0 descriptor?? [ 1095.232620][T13661] usb 2-1: selecting invalid altsetting 2 [ 1095.287808][ T5951] appletouch 5-1:0.85: Failed to read mode from device. [ 1095.295914][ T5951] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1095.343044][T18304] tipc: Enabled bearer , priority 0 [ 1095.360924][T18304] syzkaller0: entered promiscuous mode [ 1095.366481][T18304] syzkaller0: entered allmulticast mode [ 1095.380026][T16416] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1095.405115][T18304] tipc: Resetting bearer [ 1095.422870][T18304] tipc: Resetting bearer [ 1095.447411][ C0] usb 2-1: async_complete: urb error -71 [ 1095.453241][ C0] usb 2-1: async_complete: urb error -71 [ 1095.459049][ C0] usb 2-1: async_complete: urb error -71 [ 1095.464934][ C0] usb 2-1: async_complete: urb error -71 [ 1095.476713][T18304] tipc: Disabling bearer [ 1095.478601][T13661] get_1284_register: usb error -71 [ 1095.488120][T13661] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 1095.502928][T13661] usb 2-1: USB disconnect, device number 53 [ 1095.503698][ T5951] usb 5-1: USB disconnect, device number 56 [ 1095.531451][T16416] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1095.543832][T16416] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1095.565387][T16416] usb 4-1: string descriptor 0 read error: -22 [ 1095.572410][T16416] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 1095.595131][T16416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.653243][T18302] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1095.755176][ T5912] hid_parser_main: 41 callbacks suppressed [ 1095.755201][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.771574][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.779016][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.807212][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.826653][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.847673][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.865639][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.894720][T18308] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1095.907106][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.928855][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.947638][ T5912] hid-generic 0006:0004:0009.0059: unknown main item tag 0x0 [ 1095.983616][ T5912] hid-generic 0006:0004:0009.0059: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1096.144192][T16416] logitech 0003:046D:C298.005A: hidraw0: USB HID vff.7f Device [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 1096.170091][T16416] logitech 0003:046D:C298.005A: no inputs found [ 1096.327265][ T5912] usb 4-1: USB disconnect, device number 125 [ 1096.849288][ T5912] hid-generic 0006:0004:0009.005B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1097.186176][ T5912] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1097.380296][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 1097.398502][ T5912] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1097.407905][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.450865][ T5912] usb 1-1: Product: syz [ 1097.455281][ T5912] usb 1-1: Manufacturer: syz [ 1097.490091][ T5912] usb 1-1: SerialNumber: syz [ 1097.519755][ T5912] usb 1-1: config 0 descriptor?? [ 1097.573286][ T5912] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1098.016934][T18342] hub 9-0:1.0: USB hub found [ 1098.043345][T18342] hub 9-0:1.0: 1 port detected [ 1098.097475][T18342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1098.258016][ T9] hid-generic 0006:0004:0009.005C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1098.279330][T18350] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1098.533333][T17184] hid-generic 0006:0004:0009.005D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1098.660355][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1098.794331][ T5912] gspca_ov534_9: reg_w failed -71 [ 1098.820320][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1098.825881][T17184] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1098.843788][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.865091][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.888771][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1098.908082][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.925195][ T9] usb 4-1: config 0 descriptor?? [ 1098.934339][ T9] hub 4-1:0.0: USB hub found [ 1099.002568][T17184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.025964][T17184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.054753][T17184] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1099.076750][T17184] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1099.085034][ T5912] gspca_ov534_9: Unknown sensor 0000 [ 1099.085168][ T5912] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1099.128999][T17184] usb 2-1: Manufacturer: syz [ 1099.136274][ T5912] usb 1-1: USB disconnect, device number 64 [ 1099.142423][ T9] hub 4-1:0.0: 29 ports detected [ 1099.149684][ T9] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1099.166122][T17184] usb 2-1: config 0 descriptor?? [ 1099.297769][T18370] fuse: Bad value for 'fd' [ 1099.576312][ T9] usb 4-1: USB disconnect, device number 127 [ 1099.700077][T11030] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1099.862263][T11030] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1099.896893][T11030] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1099.924148][T11030] usb 1-1: string descriptor 0 read error: -22 [ 1099.940239][T11030] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 1099.949342][T11030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.983818][T18373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1100.007346][T17184] uclogic 0003:256C:006D.005E: failed retrieving string descriptor #200: -71 [ 1100.260837][T17184] uclogic 0003:256C:006D.005E: failed retrieving pen parameters: -71 [ 1100.269085][T17184] uclogic 0003:256C:006D.005E: failed probing pen v2 parameters: -71 [ 1100.360297][T17184] uclogic 0003:256C:006D.005E: failed probing parameters: -71 [ 1100.368132][T17184] uclogic 0003:256C:006D.005E: probe with driver uclogic failed with error -71 [ 1100.422379][T17184] usb 2-1: USB disconnect, device number 54 [ 1100.452691][T11030] usbhid 1-1:1.0: can't add hid device: -32 [ 1100.464599][T11030] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1100.498789][T11030] usb 1-1: USB disconnect, device number 65 [ 1100.660210][T16416] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1100.823222][T16416] usb 3-1: Using ep0 maxpacket: 16 [ 1100.835110][T16416] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 1100.867326][T16416] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 1100.887180][T16416] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1100.909537][T16416] usb 3-1: config 0 has no interface number 0 [ 1101.070383][T16416] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1101.095907][T16416] usb 3-1: config 0 interface 104 has no altsetting 1 [ 1101.194800][T16416] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1101.196637][T17184] hid_parser_main: 405 callbacks suppressed [ 1101.196660][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.223651][T16416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.224593][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.248590][T16416] usb 3-1: Product: syz [ 1101.259654][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.270339][T16416] usb 3-1: Manufacturer: syz [ 1101.280208][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.287836][T16416] usb 3-1: SerialNumber: syz [ 1101.308886][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.309452][T16416] usb 3-1: config 0 descriptor?? [ 1101.328773][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.355393][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.358333][T16416] asix 3-1:0.104: probe with driver asix failed with error -22 [ 1101.396600][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.424882][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.452918][T17184] hid-generic 0006:0004:0009.005F: unknown main item tag 0x0 [ 1101.506592][T17184] hid-generic 0006:0004:0009.005F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1101.645467][T16416] usb 3-1: USB disconnect, device number 25 [ 1101.685729][T11030] hid-generic 0006:0004:0009.0060: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1101.800641][T18400] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.3632'. [ 1102.080276][T16416] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1102.251001][T16416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 1102.358239][T16416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 1102.416403][T16416] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1102.450285][T16416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.458358][T16416] usb 1-1: Product: syz [ 1102.491702][T16416] usb 1-1: Manufacturer: syz [ 1102.496371][T16416] usb 1-1: SerialNumber: syz [ 1102.517883][T16416] usb 1-1: config 0 descriptor?? [ 1102.660259][T17184] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1102.751230][T16416] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input94 [ 1102.800244][T17184] usb 3-1: device descriptor read/64, error -71 [ 1102.810605][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3640'. [ 1102.859957][T11030] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1103.030200][T11030] usb 2-1: Using ep0 maxpacket: 32 [ 1103.042361][T11030] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1103.106216][T17184] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1103.129926][T11030] usb 2-1: config 0 has no interface number 0 [ 1103.144679][T11030] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.169278][T11030] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1103.217237][T11030] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1103.245788][T11030] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1103.260072][T11030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.274888][T11030] usb 2-1: Product: syz [ 1103.285598][T11030] usb 2-1: Manufacturer: syz [ 1103.294894][T11030] usb 2-1: SerialNumber: syz [ 1103.309802][T11030] usb 2-1: config 0 descriptor?? [ 1103.332044][T17184] usb 3-1: device descriptor read/64, error -71 [ 1103.458799][T17184] usb usb3-port1: attempt power cycle [ 1103.559117][T11030] appletouch 2-1:0.85: Failed to read mode from device. [ 1103.569608][T11030] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1103.754484][T11030] usb 2-1: USB disconnect, device number 55 [ 1103.860545][T17184] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1103.881939][T17184] usb 3-1: device descriptor read/8, error -71 [ 1103.903939][ T9] hid-generic 0006:0004:0009.0061: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1104.120918][T17184] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1104.197841][T17184] usb 3-1: device descriptor read/8, error -71 [ 1104.322536][T17184] usb usb3-port1: unable to enumerate USB device [ 1104.816488][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3648'. [ 1104.845381][T11030] hid-generic 0006:0004:0009.0062: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1104.893375][T18442] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.3649'. [ 1104.908595][T11030] usb 1-1: USB disconnect, device number 66 [ 1105.919352][ T9] hid-generic 0006:0004:0009.0063: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1106.593814][T18481] netlink: 'syz.1.3663': attribute type 1 has an invalid length. [ 1106.630989][T16416] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1106.700328][T18486] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3662'. [ 1106.796598][T16416] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1106.815862][T16416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.866060][T16416] usb 1-1: Product: syz [ 1106.883473][T18481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1106.903610][T16416] usb 1-1: Manufacturer: syz [ 1106.924582][T16416] usb 1-1: SerialNumber: syz [ 1106.943829][T18485] bond1: (slave geneve2): making interface the new active one [ 1106.952980][T18485] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1107.004566][T16416] usb 1-1: config 0 descriptor?? [ 1107.047241][T17184] hid_parser_main: 75 callbacks suppressed [ 1107.047266][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.072550][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.091804][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.111530][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.133188][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.159325][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.176575][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.181281][T18490] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1107.205933][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.250405][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.250576][T16416] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1107.266030][T17184] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1107.356461][T17184] hid-generic 0006:0004:0009.0064: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1107.472330][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1107.472352][ T29] audit: type=1326 audit(1773256965.108:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1107.577362][ T29] audit: type=1326 audit(1773256965.148:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1107.639440][ T29] audit: type=1326 audit(1773256965.148:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1107.713092][ T29] audit: type=1326 audit(1773256965.148:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1107.805731][ T29] audit: type=1326 audit(1773256965.148:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1107.859374][T17184] hid-generic 0006:0004:0009.0065: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1107.889578][ T29] audit: type=1326 audit(1773256965.148:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1107.920573][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1107.947401][ T29] audit: type=1326 audit(1773256965.148:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1108.109154][ T29] audit: type=1326 audit(1773256965.148:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1108.227960][ T29] audit: type=1326 audit(1773256965.148:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1108.282023][T18504] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1108.342139][ T29] audit: type=1326 audit(1773256965.148:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.2.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1108.457154][T18473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.513694][T18473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.598057][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1109.370493][T18527] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3676'. [ 1109.550252][ T5951] hid-generic 0006:0004:0009.0066: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1109.583830][T16416] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1109.591098][T18531] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1109.597311][T16416] usb 1-1: USB disconnect, device number 67 [ 1109.641472][ T5912] hid-generic 0006:0004:0009.0067: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1110.644146][T18558] tipc: Failed to remove unknown binding: 66,1,1/0:1078067972/1078067974 [ 1111.120359][ T5912] hid-generic 0006:0004:0009.0068: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1112.139748][T18576] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1112.350316][ T5912] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 1112.554107][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 1112.554128][ T29] audit: type=1326 audit(1773256970.188:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042fb9c42b code=0x7ffc0000 [ 1112.594260][ T5912] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 1112.623232][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.675598][ T5912] usb 1-1: config 0 has no interface number 0 [ 1112.703065][ T29] audit: type=1326 audit(1773256970.198:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042fb9c42b code=0x7ffc0000 [ 1112.709730][ T5912] usb 1-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1112.769192][T17184] hid_parser_main: 75 callbacks suppressed [ 1112.769216][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1112.785788][ T29] audit: type=1326 audit(1773256970.228:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042fb9c42b code=0x7ffc0000 [ 1112.797428][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1112.816210][ T5912] usb 1-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1112.828554][ T5912] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 1112.839687][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1112.857834][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1112.859255][ T29] audit: type=1326 audit(1773256970.228:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042fb9c42b code=0x7ffc0000 [ 1112.893851][T18590] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.3699'. [ 1112.905957][ T5912] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 1112.939090][ T29] audit: type=1326 audit(1773256970.228:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042fb9c42b code=0x7ffc0000 [ 1113.054875][ T29] audit: type=1326 audit(1773256970.228:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042fb9c42b code=0x7ffc0000 [ 1113.077869][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1113.077907][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1113.077932][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1113.077957][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1113.077996][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1113.078022][T17184] hid-generic 0006:0004:0009.0069: unknown main item tag 0x0 [ 1113.085882][ T5912] usb 1-1: config 0 interface 244 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 1113.085942][ T5912] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1113.085975][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.104757][T17184] hid-generic 0006:0004:0009.0069: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1113.168388][ T5912] usb 1-1: config 0 descriptor?? [ 1113.176525][T18572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1113.415657][ T29] audit: type=1326 audit(1773256970.648:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.2.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1113.516544][ T5912] usb 1-1: string descriptor 0 read error: -71 [ 1113.528565][ T5912] cypress_m8 1-1:0.244: DeLorme Earthmate USB converter detected [ 1113.558046][ T29] audit: type=1326 audit(1773256970.648:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.2.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1113.565162][ T5912] earthmate ttyUSB0: required endpoint is missing [ 1113.792180][ T29] audit: type=1326 audit(1773256970.648:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.2.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1113.831230][ T5892] hid-generic 0006:0004:0009.006A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1113.849443][ T5912] usb 1-1: USB disconnect, device number 68 [ 1113.856201][ T29] audit: type=1326 audit(1773256970.648:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.2.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f939c799 code=0x7ffc0000 [ 1113.883699][ T5912] cypress_m8 1-1:0.244: device disconnected [ 1114.371102][T18612] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3707'. [ 1114.440063][ T5892] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1114.602758][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 1114.610961][ T5892] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1114.633176][ T5892] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1114.911265][ T5892] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 21, changing to 8 [ 1115.339407][ T5892] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17211, setting to 1024 [ 1115.380003][ T5892] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1115.528690][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1115.542256][ T5892] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1115.551879][ T5892] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1115.611182][ T5892] usb 2-1: Product: syz [ 1115.634057][ T5892] usb 2-1: Manufacturer: syz [ 1115.644187][ T5892] usb 2-1: SerialNumber: syz [ 1115.668398][T18625] FAULT_INJECTION: forcing a failure. [ 1115.668398][T18625] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.689435][ T5892] usb 2-1: config 0 descriptor?? [ 1115.703166][ T5892] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1115.724420][ T5892] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1115.732616][T18625] CPU: 1 UID: 0 PID: 18625 Comm: syz.4.3711 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.732650][T18625] Tainted: [L]=SOFTLOCKUP [ 1115.732658][T18625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1115.732670][T18625] Call Trace: [ 1115.732679][T18625] [ 1115.732688][T18625] dump_stack_lvl+0xe8/0x150 [ 1115.732723][T18625] should_fail_ex+0x412/0x560 [ 1115.732755][T18625] should_failslab+0xa8/0x100 [ 1115.732780][T18625] ? skb_clone+0x212/0x3a0 [ 1115.732800][T18625] kmem_cache_alloc_noprof+0x87/0x650 [ 1115.732820][T18625] ? __netlink_lookup+0xc6/0x8b0 [ 1115.732857][T18625] skb_clone+0x212/0x3a0 [ 1115.732881][T18625] __netlink_deliver_tap+0x404/0x850 [ 1115.732918][T18625] ? netlink_deliver_tap+0x2e/0x1b0 [ 1115.732944][T18625] netlink_deliver_tap+0x19c/0x1b0 [ 1115.732969][T18625] netlink_unicast+0x7e3/0x9b0 [ 1115.733000][T18625] ? __pfx_netlink_unicast+0x10/0x10 [ 1115.733024][T18625] ? netlink_sendmsg+0x650/0xb40 [ 1115.733047][T18625] ? skb_put+0x11b/0x210 [ 1115.733077][T18625] netlink_sendmsg+0x813/0xb40 [ 1115.733111][T18625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.733139][T18625] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1115.733166][T18625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1115.733191][T18625] ____sys_sendmsg+0x972/0x9f0 [ 1115.733218][T18625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.733246][T18625] ? import_iovec+0x73/0xa0 [ 1115.733278][T18625] ___sys_sendmsg+0x2a5/0x360 [ 1115.733302][T18625] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.733355][T18625] ? __fget_files+0x2a/0x420 [ 1115.733380][T18625] ? __fget_files+0x3a0/0x420 [ 1115.733416][T18625] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1115.733437][T18625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1115.733466][T18625] ? __pfx_ksys_write+0x10/0x10 [ 1115.733497][T18625] do_syscall_64+0x14d/0xf80 [ 1115.733515][T18625] ? trace_irq_disable+0x3b/0x150 [ 1115.733540][T18625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.733559][T18625] ? clear_bhb_loop+0x40/0x90 [ 1115.733591][T18625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.733609][T18625] RIP: 0033:0x7fc9a559c799 [ 1115.733628][T18625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.733645][T18625] RSP: 002b:00007fc9a37f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.733666][T18625] RAX: ffffffffffffffda RBX: 00007fc9a5815fa0 RCX: 00007fc9a559c799 [ 1115.733680][T18625] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1115.733693][T18625] RBP: 00007fc9a37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.733704][T18625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.733716][T18625] R13: 00007fc9a5816038 R14: 00007fc9a5815fa0 R15: 00007fc9a593fa48 [ 1115.733746][T18625] [ 1116.109549][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.116046][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.149969][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1116.170305][T16416] usb 2-1: USB disconnect, device number 56 [ 1116.222239][T16416] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1116.310416][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1116.319085][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1116.328768][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.369323][ T9] usb 3-1: Product: syz [ 1116.389729][ T9] usb 3-1: Manufacturer: syz [ 1116.402278][ T9] usb 3-1: SerialNumber: syz [ 1116.414620][T18608] netlink: 'syz.1.3706': attribute type 5 has an invalid length. [ 1116.423029][T18608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3706'. [ 1116.433779][T18608] fuse: Bad value for 'user_id' [ 1116.438759][T18608] fuse: Bad value for 'user_id' [ 1116.562760][ T9] usb 3-1: config 0 descriptor?? [ 1116.589573][ T9] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1116.855007][T16416] hid-generic 0006:0004:0009.006B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1116.921765][T18636] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.3715'. [ 1117.165796][T16416] hid-generic 0006:0004:0009.006C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1117.222975][T18629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1117.261572][T18629] gtp0: entered promiscuous mode [ 1117.277531][T18629] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1117.316011][ T9] gspca_sonixj: reg_w1 err -71 [ 1117.321050][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1117.374999][ T9] usb 3-1: USB disconnect, device number 30 [ 1117.550253][ T5892] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1117.712940][ T5892] usb 5-1: config 0 has an invalid interface number: 133 but max is 1 [ 1117.725671][ T5892] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1117.745170][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.770775][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1117.790113][ T5892] usb 5-1: config 0 has no interface number 0 [ 1117.804960][ T5892] usb 5-1: config 0 interface 133 altsetting 2 endpoint 0x4 has an invalid bInterval 69, changing to 7 [ 1117.828583][ T5892] usb 5-1: config 0 interface 133 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1117.856343][ T5892] usb 5-1: config 0 interface 133 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1118.033807][ T5892] usb 5-1: config 0 interface 133 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1118.305251][ T5892] usb 5-1: config 0 interface 133 has no altsetting 0 [ 1118.339591][ T5892] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=90.92 [ 1118.350398][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.372720][ T5892] usb 5-1: Product: syz [ 1118.391030][ T5892] usb 5-1: Manufacturer: syz [ 1118.421604][ T5892] usb 5-1: SerialNumber: syz [ 1118.467179][ T5892] usb 5-1: config 0 descriptor?? [ 1118.733140][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1119.178155][ T5892] usb 5-1: USB disconnect, device number 57 [ 1119.410034][T11030] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1119.680762][T11030] usb 2-1: Using ep0 maxpacket: 32 [ 1119.734190][T11030] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1119.766007][T11030] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1119.800013][T11030] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1119.808303][T11030] usb 2-1: Product: syz [ 1119.818485][T11030] usb 2-1: Manufacturer: syz [ 1119.854044][T11030] usb 2-1: SerialNumber: syz [ 1119.902771][T11030] usb 2-1: config 0 descriptor?? [ 1119.931922][T18666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1119.956496][T11030] hub 2-1:0.0: bad descriptor, ignoring hub [ 1119.970225][T11030] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1120.063352][T18676] team0: entered allmulticast mode [ 1120.068596][T18676] team_slave_0: entered allmulticast mode [ 1120.088558][ T5892] hid_parser_main: 58 callbacks suppressed [ 1120.088574][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.110339][ T5951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1120.120082][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.124190][T18676] team_slave_1: entered allmulticast mode [ 1120.142551][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.164304][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.176636][T18666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.182407][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.218242][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.218696][T18666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.236298][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.260844][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1120.277536][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.291552][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.299294][ T5892] hid-generic 0006:0004:0009.006D: unknown main item tag 0x0 [ 1120.330854][ T5892] hid-generic 0006:0004:0009.006D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1120.402230][ T5892] usb 2-1: USB disconnect, device number 57 [ 1120.500037][ T5951] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1120.640395][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1120.712102][T16416] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1120.750505][T11030] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1120.800945][ T5951] usb usb4-port1: attempt power cycle [ 1120.887351][T16416] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1120.901375][T16416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.910068][T11030] usb 2-1: Using ep0 maxpacket: 32 [ 1120.925496][T16416] usb 3-1: Product: syz [ 1120.935697][T11030] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1120.946707][T16416] usb 3-1: Manufacturer: syz [ 1120.956847][T16416] usb 3-1: SerialNumber: syz [ 1120.961594][ T5912] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1120.989272][T11030] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1121.008477][T16416] usb 3-1: config 0 descriptor?? [ 1121.017960][T11030] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1121.083181][T11030] usb 2-1: Product: syz [ 1121.087419][T11030] usb 2-1: Manufacturer: syz [ 1121.129987][T11030] usb 2-1: SerialNumber: syz [ 1121.141936][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.156097][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1121.156690][T11030] usb 2-1: config 0 descriptor?? [ 1121.171706][ T5951] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1121.176280][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1121.222646][ T5912] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1121.240319][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.273065][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1121.281661][T16416] usb 3-1: USB disconnect, device number 31 [ 1121.295754][T18666] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1121.316237][ T5912] usb 1-1: config 0 descriptor?? [ 1121.325077][T11030] hub 2-1:0.0: bad descriptor, ignoring hub [ 1121.354906][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 1121.354922][ T29] audit: type=1326 audit(1773256978.988:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1121.387488][T11030] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1121.468166][ T29] audit: type=1326 audit(1773256979.038:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1121.523006][ T5951] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1121.552182][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1121.562156][ T29] audit: type=1326 audit(1773256979.038:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1121.637709][ T29] audit: type=1326 audit(1773256979.038:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1121.662149][ T5951] usb usb4-port1: unable to enumerate USB device [ 1121.686486][ T9] usb 2-1: USB disconnect, device number 58 [ 1121.754487][ T29] audit: type=1326 audit(1773256979.048:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1122.181798][ T29] audit: type=1326 audit(1773256979.048:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1122.315740][ T29] audit: type=1326 audit(1773256979.048:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1122.502815][ T5912] ath6kl: Failed to submit usb control message: -110 [ 1122.524733][ T5912] ath6kl: unable to send the bmi data to the device: -110 [ 1122.541930][ T5912] ath6kl: Unable to send get target info: -110 [ 1122.548280][ T29] audit: type=1326 audit(1773256979.048:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1122.549695][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3736'. [ 1122.632860][ T5912] ath6kl: Failed to init ath6kl core: -110 [ 1122.710606][ T5912] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1122.750178][ T29] audit: type=1326 audit(1773256979.048:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1122.875669][ T29] audit: type=1326 audit(1773256979.048:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18693 comm="syz.4.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a559c799 code=0x7ffc0000 [ 1123.284567][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1123.659962][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1123.850258][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1123.871837][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1123.880428][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1123.915030][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1123.939030][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1123.963564][ T5912] usb 1-1: USB disconnect, device number 69 [ 1124.042599][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.072672][T16416] hid-generic 0006:0004:0009.006E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1124.077550][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1124.126712][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.467909][ T9] usb 2-1: usb_control_msg returned -32 [ 1124.474490][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1124.659062][ T5912] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1124.846582][ T5912] usb 1-1: config 0 has no interfaces? [ 1124.857541][ T5912] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1124.869177][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.898950][ T5912] usb 1-1: config 0 descriptor?? [ 1125.135198][ T5912] usb 1-1: USB disconnect, device number 70 [ 1125.152355][T18740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1125.377716][T18742] xt_hashlimit: max too large, truncated to 1048576 [ 1125.600101][ T5912] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1125.752187][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1125.776413][ T5912] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1125.806604][ T5912] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1125.836731][ T5912] usb 1-1: string descriptor 0 read error: -22 [ 1125.857146][ T5912] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1125.878348][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.240398][ T5951] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1126.340876][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.400045][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1126.407000][T16416] usb 2-1: USB disconnect, device number 59 [ 1126.435418][ T5951] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1126.456890][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.478163][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.511802][ T5951] usb 4-1: Product: syz [ 1126.516079][ T5951] usb 4-1: Manufacturer: syz [ 1126.558623][ T5951] usb 4-1: SerialNumber: syz [ 1126.563505][T17184] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1126.600371][ T5951] usb 4-1: config 0 descriptor?? [ 1126.633446][ T5951] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1126.661600][ T5912] usb 1-1: Can't get UAC3 power state for id 10 [ 1126.763382][T17184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.808257][T17184] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1126.875299][T17184] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1126.929962][T17184] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1126.949910][T17184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.985210][T17184] usb 3-1: config 0 descriptor?? [ 1127.220205][T16416] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1127.419073][T18744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1127.464127][T18763] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1127.523078][T16416] usb 2-1: Using ep0 maxpacket: 8 [ 1127.537569][ T5951] gspca_ov534_9: reg_w failed -71 [ 1127.670802][ T9] hid_parser_main: 24 callbacks suppressed [ 1127.670829][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.687170][ T5912] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1127.695334][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.705042][T16416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.746191][T16416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.747049][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.765485][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.775342][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.783450][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.791054][T16416] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1127.793460][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.826977][T16416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.860471][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.868052][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.876882][ T9] hid-generic 0006:0004:0009.006F: unknown main item tag 0x0 [ 1127.877951][T16416] usb 2-1: config 0 descriptor?? [ 1127.889488][ T9] hid-generic 0006:0004:0009.006F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1127.980100][ T5951] gspca_ov534_9: Unknown sensor 0000 [ 1127.980209][ T5951] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1128.009037][ T5951] usb 4-1: USB disconnect, device number 6 [ 1128.087260][T17184] ath6kl: Failed to submit usb control message: -110 [ 1128.096141][T17184] ath6kl: unable to send the bmi data to the device: -110 [ 1128.108287][ T5912] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1128.144995][T17184] ath6kl: Unable to send get target info: -110 [ 1128.193856][T17184] ath6kl: Failed to init ath6kl core: -110 [ 1128.210526][T17184] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1128.249120][ T5912] usb 1-1: USB disconnect, device number 71 [ 1128.325535][T16416] logitech 0003:046D:C20E.0070: rdesc size test failed for formula gp [ 1128.360479][T16416] logitech 0003:046D:C20E.0070: unbalanced collection at end of report description [ 1128.380913][T16416] logitech 0003:046D:C20E.0070: parse failed [ 1128.401216][T16416] logitech 0003:046D:C20E.0070: probe with driver logitech failed with error -22 [ 1128.638654][T18773] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3760'. [ 1128.656909][ T5912] usb 2-1: USB disconnect, device number 60 [ 1128.669474][T18773] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1129.328597][ T5912] usb 3-1: USB disconnect, device number 32 [ 1131.120363][ T5912] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1131.220070][T16416] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1131.370671][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 1131.480291][T16416] usb 1-1: device descriptor read/64, error -71 [ 1131.488157][ T5912] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1131.839269][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.870213][T16416] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1131.878057][ T5912] usb 4-1: Product: syz [ 1131.905914][ T5912] usb 4-1: Manufacturer: syz [ 1131.926374][ T5912] usb 4-1: SerialNumber: syz [ 1132.010080][T16416] usb 1-1: device descriptor read/64, error -71 [ 1132.014960][ T5912] usb 4-1: config 0 descriptor?? [ 1132.048806][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1132.120474][T16416] usb usb1-port1: attempt power cycle [ 1132.504063][T16416] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1132.540900][T16416] usb 1-1: device descriptor read/8, error -71 [ 1132.752848][ T5912] gspca_sonixj: reg_w1 err -71 [ 1132.758644][ T5912] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1132.796821][ T5912] usb 4-1: USB disconnect, device number 7 [ 1132.871405][T16416] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1133.164014][T16416] usb 1-1: device descriptor read/8, error -71 [ 1133.293807][T16416] usb usb1-port1: unable to enumerate USB device [ 1134.380130][ T5951] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1134.714728][ T5951] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1134.735586][ T5951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.805462][ T5951] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1134.835842][ T5951] usb 1-1: config 1 has no interface number 1 [ 1134.854511][ T5951] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1134.917410][ T5951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1134.956133][ T5951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.988463][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.017497][ T5951] usb 1-1: Product: syz [ 1135.027665][ T5951] usb 1-1: Manufacturer: syz [ 1135.050264][ T5951] usb 1-1: SerialNumber: syz [ 1135.293766][T18832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.310662][T18832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.338990][T18832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.362426][T18832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.375516][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1135.375539][ T29] audit: type=1326 audit(1773256992.998:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9a559c799 code=0x0 [ 1135.461691][T18832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.470956][T18832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.495629][ T5951] usb 1-1: Failed to set altset [ 1135.513663][ T5951] usb 1-1: 0:2: cannot create sequencer device [ 1135.550289][ T5951] usb 1-1: Failed to set altset [ 1135.629113][ T5951] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1135.655723][ T5951] usb 1-1: USB disconnect, device number 76 [ 1136.563902][ T5951] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1136.611182][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'. [ 1136.642062][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3786'. [ 1136.732520][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.732560][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1136.732588][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1136.732614][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1136.732660][ T5951] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1136.732687][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.735081][ T5951] usb 4-1: config 0 descriptor?? [ 1137.331270][ T5899] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1137.514518][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 1137.530698][T11030] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1137.550768][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.570240][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.597368][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1137.616372][ T5951] usbhid 4-1:0.0: can't add hid device: -71 [ 1137.632864][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.650845][ T5951] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1137.675341][ T5899] usb 5-1: config 0 descriptor?? [ 1137.684054][ T5951] usb 4-1: USB disconnect, device number 8 [ 1137.712542][T11030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.733766][T11030] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1137.752218][T11030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.861892][T11030] usb 3-1: config 0 descriptor?? [ 1138.123151][ T5899] usbhid 5-1:0.0: can't add hid device: -71 [ 1138.129359][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1138.145476][ T5899] usb 5-1: USB disconnect, device number 58 [ 1138.305581][T11030] ath6kl: Failed to read usb control message: -71 [ 1138.312968][T11030] ath6kl: Unable to read the bmi data from the device: -71 [ 1138.328476][T11030] ath6kl: Unable to recv target info: -71 [ 1138.359935][T11030] ath6kl: Failed to init ath6kl core: -71 [ 1138.401557][T11030] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1138.423805][T11030] usb 3-1: USB disconnect, device number 33 [ 1138.805297][T18890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3795'. [ 1138.858239][T18890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3795'. [ 1139.492562][T18914] tipc: Failed to remove unknown binding: 66,1,1/0:2872975611/2872975613 [ 1139.703138][ T5912] hid_parser_main: 7 callbacks suppressed [ 1139.703155][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.749937][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.779673][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.790110][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.797741][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.810001][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.817460][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.825335][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.833316][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.840998][ T5912] hid-generic 0006:0004:0009.0071: unknown main item tag 0x0 [ 1139.870105][ T5912] hid-generic 0006:0004:0009.0071: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1141.041851][T18947] fuse: Unknown parameter 'group_i…€TÝoÍzd' [ 1141.067437][T18947] pim6reg: entered allmulticast mode [ 1141.081830][T18947] pim6reg: left allmulticast mode [ 1142.000416][ T5912] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1142.174668][ T5912] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1142.184094][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.214394][ T5912] usb 5-1: Product: syz [ 1142.227387][ T5912] usb 5-1: Manufacturer: syz [ 1142.246278][ T5912] usb 5-1: SerialNumber: syz [ 1142.294547][ T5912] usb 5-1: config 0 descriptor?? [ 1142.482436][T18953] tipc: Started in network mode [ 1142.502562][T18953] tipc: Node identity fe80000000000000000000000000003a, cluster identity 4711 [ 1142.561698][ T5912] usb 5-1: USB disconnect, device number 59 [ 1142.575206][T18953] tipc: Enabled bearer , priority 10 [ 1142.740674][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1142.906666][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.053629][ T5912] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1143.098618][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.123897][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1143.137934][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1143.147742][ T9] usb 2-1: SerialNumber: syz [ 1143.242683][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.253479][ T5912] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1143.268639][ T5912] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1143.278408][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.297282][ T5912] usb 1-1: Product: syz [ 1143.307873][ T5912] usb 1-1: Manufacturer: syz [ 1143.328921][ T5912] usb 1-1: SerialNumber: syz [ 1143.372940][T18954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.392137][ T5912] usb 1-1: config 0 descriptor?? [ 1143.454777][T18954] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 1143.619429][T18957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.660527][T18957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.762228][ T5912] usb 1-1: USB disconnect, device number 77 [ 1143.816783][T11030] tipc: Node number set to 4269801530 [ 1143.868559][ T9] usb 2-1: 0:2 : does not exist [ 1144.009755][ T9] usb 2-1: USB disconnect, device number 61 [ 1144.260150][T11030] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1144.400585][T11030] usb 4-1: device descriptor read/64, error -71 [ 1144.502230][ T9] hid-generic 0006:0004:0009.0072: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1144.647819][T11030] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1144.809987][T11030] usb 4-1: device descriptor read/64, error -71 [ 1144.859968][ T5912] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1144.920621][T11030] usb usb4-port1: attempt power cycle [ 1145.040597][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 1145.044313][T18991] syzkaller1: entered promiscuous mode [ 1145.051229][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.061759][T13661] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1145.079927][ T5912] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1145.095747][T18991] syzkaller1: entered allmulticast mode [ 1145.099893][ T5912] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1145.113335][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.143868][ T5912] usb 2-1: config 0 descriptor?? [ 1145.247499][T13661] usb 1-1: Using ep0 maxpacket: 8 [ 1145.256158][T13661] usb 1-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1145.266370][T13661] usb 1-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1145.276317][T13661] usb 1-1: config 218 has no interface number 0 [ 1145.283091][T13661] usb 1-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1145.291216][T11030] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1145.313215][T13661] usb 1-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1145.324560][T13661] usb 1-1: config 218 interface 95 has no altsetting 0 [ 1145.336069][T13661] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1145.351350][T11030] usb 4-1: device descriptor read/8, error -71 [ 1145.363902][T18995] xt_hashlimit: size too large, truncated to 1048576 [ 1145.370902][T18995] xt_hashlimit: max too large, truncated to 1048576 [ 1145.432501][T13661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.452647][T13661] usb 1-1: Product: syz [ 1145.456917][T13661] usb 1-1: Manufacturer: syz [ 1145.473410][T13661] usb 1-1: SerialNumber: syz [ 1145.611158][T11030] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1145.642563][T11030] usb 4-1: device descriptor read/8, error -71 [ 1145.644070][ T5912] usb 2-1: string descriptor 0 read error: -71 [ 1145.669318][ T5912] usb 2-1: USB disconnect, device number 62 [ 1145.751022][T11030] usb usb4-port1: unable to enumerate USB device [ 1145.802345][T13661] usbtouchscreen 1-1:218.95: probe with driver usbtouchscreen failed with error -71 [ 1145.834443][T13661] usb 1-1: USB disconnect, device number 78 [ 1146.787098][T11030] hid_parser_main: 24 callbacks suppressed [ 1146.787133][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.809290][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.818648][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.826618][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.834611][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.843907][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.851932][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.860064][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.867820][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.876121][T11030] hid-generic 0006:0004:0009.0073: unknown main item tag 0x0 [ 1146.887603][T11030] hid-generic 0006:0004:0009.0073: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1147.394779][ T5951] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 1147.491016][T11030] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1147.569950][ T5951] usb 2-1: Invalid ep0 maxpacket: 64 [ 1147.665408][T11030] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1147.677053][T11030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.700002][ T5951] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 1147.712629][T11030] usb 4-1: Product: syz [ 1147.723310][T11030] usb 4-1: Manufacturer: syz [ 1147.732499][T11030] usb 4-1: SerialNumber: syz [ 1147.750120][T17184] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1147.872110][ T5951] usb 2-1: Invalid ep0 maxpacket: 64 [ 1147.882867][ T5951] usb usb2-port1: attempt power cycle [ 1147.918917][T17184] usb 1-1: Using ep0 maxpacket: 32 [ 1147.939977][T17184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.954639][T17184] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1147.969948][ T5867] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1147.979773][T17184] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1148.008562][T17184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.043226][T17184] usb 1-1: config 0 descriptor?? [ 1148.226797][T11030] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1148.253463][T11030] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1148.264746][ T5867] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1148.273692][ T5951] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 1148.282840][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.298558][ T5867] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1148.309173][ T5867] usb 5-1: config 1 has no interface number 1 [ 1148.316372][T11030] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1148.332022][ T5867] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1148.346938][ T5951] usb 2-1: Invalid ep0 maxpacket: 64 [ 1148.354270][T11030] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1148.368034][T11030] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1148.389549][ T5867] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1148.403579][T11030] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1148.414487][ T5867] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1148.431356][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.439658][ T5867] usb 5-1: Product: syz [ 1148.447349][ T5867] usb 5-1: Manufacturer: syz [ 1148.452884][ T5867] usb 5-1: SerialNumber: syz [ 1148.457569][T17184] usb 1-1: string descriptor 0 read error: -71 [ 1148.492096][ T5951] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 1148.500293][T17184] usb 1-1: USB disconnect, device number 79 [ 1148.520563][ T5951] usb 2-1: Invalid ep0 maxpacket: 64 [ 1148.549130][ T5951] usb usb2-port1: unable to enumerate USB device [ 1148.573854][T19026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.585917][T19026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.667223][T19032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.677913][T19032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.689134][T19032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.706432][T19032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.727638][T19032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.756903][T19032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.807321][ T5867] usb 5-1: Failed to set altset [ 1148.817397][ T5867] usb 5-1: 0:2: cannot create sequencer device [ 1148.837676][ T5867] usb 5-1: Failed to set altset [ 1148.927204][ T5867] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1148.939298][ T5867] usb 5-1: USB disconnect, device number 60 [ 1149.315708][T19042] tipc: Failed to remove unknown binding: 66,1,1/0:3460103914/3460103916 [ 1149.365304][T11030] usb 4-1: USB disconnect, device number 13 [ 1149.986404][T13661] hid-generic 0006:0004:0009.0074: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1150.822101][T11030] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1151.013108][T11030] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1151.039275][T11030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.066692][T11030] usb 2-1: Product: syz [ 1151.079888][T11030] usb 2-1: Manufacturer: syz [ 1151.095069][T11030] usb 2-1: SerialNumber: syz [ 1151.121948][T11030] usb 2-1: config 0 descriptor?? [ 1151.336744][T11030] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1151.934758][ T5867] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1151.988007][T11030] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1152.037160][T11030] usb 2-1: USB disconnect, device number 67 [ 1152.080423][T13661] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1152.122845][T19094] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1152.123145][ T5867] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 5632, setting to 1024 [ 1152.150224][ T5867] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1152.281155][ T5867] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1152.302079][T13661] usb 4-1: Using ep0 maxpacket: 32 [ 1152.307651][ T5867] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1152.336872][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.351924][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.357782][T13661] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.368365][ T5867] usb 1-1: Product: syz [ 1152.381075][ T5867] usb 1-1: Manufacturer: syz [ 1152.394539][ T5867] usb 1-1: SerialNumber: syz [ 1152.565276][T13661] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1152.622593][ T5867] cdc_ncm 1-1:1.0: bind() failure [ 1152.631588][ T5867] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1152.638911][ T5867] cdc_ncm 1-1:1.1: bind() failure [ 1152.647921][ T5867] usb 1-1: USB disconnect, device number 80 [ 1152.660425][T13661] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1152.692466][T13661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.702073][T11030] hid_parser_main: 24 callbacks suppressed [ 1152.702089][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.730559][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.739439][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.805626][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.820814][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.835282][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.840428][T13661] usb 4-1: config 0 descriptor?? [ 1152.843853][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.871705][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.884203][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.902889][T11030] hid-generic 0006:0004:0009.0075: unknown main item tag 0x0 [ 1152.932462][ T5867] hid-generic 0006:0004:0009.0076: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1152.956888][T19113] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.3859'. [ 1152.979316][T11030] hid-generic 0006:0004:0009.0075: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1153.109583][T13661] usb 4-1: string descriptor 0 read error: -71 [ 1153.118605][T13661] usb 4-1: USB disconnect, device number 14 [ 1153.203983][T19117] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1153.214142][ T29] audit: type=1326 audit(1773257010.838:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042fb9c799 code=0x7ffc0000 [ 1153.249971][T19117] audit: out of memory in audit_log_start [ 1153.286356][ T29] audit: type=1326 audit(1773257010.838:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042fb9c799 code=0x7ffc0000 [ 1153.369927][ T29] audit: type=1326 audit(1773257010.838:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f042fb5cfce code=0x7ffc0000 [ 1153.475811][ T29] audit: type=1326 audit(1773257010.838:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f042fb5cfce code=0x7ffc0000 [ 1153.571619][T19124] netlink: 'syz.0.3863': attribute type 6 has an invalid length. [ 1153.602482][T19124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1153.620076][ T29] audit: type=1326 audit(1773257010.838:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042fb9c799 code=0x7ffc0000 [ 1153.650616][ T29] audit: type=1326 audit(1773257010.898:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f042fb5cfce code=0x7ffc0000 [ 1153.715281][T19122] tipc: Failed to remove unknown binding: 66,1,1/0:3876536980/3876536982 [ 1153.738700][T19127] FAULT_INJECTION: forcing a failure. [ 1153.738700][T19127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.757727][T19127] CPU: 0 UID: 0 PID: 19127 Comm: syz.2.3864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.757756][T19127] Tainted: [L]=SOFTLOCKUP [ 1153.757761][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1153.757769][T19127] Call Trace: [ 1153.757775][T19127] [ 1153.757781][T19127] dump_stack_lvl+0xe8/0x150 [ 1153.757804][T19127] should_fail_ex+0x412/0x560 [ 1153.757824][T19127] _copy_from_user+0x2d/0xb0 [ 1153.757844][T19127] input_event_from_user+0xb1/0x290 [ 1153.757867][T19127] ? __pfx_input_event_from_user+0x10/0x10 [ 1153.757891][T19127] evdev_write+0x2c7/0x4c0 [ 1153.757911][T19127] ? __pfx_evdev_write+0x10/0x10 [ 1153.757928][T19127] ? bpf_lsm_file_permission+0x9/0x20 [ 1153.757944][T19127] ? security_file_permission+0x75/0x260 [ 1153.757959][T19127] ? rw_verify_area+0x255/0x4d0 [ 1153.757972][T19127] ? __pfx_evdev_write+0x10/0x10 [ 1153.757989][T19127] vfs_write+0x29a/0xb90 [ 1153.758007][T19127] ? __pfx_vfs_write+0x10/0x10 [ 1153.758021][T19127] ? __fget_files+0x2a/0x420 [ 1153.758040][T19127] ? __fget_files+0x2a/0x420 [ 1153.758057][T19127] ? __fget_files+0x3a0/0x420 [ 1153.758073][T19127] ? __fget_files+0x2a/0x420 [ 1153.758095][T19127] ksys_write+0x150/0x270 [ 1153.758110][T19127] ? __pfx_ksys_write+0x10/0x10 [ 1153.758137][T19127] do_syscall_64+0x14d/0xf80 [ 1153.758149][T19127] ? trace_irq_disable+0x3b/0x150 [ 1153.758166][T19127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.758179][T19127] ? clear_bhb_loop+0x40/0x90 [ 1153.758195][T19127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.758207][T19127] RIP: 0033:0x7fe5f939c799 [ 1153.758220][T19127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.758232][T19127] RSP: 002b:00007fe5fa23d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1153.758247][T19127] RAX: ffffffffffffffda RBX: 00007fe5f9615fa0 RCX: 00007fe5f939c799 [ 1153.758256][T19127] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000005 [ 1153.758264][T19127] RBP: 00007fe5fa23d090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.758272][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.758280][T19127] R13: 00007fe5f9616038 R14: 00007fe5f9615fa0 R15: 00007fe5f973fa48 [ 1153.758298][T19127] [ 1154.403054][ T29] audit: type=1326 audit(1773257010.898:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f042fb5cfce code=0x7ffc0000 [ 1154.410681][T19129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1154.493533][ T29] audit: type=1326 audit(1773257010.898:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19116 comm="syz.0.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042fb9c799 code=0x7ffc0000 [ 1154.867159][T11030] hid-generic 0006:0004:0009.0077: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1155.073204][T19148] tipc: Failed to remove unknown binding: 66,1,1/4269801530:3043314699/3043314701 [ 1155.289875][T19155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3872'. [ 1155.452693][T13661] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1155.645780][T19157] FAULT_INJECTION: forcing a failure. [ 1155.645780][T19157] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.659380][T13661] usb 3-1: Using ep0 maxpacket: 16 [ 1155.668489][T13661] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1155.704290][T13661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1155.716663][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.0.3873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.716687][T19157] Tainted: [L]=SOFTLOCKUP [ 1155.716692][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1155.716699][T19157] Call Trace: [ 1155.716705][T19157] [ 1155.716710][T19157] dump_stack_lvl+0xe8/0x150 [ 1155.716733][T19157] should_fail_ex+0x412/0x560 [ 1155.716753][T19157] should_failslab+0xa8/0x100 [ 1155.716768][T19157] ? do_getname+0x2e/0x250 [ 1155.716785][T19157] kmem_cache_alloc_noprof+0x87/0x650 [ 1155.716803][T19157] do_getname+0x2e/0x250 [ 1155.716817][T19157] ? __se_sys_mkdirat+0x18/0x150 [ 1155.716833][T19157] __se_sys_mkdirat+0x24/0x150 [ 1155.716849][T19157] do_syscall_64+0x14d/0xf80 [ 1155.716861][T19157] ? trace_irq_disable+0x3b/0x150 [ 1155.716880][T19157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.716892][T19157] ? clear_bhb_loop+0x40/0x90 [ 1155.716907][T19157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.716919][T19157] RIP: 0033:0x7f042fb9c799 [ 1155.716932][T19157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.716944][T19157] RSP: 002b:00007f04309e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1155.716958][T19157] RAX: ffffffffffffffda RBX: 00007f042fe15fa0 RCX: 00007f042fb9c799 [ 1155.716968][T19157] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 1155.716977][T19157] RBP: 00007f04309e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.716985][T19157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.716992][T19157] R13: 00007f042fe16038 R14: 00007f042fe15fa0 R15: 00007f042ff3fa48 [ 1155.717011][T19157] [ 1156.102541][T13661] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1156.112146][T13661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.120244][T13661] usb 3-1: Product: syz [ 1156.124629][T13661] usb 3-1: Manufacturer: syz [ 1156.129270][T13661] usb 3-1: SerialNumber: syz [ 1156.155724][T13661] usb 3-1: config 0 descriptor?? [ 1156.257783][T13661] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1156.375234][T13661] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1156.386684][T16416] hid-generic 0006:0004:0009.0078: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1156.407722][T19159] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1156.993908][T13661] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1157.099904][T11030] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1157.185154][T13661] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1157.212922][ T5823] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 1157.300909][T11030] usb 1-1: Using ep0 maxpacket: 32 [ 1157.338371][T11030] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.379277][T11030] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1157.411350][T11030] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1157.447604][T11030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.489130][T11030] usb 1-1: config 0 descriptor?? [ 1157.598635][T19171] FAULT_INJECTION: forcing a failure. [ 1157.598635][T19171] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.648172][T19171] CPU: 0 UID: 0 PID: 19171 Comm: syz.4.3879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.648209][T19171] Tainted: [L]=SOFTLOCKUP [ 1157.648217][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1157.648230][T19171] Call Trace: [ 1157.648240][T19171] [ 1157.648249][T19171] dump_stack_lvl+0xe8/0x150 [ 1157.648284][T19171] should_fail_ex+0x412/0x560 [ 1157.648315][T19171] should_failslab+0xa8/0x100 [ 1157.648341][T19171] ? skb_clone+0x212/0x3a0 [ 1157.648363][T19171] kmem_cache_alloc_noprof+0x87/0x650 [ 1157.648385][T19171] ? __netlink_lookup+0xc6/0x8b0 [ 1157.648422][T19171] skb_clone+0x212/0x3a0 [ 1157.648447][T19171] __netlink_deliver_tap+0x404/0x850 [ 1157.648487][T19171] ? netlink_deliver_tap+0x2e/0x1b0 [ 1157.648516][T19171] netlink_deliver_tap+0x19c/0x1b0 [ 1157.648544][T19171] netlink_unicast+0x7e3/0x9b0 [ 1157.648579][T19171] ? __pfx_netlink_unicast+0x10/0x10 [ 1157.648605][T19171] ? netlink_sendmsg+0x650/0xb40 [ 1157.648629][T19171] ? skb_put+0x11b/0x210 [ 1157.648662][T19171] netlink_sendmsg+0x813/0xb40 [ 1157.648700][T19171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.648731][T19171] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1157.648759][T19171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1157.648787][T19171] ____sys_sendmsg+0x972/0x9f0 [ 1157.648818][T19171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.648848][T19171] ? import_iovec+0x73/0xa0 [ 1157.648882][T19171] ___sys_sendmsg+0x2a5/0x360 [ 1157.648907][T19171] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.648964][T19171] ? __fget_files+0x2a/0x420 [ 1157.648993][T19171] ? __fget_files+0x3a0/0x420 [ 1157.649031][T19171] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1157.649055][T19171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1157.649086][T19171] ? __pfx_ksys_write+0x10/0x10 [ 1157.649131][T19171] do_syscall_64+0x14d/0xf80 [ 1157.649151][T19171] ? trace_irq_disable+0x3b/0x150 [ 1157.649178][T19171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.649198][T19171] ? clear_bhb_loop+0x40/0x90 [ 1157.649223][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.649244][T19171] RIP: 0033:0x7fc9a559c799 [ 1157.649265][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.649282][T19171] RSP: 002b:00007fc9a37f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.649306][T19171] RAX: ffffffffffffffda RBX: 00007fc9a5815fa0 RCX: 00007fc9a559c799 [ 1157.649321][T19171] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1157.649334][T19171] RBP: 00007fc9a37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.649347][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.649359][T19171] R13: 00007fc9a5816038 R14: 00007fc9a5815fa0 R15: 00007fc9a593fa48 [ 1157.649392][T19171] [ 1157.649597][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1158.057108][T19171] vlan2: entered promiscuous mode [ 1158.115379][T19171] gretap0: entered promiscuous mode [ 1158.357826][T13661] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1158.691707][T11030] usb 1-1: string descriptor 0 read error: -71 [ 1158.701356][T11030] usb 1-1: USB disconnect, device number 81 [ 1158.912331][ T9] hid_parser_main: 58 callbacks suppressed [ 1158.912383][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1158.958626][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1158.996995][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.027115][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.047739][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.067995][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.086061][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.105651][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.129403][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.151680][ T9] hid-generic 0006:0004:0009.0079: unknown main item tag 0x0 [ 1159.321240][T19186] tipc: Failed to remove unknown binding: 66,1,1/0:3535716515/3535716517 [ 1159.353640][ T9] hid-generic 0006:0004:0009.0079: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1159.610726][T13661] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1159.622743][T13661] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1159.636086][T13661] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1159.659967][T13661] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1159.678173][T13661] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1159.701538][T13661] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1159.870076][ T5823] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1160.319316][ T5867] usb 3-1: USB disconnect, device number 34 [ 1160.450237][T11030] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1160.651782][T11030] usb 1-1: Using ep0 maxpacket: 32 [ 1160.666059][T11030] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1160.689929][T11030] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1160.721475][T11030] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 21, changing to 8 [ 1160.748300][T19204] tipc: Failed to remove unknown binding: 66,1,1/0:1653412109/1653412111 [ 1160.990885][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1161.001954][T11030] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17211, setting to 1024 [ 1161.033251][T19210] bridge8: port 1(erspan0) entered blocking state [ 1161.048531][T19210] bridge8: port 1(erspan0) entered disabled state [ 1161.072941][T19210] erspan0: entered allmulticast mode [ 1161.083540][T19210] erspan0: entered promiscuous mode [ 1161.090024][T19210] bridge8: port 1(erspan0) entered blocking state [ 1161.096659][T19210] bridge8: port 1(erspan0) entered forwarding state [ 1161.107383][T19218] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1161.117197][T11030] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1161.117235][T11030] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1161.127654][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1161.153145][T11030] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1161.209737][T19220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1161.240769][T11030] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1161.269683][T11030] usb 1-1: Product: syz [ 1161.298193][T11030] usb 1-1: Manufacturer: syz [ 1161.310556][T11030] usb 1-1: SerialNumber: syz [ 1161.332236][T11030] usb 1-1: config 0 descriptor?? [ 1161.339543][T19224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.356995][T11030] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1161.367028][T19224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.434147][T11030] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1161.561947][T17184] usb 1-1: USB disconnect, device number 82 [ 1161.572911][T17184] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1161.591599][T13661] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1161.761261][T13661] usb 4-1: Using ep0 maxpacket: 16 [ 1161.768746][T13661] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1161.779075][T19199] netlink: 'syz.0.3887': attribute type 5 has an invalid length. [ 1161.788184][T19199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3887'. [ 1161.834420][T13661] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1161.847480][T19227] fuse: Bad value for 'user_id' [ 1161.853280][T13661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.940286][T19227] fuse: Bad value for 'user_id' [ 1161.979794][T13661] usb 4-1: Product: syz [ 1161.989335][T13661] usb 4-1: Manufacturer: syz [ 1162.002382][T13661] usb 4-1: SerialNumber: syz [ 1162.069723][T13661] usb 4-1: config 0 descriptor?? [ 1162.085715][T13661] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1162.100785][T13661] usb 4-1: Detected FT232R [ 1162.286837][T13661] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1162.299049][T13661] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1162.307139][T13661] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1162.350166][T13661] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1162.406886][T13661] usb 4-1: USB disconnect, device number 15 [ 1162.436339][T13661] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1162.464072][T13661] ftdi_sio 4-1:0.0: device disconnected [ 1162.749938][T17184] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1162.929939][T17184] usb 3-1: Using ep0 maxpacket: 32 [ 1162.959787][T13661] hid-generic 0006:0004:0009.007A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1162.977468][T17184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.992272][T17184] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1163.015604][T19236] bridge9: entered promiscuous mode [ 1163.037153][T19236] bridge9: entered allmulticast mode [ 1163.043560][T17184] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1163.062706][T17184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.135202][T17184] usb 3-1: config 0 descriptor?? [ 1163.198757][ T5823] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1164.781278][ T30] INFO: task kworker/u8:8:7218 blocked for more than 143 seconds. [ 1164.789231][ T30] Tainted: G L syzkaller #0 [ 1164.852181][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1164.891622][ T30] task:kworker/u8:8 state:D stack:22240 pid:7218 tgid:7218 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1164.949684][ T30] Workqueue: netns cleanup_net [ 1164.961057][ T30] Call Trace: [ 1164.964525][ T30] [ 1164.967584][ T30] __schedule+0x15dd/0x52d0 [ 1165.402042][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1165.408616][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1165.417381][ T30] ? __pfx___schedule+0x10/0x10 [ 1165.426419][ T30] ? schedule+0x90/0x360 [ 1165.432381][ T30] schedule+0x164/0x360 [ 1165.437838][ T30] afs_cell_purge+0x40d/0x580 [ 1165.443376][ T30] ? __pfx_afs_cell_purge+0x10/0x10 [ 1165.449347][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 1165.455549][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1165.462030][ T30] ? __timer_delete_sync+0x4a4/0x520 [ 1165.467759][ T30] afs_net_exit+0x50/0x100 [ 1165.472725][ T30] ops_undo_list+0x49f/0x940 [ 1165.477450][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 1165.483472][ T30] ? idr_destroy+0x218/0x290 [ 1165.488224][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1165.493918][ T30] cleanup_net+0x56b/0x800 [ 1165.498497][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1165.504092][ T30] ? process_scheduled_works+0xa25/0x1830 [ 1165.556191][ T30] ? process_scheduled_works+0xa25/0x1830 [ 1165.571356][ T30] process_scheduled_works+0xb02/0x1830 [ 1165.593924][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1165.623958][ T30] ? assign_work+0x3d5/0x5e0 [ 1165.644712][ T30] worker_thread+0xa50/0xfc0 [ 1165.665081][ T30] kthread+0x388/0x470 [ 1165.685445][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1165.709145][ T30] ? __pfx_kthread+0x10/0x10 [ 1165.724777][ T30] ret_from_fork+0x51e/0xb90 [ 1165.734778][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.755810][ T30] ? __switch_to+0xc7d/0x1450 [ 1165.769378][ T30] ? __pfx_kthread+0x10/0x10 [ 1165.779666][ T30] ret_from_fork_asm+0x1a/0x30 [ 1165.796377][ T30] [ 1165.803475][ T30] [ 1165.803475][ T30] Showing all locks held in the system: [ 1165.838787][ T30] 1 lock held by ksoftirqd/0/15: [ 1165.889083][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 1165.914804][ T30] 1 lock held by khungtaskd/30: [ 1165.973344][ T30] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1166.009930][ T30] 3 locks held by kworker/u8:4/58: [ 1166.036025][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1166.089390][ T30] #1: ffffc900015f7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1166.161524][ T30] #2: ffffffff8fbccd88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1166.219976][ T30] 1 lock held by udevd/5191: [ 1166.252820][ T30] 2 locks held by getty/5580: [ 1166.276023][ T30] #0: ffff8880374380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1166.320164][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1166.339956][ T30] 3 locks held by kworker/u8:8/7218: [ 1166.345311][ T30] #0: ffff88801b6de948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1166.370788][ T30] #1: ffffc9000213fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1166.400328][ T30] #2: ffffffff8fbbe5f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1166.420129][ T30] 4 locks held by kworker/0:3/17184: [ 1166.425483][ T30] #0: ffff88802168ed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1166.450022][ T30] #1: ffffc90004cb7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1166.480329][ T30] #2: ffff88802aa0f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1166.489565][ T30] #3: ffff8880528d1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1166.510196][ T30] 2 locks held by syz.2.3894/19230: [ 1166.515580][ T30] #0: ffffffff8fbccd88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1166.531945][ T30] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1166.546554][ T30] [ 1166.549170][ T30] ============================================= [ 1166.549170][ T30] [ 1166.558417][ T30] NMI backtrace for cpu 0 [ 1166.558460][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.558486][ T30] Tainted: [L]=SOFTLOCKUP [ 1166.558494][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1166.558507][ T30] Call Trace: [ 1166.558515][ T30] [ 1166.558524][ T30] dump_stack_lvl+0xe8/0x150 [ 1166.558559][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1166.558587][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1166.558616][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1166.558645][ T30] sys_info+0x135/0x170 [ 1166.558667][ T30] watchdog+0xfd9/0x1030 [ 1166.558702][ T30] ? watchdog+0x21a/0x1030 [ 1166.558738][ T30] kthread+0x388/0x470 [ 1166.558760][ T30] ? __pfx_watchdog+0x10/0x10 [ 1166.558787][ T30] ? __pfx_kthread+0x10/0x10 [ 1166.558809][ T30] ret_from_fork+0x51e/0xb90 [ 1166.558839][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.558864][ T30] ? __switch_to+0xc7d/0x1450 [ 1166.558891][ T30] ? __pfx_kthread+0x10/0x10 [ 1166.558912][ T30] ret_from_fork_asm+0x1a/0x30 [ 1166.558955][ T30] [ 1166.559002][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1166.687124][ C1] NMI backtrace for cpu 1 [ 1166.687145][ C1] CPU: 1 UID: 0 PID: 5191 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.687169][ C1] Tainted: [L]=SOFTLOCKUP [ 1166.687176][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1166.687186][ C1] RIP: 0010:check_preemption_disabled+0x6/0xe0 [ 1166.687211][ C1] Code: c7 c6 e0 b3 27 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <65> 8b 05 57 d3 6d 07 65 8b 0d 4c d3 6d 07 f7 c1 ff ff ff 7f 74 0c [ 1166.687226][ C1] RSP: 0018:ffffc90004637950 EFLAGS: 00000283 [ 1166.687243][ C1] RAX: 0000000000000001 RBX: 00007fc948915937 RCX: 0000000000000002 [ 1166.687255][ C1] RDX: 0000000000000000 RSI: ffffffff8c27b3e0 RDI: ffffffff8c27b3a0 [ 1166.687267][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1166.687277][ C1] R10: ffffc90004637af8 R11: ffffffff81b0bfa0 R12: 0000000000000002 [ 1166.687289][ C1] R13: ffffffff8e75e420 R14: 0000000000000000 R15: 0000000000000000 [ 1166.687300][ C1] FS: 00007fc948f69880(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 1166.687314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.687326][ C1] CR2: 00007fc9a57eb4b8 CR3: 000000007ca60000 CR4: 00000000003526f0 [ 1166.687347][ C1] Call Trace: [ 1166.687354][ C1] [ 1166.687363][ C1] rcu_is_watching+0x15/0xb0 [ 1166.687387][ C1] lock_acquire+0x57/0x2e0 [ 1166.687410][ C1] is_bpf_text_address+0x47/0x2b0 [ 1166.687427][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1166.687443][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1166.687460][ C1] kernel_text_address+0xa5/0xe0 [ 1166.687479][ C1] __kernel_text_address+0xd/0x30 [ 1166.687496][ C1] unwind_get_return_address+0x4d/0x90 [ 1166.687519][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1166.687536][ C1] arch_stack_walk+0xfb/0x150 [ 1166.687564][ C1] stack_trace_save+0xa9/0x100 [ 1166.687580][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1166.687598][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1166.687620][ C1] kasan_save_track+0x3e/0x80 [ 1166.687637][ C1] ? kasan_save_track+0x3e/0x80 [ 1166.687653][ C1] ? kasan_save_free_info+0x46/0x50 [ 1166.687673][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1166.687690][ C1] ? kmem_cache_free+0x187/0x630 [ 1166.687707][ C1] ? __se_sys_unlink+0xc2/0x140 [ 1166.687725][ C1] ? do_syscall_64+0x14d/0xf80 [ 1166.687740][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.687776][ C1] kasan_save_free_info+0x46/0x50 [ 1166.687797][ C1] __kasan_slab_free+0x5c/0x80 [ 1166.687815][ C1] kmem_cache_free+0x187/0x630 [ 1166.687832][ C1] ? __se_sys_unlink+0xc2/0x140 [ 1166.687854][ C1] __se_sys_unlink+0xc2/0x140 [ 1166.687881][ C1] do_syscall_64+0x14d/0xf80 [ 1166.687896][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.687912][ C1] ? clear_bhb_loop+0x40/0x90 [ 1166.687930][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.687946][ C1] RIP: 0033:0x7fc948915937 [ 1166.687961][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1166.688002][ C1] RSP: 002b:00007ffda676b058 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1166.688019][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007fc948915937 [ 1166.688031][ C1] RDX: 0000000000000000 RSI: 00000000457fbf80 RDI: 0000558b1c46702e [ 1166.688043][ C1] RBP: 0000000000000000 R08: 00000000458978be R09: 3fffffffffffffff [ 1166.688054][ C1] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1166.688065][ C1] R13: 0000558b1c482100 R14: 0000000000000001 R15: 0000000000000000 [ 1166.688084][ C1] [ 1167.070561][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1167.077576][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.088335][ T30] Tainted: [L]=SOFTLOCKUP [ 1167.092687][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1167.102781][ T30] Call Trace: [ 1167.106093][ T30] [ 1167.109066][ T30] vpanic+0x56c/0xa60 [ 1167.113087][ T30] ? __pfx___schedule+0x10/0x10 [ 1167.117985][ T30] ? __pfx_vpanic+0x10/0x10 [ 1167.122534][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1167.127785][ T30] panic+0xc5/0xd0 [ 1167.131554][ T30] ? __pfx_panic+0x10/0x10 [ 1167.136022][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1167.141527][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1167.147729][ T30] watchdog+0x1023/0x1030 [ 1167.152106][ T30] ? watchdog+0x21a/0x1030 [ 1167.156560][ T30] kthread+0x388/0x470 [ 1167.160650][ T30] ? __pfx_watchdog+0x10/0x10 [ 1167.165345][ T30] ? __pfx_kthread+0x10/0x10 [ 1167.169948][ T30] ret_from_fork+0x51e/0xb90 [ 1167.174651][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.179778][ T30] ? __switch_to+0xc7d/0x1450 [ 1167.184475][ T30] ? __pfx_kthread+0x10/0x10 [ 1167.189075][ T30] ret_from_fork_asm+0x1a/0x30 [ 1167.193874][ T30] [ 1167.197238][ T30] Kernel Offset: disabled [ 1167.201656][ T30] Rebooting in 86400 seconds..