last executing test programs: 8m3.05168936s ago: executing program 2 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000000098c5f5", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000540)=ANY=[], 0x18, 0x880}}], 0x1, 0x4000000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 8m1.776315826s ago: executing program 2 (id=742): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x64e, 0x100000, 0x200000, 0x0, 0x0, 0x7fff}) 8m1.635558585s ago: executing program 2 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0xafff}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m1.16896761s ago: executing program 2 (id=744): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$OTPERASE(r1, 0x400c4d19, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) getdents64(r2, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 7m59.215638197s ago: executing program 2 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @private=0xa010102}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x6000000000000000) 7m58.454794994s ago: executing program 2 (id=764): r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x884, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r1, {0xc, 0x3da48c8682330ab8}, {}, {0xffff, 0xfffa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x854, 0x2, [@TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x9, 0x1000, 0x7, 0x10, 0xffffffff, 0x4, 0x10001, 0x1, 0xd200, 0x2d, 0x4, 0x3, 0x4, 0xda, 0x0, 0x5, 0xa, 0x9, 0x7f, 0x4, 0x4, 0x1, 0x5, 0xa040, 0x7, 0x7, 0xb0ab, 0xff, 0x81, 0xa, 0x3, 0x3fff, 0x1, 0x2, 0x6, 0xa2c, 0x6, 0x5, 0x5, 0x3, 0x4, 0x5, 0x9, 0x7, 0x1, 0x6, 0x5, 0xfffffff8, 0x4, 0x6, 0xf36, 0x5, 0x7, 0x6, 0x2, 0xe09, 0x2, 0x9, 0x2, 0x7474, 0xcf2, 0x6, 0xffffff00, 0x572, 0x6, 0x3, 0x7, 0x5, 0x9, 0x6, 0x0, 0x2, 0x6d, 0xe, 0x9, 0x80, 0xc8b, 0x4, 0x8, 0x81, 0x6, 0x3, 0xfff, 0x8, 0x81, 0x80000000, 0x3, 0x81, 0x5, 0x5, 0xffff, 0x10, 0x1, 0x8, 0x8, 0x2, 0x81, 0x6, 0x10001, 0x2a9, 0x0, 0xdb, 0xffffff7c, 0x6, 0x74, 0xa9d5, 0xffffffff, 0x1, 0x0, 0x7fffffff, 0x0, 0x7, 0x7, 0xfffffffa, 0x1d, 0x1, 0x7, 0x9, 0x8001, 0x0, 0x10, 0x560, 0x8, 0x81, 0xff, 0x29, 0x4, 0x2, 0x2, 0x9, 0x8, 0x0, 0x3, 0x9, 0xffffffb2, 0x40, 0x3, 0xfa7d, 0x2, 0x6, 0x45, 0x6000, 0x3, 0x59f, 0x3, 0x100, 0x0, 0x8, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x8, 0x7f, 0x0, 0x9, 0x9, 0x3, 0x0, 0x7bb1, 0x9, 0x9, 0x9, 0x1, 0x7d4, 0x0, 0x80000000, 0x4d, 0x545, 0xdd, 0x4, 0x6, 0x3000000, 0xffffff7f, 0x401, 0x2, 0x80000001, 0x9, 0x7, 0x9, 0x2000000, 0x6, 0x9, 0x7, 0x6, 0x5, 0x3, 0x201ed7e3, 0x10000, 0x6, 0xfa, 0x1, 0x6, 0x6, 0x0, 0x8, 0x2b1f, 0x400, 0x8001, 0x4, 0x7fdd825, 0x0, 0x7fff, 0x8, 0x9, 0x5, 0xffff, 0x39f, 0x9, 0x3, 0x7, 0x2, 0x10, 0x2, 0x1, 0x7fff, 0x2, 0x6, 0x7, 0xcf24, 0x0, 0x6, 0x0, 0x1, 0x5, 0x1, 0x7, 0x5, 0x800, 0x2, 0x9, 0x1, 0x2, 0x6, 0x0, 0x9, 0xfffffffb, 0x1, 0xf2, 0xffff, 0xfffffffa, 0x6, 0x6, 0x8, 0x3, 0x3ff, 0x1, 0x3, 0xff, 0x1, 0x6, 0x15, 0x81]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0xb741, 0x464c, 0x0, 0x1, 0xabe, 0x895, 0xc8, 0xff, 0x80, 0x80000000, 0x8, 0x5, 0x5, 0x19df, 0x0, 0x80, 0xa2f, 0x2, 0x1000, 0x1, 0xbac, 0x6, 0xeae3, 0xc, 0x7, 0x0, 0xce, 0x1, 0x1, 0x8, 0x2, 0x1, 0x0, 0x7, 0x5, 0x9, 0x24f5, 0x26d, 0x2, 0xf, 0x5, 0xffffeada, 0x362, 0x4, 0x6, 0xa6, 0x9, 0x0, 0xb25, 0x40, 0x46ac, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffc01, 0x4, 0x1ff, 0x8, 0x0, 0x7, 0xffffffff, 0x8, 0xffffffe5, 0x2, 0x9, 0x5, 0x9, 0x4, 0x8, 0x2, 0x4, 0x1ff, 0xffffffa5, 0xd, 0x8, 0x80000001, 0x368, 0x37c, 0x5, 0x81, 0x10000, 0x2, 0x8, 0x1ff, 0x4, 0x0, 0x0, 0x6, 0x6, 0x6, 0x2, 0x7, 0xcde, 0xb, 0x3, 0x1, 0x7fff, 0x5, 0xc, 0x5, 0x4, 0x8, 0x8, 0x100000, 0x200, 0xfffff71f, 0xfffffffc, 0xe, 0x5, 0x3ff, 0x10, 0xd9, 0x6, 0x0, 0x5d, 0x3, 0x3, 0x4, 0x0, 0x0, 0x800, 0xffff, 0x7, 0x0, 0x1, 0xffffff9d, 0x3, 0x4, 0x4b, 0x0, 0x80000000, 0x4, 0xe, 0x4, 0x1000, 0xfffeffff, 0xfba6, 0x4, 0x1, 0x7, 0xffff7fff, 0x3ea0, 0x8, 0x40, 0xb, 0xa16, 0x9, 0xa84, 0x87bc, 0x6, 0x7, 0x0, 0x47c, 0x7, 0xff, 0xba4d, 0x8, 0x4, 0x3, 0x97d, 0x3ff, 0x9, 0xbf, 0x2, 0x7, 0xf4e, 0x7f, 0x8, 0x0, 0x2, 0x5, 0x0, 0x2, 0x1, 0x8, 0x100, 0x2, 0xfffffffe, 0x3, 0x1, 0x101, 0xd, 0x7, 0xffffffc2, 0x8bc7, 0xfff, 0x200, 0x9, 0xa, 0x70e6, 0x2, 0x600000, 0x0, 0x13f, 0x3, 0x1ff, 0x6b7f, 0x1, 0x6, 0x9, 0x2, 0x0, 0x9c34, 0x7, 0x8c, 0x5, 0x1, 0x10, 0x100, 0x6, 0x4, 0x2, 0x0, 0x8, 0x100000, 0x5, 0x4, 0x1, 0x0, 0x293e, 0x10001, 0x81, 0xffff, 0x0, 0x3, 0x3, 0x91c7, 0x200, 0x1ff, 0x6, 0x5bb8, 0x5893, 0x10, 0x7, 0x4, 0x7, 0x9, 0x9, 0x5d5, 0x2, 0x4, 0x6, 0x7, 0x5, 0x0, 0x7, 0x8, 0x13, 0x7, 0x0, 0x3, 0x6, 0x8]}, @TCA_POLICE_TBF={0x30, 0x1, {0x81, 0x2000000d, 0xfffffffc, 0x3, 0x0, {0x5, 0x1, 0xfff, 0x6, 0x8, 0x4}, {0xe, 0x0, 0x2, 0x52, 0x9, 0x3}, 0x5, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400005b07ae9506010400000000000000050002000000050004000000000014000780080012c6001000400800134000005bad05000100070000000500010007ff00000900020073", @ANYRESOCT=r0], 0x74}}, 0x24000084) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x20000485}, 0x4000811) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 7m57.965079103s ago: executing program 32 (id=764): r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x884, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r1, {0xc, 0x3da48c8682330ab8}, {}, {0xffff, 0xfffa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x854, 0x2, [@TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x9, 0x1000, 0x7, 0x10, 0xffffffff, 0x4, 0x10001, 0x1, 0xd200, 0x2d, 0x4, 0x3, 0x4, 0xda, 0x0, 0x5, 0xa, 0x9, 0x7f, 0x4, 0x4, 0x1, 0x5, 0xa040, 0x7, 0x7, 0xb0ab, 0xff, 0x81, 0xa, 0x3, 0x3fff, 0x1, 0x2, 0x6, 0xa2c, 0x6, 0x5, 0x5, 0x3, 0x4, 0x5, 0x9, 0x7, 0x1, 0x6, 0x5, 0xfffffff8, 0x4, 0x6, 0xf36, 0x5, 0x7, 0x6, 0x2, 0xe09, 0x2, 0x9, 0x2, 0x7474, 0xcf2, 0x6, 0xffffff00, 0x572, 0x6, 0x3, 0x7, 0x5, 0x9, 0x6, 0x0, 0x2, 0x6d, 0xe, 0x9, 0x80, 0xc8b, 0x4, 0x8, 0x81, 0x6, 0x3, 0xfff, 0x8, 0x81, 0x80000000, 0x3, 0x81, 0x5, 0x5, 0xffff, 0x10, 0x1, 0x8, 0x8, 0x2, 0x81, 0x6, 0x10001, 0x2a9, 0x0, 0xdb, 0xffffff7c, 0x6, 0x74, 0xa9d5, 0xffffffff, 0x1, 0x0, 0x7fffffff, 0x0, 0x7, 0x7, 0xfffffffa, 0x1d, 0x1, 0x7, 0x9, 0x8001, 0x0, 0x10, 0x560, 0x8, 0x81, 0xff, 0x29, 0x4, 0x2, 0x2, 0x9, 0x8, 0x0, 0x3, 0x9, 0xffffffb2, 0x40, 0x3, 0xfa7d, 0x2, 0x6, 0x45, 0x6000, 0x3, 0x59f, 0x3, 0x100, 0x0, 0x8, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x8, 0x7f, 0x0, 0x9, 0x9, 0x3, 0x0, 0x7bb1, 0x9, 0x9, 0x9, 0x1, 0x7d4, 0x0, 0x80000000, 0x4d, 0x545, 0xdd, 0x4, 0x6, 0x3000000, 0xffffff7f, 0x401, 0x2, 0x80000001, 0x9, 0x7, 0x9, 0x2000000, 0x6, 0x9, 0x7, 0x6, 0x5, 0x3, 0x201ed7e3, 0x10000, 0x6, 0xfa, 0x1, 0x6, 0x6, 0x0, 0x8, 0x2b1f, 0x400, 0x8001, 0x4, 0x7fdd825, 0x0, 0x7fff, 0x8, 0x9, 0x5, 0xffff, 0x39f, 0x9, 0x3, 0x7, 0x2, 0x10, 0x2, 0x1, 0x7fff, 0x2, 0x6, 0x7, 0xcf24, 0x0, 0x6, 0x0, 0x1, 0x5, 0x1, 0x7, 0x5, 0x800, 0x2, 0x9, 0x1, 0x2, 0x6, 0x0, 0x9, 0xfffffffb, 0x1, 0xf2, 0xffff, 0xfffffffa, 0x6, 0x6, 0x8, 0x3, 0x3ff, 0x1, 0x3, 0xff, 0x1, 0x6, 0x15, 0x81]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0xb741, 0x464c, 0x0, 0x1, 0xabe, 0x895, 0xc8, 0xff, 0x80, 0x80000000, 0x8, 0x5, 0x5, 0x19df, 0x0, 0x80, 0xa2f, 0x2, 0x1000, 0x1, 0xbac, 0x6, 0xeae3, 0xc, 0x7, 0x0, 0xce, 0x1, 0x1, 0x8, 0x2, 0x1, 0x0, 0x7, 0x5, 0x9, 0x24f5, 0x26d, 0x2, 0xf, 0x5, 0xffffeada, 0x362, 0x4, 0x6, 0xa6, 0x9, 0x0, 0xb25, 0x40, 0x46ac, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffc01, 0x4, 0x1ff, 0x8, 0x0, 0x7, 0xffffffff, 0x8, 0xffffffe5, 0x2, 0x9, 0x5, 0x9, 0x4, 0x8, 0x2, 0x4, 0x1ff, 0xffffffa5, 0xd, 0x8, 0x80000001, 0x368, 0x37c, 0x5, 0x81, 0x10000, 0x2, 0x8, 0x1ff, 0x4, 0x0, 0x0, 0x6, 0x6, 0x6, 0x2, 0x7, 0xcde, 0xb, 0x3, 0x1, 0x7fff, 0x5, 0xc, 0x5, 0x4, 0x8, 0x8, 0x100000, 0x200, 0xfffff71f, 0xfffffffc, 0xe, 0x5, 0x3ff, 0x10, 0xd9, 0x6, 0x0, 0x5d, 0x3, 0x3, 0x4, 0x0, 0x0, 0x800, 0xffff, 0x7, 0x0, 0x1, 0xffffff9d, 0x3, 0x4, 0x4b, 0x0, 0x80000000, 0x4, 0xe, 0x4, 0x1000, 0xfffeffff, 0xfba6, 0x4, 0x1, 0x7, 0xffff7fff, 0x3ea0, 0x8, 0x40, 0xb, 0xa16, 0x9, 0xa84, 0x87bc, 0x6, 0x7, 0x0, 0x47c, 0x7, 0xff, 0xba4d, 0x8, 0x4, 0x3, 0x97d, 0x3ff, 0x9, 0xbf, 0x2, 0x7, 0xf4e, 0x7f, 0x8, 0x0, 0x2, 0x5, 0x0, 0x2, 0x1, 0x8, 0x100, 0x2, 0xfffffffe, 0x3, 0x1, 0x101, 0xd, 0x7, 0xffffffc2, 0x8bc7, 0xfff, 0x200, 0x9, 0xa, 0x70e6, 0x2, 0x600000, 0x0, 0x13f, 0x3, 0x1ff, 0x6b7f, 0x1, 0x6, 0x9, 0x2, 0x0, 0x9c34, 0x7, 0x8c, 0x5, 0x1, 0x10, 0x100, 0x6, 0x4, 0x2, 0x0, 0x8, 0x100000, 0x5, 0x4, 0x1, 0x0, 0x293e, 0x10001, 0x81, 0xffff, 0x0, 0x3, 0x3, 0x91c7, 0x200, 0x1ff, 0x6, 0x5bb8, 0x5893, 0x10, 0x7, 0x4, 0x7, 0x9, 0x9, 0x5d5, 0x2, 0x4, 0x6, 0x7, 0x5, 0x0, 0x7, 0x8, 0x13, 0x7, 0x0, 0x3, 0x6, 0x8]}, @TCA_POLICE_TBF={0x30, 0x1, {0x81, 0x2000000d, 0xfffffffc, 0x3, 0x0, {0x5, 0x1, 0xfff, 0x6, 0x8, 0x4}, {0xe, 0x0, 0x2, 0x52, 0x9, 0x3}, 0x5, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400005b07ae9506010400000000000000050002000000050004000000000014000780080012c6001000400800134000005bad05000100070000000500010007ff00000900020073", @ANYRESOCT=r0], 0x74}}, 0x24000084) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x20000485}, 0x4000811) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 4m14.372475433s ago: executing program 0 (id=2071): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002300010322bd7002fadbdf2501000000de13593492bf275af5fa58027823126015"], 0x14}}, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) (async) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 4m12.460389942s ago: executing program 0 (id=2077): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@generic={0x8864}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) close_range(r0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xdf1624e0c08c40aa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x6, 0x80000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) 4m8.403308906s ago: executing program 0 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000300)={@multicast2, @multicast1, 0x0, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x0, 0x0, 0x5}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x5, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x8a}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8400, 0x0) close(r8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) io_uring_setup(0x5c80, &(0x7f0000000280)={0x0, 0xa2, 0x4, 0x0, 0x85, 0x0, r1}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x4c074, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @local}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r13, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, r13, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x104, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x45c6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8f9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xce4e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x120}, 0x1, 0x0, 0x0, 0x50}, 0x40000) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x810, 0xffffffffffffffff, 0x48790000) (async) r14 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGWINSZ(r14, 0x5413, &(0x7f0000000e00)) 4m5.889156367s ago: executing program 5 (id=2096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r4, 0x3b81, &(0x7f0000000040)='\f') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2d, 0x107, 0xfffffffe, 0x1, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) ioctl(r2, 0x3990, &(0x7f0000000280)="0000003aa490f500") ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8080, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae03, 0x76) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x5, 0xd, 0x3, 0x6, 0x7, 0x80, 0x4, 0x7, 0x7, 0x1, 0x8, 0x2, 0x6}, 0xe) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000200)=0x6) 4m3.771931978s ago: executing program 4 (id=2106): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10000, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160004002403000000000000000000001473e1f0c5235ba43cee411e76175c9269"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044, 0x20028}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@wr_drn={0x68, 0x20, {0x1, 0xffffffffffffffff}}], 0x20}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0xc0105702, &(0x7f00000000c0)) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d01000000000000000000500000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xe, &(0x7f0000000540)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=r7], &(0x7f0000000380)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet(0x2, 0x3, 0x2) 4m3.056722384s ago: executing program 0 (id=2109): r0 = fsopen(&(0x7f0000000240)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x160, 0x3, 0x6, 0x0, 0x9}, 0x30, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffffffd, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0xa, 0x200000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x7f, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffa, 0x8, 0x4f, 0x4, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20200000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x1b8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800, 0x80, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000300)) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000040)={0x8}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000380), &(0x7f0000000400)=0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000020000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x24044808) close_range(r6, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES64=r8], 0x0) syz_usb_control_io(r9, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) 4m2.564376627s ago: executing program 1 (id=2112): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000100)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000005c0)={r1, 0x1f, 0x0, 0x1000000}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) syz_emit_ethernet(0x106, &(0x7f0000000080)={@remote, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) 4m2.320633594s ago: executing program 1 (id=2114): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x2a020400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) timer_create(0x1, &(0x7f0000000940)={0x0, 0x35, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000980)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x1, r4}) close_range(r3, r4, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sysinfo(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r0, r0) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0xffffffd7) 4m2.001586528s ago: executing program 0 (id=2115): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0xa, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200029, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m0.768074435s ago: executing program 5 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb20003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 4m0.321484098s ago: executing program 5 (id=2117): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x1fb, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 4m0.120971471s ago: executing program 4 (id=2118): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x1100}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m59.13513077s ago: executing program 5 (id=2119): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1d8100000086dd60910100001011fffe800000002d720000000000020000bbff02000000000000000000000000000100000e22001090"], 0x0) 3m59.036121805s ago: executing program 3 (id=2120): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x15fd03, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 3m58.926389229s ago: executing program 4 (id=2121): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x2a020400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) timer_create(0x1, &(0x7f0000000940)={0x0, 0x35, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000980)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x1, r4}) close_range(r3, r4, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sysinfo(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r0, r0) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0xffffffd7) write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$rds(0x15, 0x5, 0x0) 3m58.786652099s ago: executing program 3 (id=2122): keyctl$update(0x2, 0x0, &(0x7f0000000b80)="27e09d1f1e488727c411a3ce", 0xc) 3m58.74645869s ago: executing program 1 (id=2123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="9f", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="10000000000000000f010000000000003000000000000000ff00000005000000dae7c65afdd9d1d5073fbf984e560f7f7af0377a701ad4e8ab3a00000000000090000000000000000000000004000000474995282b8d35b2efb349cfa55288ab0139064c723f71e2d9ced0cbb2d46df48f8ee505b82850c69ed841ec12c3b6392c378033c46278ff6bc63d6d5bf4c8b718e78b05ad817aac3b5239cd4fe877aff14721f369a8fb6e6daa5710be61d3edc36edbd248ee581a70263663739cac6a0b0dc55ac9b2f56dc43f04dc78a3000058"], 0x128}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x10}}], 0x2, 0x4000045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2, 0x9}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000300006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m58.499932764s ago: executing program 3 (id=2124): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x142, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) 3m58.204689697s ago: executing program 3 (id=2125): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000e0000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3m57.966383716s ago: executing program 0 (id=2126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r4, &(0x7f0000000100)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest\x00', 0x40) (async) read(r2, &(0x7f0000000280)=""/72, 0x48) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000240)) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0xdf3, 0x6, 0x2, 0x7ff, 0x1, "7fe7ff3be24c0a340baf90d9974300", '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffff470400", "000000400300"]}) r6 = accept$inet(r4, 0x0, 0x0) write(r6, &(0x7f0000000180)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 3m57.795958713s ago: executing program 3 (id=2127): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) (async) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd00000038000000450300000800000000002000010005000900000100000000030000000500000005000000060000008008000006000000f7ffffffa25b0000fddd168b1ae980eb907f9b89"], 0x85) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f0000000080)=""/73, 0x716c8482, 0x936) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000100)={0x41, 0x15, 0x2, 0x7, "4d5145901f5c18384bbf75e595466b246fb9b1fffffb00"}) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r8}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r8}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0x2, 0x4, 0x10001, 0x4000}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@fd={0xf, 0x6, 0x4, 0x4, 0x7f, {0x77359400}, {0x3, 0x0, 0x8, 0x4, 0x6, 0xd, "2365fcc5"}, 0x6, 0x4, {}, 0x1, 0x0, r2}) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) modify_ldt$write2(0x11, 0x0, 0x0) (async) modify_ldt$write2(0x11, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m57.296708949s ago: executing program 5 (id=2128): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0x7035, 0x10, [0x803b, 0xfffffffffffffe01, 0xda, 0x9], &(0x7f00000002c0)=[0x0, 0x0]}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x0, 0xfffffff7, 0x0, 0x8002, '\x00', '\x00', '\x00', 0xf742, 0xfffffffe, 0x101, 0x0, "abd206a1e9d7cedfd17ebd65400ed41b"}) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x11, r0, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @initdev}, &(0x7f0000000500)=0x10, 0x80000) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000540)={{0x2, 0x4e24, @loopback}, {0x306, @random="ecdd5aad06f9"}, 0x44, {0x2, 0x4e24, @empty}, 'team_slave_0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000110a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) fsopen(&(0x7f0000000040)='qnx4\x00', 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0xb2, r4, 'id0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b0000000100000010000400", @ANYRES32, @ANYBLOB="0200000000000000000000d7a754000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000004000000050000000c00"/28], 0x50) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)=0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000700)={{@_ha_fsid={[0x281, 0x2]}, {0x80, 0x7, 0x5, 0x9}}, {{[0x2, 0x407, 0xfffffffa, 0x46]}, 0x0, 0x0, 0xd0b2, 0x0, &(0x7f00000005c0)=[{{@align, {0x9, 0x3, 0xfffffff3, 0x6}}, 0x7ff, 0x0, 'id0\x00'}, {{@align=0xf, {0x56a, 0x6, 0x2, 0xa}}, 0x2, 0x0, '/dev/audio1\x00'}, {{@align=0x2, {0x44, 0xcb82, 0x6, 0x8}}, 0xcafe9d3, 0x0, '/dev/snd/controlC#\x00'}, {{@_ha_fsid={[0xca, 0x3]}, {0x37, 0x7, 0x8, 0x1}}, 0x73, 0x0, '@*[!,%\x00'}, {{@align=0x9, {0xe3, 0x5, 0x8, 0x2}}, 0x7, 0x0, '\x97\x00'}, {{@_ha_fsid={[0x8, 0x48]}, {0xa61, 0x6, 0x8, 0xa9}}, 0x1, 0x0, '{&O\x00'}, {{@align=0x401, {0x488, 0x6, 0x68, 0x80000001}}, 0xc11e, 0x0, 'qnx4\x00'}]}}) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff4]}, 0x8, 0x800) socket$kcm(0x29, 0xa, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000240)={0xe}) timer_gettime(r7, &(0x7f0000000480)) epoll_pwait2(r9, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 3m57.284636986s ago: executing program 1 (id=2129): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0xffffffff, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000700)={0x0, 0x380, 0x180, &(0x7f0000000300)=[0x2, 0x1, 0x7f, 0x18e, 0x8, 0xfffffffffffffff9, 0x800, 0x1, 0x7fffffffffffffff, 0x1, 0x2, 0x101, 0xc, 0x4, 0x7, 0x9, 0x2, 0x9, 0xfffffffffffffffb, 0xffff, 0x5, 0x8, 0x1000, 0x9, 0x4, 0x100000001, 0x2, 0x1, 0x0, 0x0, 0x8, 0x9, 0x9a747f7, 0x0, 0x2, 0x4, 0xffff, 0x0, 0xfffffffffffffffe, 0x6, 0x8000000000000001, 0x3ef6, 0x5, 0x8, 0x5, 0x10001, 0x24, 0x7, 0x0, 0x2ca, 0x7, 0x2009, 0x50000000000, 0x80000000, 0x53357ca0, 0xb, 0x8001, 0x6, 0x1, 0x2b, 0x8, 0x5, 0x401, 0xd4a, 0x5, 0x6, 0x9, 0x8001, 0xf0, 0x400, 0x5, 0x7ff, 0xffffffffffffffff, 0x8, 0x237af8a7, 0x9, 0x3, 0x7fff, 0xeb00, 0xfffffffffffffff8, 0x1, 0x3, 0x9, 0x8001, 0x1ff, 0x2, 0x3, 0x2, 0x7f, 0x5, 0x1ff, 0xfffffffffffffff9, 0x9, 0x7f, 0x0, 0x4, 0x1, 0x4, 0x8000000000000000, 0x4, 0x0, 0x7fffffff, 0x9, 0x3, 0x2957, 0x10000, 0x3, 0x7, 0x2, 0x0, 0xd5d, 0xa, 0x6, 0x2, 0xd, 0x4, 0x8, 0x2d6, 0x7, 0x1, 0xc, 0x6, 0x7, 0x76, 0x2, 0x5, 0x8, 0x40]}) 3m56.875323412s ago: executing program 4 (id=2130): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) memfd_create(&(0x7f0000000440)='\x03U0f`\x0f\x16f\xc0\x9d\xae-\x99\x97\x03\x98\a\xfcakTt\x9f\xa5\v\x88\xa6\x8e@\x17%;g\x84$\xf3\x80i\n\xd2\xe2\xaf9W\xc8\x8f\xc4\x99\xd4\a\xb5\xf6\x82\xfd\xfd\xd53=\x05\xe5Z\xc7\x04\x00\x00\x00\x00\x00\x00\x18\x00.\x0e5\xf3\x88\xbf\x88\x8f\xed/\xc2\x84\xd4\x11\x93\xb899q\x0f_\xf0k\x14 68\"\xd9l\xf3\xc4u\xed\xceV\xd6Z]\x93\x93P\xbf\x05~\xde\x1f`\x95J\xfbY\x8b\xbe\xd90\xa2]\xb2\xe2\xec\x9f\xa4\xc6rF\xd8\x93?\xec\xa4\xd8\x9f\x8f\x90\xd8=\rP\xb8\x7f\xfa\xc3\xc4\xe9\xd0A@\x1d\x87\xf0\x83\x0e#p\xf4\x0e\xa0\x88g\xe0\xdba\xbcsw\xc0\xfev\xbd\xb0\xb6\x96\x8d\x11\xca\xee\xa8\xad\xaaV\xa7L\x9f\xe5J\x03\x87t\x99\x85:\xe4U\xa0c51()\x16\"(\x18G\b}\x1f\x85\x9bDP\xacQ\xbd\x1b\x00\xf4JtT{\x00^\xb1G \xe9\xbf\xd9 \x87x\xd5\x81\xdc\xf4\x8fYH\xadyk%`\xabkr\x00\xba\x9b\x98\x96*\x1c\xce$\xe1\xa2\x87I\xa6\"\xf5&,\x9fe\x1f+!n\xfb\xe7\xbf?\xc3\x80WO|\xfd\x91\xc4\xfd\x9a\t<\a\xb2Z\xd6LL\xca\xf1\xff^)f\x88\x0e\xf3\x03\x85\xe1\x10\xb6\x942\x11\xbe\x94\x1cJ\xd3i\xf8\tu\xa7\xce\x00\xc14m\xc9_\x80q\xc7?\xbaf\xadu\xe1\xd2\xd9\xf2&g\xb2\x00\xc48I\xcdy\x91\x93\xa4\xa79\x01\b\xbc\x8d\xb5\x9a\x1a\x0e\x15\r\x92\x00\x9a\xd6\xb7t\x80\xe0\xa7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa8\x80\x04\xe8O8v\xf9b\xc9\xe4d\xdd\xc8\xe2Z\tm\x02F\xf1\x9a\xb7\xa7\xab,\xcf\'\xdeb2\xac\x92\xad\xe4g\x8a5U8\xe3b\xa5\x01B/>0\xfe\xff\x1c\x0f^\xe9R\x97\x00\xd8\xb69\xb8\xbc\xaeeB\xbd\x02f7\xdas\xc22\xe8\x1dH\xdd\xe8Iwm\xee,\xbf\xe0\xbezq\x1b\a\x97\xbe\xa5\xdcy\f\x83\x05=\x92`\x03\xceX\xbb\x05\xfe\x80\xc7<%\xec\xac\xc3\x1c\xa2\x9d\x95q\xc0{6\x90Y\xe9\x17\x82q\x05X\x84\x83\x1c\xe7\xf1\x18\xc5\xe54\x1ah~$\xf7\xab\x93\x9b\xd1CUg\xf5\xdf\xa9\xe4\xd3\xe5\x00\x00\x00\x00\x00\x16\xde\xdc\x06\xeb\xa0\xf2\x95\x13M\"?\xf5/\x8f\a\r\x8fo)y\x0f\x9aR\'\xf0C\xee\xff\xfdn\x15b\xdcv\xd1J\xdc\xded\xd1\x1e', 0x2) 3m56.356036796s ago: executing program 4 (id=2131): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x1, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0xffe4, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 3m55.741020797s ago: executing program 1 (id=2132): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000100)=0x10000, 0x2e) (fail_nth: 1) 3m55.114669327s ago: executing program 3 (id=2133): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x2a020400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) timer_create(0x1, &(0x7f0000000940)={0x0, 0x35, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000980)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x1, r4}) close_range(r3, r4, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sysinfo(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r0, r0) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0xffffffd7) 3m54.177851035s ago: executing program 5 (id=2134): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x8000000}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m53.692518882s ago: executing program 1 (id=2135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x10}]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0xff}], 0x1) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r0, r1) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000001240)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0xfffffffffffffc86, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x9, 0x0, 0x0, 0x5}) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) msgget(0x3, 0x710) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x800) bind$alg(0xffffffffffffffff, 0x0, 0x0) msgget(0x1, 0x240) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600070129bd7000fedbdd25207c00000c000280080001", @ANYRES32=r4, @ANYBLOB="2ccaa33d8d68dc8dcc51326ce371b034e006401da7ad3ded82ee759708e89136e035db8d946ee1782fc2501a06f1dcb1cd9979558d9321355d4a88f44728cbd06ab6165a4c9bb430bc18158b15b4d13602207d0cb53553c321a2ea0f931e38e4ec3b0a401a7dce4b"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) msgget(0x3, 0x793) msgget(0x1, 0x443) 3m52.440770324s ago: executing program 4 (id=2136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0xa, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200029, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m43.420911134s ago: executing program 33 (id=2126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r4, &(0x7f0000000100)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest\x00', 0x40) (async) read(r2, &(0x7f0000000280)=""/72, 0x48) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000240)) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0xdf3, 0x6, 0x2, 0x7ff, 0x1, "7fe7ff3be24c0a340baf90d9974300", '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffff470400", "000000400300"]}) r6 = accept$inet(r4, 0x0, 0x0) write(r6, &(0x7f0000000180)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 34 (id=2135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x10}]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0xff}], 0x1) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r0, r1) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000001240)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0xfffffffffffffc86, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x9, 0x0, 0x0, 0x5}) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) msgget(0x3, 0x710) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x800) bind$alg(0xffffffffffffffff, 0x0, 0x0) msgget(0x1, 0x240) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600070129bd7000fedbdd25207c00000c000280080001", @ANYRES32=r4, @ANYBLOB="2ccaa33d8d68dc8dcc51326ce371b034e006401da7ad3ded82ee759708e89136e035db8d946ee1782fc2501a06f1dcb1cd9979558d9321355d4a88f44728cbd06ab6165a4c9bb430bc18158b15b4d13602207d0cb53553c321a2ea0f931e38e4ec3b0a401a7dce4b"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) msgget(0x3, 0x793) msgget(0x1, 0x443) kernel console output (not intermixed with test programs): 396.821874][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.821948][T17543] Call Trace: [ 396.821984][T17543] [ 396.822008][T17543] dump_stack_lvl+0xe8/0x150 [ 396.822103][T17543] should_fail_ex+0x410/0x560 [ 396.822203][T17543] _copy_to_user+0x31/0xb0 [ 396.822282][T17543] proc_pid_cmdline_read+0x4b5/0x900 [ 396.822366][T17543] ? __asan_memset+0x22/0x50 [ 396.822470][T17543] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 396.822565][T17543] ? rw_verify_area+0x24a/0x4c0 [ 396.822666][T17543] vfs_readv+0x57c/0x850 [ 396.822739][T17543] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 396.822836][T17543] ? __pfx_vfs_readv+0x10/0x10 [ 396.822939][T17543] ? __fget_files+0x2a/0x420 [ 396.823023][T17543] ? __fget_files+0x3a2/0x420 [ 396.823096][T17543] ? __fget_files+0x2a/0x420 [ 396.823190][T17543] __x64_sys_preadv+0x19c/0x2b0 [ 396.823261][T17543] ? __pfx___x64_sys_preadv+0x10/0x10 [ 396.823368][T17543] do_syscall_64+0x166/0x520 [ 396.823421][T17543] ? trace_irq_disable+0x3b/0x140 [ 396.823483][T17543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.823545][T17543] ? clear_bhb_loop+0x70/0xc0 [ 396.823617][T17543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.823689][T17543] RIP: 0033:0x7fdf9d39e159 [ 396.823743][T17543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.823795][T17543] RSP: 002b:00007fdf9e29b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 396.823851][T17543] RAX: ffffffffffffffda RBX: 00007fdf9d626090 RCX: 00007fdf9d39e159 [ 396.823893][T17543] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 396.823932][T17543] RBP: 00007fdf9e29b090 R08: 0000000000006a76 R09: 0000000000000000 [ 396.823974][T17543] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000002 [ 396.824008][T17543] R13: 00007fdf9d626128 R14: 00007fdf9d626090 R15: 00007fdf9d74fa48 [ 396.824100][T17543] [ 397.336714][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 397.449541][T17551] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 397.449595][T17551] syzkaller1: group set to 0 [ 397.462188][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 397.492000][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 397.507277][ T5710] syzkaller1: tun_net_xmit 90 [ 397.950584][ T987] hid-alps 0003:044E:120B.000E: failed to read command (-71) [ 397.950669][ T987] hid-alps 0003:044E:120B.000E: failed U1_NUM_SENS_X (-71) [ 398.034651][T17571] nvme_fabrics: missing parameter 'nqn=%s' [ 398.068199][ T987] hid-alps 0003:044E:120B.000E: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 398.113855][ T987] usb 5-1: USB disconnect, device number 65 [ 398.171995][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1548'. [ 398.172072][T17584] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 398.237759][T17596] fido_id[17596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 398.292750][ T30] audit: type=1326 audit(1788939543.165:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17579 comm="syz.3.1548" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x0 [ 398.623384][ T5614] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 398.672787][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 398.756824][ T5614] usb 2-1: device descriptor read/64, error -71 [ 398.808157][T17638] bond5 (unregistering): Released all slaves [ 398.963844][ T9273] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 399.023453][ T5614] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 399.094467][ T987] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 399.152332][ T9273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 399.160475][ T5614] usb 2-1: device descriptor read/64, error -71 [ 399.170224][ T9273] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 399.181812][ T9273] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 399.190735][ T9273] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 399.204103][ T9273] usb 5-1: config 63 has no interface number 0 [ 399.210448][ T9273] usb 5-1: config 63 interface 66 has no altsetting 0 [ 399.257964][ T9273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.258012][ T9273] usb 5-1: Product: syz [ 399.258048][ T9273] usb 5-1: Manufacturer: syz [ 399.258079][ T9273] usb 5-1: SerialNumber: syz [ 399.261300][ T987] usb 6-1: unable to get BOS descriptor or descriptor too short [ 399.261445][ T987] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.40 [ 399.268016][ T5614] usb usb2-port1: attempt power cycle [ 399.274248][ T987] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 399.274343][ T987] usb 6-1: config 1 interface 0 has no altsetting 0 [ 399.289390][ T987] usb 6-1: string descriptor 0 read error: -22 [ 399.289944][ T987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.601004][T17727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.609653][ T5614] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 399.621137][T17727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.629969][ T5614] usb 2-1: device descriptor read/8, error -71 [ 399.656271][ T9273] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 399.656346][ T9273] uvcvideo 5-1:63.66: No valid video chain found. [ 399.674946][ T9273] usb 5-1: USB disconnect, device number 66 [ 399.787583][T17744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.866535][ T5614] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 399.895275][ T5614] usb 2-1: device descriptor read/8, error -71 [ 400.003773][ T5614] usb usb2-port1: unable to enumerate USB device [ 400.039898][ T987] usbhid 6-1:1.0: can't add hid device: -32 [ 400.040162][ T987] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 400.334124][ T987] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 400.487252][ T987] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.499320][ T987] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 400.499421][ T987] usb 4-1: config 0 has no interface number 0 [ 400.499501][ T987] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 400.499605][ T987] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 400.499736][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.528999][ T987] usb 4-1: config 0 descriptor?? [ 400.536449][T17757] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 400.572776][ T987] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 400.581023][T17769] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 400.707225][T17769] bond5: entered promiscuous mode [ 400.708521][T17769] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.718754][ T9273] usb 6-1: USB disconnect, device number 25 [ 400.791678][ T987] usb 4-1: USB disconnect, device number 61 [ 401.082000][T17847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1566'. [ 401.103855][ T5713] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 401.263553][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 401.269605][ T5713] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 401.283733][ T987] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 401.291905][ T5713] usb 1-1: config 0 has no interfaces? [ 401.310290][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.310385][ T5713] usb 1-1: Product: syz [ 401.310423][ T5713] usb 1-1: Manufacturer: syz [ 401.310462][ T5713] usb 1-1: SerialNumber: syz [ 401.342533][ T5713] usb 1-1: config 0 descriptor?? [ 401.372345][T17852] fuse: Unknown parameter '' [ 401.433555][ T987] usb 4-1: Using ep0 maxpacket: 32 [ 401.435759][ T987] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 401.456744][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.456799][ T987] usb 4-1: Product: syz [ 401.456817][ T987] usb 4-1: Manufacturer: syz [ 401.456834][ T987] usb 4-1: SerialNumber: syz [ 401.493856][ T987] usb 4-1: config 0 descriptor?? [ 401.539946][ T987] usb 4-1: selecting invalid altsetting 3 [ 401.541724][ T987] comedi comedi5: could not set alternate setting 3 in high speed [ 401.541785][ T987] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 401.601142][ T987] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 401.653464][ T5710] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 401.816047][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 401.830888][ T5710] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 401.843437][ T5710] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 401.843495][ T5710] usb 5-1: config 127 has no interface number 0 [ 401.843546][ T5710] usb 5-1: config 127 interface 124 has no altsetting 0 [ 401.883893][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.883955][ T5710] usb 5-1: Product: syz [ 401.883990][ T5710] usb 5-1: Manufacturer: syz [ 401.884044][ T5710] usb 5-1: SerialNumber: syz [ 402.243742][ T987] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 402.262325][ T5713] usb 1-1: USB disconnect, device number 63 [ 402.322582][ T9] usb 4-1: USB disconnect, device number 62 [ 402.361627][ T5710] usb 5-1: reset high-speed USB device number 67 using dummy_hcd [ 402.393402][ T987] usb 2-1: Using ep0 maxpacket: 16 [ 402.396476][ T987] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 402.408229][ T987] usb 2-1: config 0 has no interfaces? [ 402.408268][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.436254][ T987] usb 2-1: config 0 descriptor?? [ 402.677932][ T9] usb 2-1: USB disconnect, device number 54 [ 402.909818][T17943] xt_hashlimit: size too large, truncated to 1048576 [ 402.998702][ T5713] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 403.093502][ T5710] usb 5-1: device descriptor read/64, error -71 [ 403.130492][T17948] tipc: Enabled bearer , priority 0 [ 403.157048][ T5713] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 403.159968][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.160163][ T5713] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 403.160279][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.166224][T17946] tipc: Disabling bearer [ 403.373422][ T5710] usb 5-1: reset high-speed USB device number 67 using dummy_hcd [ 403.569587][T17967] bridge1: entered promiscuous mode [ 403.583467][T17967] bridge1: entered allmulticast mode [ 403.625690][ T5713] dvb_ttusb_budget: ttusb_init_controller: error [ 403.625732][ T5713] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 403.747105][T17967] team0: Port device bridge1 added [ 403.815736][T17972] bridge0: port 3(team0) entered blocking state [ 403.816852][T17972] bridge0: port 3(team0) entered disabled state [ 403.870697][T17972] team0: entered allmulticast mode [ 403.870773][T17972] team_slave_0: entered allmulticast mode [ 403.870883][T17972] team_slave_1: entered allmulticast mode [ 404.002481][ T5713] DVB: Unable to find symbol stv0299_attach() [ 404.083207][T17972] team0: entered promiscuous mode [ 404.145046][T17972] team_slave_0: entered promiscuous mode [ 404.145705][T17972] team_slave_1: entered promiscuous mode [ 404.213197][ T5713] DVB: Unable to find symbol tda8083_attach() [ 404.213245][ T5713] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 404.240354][ T5713] usb 4-1: USB disconnect, device number 63 [ 404.323672][T17972] bridge0: port 3(team0) entered blocking state [ 404.326273][T17972] bridge0: port 3(team0) entered forwarding state [ 405.108758][T18029] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 405.343788][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.385335][ T5710] usb 5-1: device firmware changed [ 405.415606][T18048] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 405.481676][ T5710] usb 5-1: USB disconnect, device number 67 [ 405.614819][T18049] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 405.614922][T18049] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 405.615003][T18049] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 405.828814][T18068] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1592'. [ 405.893581][ T9273] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 406.053411][ T9273] usb 2-1: Using ep0 maxpacket: 16 [ 406.056516][ T9273] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 406.058186][ T9273] usb 2-1: config 0 has no interfaces? [ 406.058271][ T9273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.092018][ T9273] usb 2-1: config 0 descriptor?? [ 406.223586][ T5710] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 406.243389][ T987] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 406.333203][ T9273] usb 2-1: USB disconnect, device number 55 [ 406.375804][ T5710] usb 6-1: Using ep0 maxpacket: 8 [ 406.381117][T18110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.391478][ T5710] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 406.404133][ T987] usb 1-1: Using ep0 maxpacket: 8 [ 406.409734][ T5710] usb 6-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 406.409764][ T5710] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 406.409898][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.429619][ T987] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 406.448046][ T987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.448118][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.470106][ T987] usb 1-1: config 0 descriptor?? [ 406.476282][ T5710] usb 6-1: config 0 descriptor?? [ 406.497856][ T987] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 406.601931][T18110] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 406.775386][T18126] loop3: detected capacity change from 0 to 7 [ 406.798554][T18126] loop3: [POWERTEC] p1 [ 406.810113][T18126] loop3: p1 start 808464432 is beyond EOD, truncated [ 406.890147][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 406.904799][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 406.916129][T18086] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 407.374176][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 407.420071][ T30] audit: type=1326 audit(1788939552.295:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 407.458438][ T30] audit: type=1326 audit(1788939552.335:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 407.464195][ T30] audit: type=1326 audit(1788939552.345:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 407.469096][ T30] audit: type=1326 audit(1788939552.345:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 407.492305][ T30] audit: type=1326 audit(1788939552.365:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 407.521928][ T30] audit: type=1326 audit(1788939552.395:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35daf5e98e code=0x7ffc0000 [ 407.537663][ T30] audit: type=1326 audit(1788939552.415:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35daf5e98e code=0x7ffc0000 [ 407.583328][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 407.609485][ T30] audit: type=1326 audit(1788939552.485:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35daf5e98e code=0x7ffc0000 [ 407.612431][ T30] audit: type=1326 audit(1788939552.485:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35daf5e98e code=0x7ffc0000 [ 407.614154][ T30] audit: type=1326 audit(1788939552.495:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18151 comm="syz.3.1604" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35daf5e98e code=0x7ffc0000 [ 407.640580][ T987] gspca_vc032x: reg_w err -110 [ 407.640660][ T987] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 407.690868][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.690918][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=ce.f6 [ 407.729492][ T9] usb 2-1: config 5 has an invalid interface number: 225 but max is 0 [ 407.738195][ T9] usb 2-1: config 5 has no interface number 0 [ 407.744476][ T9] usb 2-1: config 5 interface 225 has no altsetting 0 [ 407.756054][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.764504][ T9] usb 2-1: Product: syz [ 407.764526][ T9] usb 2-1: Manufacturer: syz [ 407.764543][ T9] usb 2-1: SerialNumber: syz [ 408.103981][ T9] ldusb 2-1:5.225: Interrupt in endpoint not found [ 408.132449][ T9] usb 2-1: USB disconnect, device number 56 [ 408.530924][T18184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 409.048929][ T9273] usb 1-1: USB disconnect, device number 64 [ 409.115885][T18191] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 409.147956][ T5710] usb 6-1: USB disconnect, device number 26 [ 409.203842][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 409.379701][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 409.391322][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.400479][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.414036][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 409.424370][ T9] usb 4-1: config 0 descriptor?? [ 409.553365][ T5710] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 409.573644][ T9273] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 409.693620][ T5713] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 409.714116][ T5710] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 409.717346][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.717504][ T5710] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.717703][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.755696][ T9273] usb 1-1: Using ep0 maxpacket: 16 [ 409.761128][ T5614] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 409.769433][ T9273] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 409.781704][ T9273] usb 1-1: config 0 has no interfaces? [ 409.787519][ T9273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.802131][ T9273] usb 1-1: config 0 descriptor?? [ 409.853525][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 409.859752][ T5713] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 409.871142][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 409.882952][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 409.882986][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 409.883016][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 409.915994][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.924397][ T5713] usb 2-1: Product: syz [ 409.924421][ T5713] usb 2-1: Manufacturer: syz [ 409.924438][ T5713] usb 2-1: SerialNumber: syz [ 409.940977][ T5614] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.953687][ T5713] usb 2-1: config 0 descriptor?? [ 409.959493][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.970980][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.994704][ T5614] usb 5-1: config 0 descriptor?? [ 410.026771][ T1556] usb 1-1: USB disconnect, device number 65 [ 410.177336][ T5710] dvb_ttusb_budget: ttusb_init_controller: error [ 410.177381][ T5710] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 410.224263][ T5614] usbhid 5-1:0.0: can't add hid device: -71 [ 410.224395][ T5614] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 410.249431][ T5614] usb 5-1: USB disconnect, device number 68 [ 410.296830][ T5710] DVB: Unable to find symbol stv0299_attach() [ 410.331799][ T5710] DVB: Unable to find symbol tda8083_attach() [ 410.331840][ T5710] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 410.538474][ T5710] usb 6-1: USB disconnect, device number 27 [ 410.628243][ T10] usb 2-1: USB disconnect, device number 57 [ 410.723445][ T5614] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 410.779348][T18327] netlink: 'syz.1.1617': attribute type 2 has an invalid length. [ 410.779398][T18327] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1617'. [ 410.780837][T18327] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 410.804421][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 410.804523][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 410.873559][ T5713] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 410.876074][ T5614] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 410.891099][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.891148][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.913868][ T5614] usb 5-1: config 0 descriptor?? [ 411.024707][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 411.031222][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.032816][ T5713] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 411.058664][ T5713] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 411.058713][ T5713] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 411.058799][ T5713] usb 1-1: config 4 has no interface number 0 [ 411.086390][ T5713] usb 1-1: string descriptor 0 read error: -22 [ 411.086901][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.134957][ T5713] uvcvideo 1-1:4.147: Found multiple Units with ID 6 [ 411.135137][ T5713] uvcvideo 1-1:4.147: Found UVC 0.02 device (04f2:b746) [ 411.140594][ T5713] uvcvideo 1-1:4.147: No streaming interface found for terminal 32774. [ 411.164788][T18258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.175081][T18258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.400345][T18312] syz.0.1615 (18312) used obsolete PPPIOCDETACH ioctl [ 411.476161][T18359] netlink: 8628 bytes leftover after parsing attributes in process `syz.5.1622'. [ 411.799286][ T5710] usb 4-1: USB disconnect, device number 64 [ 411.956195][ T5713] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 412.103924][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 412.104664][ T5713] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 412.106295][ T5713] usb 2-1: config 0 has no interfaces? [ 412.106444][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.139032][ T5713] usb 2-1: config 0 descriptor?? [ 412.372610][ T10] usb 2-1: USB disconnect, device number 58 [ 412.438283][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 412.551032][T18434] FAULT_INJECTION: forcing a failure. [ 412.551032][T18434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.564488][T18434] CPU: 0 UID: 0 PID: 18434 Comm: syz.0.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.564523][T18434] Tainted: [L]=SOFTLOCKUP [ 412.564532][T18434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.564545][T18434] Call Trace: [ 412.564553][T18434] [ 412.564562][T18434] dump_stack_lvl+0xe8/0x150 [ 412.564593][T18434] should_fail_ex+0x410/0x560 [ 412.564629][T18434] _copy_to_user+0x31/0xb0 [ 412.564652][T18434] proc_pid_cmdline_read+0x4b5/0x900 [ 412.564679][T18434] ? __asan_memset+0x22/0x50 [ 412.564711][T18434] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 412.564764][T18434] ? rw_verify_area+0x24a/0x4c0 [ 412.564794][T18434] vfs_readv+0x57c/0x850 [ 412.564816][T18434] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 412.564851][T18434] ? __pfx_vfs_readv+0x10/0x10 [ 412.564882][T18434] ? __fget_files+0x2a/0x420 [ 412.564911][T18434] ? __fget_files+0x3a2/0x420 [ 412.564934][T18434] ? __fget_files+0x2a/0x420 [ 412.564969][T18434] __x64_sys_preadv+0x19c/0x2b0 [ 412.564990][T18434] ? __pfx___x64_sys_preadv+0x10/0x10 [ 412.565017][T18434] do_syscall_64+0x166/0x520 [ 412.565035][T18434] ? trace_irq_disable+0x3b/0x140 [ 412.565053][T18434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.565072][T18434] ? clear_bhb_loop+0x70/0xc0 [ 412.565094][T18434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.565112][T18434] RIP: 0033:0x7f780db9e159 [ 412.565130][T18434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.565146][T18434] RSP: 002b:00007f780e9d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 412.565167][T18434] RAX: ffffffffffffffda RBX: 00007f780de26090 RCX: 00007f780db9e159 [ 412.565181][T18434] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 412.565193][T18434] RBP: 00007f780e9d9090 R08: 0000000000006a76 R09: 0000000000000000 [ 412.565205][T18434] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000002 [ 412.565216][T18434] R13: 00007f780de26128 R14: 00007f780de26090 R15: 00007f780df4fa48 [ 412.565246][T18434] [ 412.704163][ T5614] usbhid 5-1:0.0: can't add hid device: -71 [ 412.704513][ T5614] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 412.816932][ T5614] usb 5-1: USB disconnect, device number 69 [ 412.853761][ T5710] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 412.982073][T18445] tipc: Enabled bearer , priority 0 [ 413.000800][T18444] tipc: Disabling bearer [ 413.047323][ T5710] usb 4-1: Invalid ep0 maxpacket: 16 [ 413.166189][T18457] tipc: Enabling of bearer rejected, failed to enable media [ 413.183382][ T5710] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 413.293578][T18464] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1637'. [ 413.343366][ T5710] usb 4-1: Invalid ep0 maxpacket: 16 [ 413.349088][ T5710] usb usb4-port1: attempt power cycle [ 413.415477][T18472] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 413.421560][T18472] syzkaller1: group set to 0 [ 413.429112][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 413.451188][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 413.694581][ T5710] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 413.715598][ T5710] usb 4-1: Invalid ep0 maxpacket: 16 [ 413.844184][ T5710] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 413.874441][ T5710] usb 4-1: Invalid ep0 maxpacket: 16 [ 413.880302][ T5710] usb usb4-port1: unable to enumerate USB device [ 414.150635][T18511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.160766][T18511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.179945][T18512] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1647'. [ 414.360127][T18519] syzkaller0: entered promiscuous mode [ 414.360183][T18519] syzkaller0: entered allmulticast mode [ 414.450249][T18519] tipc: Enabled bearer , priority 0 [ 414.498400][T18524] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 414.512003][T18518] tipc: Resetting bearer [ 414.557635][T18518] tipc: Disabling bearer [ 415.330806][T18591] netlink: 8628 bytes leftover after parsing attributes in process `syz.1.1660'. [ 415.499393][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 415.655374][T18596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.873422][T18646] tipc: Enabled bearer , priority 0 [ 415.892515][T18644] tipc: Disabling bearer [ 416.436374][T18687] input: syz1 as /devices/virtual/input/input40 [ 416.449112][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 416.480829][T18699] usb usb7: usbfs: interface 0 claimed by hub while 'syz.5.1676' sets config #1 [ 416.555740][T18694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.567408][T18694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.697394][T18702] tipc: Enabled bearer , priority 0 [ 416.711457][T18701] tipc: Disabling bearer [ 417.076241][T18731] netlink: 'syz.3.1682': attribute type 2 has an invalid length. [ 417.076295][T18731] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1682'. [ 417.076324][T18731] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 417.172534][T18735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1684'. [ 417.193632][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 417.193703][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 417.256978][T18740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.323236][T18746] FAULT_INJECTION: forcing a failure. [ 417.323236][T18746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.323375][T18746] CPU: 0 UID: 0 PID: 18746 Comm: syz.0.1685 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.323416][T18746] Tainted: [L]=SOFTLOCKUP [ 417.323457][T18746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.323502][T18746] Call Trace: [ 417.323540][T18746] [ 417.323574][T18746] dump_stack_lvl+0xe8/0x150 [ 417.323685][T18746] should_fail_ex+0x410/0x560 [ 417.323784][T18746] _copy_to_user+0x31/0xb0 [ 417.323867][T18746] vmci_host_unlocked_ioctl+0x2345/0x2850 [ 417.323959][T18746] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 417.324104][T18746] ? kasan_quarantine_put+0xbb/0x1f0 [ 417.324190][T18746] ? tomoyo_path_number_perm+0x219/0x5f0 [ 417.324286][T18746] ? tomoyo_path_number_perm+0x219/0x5f0 [ 417.324416][T18746] ? do_vfs_ioctl+0x116f/0x1530 [ 417.324481][T18746] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 417.324555][T18746] ? vfs_write+0x9ce/0xba0 [ 417.324658][T18746] ? hook_file_ioctl+0x1f2/0x600 [ 417.324784][T18746] ? ksys_write+0x1fc/0x270 [ 417.324880][T18746] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.324973][T18746] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 417.325070][T18746] __se_sys_ioctl+0xfc/0x170 [ 417.325135][T18746] do_syscall_64+0x166/0x520 [ 417.325196][T18746] ? trace_irq_disable+0x3b/0x140 [ 417.325258][T18746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.325315][T18746] ? clear_bhb_loop+0x70/0xc0 [ 417.325389][T18746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.325460][T18746] RIP: 0033:0x7f780db9e159 [ 417.325513][T18746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.325565][T18746] RSP: 002b:00007f780e9fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.325636][T18746] RAX: ffffffffffffffda RBX: 00007f780de25fa0 RCX: 00007f780db9e159 [ 417.325679][T18746] RDX: 0000200000000040 RSI: 00000000000007a6 RDI: 0000000000000003 [ 417.325718][T18746] RBP: 00007f780e9fa090 R08: 0000000000000000 R09: 0000000000000000 [ 417.325753][T18746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.325793][T18746] R13: 00007f780de26038 R14: 00007f780de25fa0 R15: 00007f780df4fa48 [ 417.325878][T18746] [ 417.600280][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1683'. [ 417.891381][T18769] FAULT_INJECTION: forcing a failure. [ 417.891381][T18769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.891451][T18769] CPU: 0 UID: 0 PID: 18769 Comm: syz.1.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.891507][T18769] Tainted: [L]=SOFTLOCKUP [ 417.891537][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.891586][T18769] Call Trace: [ 417.891615][T18769] [ 417.891650][T18769] dump_stack_lvl+0xe8/0x150 [ 417.891794][T18769] should_fail_ex+0x410/0x560 [ 417.891908][T18769] _copy_to_user+0x31/0xb0 [ 417.891974][T18769] proc_pid_cmdline_read+0x4b5/0x900 [ 417.892059][T18769] ? __asan_memset+0x22/0x50 [ 417.892166][T18769] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 417.892259][T18769] ? rw_verify_area+0x24a/0x4c0 [ 417.892364][T18769] vfs_readv+0x57c/0x850 [ 417.892448][T18769] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 417.892549][T18769] ? __pfx_vfs_readv+0x10/0x10 [ 417.892652][T18769] ? __fget_files+0x2a/0x420 [ 417.892744][T18769] ? __fget_files+0x3a2/0x420 [ 417.892818][T18769] ? __fget_files+0x2a/0x420 [ 417.892917][T18769] __x64_sys_preadv+0x19c/0x2b0 [ 417.893004][T18769] ? __pfx___x64_sys_preadv+0x10/0x10 [ 417.893112][T18769] do_syscall_64+0x166/0x520 [ 417.893174][T18769] ? trace_irq_disable+0x3b/0x140 [ 417.893234][T18769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.893303][T18769] ? clear_bhb_loop+0x70/0xc0 [ 417.893362][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.893425][T18769] RIP: 0033:0x7fdf9d39e159 [ 417.893478][T18769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.893529][T18769] RSP: 002b:00007fdf9e29b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 417.893599][T18769] RAX: ffffffffffffffda RBX: 00007fdf9d626090 RCX: 00007fdf9d39e159 [ 417.893642][T18769] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 417.893683][T18769] RBP: 00007fdf9e29b090 R08: 0000000000006a76 R09: 0000000000000000 [ 417.893716][T18769] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000002 [ 417.893756][T18769] R13: 00007fdf9d626128 R14: 00007fdf9d626090 R15: 00007fdf9d74fa48 [ 417.893848][T18769] [ 418.117043][ T5614] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 418.283398][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 418.308152][ T5614] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 418.323850][ T5614] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 418.323900][ T5614] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 418.323957][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.324000][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.387722][ T5614] usb 4-1: config 0 descriptor?? [ 418.513607][ T5713] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 418.541275][T18793] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1691'. [ 418.663368][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 418.672010][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 418.672127][ T5713] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 418.690765][ T5713] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 418.690830][ T5713] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 418.717836][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.717881][ T5713] usb 5-1: Product: syz [ 418.717953][ T5713] usb 5-1: Manufacturer: syz [ 418.717975][ T5713] usb 5-1: SerialNumber: syz [ 418.811414][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.818827][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x6 [ 418.826040][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x1 [ 418.833215][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.840372][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.847532][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.854821][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.862039][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.862138][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.862175][ T5614] saitek 0003:06A3:0CCB.000F: unknown main item tag 0x0 [ 418.892065][ T5614] saitek 0003:06A3:0CCB.000F: hidraw0: USB HID v0.01 Device [HID 06a3:0ccb] on usb-dummy_hcd.3-1/input0 [ 418.959308][T18776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.969745][T18776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.010418][ T5713] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 419.032635][ T5710] usb 4-1: USB disconnect, device number 69 [ 419.103974][ T5713] usb 5-1: USB disconnect, device number 70 [ 419.200637][T18813] fido_id[18813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 419.433997][ T987] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 419.464191][T18851] syzkaller0: entered promiscuous mode [ 419.465146][T18851] syzkaller0: entered allmulticast mode [ 419.610333][ T987] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.626442][ T987] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.626505][ T987] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.648253][ T987] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.648313][ T987] usb 6-1: Product: syz [ 419.648349][ T987] usb 6-1: Manufacturer: syz [ 419.648425][ T987] usb 6-1: SerialNumber: syz [ 419.675253][ T987] usb 6-1: config 0 descriptor?? [ 419.703226][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 419.703520][ T30] audit: type=1326 audit(1788939564.575:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.0.1703" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f780db9e159 code=0x0 [ 419.720193][ T987] usb 6-1: selecting invalid altsetting 0 [ 419.773851][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1702'. [ 419.849536][ T30] audit: type=1326 audit(1788939564.725:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.875483][ T30] audit: type=1326 audit(1788939564.755:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.879257][ T30] audit: type=1326 audit(1788939564.755:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.930158][ T30] audit: type=1326 audit(1788939564.725:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.930251][ T30] audit: type=1326 audit(1788939564.805:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.930410][ T30] audit: type=1326 audit(1788939564.805:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.930532][ T30] audit: type=1326 audit(1788939564.805:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.930646][ T30] audit: type=1326 audit(1788939564.805:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 419.930778][ T30] audit: type=1326 audit(1788939564.805:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.1.1700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x7ffc0000 [ 420.083716][T18870] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 420.086984][ T5710] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 420.213488][ T5710] usb 4-1: device descriptor read/64, error -71 [ 420.258341][ T987] usb 6-1: USB disconnect, device number 28 [ 420.456297][ T5710] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 420.590359][T18926] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 420.593886][ T5710] usb 4-1: device descriptor read/64, error -71 [ 420.716150][ T5710] usb usb4-port1: attempt power cycle [ 420.806101][T18935] bond5: entered promiscuous mode [ 420.806718][T18935] 8021q: adding VLAN 0 to HW filter on device bond5 [ 420.851501][T18935] bond5 (unregistering): Released all slaves [ 420.952696][T18988] binder_alloc: 18976: binder_alloc_buf size 1024 failed, no address space [ 420.960561][T18988] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 420.961872][T18988] binder: 18976:18988 ioctl 80045430 7f780e9f9f8c returned -22 [ 421.061465][ T5710] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 421.086150][ T5710] usb 4-1: device descriptor read/8, error -71 [ 421.219780][T19019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.228029][T19019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.262909][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 421.294392][ T9273] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 421.333491][ T5710] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 421.354044][ T5710] usb 4-1: device descriptor read/8, error -71 [ 421.367521][ T5713] logitech-hidpp-device 0005:046D:B012.0010: item fetching failed at offset 3/4 [ 421.380316][ T5713] logitech-hidpp-device 0005:046D:B012.0010: hidpp_probe:parse failed [ 421.389169][ T5713] logitech-hidpp-device 0005:046D:B012.0010: probe with driver logitech-hidpp-device failed with error -22 [ 421.456553][ T9273] usb 2-1: Using ep0 maxpacket: 16 [ 421.464694][ T9273] usb 2-1: unable to get BOS descriptor or descriptor too short [ 421.468288][ T5710] usb usb4-port1: unable to enumerate USB device [ 421.472565][ T9273] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 421.490088][ T9273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 421.501366][ T9273] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 421.516595][ T9273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.525137][ T9273] usb 2-1: Product: syz [ 421.525160][ T9273] usb 2-1: Manufacturer: syz [ 421.525178][ T9273] usb 2-1: SerialNumber: syz [ 421.573138][T19041] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1716'. [ 421.685603][T19050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.750040][T19012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.759537][T19012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.806709][ T9273] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 421.832367][ T9273] usb 2-1: USB disconnect, device number 59 [ 421.906289][T19050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.032716][T19081] syzkaller0: entered promiscuous mode [ 422.032761][T19081] syzkaller0: entered allmulticast mode [ 422.046917][T19081] tipc: Enabled bearer , priority 0 [ 422.060422][T19080] tipc: Resetting bearer [ 422.122636][T19080] tipc: Disabling bearer [ 422.138271][T19085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.222043][T19095] macsec1: entered allmulticast mode [ 422.227966][T19095] gretap0: entered allmulticast mode [ 422.242276][T19095] gretap0: left allmulticast mode [ 422.296700][T19101] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1725'. [ 422.618195][T19126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.620643][T19126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.687858][ T5713] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 422.807818][ T5710] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 422.833565][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 422.837331][ T5713] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.849791][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.849844][ T5713] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.849902][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.877202][ T5713] usb 2-1: config 0 descriptor?? [ 422.965341][ T5710] usb 6-1: Using ep0 maxpacket: 16 [ 422.977675][ T5710] usb 6-1: unable to get BOS descriptor or descriptor too short [ 422.977746][ T5710] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.007558][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.024435][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.024490][ T5710] usb 6-1: Product: syz [ 423.024544][ T5710] usb 6-1: Manufacturer: syz [ 423.024572][ T5710] usb 6-1: SerialNumber: syz [ 423.118126][ T5713] usb 2-1: USB disconnect, device number 60 [ 423.275090][ T5710] usb 6-1: selecting invalid altsetting 1 [ 423.289252][ T5710] cdc_ncm 6-1:1.0: bind() failure [ 423.316798][ T5710] cdc_ncm 6-1:1.1: skipping garbage [ 423.324733][ T5710] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 423.331893][ T5710] cdc_ncm 6-1:1.1: bind() failure [ 423.347851][ T5710] usb 6-1: USB disconnect, device number 29 [ 423.629175][T19174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.638232][T19174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.647312][T19174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.653120][T19174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.749431][T19182] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 423.749490][T19182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.848100][T19192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.953034][T19202] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1743'. [ 423.993403][ T5710] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 424.120869][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1744'. [ 424.144060][ T5710] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 424.154402][ T5710] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 424.154472][ T5710] usb 4-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.154526][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.154569][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.196003][ T5710] usb 4-1: config 0 descriptor?? [ 424.411722][T19185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.439097][T19185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.450119][ T5710] usb 4-1: string descriptor 0 read error: -71 [ 424.460344][ T5710] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 424.472961][ T5710] usb 4-1: USB disconnect, device number 74 [ 424.506129][T19225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.507393][T19225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.635002][ T5713] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 424.784022][ T5713] usb 6-1: Using ep0 maxpacket: 16 [ 424.787492][ T5713] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 424.791191][ T5713] usb 6-1: config 0 has no interfaces? [ 424.791275][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.818632][ T5713] usb 6-1: config 0 descriptor?? [ 425.061704][ T5713] usb 6-1: USB disconnect, device number 30 [ 425.147140][T19259] loop3: detected capacity change from 0 to 7 [ 425.157738][T19259] loop3: [POWERTEC] p1 [ 425.162736][T19259] loop3: p1 start 808464432 is beyond EOD, truncated [ 425.501820][T19276] tipc: Enabled bearer , priority 0 [ 425.520541][T19275] tipc: Disabling bearer [ 425.609907][T19271] netlink: 'syz.1.1752': attribute type 2 has an invalid length. [ 425.609961][T19271] netlink: 'syz.1.1752': attribute type 2 has an invalid length. [ 425.612671][T19288] netlink: 'syz.1.1752': attribute type 2 has an invalid length. [ 425.612733][T19288] netlink: 'syz.1.1752': attribute type 2 has an invalid length. [ 425.657153][T19271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1752'. [ 425.933115][T19300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1759'. [ 426.502218][T19301] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1759'. [ 426.521329][T19301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.593368][ T5614] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 426.723418][ T5614] usb 4-1: device descriptor read/64, error -71 [ 426.963813][ T5614] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 427.103641][ T5614] usb 4-1: device descriptor read/64, error -71 [ 427.214520][ T5614] usb usb4-port1: attempt power cycle [ 427.355912][T19332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.449396][T19339] xt_CT: No such helper "syz0" [ 427.554619][ T5614] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 427.575105][ T5614] usb 4-1: device descriptor read/8, error -71 [ 427.814957][ T5614] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 427.835758][ T5614] usb 4-1: device descriptor read/8, error -71 [ 427.863445][ T987] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 427.945006][ T5614] usb usb4-port1: unable to enumerate USB device [ 428.024329][ T987] usb 2-1: Using ep0 maxpacket: 16 [ 428.029342][ T987] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 428.033094][ T987] usb 2-1: config 0 has no interfaces? [ 428.033179][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.079244][ T987] usb 2-1: config 0 descriptor?? [ 428.311439][ T9] usb 2-1: USB disconnect, device number 61 [ 428.475949][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1774'. [ 428.733422][ T5614] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 428.894145][ T5614] usb 6-1: Using ep0 maxpacket: 32 [ 428.902495][ T5614] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 428.914110][ T5614] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 428.927759][ T5614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 428.927805][ T5614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 428.927827][ T5614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 428.970010][ T5614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.970056][ T5614] usb 6-1: Product: syz [ 428.970091][ T5614] usb 6-1: Manufacturer: syz [ 428.970113][ T5614] usb 6-1: SerialNumber: syz [ 428.999613][ T5614] usb 6-1: config 0 descriptor?? [ 429.265535][T19448] bridge0: port 3(wlan1) entered blocking state [ 429.272235][T19448] bridge0: port 3(wlan1) entered disabled state [ 429.281126][T19448] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 429.307187][T19448] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 429.349693][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 429.360182][T19451] mac80211_hwsim hwsim10 wlan1 (unregistering): left allmulticast mode [ 429.360244][T19451] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode [ 429.369290][T19451] bridge0: port 3(wlan1) entered disabled state [ 429.437402][T19462] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1778'. [ 429.437447][T19462] openvswitch: netlink: Flow key attr not present in new flow. [ 429.507115][T19453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.634467][ T9] usb 6-1: USB disconnect, device number 31 [ 429.747557][T19518] netlink: 'syz.1.1782': attribute type 15 has an invalid length. [ 429.747599][T19518] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1782'. [ 429.933501][ T987] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 430.093775][ T987] usb 5-1: Using ep0 maxpacket: 32 [ 430.095734][ T987] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 430.099009][ T987] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 430.099042][ T987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 430.099071][ T987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 430.099094][ T987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 430.116848][ T987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.116922][ T987] usb 5-1: Product: syz [ 430.116964][ T987] usb 5-1: Manufacturer: syz [ 430.117012][ T987] usb 5-1: SerialNumber: syz [ 430.186277][ T987] usb 5-1: config 0 descriptor?? [ 430.361288][T19539] loop5: detected capacity change from 0 to 7 [ 430.376728][T19539] Dev loop5: unable to read RDB block 7 [ 430.376807][T19539] loop5: unable to read partition table [ 430.377992][T19539] loop5: partition table beyond EOD, truncated [ 430.378046][T19539] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 430.440687][T19546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.453671][T19546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.465402][T19546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.475852][T19546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.476777][T19546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1784'. [ 430.526114][T19540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.531480][T19540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.653973][ T5614] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 430.794304][ T5614] usb 4-1: device descriptor read/64, error -71 [ 430.813421][ T5713] usb 5-1: USB disconnect, device number 71 [ 430.992034][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 431.033414][ T5614] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 431.173375][ T5614] usb 4-1: device descriptor read/64, error -71 [ 431.285585][ T5614] usb usb4-port1: attempt power cycle [ 431.633959][ T5614] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 431.654493][ T5614] usb 4-1: device descriptor read/8, error -71 [ 431.797917][ T5713] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 431.818560][ T4982] Dev loop5: unable to read RDB block 7 [ 431.818606][ T4982] loop5: unable to read partition table [ 431.833620][ T4982] loop5: partition table beyond EOD, truncated [ 431.903622][ T5614] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 431.924337][ T5614] usb 4-1: device descriptor read/8, error -71 [ 431.955001][ T5713] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.966031][ T5713] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.966084][ T5713] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 431.966132][ T5713] usb 5-1: config 1 interface 0 has no altsetting 0 [ 432.003719][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 432.004570][ T5713] usb 5-1: SerialNumber: syz [ 432.033703][ T5614] usb usb4-port1: unable to enumerate USB device [ 432.049478][ T5713] hub 5-1:1.0: bad descriptor, ignoring hub [ 432.057295][ T5713] hub 5-1:1.0: probe with driver hub failed with error -5 [ 432.065615][ T5713] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 432.263882][ T5713] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 432.304846][ T5713] usb 5-1: USB disconnect, device number 72 [ 432.912452][ T4982] Dev loop5: unable to read RDB block 7 [ 432.912499][ T4982] loop5: unable to read partition table [ 432.912741][ T4982] loop5: partition table beyond EOD, truncated [ 434.073627][ T9273] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 435.600665][T19767] tipc: Enabled bearer , priority 0 [ 435.642393][T19765] tipc: Disabling bearer [ 436.175723][T19788] kernel profiling enabled (shift: 9) [ 436.684928][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 436.684986][T19813] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1820'. [ 436.705519][ T9273] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.714860][ T9273] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 436.714934][ T9273] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 436.736347][ T9273] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 436.736668][ T9273] usb 2-1: can't read configurations, error -71 [ 436.887607][T19817] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 436.896651][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 437.301651][ T59] IPVS: starting estimator thread 0... [ 437.302408][T19854] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 437.388996][T19854] bond3: entered promiscuous mode [ 437.390396][T19854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.455631][T19858] IPVS: using max 36 ests per chain, 86400 per kthread [ 437.704442][T19904] fuse: Bad value for 'fd' [ 437.770276][T19908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1828'. [ 438.183438][ T987] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 438.334298][ T987] usb 6-1: Using ep0 maxpacket: 8 [ 438.345459][ T987] usb 6-1: unable to get BOS descriptor or descriptor too short [ 438.345545][ T987] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 438.365539][ T987] usb 6-1: config 4 interface 0 has no altsetting 0 [ 438.381090][ T987] usb 6-1: string descriptor 0 read error: -22 [ 438.381310][ T987] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 438.450044][ T987] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 438.475472][ T987] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 438.486083][ T987] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 438.486144][ T987] usb 6-1: media controller created [ 438.581095][ T987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.710574][T19980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.724008][T19980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.911991][ T987] usb 6-1: USB disconnect, device number 32 [ 439.174135][ T9273] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 439.335469][ T9273] usb 5-1: Using ep0 maxpacket: 16 [ 439.354206][ T9273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.354279][ T9273] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 439.373355][ T9273] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 439.373426][ T9273] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 439.412951][ T9273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.412998][ T9273] usb 5-1: Product: syz [ 439.413032][ T9273] usb 5-1: Manufacturer: syz [ 439.413053][ T9273] usb 5-1: SerialNumber: syz [ 439.573445][T20037] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1845'. [ 439.612580][T20038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.634493][T20038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.652076][T20001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.677304][T20001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.735790][ T9273] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 439.767712][ T9273] usb 5-1: USB disconnect, device number 73 [ 440.072330][T20053] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 440.095457][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.095521][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.402577][T20084] tipc: Enabled bearer , priority 0 [ 440.471763][T20083] tipc: Disabling bearer [ 440.803210][T20113] sctp: [Deprecated]: syz.4.1852 (pid 20113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.803210][T20113] Use struct sctp_sack_info instead [ 440.870257][T20113] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 440.882005][T20113] netlink: 'syz.4.1852': attribute type 2 has an invalid length. [ 440.882031][T20113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1852'. [ 441.173322][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 441.173367][ T30] audit: type=1326 audit(1788939586.045:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20146 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f545e59e159 code=0x0 [ 441.230260][ T30] audit: type=1804 audit(1788939586.105:7110): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1856" name="/newroot/378/file1" dev="tmpfs" ino=1949 res=1 errno=0 [ 441.263376][ T1556] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 441.413380][ T1556] usb 5-1: Using ep0 maxpacket: 16 [ 441.419508][ T1556] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.432502][ T1556] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.432580][ T1556] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.432650][ T1556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.449611][ T1556] usb 5-1: config 0 descriptor?? [ 441.675418][ T1556] usb 5-1: USB disconnect, device number 74 [ 441.824161][ T9273] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 441.983858][ T9273] usb 4-1: Using ep0 maxpacket: 16 [ 441.991136][ T9273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 441.991231][ T9273] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 442.009917][ T9273] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 442.009991][ T9273] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 442.037995][ T9273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.038048][ T9273] usb 4-1: Product: syz [ 442.038088][ T9273] usb 4-1: Manufacturer: syz [ 442.038112][ T9273] usb 4-1: SerialNumber: syz [ 442.296687][T20166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.312769][T20166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.382971][ T9273] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 442.434001][ T9273] usb 4-1: USB disconnect, device number 83 [ 442.753698][ T987] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 442.793475][T20229] gretap0: entered promiscuous mode [ 442.793822][T20229] macsec1: entered allmulticast mode [ 442.793868][T20229] gretap0: entered allmulticast mode [ 442.819266][T20229] gretap0: left allmulticast mode [ 442.819317][T20229] gretap0: left promiscuous mode [ 442.913361][ T987] usb 6-1: Using ep0 maxpacket: 8 [ 443.371478][T20254] bridge_slave_0: left allmulticast mode [ 443.371536][T20254] bridge_slave_0: left promiscuous mode [ 443.371861][T20254] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.407194][T20254] bridge_slave_1: left allmulticast mode [ 443.414153][T20254] bridge_slave_1: left promiscuous mode [ 443.420458][T20254] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.456030][T20254] bond0: (slave bond_slave_0): Releasing backup interface [ 443.550219][T20254] bond0: (slave bond_slave_1): Releasing backup interface [ 443.642657][T20254] team0: Port device team_slave_0 removed [ 443.680866][T20254] team0: Port device team_slave_1 removed [ 443.695080][T20254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.725241][T20254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.741598][T20254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 443.867558][T20261] team0: Port device xfrm0 added [ 444.128772][T20280] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1874'. [ 445.838057][T20361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1882'. [ 446.111378][T20364] netlink: ct_mark mask cannot be 0 [ 446.111446][T20364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.218506][T20373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1884'. [ 446.293408][ T9273] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 446.367822][T20364] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1878'. [ 446.466855][ T9273] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 446.481285][ T9273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.481341][ T9273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.481401][ T9273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.515185][ T9273] usb 2-1: config 0 descriptor?? [ 446.603740][T20358] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 447.030286][ T9273] cypress 0003:04B4:DE64.0011: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.1-1/input0 [ 447.104479][ T987] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.104555][ T987] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 447.106916][ T987] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 447.107048][ T987] usb 6-1: can't read configurations, error -71 [ 447.361479][ T9] usb 2-1: USB disconnect, device number 64 [ 447.388168][T20397] fido_id[20397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 447.424883][ T30] audit: type=1326 audit(1788939592.305:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20399 comm="syz.5.1886" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f545e59e159 code=0x0 [ 448.774657][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1894'. [ 448.783933][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1895'. [ 449.233397][ T9273] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 449.246791][T20511] netlink: 8636 bytes leftover after parsing attributes in process `syz.4.1898'. [ 449.381849][T20435] could not allocate digest TFM handle sha1-ni [ 449.389482][ T9273] usb 4-1: Using ep0 maxpacket: 32 [ 449.522919][ T30] audit: type=1326 audit(1788939594.395:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20476 comm="syz.3.1896" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0xffff0000 [ 449.687635][ T30] audit: type=1326 audit(1788939594.565:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.5.1902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f545e59e159 code=0x0 [ 449.716902][T20527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.736405][T20527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.581812][T20570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'. [ 451.726203][T20624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1916'. [ 451.973588][ T987] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 451.988422][ T30] audit: type=1326 audit(1788939596.865:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20637 comm="syz.5.1920" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f545e59e159 code=0x0 [ 452.052717][ T9273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.052792][ T9273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.055636][ T9273] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 452.055738][ T9273] usb 4-1: can't read configurations, error -71 [ 452.103010][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 452.123410][ T987] usb 2-1: Using ep0 maxpacket: 32 [ 452.139681][ T987] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.153349][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.153405][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.153465][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.199159][ T987] usb 2-1: config 0 descriptor?? [ 452.209064][ T987] hub 2-1:0.0: USB hub found [ 452.286961][T20646] vivid-003: ================= START STATUS ================= [ 452.294159][T20646] vivid-003: Radio HW Seek Mode: Bounded [ 452.337763][T20646] vivid-003: Radio Programmable HW Seek: false [ 452.337907][T20646] vivid-003: RDS Rx I/O Mode: Block I/O [ 452.337944][T20646] vivid-003: Generate RBDS Instead of RDS: false [ 452.338006][T20646] vivid-003: RDS Reception: true [ 452.338040][T20646] vivid-003: RDS Program Type: 0 inactive [ 452.338083][T20646] vivid-003: RDS PS Name: inactive [ 452.338150][T20646] vivid-003: RDS Radio Text: [ 452.404643][ T987] hub 2-1:0.0: 1 port detected [ 452.422567][T20646] inactive [ 452.422625][T20646] vivid-003: RDS Traffic Announcement: false inactive [ 452.422697][T20646] vivid-003: RDS Traffic Program: false inactive [ 452.422740][T20646] vivid-003: RDS Music: false inactive [ 452.422807][T20646] vivid-003: ================== END STATUS ================== [ 452.509833][T20658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.518911][T20655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.528307][T20658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.538521][T20655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.595777][ T987] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 452.617968][ T987] usbhid 2-1:0.0: can't add hid device: -32 [ 452.618106][ T987] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 452.991170][ T30] audit: type=1326 audit(1788939597.865:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20674 comm="syz.4.1924" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa98559e159 code=0x0 [ 453.046783][ T30] audit: type=1326 audit(1788939597.925:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20674 comm="syz.4.1924" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa98559e159 code=0x0 [ 453.111906][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 453.249864][T20675] syz.5.1923: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 453.250279][T20675] CPU: 1 UID: 0 PID: 20675 Comm: syz.5.1923 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.250315][T20675] Tainted: [L]=SOFTLOCKUP [ 453.250325][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.250340][T20675] Call Trace: [ 453.250349][T20675] [ 453.250361][T20675] dump_stack_lvl+0xe8/0x150 [ 453.250457][T20675] warn_alloc+0x24d/0x270 [ 453.250560][T20675] ? __pfx_warn_alloc+0x10/0x10 [ 453.250631][T20675] ? alloc_pages_mpol+0x256/0x390 [ 453.250722][T20675] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 453.250871][T20675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.250979][T20675] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 453.251043][T20675] __vmalloc_noprof+0xd2/0x120 [ 453.251126][T20675] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 453.251217][T20675] bpf_prog_alloc_no_stats+0x47/0x560 [ 453.251283][T20675] ? bpf_prog_alloc+0x2a/0x1a0 [ 453.251363][T20675] bpf_prog_alloc+0x3c/0x1a0 [ 453.251440][T20675] bpf_prog_create_from_user+0xa7/0x440 [ 453.251542][T20675] ? __pfx_seccomp_check_filter+0x10/0x10 [ 453.251638][T20675] do_seccomp+0x793/0xdc0 [ 453.251723][T20675] ? __se_sys_futex+0x3a8/0x450 [ 453.251797][T20675] ? __pfx_do_seccomp+0x10/0x10 [ 453.251890][T20675] ? ksys_write+0xf8/0x270 [ 453.252004][T20675] ? __pfx_ksys_write+0x10/0x10 [ 453.252126][T20675] do_syscall_64+0x166/0x520 [ 453.252191][T20675] ? trace_irq_disable+0x3b/0x140 [ 453.252232][T20675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.252296][T20675] ? clear_bhb_loop+0x70/0xc0 [ 453.252375][T20675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.252437][T20675] RIP: 0033:0x7f545e59e159 [ 453.252492][T20675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.252545][T20675] RSP: 002b:00007f545f4ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 453.252593][T20675] RAX: ffffffffffffffda RBX: 00007f545e825fa0 RCX: 00007f545e59e159 [ 453.252640][T20675] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 453.252680][T20675] RBP: 00007f545e63503b R08: 0000000000000000 R09: 0000000000000000 [ 453.252721][T20675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.252755][T20675] R13: 00007f545e826038 R14: 00007f545e825fa0 R15: 00007f545e94fa48 [ 453.252846][T20675] [ 453.271997][T20680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.284373][T20675] Mem-Info: [ 453.284417][T20675] active_anon:8387 inactive_anon:20 isolated_anon:0 [ 453.284417][T20675] active_file:160 inactive_file:20606 isolated_file:0 [ 453.284417][T20675] unevictable:0 dirty:276 writeback:50 [ 453.284417][T20675] slab_reclaimable:10802 slab_unreclaimable:103821 [ 453.284417][T20675] mapped:34625 shmem:1956 pagetables:1710 [ 453.284417][T20675] sec_pagetables:0 bounce:0 [ 453.284417][T20675] kernel_misc_reclaimable:0 [ 453.284417][T20675] free:1319710 free_pcp:9993 free_cma:0 [ 453.284588][T20675] Node 0 active_anon:33548kB inactive_anon:80kB active_file:640kB inactive_file:82284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138500kB dirty:1104kB writeback:200kB shmem:7824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14112kB pagetables:6704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.284745][T20675] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.284901][T20675] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.285089][T20675] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 453.285211][T20675] Node 0 DMA32 free:1317332kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33548kB inactive_anon:80kB active_file:640kB inactive_file:82284kB unevictable:0kB writepending:1304kB zspages:748kB present:3129332kB managed:2546668kB mlocked:0kB bounce:0kB free_pcp:39972kB local_pcp:23164kB free_cma:0kB [ 453.285387][T20675] lowmem_reserve[]: 0 0 0 0 0 [ 453.285491][T20675] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.285643][T20675] lowmem_reserve[]: 0 0 0 0 0 [ 453.307666][T20675] Node 1 Normal free:3946148kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.307857][T20675] lowmem_reserve[]: 0 0 0 0 0 [ 453.307962][T20675] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.308264][T20675] Node 0 DMA32: 2319*4kB (UME) 907*8kB (UME) 524*16kB (UME) 322*32kB (UME) 136*64kB (UME) 122*128kB (UME) 69*256kB (UME) 100*512kB (UME) 35*1024kB (ME) 9*2048kB (UME) 277*4096kB (UM) = 1317268kB [ 453.308826][T20675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.309114][T20675] Node 1 Normal: 7*4kB (UM) 7*8kB (UM) 7*16kB (UM) 3*32kB (UM) 10*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3946148kB [ 453.324215][T20675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.324269][T20675] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 453.324349][T20675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.324395][T20675] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 453.324446][T20675] 22748 total pagecache pages [ 453.324476][T20675] 5 pages in swap cache [ 453.324491][T20675] Free swap = 124280kB [ 453.324513][T20675] Total swap = 124996kB [ 453.324544][T20675] 2097051 pages RAM [ 453.324653][T20675] 0 pages HighMem/MovableOnly [ 453.324682][T20675] 428768 pages reserved [ 453.324704][T20675] 0 pages cma reserved [ 454.354789][ T30] audit: type=1326 audit(1788939599.235:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20738 comm="syz.0.1933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780db9e159 code=0x0 [ 454.874123][ T5713] usb 2-1: USB disconnect, device number 65 [ 455.230334][T20785] netlink: 'syz.1.1940': attribute type 1 has an invalid length. [ 455.317521][T20785] bond6: entered promiscuous mode [ 455.323615][T20785] 8021q: adding VLAN 0 to HW filter on device bond6 [ 455.472009][T20826] syzkaller1: entered promiscuous mode [ 455.472059][T20826] syzkaller1: entered allmulticast mode [ 455.497801][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 455.515949][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 455.718858][T20830] bridge0: entered promiscuous mode [ 455.718920][T20830] bridge0: entered allmulticast mode [ 456.086692][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 456.159073][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 456.470538][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 456.932829][ T30] audit: type=1326 audit(1788939601.805:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20877 comm="syz.3.1953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 456.958050][ T30] audit: type=1326 audit(1788939601.835:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20877 comm="syz.3.1953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 456.976747][ T30] audit: type=1326 audit(1788939601.835:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f545e59e159 code=0x0 [ 457.008886][ T30] audit: type=1326 audit(1788939601.885:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20877 comm="syz.3.1953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 457.035268][ T30] audit: type=1326 audit(1788939601.915:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20877 comm="syz.3.1953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 457.035352][ T30] audit: type=1326 audit(1788939601.915:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20877 comm="syz.3.1953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 457.086935][ T30] audit: type=1326 audit(1788939601.965:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20877 comm="syz.3.1953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35daf9e159 code=0x7ffc0000 [ 457.430111][T20899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.441468][T20899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.480707][T20894] nvme nvme0: rdma_resolve_addr failed (-19). [ 457.671068][T20907] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 458.223396][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 458.230790][T20926] gretap0: entered promiscuous mode [ 458.234559][T20926] macsec1: entered allmulticast mode [ 458.234579][T20926] gretap0: entered allmulticast mode [ 458.258514][T20926] gretap0: left allmulticast mode [ 458.258561][T20926] gretap0: left promiscuous mode [ 458.272529][T20928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.282137][T20928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.327391][T20928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.373171][T20928] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 458.383476][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 458.389616][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 458.401275][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.411709][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.411745][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.411771][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 458.411800][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 458.411841][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.467074][ T10] usb 4-1: config 0 descriptor?? [ 458.547834][T20928] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 458.971583][ T10] logitech-djreceiver 0003:046D:C53A.0012: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 459.002157][T20960] gretap0: entered promiscuous mode [ 459.004242][T20960] macsec1: entered allmulticast mode [ 459.004301][T20960] gretap0: entered allmulticast mode [ 459.020792][T20960] gretap0: left allmulticast mode [ 459.020845][T20960] gretap0: left promiscuous mode [ 459.311692][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 459.327383][T20976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1964'. [ 459.354323][T20977] netlink: 8628 bytes leftover after parsing attributes in process `syz.5.1965'. [ 459.439838][T20980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.450926][T20980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.570956][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 459.571014][ T30] audit: type=1326 audit(1788939604.445:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20987 comm="syz.1.1967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf9d39e159 code=0x0 [ 459.600136][T20988] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1968'. [ 459.668086][ T10] usb 4-1: USB disconnect, device number 86 [ 460.013445][ T9273] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 460.143350][ T10] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 460.174158][ T9273] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.183434][ T9273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.183469][ T9273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.183493][ T9273] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.183539][ T9273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.207994][ T9273] usb 6-1: config 0 descriptor?? [ 460.314285][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 460.320322][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 460.330972][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 460.344518][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 460.354985][ T10] usb 4-1: Product: syz [ 460.359399][ T10] usb 4-1: Manufacturer: syz [ 460.359454][ T10] usb 4-1: SerialNumber: syz [ 460.375161][ T10] usb 4-1: config 0 descriptor?? [ 460.381569][T21011] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 460.726746][ T9273] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 460.755120][T21043] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1975'. [ 460.834682][T21054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.843752][T21054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.862952][T21056] sctp: [Deprecated]: syz.3.1970 (pid 21056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.862952][T21056] Use struct sctp_sack_info instead [ 460.888305][T21003] netlink: 'syz.5.1969': attribute type 1 has an invalid length. [ 461.052794][T21003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.076995][T21003] Cannot find add_set index 2 as target [ 461.085408][T21096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1976'. [ 461.110872][T21071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.111953][T21071] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 461.118529][T21071] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 461.162062][T21087] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 461.170339][T21087] bond5: (slave wlan1): Opening slave failed [ 461.444014][ T10] usb 6-1: USB disconnect, device number 35 [ 461.643546][ T987] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 461.774259][ T9] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 461.794245][ T987] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 461.804630][ T987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.804866][ T987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 461.804960][ T987] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.805022][ T987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 461.805132][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.858491][ T987] usb 2-1: config 0 descriptor?? [ 461.935804][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 461.946465][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.947260][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 461.947439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.289085][ T987] hid_parser_main: 5 callbacks suppressed [ 462.294055][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.296219][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.296542][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.296632][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.296784][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.296915][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.296989][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.300270][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.300670][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.302868][ T987] logitech-djreceiver 0003:046D:C532.0014: unknown main item tag 0x0 [ 462.396353][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 462.396410][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 462.489372][ T10] usb 2-1: USB disconnect, device number 66 [ 462.612276][ T9] DVB: Unable to find symbol stv0299_attach() [ 462.729148][ T9] DVB: Unable to find symbol tda8083_attach() [ 462.729204][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 462.774257][ T9] usb 5-1: USB disconnect, device number 75 [ 462.888736][ T10] usb 4-1: USB disconnect, device number 87 [ 463.054807][ T30] audit: type=1326 audit(1788939607.935:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21209 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f545e59e159 code=0x0 [ 463.373415][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 463.523899][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 463.525513][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 463.543187][ T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 463.543753][ T10] usb 4-1: Product: syz [ 463.543812][ T10] usb 4-1: Manufacturer: syz [ 463.543855][ T10] usb 4-1: SerialNumber: syz [ 463.565824][ T10] usb 4-1: config 0 descriptor?? [ 463.885982][ T10] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 463.886044][ T10] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 463.984297][ T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -32 [ 464.110110][T21276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1991'. [ 464.346268][ T9273] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 464.419574][T21290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1994'. [ 464.505161][ T9273] usb 6-1: Using ep0 maxpacket: 8 [ 464.514041][ T9273] usb 6-1: unable to get BOS descriptor or descriptor too short [ 464.514107][ T9273] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 464.535380][ T9273] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.546499][ T9273] usb 6-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 464.559941][ T9273] usb 6-1: config 1 interface 0 has no altsetting 0 [ 464.568981][ T9273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.577239][ T9273] usb 6-1: Product: syz [ 464.577260][ T9273] usb 6-1: Manufacturer: syz [ 464.577277][ T9273] usb 6-1: SerialNumber: syz [ 464.628180][T21302] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1997'. [ 464.818924][ T9273] usb 6-1: No union descriptors [ 464.827138][ T9273] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 464.833585][ T9273] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 464.849707][ T9273] usb 6-1: USB disconnect, device number 36 [ 464.888916][T21308] binder: 21305:21308 ioctl c0306201 0 returned -14 [ 464.895910][T21308] binder: 21305:21308 ioctl c4c85513 0 returned -22 [ 464.920567][T21321] syzkaller0: entered promiscuous mode [ 464.920626][T21321] syzkaller0: entered allmulticast mode [ 465.103407][ T5710] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 465.144943][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 465.253442][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 465.256063][ T5710] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.260558][ T5710] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 465.260661][ T5710] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 465.260725][ T5710] usb 2-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.260797][ T5710] usb 2-1: config 1 interface 0 has no altsetting 0 [ 465.274590][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.274663][ T5710] usb 2-1: Product: syz [ 465.274705][ T5710] usb 2-1: Manufacturer: 苩飝哻暚鮾놸㿍᝞䓯䣻㴚䵲ꧯ쪮꫸弟ꙮ䌚ꇭ [ 465.274757][ T5710] usb 2-1: SerialNumber: syz [ 465.293647][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 465.309427][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 465.309555][ T10] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 465.321398][ T10] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 465.321477][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.327785][T21310] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 465.332280][T21310] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 465.355072][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 465.356207][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.356322][ T10] usb 5-1: Product: syz [ 465.356371][ T10] usb 5-1: Manufacturer: syz [ 465.356414][ T10] usb 5-1: SerialNumber: syz [ 465.542286][T21352] input: syz0 as /devices/virtual/input/input41 [ 465.568623][ T5710] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 465.654140][ T5710] usb 2-1: USB disconnect, device number 67 [ 465.730649][ T10] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 465.835781][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 465.909915][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 465.926464][ T10] usb 5-1: USB disconnect, device number 76 [ 465.985539][ T5723] udevd[5723]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.053181][ T5713] usb 4-1: USB disconnect, device number 88 [ 466.262560][T21406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2011'. [ 466.439073][ T30] audit: type=1326 audit(1788939611.315:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98559e159 code=0x7ffc0000 [ 466.439154][ T30] audit: type=1326 audit(1788939611.315:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98559e159 code=0x7ffc0000 [ 466.491679][ T30] audit: type=1326 audit(1788939611.365:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa98555e98e code=0x7ffc0000 [ 466.504207][ T30] audit: type=1326 audit(1788939611.365:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98559ddeb code=0x7ffc0000 [ 466.504363][ T30] audit: type=1326 audit(1788939611.365:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98559ddeb code=0x7ffc0000 [ 466.519761][ T30] audit: type=1326 audit(1788939611.385:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98559ddeb code=0x7ffc0000 [ 466.519934][ T30] audit: type=1326 audit(1788939611.395:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98559ddeb code=0x7ffc0000 [ 466.608508][ T30] audit: type=1326 audit(1788939611.485:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98559ddeb code=0x7ffc0000 [ 466.643504][ T5713] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 466.675279][ T30] audit: type=1326 audit(1788939611.555:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98559ddeb code=0x7ffc0000 [ 466.733973][ T5710] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 466.741840][ T30] audit: type=1326 audit(1788939611.615:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21418 comm="syz.4.2014" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa98559ddeb code=0x7ffc0000 [ 466.803747][ T5713] usb 2-1: Using ep0 maxpacket: 8 [ 466.889101][ T5710] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 466.899737][ T5710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 466.899766][ T5710] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 466.937538][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.937608][ T5710] usb 5-1: Product: syz [ 466.937808][ T5710] usb 5-1: Manufacturer: syz [ 466.937867][ T5710] usb 5-1: SerialNumber: syz [ 467.019565][T21431] tipc: Enabled bearer , priority 0 [ 467.061327][T21442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.078120][T21442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.126559][T21430] tipc: Disabling bearer [ 467.301358][ T5710] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 467.713419][ T9273] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 467.765690][ T5710] usb 5-1: USB disconnect, device number 77 [ 467.809038][ T5710] usblp0: removed [ 467.873412][ T9273] usb 4-1: Using ep0 maxpacket: 16 [ 467.879476][ T9273] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 467.897167][ T9273] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 467.897216][ T9273] usb 4-1: Product: syz [ 467.897282][ T9273] usb 4-1: Manufacturer: syz [ 467.897306][ T9273] usb 4-1: SerialNumber: syz [ 467.937374][ T9273] usb 4-1: config 0 descriptor?? [ 468.013456][ T1556] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 468.163985][T21500] syzkaller1: entered promiscuous mode [ 468.164032][T21500] syzkaller1: entered allmulticast mode [ 468.185731][T21500] syzkaller1: left promiscuous mode [ 468.185790][T21500] syzkaller1: left allmulticast mode [ 468.198676][ T1556] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 468.209879][ T1556] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.220312][ T1556] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 468.220394][ T1556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.290541][ T9273] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 468.303145][ T9273] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 468.424840][ T9273] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -32 [ 468.698654][ T1556] dvb_ttusb_budget: ttusb_init_controller: error [ 468.706575][ T1556] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 468.863931][ T1556] DVB: Unable to find symbol stv0299_attach() [ 469.021065][ T1556] DVB: Unable to find symbol tda8083_attach() [ 469.021103][ T1556] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 469.092547][ T5710] usb 6-1: USB disconnect, device number 37 [ 469.510523][T21554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.528863][T21554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.553942][T21554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.566722][T21554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.592436][T21554] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 469.614110][T21553] ALSA: mixer_oss: invalid OSS volume 'u' [ 469.620723][T21553] ALSA: mixer_oss: invalid OSS volume 'O' [ 469.628019][T21553] ALSA: mixer_oss: invalid OSS volume 'M#)k248DZ_<=D6A N' [ 469.637532][T21553] ALSA: mixer_oss: invalid OSS volume '' [ 469.637551][T21553] ALSA: mixer_oss: invalid OSS volume '|D*o8z@Ȉd (JM9bp,' [ 469.637565][T21553] ALSA: mixer_oss: invalid OSS volume '' [ 469.655219][T21553] ALSA: mixer_oss: invalid OSS volume 'e̙Չ5!7,{$' [ 469.655282][T21553] ALSA: mixer_oss: invalid OSS volume 'h|⥧*,7]TY%V' [ 469.655295][T21553] ALSA: mixer_oss: invalid OSS volume '.' [ 469.655320][T21553] ALSA: mixer_oss: invalid OSS volume 'a\a.R=ϱ*'L' [ 469.655332][T21553] ALSA: mixer_oss: invalid OSS volume 'kÅ@]Hӆ t{39Wr.~r' [ 469.655348][T21553] ALSA: mixer_oss: invalid OSS volume 'b}Oi;JҫR'Y+SR' [ 469.655359][T21553] ALSA: mixer_oss: invalid OSS volume '(0Ei5 mޞ'=uz|mя' [ 469.655382][T21553] ALSA: mixer_oss: invalid OSS volume 'HC׈D'~PU¡v>t' [ 469.655434][T21553] ALSA: mixer_oss: invalid OSS volume 'k9-)547+ŐsBe' [ 469.655457][T21553] ALSA: mixer_oss: invalid OSS volume 'kM<r' [ 469.655505][T21553] ALSA: mixer_oss: invalid OSS volume '3~p+6)(=TulMN/Xo' [ 469.655524][T21553] ALSA: mixer_oss: invalid OSS volume '(u_4l8]Ch_Z@C' [ 469.760237][T21553] ALSA: mixer_oss: invalid OSS volume '!~͙m}~U-Z' [ 470.084094][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 470.084168][ T5713] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 470.101860][ T5713] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 470.101917][ T5713] usb 2-1: can't read configurations, error -71 [ 470.111991][T21561] gretap0: entered promiscuous mode [ 470.112091][T21561] macsec1: entered allmulticast mode [ 470.112103][T21561] gretap0: entered allmulticast mode [ 470.138929][T21561] gretap0: left allmulticast mode [ 470.139028][T21561] gretap0: left promiscuous mode [ 470.572260][ T1556] usb 4-1: USB disconnect, device number 89 [ 470.753439][ T5713] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 470.923349][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 470.931740][ T5713] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 470.963470][ T5713] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 470.963515][ T5713] usb 2-1: Product: syz [ 470.963569][ T5713] usb 2-1: Manufacturer: syz [ 470.963598][ T5713] usb 2-1: SerialNumber: syz [ 470.990297][ T5713] usb 2-1: config 0 descriptor?? [ 471.290198][T21613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2038'. [ 471.684702][T21628] tipc: Enabled bearer , priority 0 [ 471.700830][T21625] tipc: Disabling bearer [ 472.507932][T21661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.516507][T21661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.535052][T21661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 472.585611][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 472.670721][T21670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.722295][T21670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.733518][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 472.736634][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 472.738381][ T10] usb 4-1: config 0 has no interfaces? [ 472.738473][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.776658][ T10] usb 4-1: config 0 descriptor?? [ 472.961113][T21681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.188832][T21681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.474163][ T5713] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 473.482693][ T5713] peak_usb 2-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 473.584592][ T5713] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 473.613796][T21690] netlink: 8636 bytes leftover after parsing attributes in process `syz.1.2051'. [ 473.628630][ T5713] usb 2-1: USB disconnect, device number 69 [ 474.149331][T21706] binder: 21705:21706 ioctl c018620b 200000000080 returned -14 [ 474.730019][T21722] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 474.775909][T21722] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 474.792539][T21722] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 474.795477][T21722] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 474.799791][T21722] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 474.799896][T21722] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 474.799990][T21722] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 474.804665][T21722] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 474.817972][T21722] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 474.818022][T21722] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 475.066009][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2060'. [ 475.306118][ T10] usb 4-1: USB disconnect, device number 90 [ 475.569407][T21766] loop3: detected capacity change from 0 to 7 [ 475.577658][T21766] loop3: [POWERTEC] p1 [ 475.582667][T21766] loop3: p1 start 808464432 is beyond EOD, truncated [ 475.732956][T21756] blktrace: Concurrent blktraces are not allowed on nullb0 [ 475.921841][T21801] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2068'. [ 475.921888][T21801] openvswitch: netlink: Flow key attr not present in new flow. [ 476.153418][T21743] fuse: Unknown parameter '0x00000000000000040x0000000000000005' [ 476.203592][ T5713] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 476.366300][ T5713] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 476.379898][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.392472][T21819] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 476.417761][ T5713] usb 2-1: config 0 descriptor?? [ 476.711341][ T5713] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 476.727161][T21805] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.904984][T21870] sock: sock_timestamping_bind_phc: sock not bind to device [ 476.920645][T21870] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2073'. [ 477.038418][ T5713] [drm:udl_init] *ERROR* Selecting channel failed [ 477.098461][ T5713] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 477.105804][ T5713] [drm] Initialized udl on minor 1 [ 477.122249][ T5713] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 477.138729][ T5713] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 477.162415][ T5713] usb 2-1: USB disconnect, device number 70 [ 482.431165][T21942] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2087'. [ 483.343682][T21956] syzkaller0: entered promiscuous mode [ 483.352071][T21956] syzkaller0: entered allmulticast mode [ 483.643480][ T5713] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 483.806603][T21969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.819948][ T5713] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 483.832812][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 483.832861][ T5713] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 483.832904][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 483.832933][ T5713] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 483.832980][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.935949][ T5713] usb 5-1: config 0 descriptor?? [ 484.051125][T21969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.187238][ T5713] hdpvr 5-1:0.0: firmware version 0x1e dated [ 484.428343][T21962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.439961][T21962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.661317][T21997] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2095'. [ 485.284259][ T1556] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 485.432016][T22016] netlink: 8628 bytes leftover after parsing attributes in process `syz.1.2101'. [ 485.447127][ T1556] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 485.465554][ T1556] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 485.465628][ T1556] usb 4-1: config 1 has no interface number 0 [ 485.465690][ T1556] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 485.465725][ T1556] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 485.465792][ T1556] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.521573][ T1556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.521648][ T1556] usb 4-1: Product: syz [ 485.521682][ T1556] usb 4-1: Manufacturer: syz [ 485.521703][ T1556] usb 4-1: SerialNumber: syz [ 485.570359][T22004] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 485.930414][T22004] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 486.004750][ T5713] hdpvr 5-1:0.0: Could not setup controls [ 486.005744][ T5713] hdpvr 5-1:0.0: registering videodev failed [ 486.067720][ T5713] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 486.092677][T22031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.106950][ T5713] usb 5-1: USB disconnect, device number 78 [ 486.197002][ T1556] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 486.213085][T22031] bridge0: port 3(gretap0) entered blocking state [ 486.213199][T22031] bridge0: port 3(gretap0) entered disabled state [ 486.215979][T22031] gretap0: entered allmulticast mode [ 486.219476][T22031] gretap0: entered promiscuous mode [ 486.357522][ T1556] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 486.357687][ T1556] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 486.377521][ T1556] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 486.377582][ T1556] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 486.408760][ T1556] usb 4-1: USB disconnect, device number 91 [ 486.422742][ T1556] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 486.913049][T22071] FAULT_INJECTION: forcing a failure. [ 486.913049][T22071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.929267][T22071] CPU: 1 UID: 0 PID: 22071 Comm: syz.1.2108 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.929303][T22071] Tainted: [L]=SOFTLOCKUP [ 486.929313][T22071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.929327][T22071] Call Trace: [ 486.929426][T22071] [ 486.929493][T22071] dump_stack_lvl+0xe8/0x150 [ 486.929615][T22071] should_fail_ex+0x410/0x560 [ 486.929732][T22071] _copy_to_user+0x31/0xb0 [ 486.929817][T22071] proc_pid_cmdline_read+0x4b5/0x900 [ 486.929876][T22071] ? __asan_memset+0x22/0x50 [ 486.929954][T22071] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 486.929997][T22071] ? rw_verify_area+0x24a/0x4c0 [ 486.930048][T22071] vfs_readv+0x57c/0x850 [ 486.930078][T22071] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 486.930116][T22071] ? __pfx_vfs_readv+0x10/0x10 [ 486.930158][T22071] ? __fget_files+0x2a/0x420 [ 486.930200][T22071] ? __fget_files+0x3a2/0x420 [ 486.930230][T22071] ? __fget_files+0x2a/0x420 [ 486.930270][T22071] __x64_sys_preadv+0x19c/0x2b0 [ 486.930296][T22071] ? __pfx___x64_sys_preadv+0x10/0x10 [ 486.930332][T22071] do_syscall_64+0x166/0x520 [ 486.930439][T22071] ? trace_irq_disable+0x3b/0x140 [ 486.930486][T22071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.930531][T22071] ? clear_bhb_loop+0x70/0xc0 [ 486.930560][T22071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.930584][T22071] RIP: 0033:0x7fdf9d39e159 [ 486.930633][T22071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.930655][T22071] RSP: 002b:00007fdf9e29b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 486.930708][T22071] RAX: ffffffffffffffda RBX: 00007fdf9d626090 RCX: 00007fdf9d39e159 [ 486.930726][T22071] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 486.930741][T22071] RBP: 00007fdf9e29b090 R08: 0000000000006a76 R09: 0000000000000000 [ 486.930757][T22071] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000002 [ 486.930773][T22071] R13: 00007fdf9d626128 R14: 00007fdf9d626090 R15: 00007fdf9d74fa48 [ 486.930809][T22071] [ 486.943870][ T5713] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 487.140322][ T5713] usb 5-1: device descriptor read/64, error -71 [ 487.373411][ T5713] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 487.513327][ T5713] usb 5-1: device descriptor read/64, error -71 [ 487.623846][ T5713] usb usb5-port1: attempt power cycle [ 487.643010][T22079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.662717][T22078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 487.673701][T22079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.963760][ T5713] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 488.000231][ T5713] usb 5-1: device descriptor read/8, error -71 [ 488.374139][ T5713] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 488.397841][ T5713] usb 5-1: device descriptor read/8, error -71 [ 488.410388][ T9273] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 488.410508][ T9273] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 488.503678][ T5713] usb usb5-port1: unable to enumerate USB device [ 489.332159][ T1556] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 489.967054][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2116'. [ 491.468507][T22129] xt_hashlimit: size too large, truncated to 1048576 [ 491.811812][ T9273] hid_parser_main: 27 callbacks suppressed [ 491.825412][ T9273] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 491.856792][ T9273] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 491.960210][T22151] tipc: Enabled bearer , priority 0 [ 492.150914][T22142] tipc: Disabling bearer [ 493.144002][T22181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.144496][T22181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.344671][ T1556] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 493.514208][ T1556] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 493.533054][ T1556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 493.533137][ T1556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.565561][ T1556] usb 4-1: config 0 descriptor?? [ 493.752306][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2128'. [ 494.203280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 495.633300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 496.162392][T22208] FAULT_INJECTION: forcing a failure. [ 496.162392][T22208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.162479][T22208] CPU: 1 UID: 0 PID: 22208 Comm: syz.1.2132 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.162512][T22208] Tainted: [L]=SOFTLOCKUP [ 496.162521][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.162535][T22208] Call Trace: [ 496.162545][T22208] [ 496.162556][T22208] dump_stack_lvl+0xe8/0x150 [ 496.162597][T22208] should_fail_ex+0x410/0x560 [ 496.162641][T22208] _copy_from_user+0x2d/0xb0 [ 496.162670][T22208] sk_setsockopt+0x2b5/0x2f10 [ 496.162819][T22208] ? get_pid_task+0x20/0x1f0 [ 496.162864][T22208] ? __pfx_sk_setsockopt+0x10/0x10 [ 496.162899][T22208] ? reacquire_held_locks+0x117/0x1a0 [ 496.162943][T22208] ? release_sock+0x2f/0x260 [ 496.162973][T22208] ? vsock_connectible_setsockopt+0x210/0x7e0 [ 496.163090][T22208] ? vsock_connectible_setsockopt+0x210/0x7e0 [ 496.163124][T22208] ? __local_bh_enable_ip+0xd6/0x140 [ 496.163167][T22208] vsock_connectible_setsockopt+0x232/0x7e0 [ 496.163209][T22208] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 496.163247][T22208] ? aa_sock_opt_perm+0x142/0x1e0 [ 496.163324][T22208] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 496.163363][T22208] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 496.163401][T22208] do_sock_setsockopt+0x17c/0x1b0 [ 496.163458][T22208] __x64_sys_setsockopt+0x13d/0x1b0 [ 496.163490][T22208] do_syscall_64+0x166/0x520 [ 496.163514][T22208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.163537][T22208] ? clear_bhb_loop+0x70/0xc0 [ 496.163566][T22208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.163590][T22208] RIP: 0033:0x7fdf9d39e159 [ 496.163611][T22208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.163631][T22208] RSP: 002b:00007fdf9e2bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.163658][T22208] RAX: ffffffffffffffda RBX: 00007fdf9d625fa0 RCX: 00007fdf9d39e159 [ 496.163675][T22208] RDX: 000000000000004a RSI: 0000000000000001 RDI: 0000000000000003 [ 496.163690][T22208] RBP: 00007fdf9e2bc090 R08: 000000000000002e R09: 0000000000000000 [ 496.163705][T22208] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 496.163721][T22208] R13: 00007fdf9d626038 R14: 00007fdf9d625fa0 R15: 00007fdf9d74fa48 [ 496.163763][T22208] [ 499.511785][ T1556] usbhid 4-1:0.0: can't add hid device: -32 [ 499.985036][T22170] nvme nvme0: failed to connect socket: -512 [ 503.308248][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.317629][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.017373][ C1] sched: DL replenish lagged too much [ 509.868435][ T1556] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 563.167562][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.177134][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.868490][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.882834][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.228960][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.238545][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 737.070521][ T31] INFO: task syz.0.269:6626 blocked for more than 143 seconds. [ 737.081191][ T31] Tainted: G L syzkaller #0 [ 737.091742][ T31] Blocked by coredump. [ 737.102405][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.116832][ T31] task:syz.0.269 state:D stack:26920 pid:6626 tgid:6626 ppid:5627 task_flags:0x40044c flags:0x00080003 [ 739.490292][ T31] Call Trace: [ 739.501213][ T31] [ 739.512146][ T31] __schedule+0x17db/0x58f0 [ 739.523250][ T31] ? __pfx___schedule+0x10/0x10 [ 739.534272][ T31] ? schedule+0x90/0x2b0 [ 739.545219][ T31] schedule+0x164/0x2b0 [ 739.556224][ T31] schedule_preempt_disabled+0x13/0x30 [ 739.567350][ T31] __mutex_lock+0x7c1/0x1550 [ 739.578447][ T31] ? __mutex_lock+0x5d4/0x1550 [ 739.589616][ T31] ? tun_chr_close+0x3e/0x1c0 [ 739.600841][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 739.612007][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 739.623201][ T31] tun_chr_close+0x3e/0x1c0 [ 739.634300][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 739.645467][ T31] __fput+0x418/0xa50 [ 739.656855][ T31] task_work_run+0x1d9/0x270 [ 739.668084][ T31] ? __pfx_task_work_run+0x10/0x10 [ 739.679263][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 739.690441][ T31] do_exit+0x73a/0x2360 [ 739.701578][ T31] ? __pfx_do_exit+0x10/0x10 [ 739.712546][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 739.723832][ T31] do_group_exit+0x22d/0x2f0 [ 739.734917][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.745967][ T31] get_signal+0x121b/0x12c0 [ 739.757127][ T31] arch_do_signal_or_restart+0xbb/0x860 [ 739.768373][ T31] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 739.779534][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 739.791206][ T31] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 742.238117][ T31] exit_to_user_mode_loop+0x10e/0x770 [ 742.238158][ T31] ? rcu_is_watching+0x16/0xb0 [ 742.238192][ T31] do_syscall_64+0x328/0x520 [ 742.238217][ T31] ? trace_irq_disable+0x3b/0x140 [ 742.238241][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.238267][ T31] ? clear_bhb_loop+0x70/0xc0 [ 742.238295][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.238319][ T31] RIP: 0033:0x7f780db5e98e [ 742.238342][ T31] RSP: 002b:00007f780e9f9f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 742.238369][ T31] RAX: fffffffffffffdfc RBX: 00007f780e9fa6c0 RCX: 00007f780db5e98e [ 742.238387][ T31] RDX: 00007f780e9f9fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 742.238403][ T31] RBP: 00007f780dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 742.238418][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.238433][ T31] R13: 00007f780de26038 R14: 00007f780de25fa0 R15: 00007f780df4fa48 [ 742.238470][ T31] [ 742.238537][ T31] [ 742.238537][ T31] Showing all locks held in the system: [ 742.238548][ T31] locks held by kworker/0:0/9: 3, last CPU#0: [ 742.238670][ T31] #0: ffff888026d28d40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.238777][ T31] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.238856][ T31] #2: ffff88807c115c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 742.239003][ T31] locks held by kworker/0:1/10: 4, on CPU#0: [ 742.239020][ T31] #0: ffff888026d2a940 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.239089][ T31] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.239168][ T31] #2: ffff8880784e1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 742.239235][ T31] #3: ffff888056d56640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 742.239302][ T31] locks held by kworker/u8:0/12: 4, last CPU#1: [ 742.239320][ T31] #0: ffff88807af40940 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.239386][ T31] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.239449][ T31] #2: ffff88807b901440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 742.239515][ T31] #3: ffff88807c112ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 742.239581][ T31] locks held by pr/ttyS0/16: 1, last CPU#1: [ 742.239598][ T31] #0: ffffffff8ec36338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 742.239657][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 742.239674][ T31] #0: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 742.239743][ T31] locks held by kworker/u8:2/37: 3, last CPU#1: [ 742.239760][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.239824][ T31] #1: ffffc90000ad7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.239887][ T31] #2: ffff888028697258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 742.240022][ T31] locks held by kworker/u8:3/50: 3, last CPU#1: [ 742.240039][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.240102][ T31] #1: ffffc90000bb7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.240165][ T31] #2: ffff88807cbbb258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 742.240235][ T31] locks held by kworker/u8:5/83: 4, last CPU#1: [ 742.240252][ T31] #0: ffff88807ec84940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.240319][ T31] #1: ffffc9000201fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.240381][ T31] #2: ffff888078555440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 742.240447][ T31] #3: ffff88807c115270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 742.240518][ T31] locks held by kworker/0:2/987: 3, last CPU#0: [ 742.240535][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.240598][ T31] #1: ffffc90004d97c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.240659][ T31] #2: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 742.251191][ T31] locks held by kworker/1:2/1556: 4, last CPU#1: [ 742.251215][ T31] #0: ffff888026d2a940 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.251292][ T31] #1: ffffc90005da7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.251372][ T31] #2: ffff8880784e1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 742.251439][ T31] #3: ffff888056d56640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 742.251518][ T31] locks held by klogd/4971: 2, last CPU#1: [ 742.251535][ T31] #0: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 742.251590][ T31] #1: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 742.251676][ T31] locks held by udevd/4982: 4, last CPU#1: [ 742.251693][ T31] #0: ffff88807fee6460 (sb_writers#7){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 742.251752][ T31] #1: ffffffff8f4efff8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 742.251870][ T31] #2: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 742.251923][ T31] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 742.251997][ T31] locks held by dhcpcd/5277: 5, last CPU#1: [ 742.252013][ T31] #0: ffffffff8ee36170 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 742.252073][ T31] #1: ffff88807b8336b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 742.252144][ T31] #2: ffff888057dc5cf8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 742.252214][ T31] #3: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 742.252267][ T31] #4: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 742.252326][ T31] locks held by getty/5373: 2, on CPU#0: [ 742.252343][ T31] #0: ffff888035e5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 742.252471][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 742.252530][ T31] locks held by syz-executor/5602: 1, last CPU#1: [ 742.252548][ T31] #0: ffff88802af55d60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 742.252640][ T31] locks held by kworker/1:3/5614: 2, last CPU#1: [ 742.252658][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.252720][ T31] #1: ffffc90003eefc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 742.252784][ T31] locks held by syz-executor/5628: 5, last CPU#1: [ 742.252800][ T31] #0: ffff88807ccce460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 742.252859][ T31] #1: ffff888054c3d6f8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 742.252928][ T31] #2: ffffffff8f4efff8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 742.252981][ T31] #3: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 742.253042][ T31] #4: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 742.253100][ T31] locks held by syz-executor/5629: 5, last CPU#1: [ 744.443365][ T31] #0: ffff888029c30460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 744.443443][ T31] #1: ffff888025ed94a0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 744.443510][ T31] #2: ffffffff8f4efff8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 744.443661][ T31] #3: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 744.443716][ T31] #4: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 744.443778][ T31] locks held by syz-executor/5630: 2, last CPU#0: [ 744.443796][ T31] #0: ffff8880768d7540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 744.443907][ T31] #1: ffff888049355060 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 744.443970][ T31] locks held by kworker/0:8/5710: 4, last CPU#0: [ 744.443987][ T31] #0: ffff88805879b140 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.444056][ T31] #1: ffffc9000441fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.444135][ T31] #2: ffff88807a999440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 744.444203][ T31] #3: ffff88807c117028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 744.444268][ T31] locks held by kworker/1:5/5713: 4, on CPU#1: [ 744.444285][ T31] #0: ffff888026d28d40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.444353][ T31] #1: ffffc9000444fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.444433][ T31] #2: ffff888078555440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 744.444499][ T31] #3: ffff88807c115c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 744.444566][ T31] locks held by kworker/1:7/5719: 4, on CPU#1: [ 744.444583][ T31] #0: ffff88805879b140 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.444650][ T31] #1: ffffc9000445fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.444730][ T31] #2: ffff88807a999440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 744.444796][ T31] #3: ffff88807c117028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 744.444862][ T31] locks held by udevd/5723: 4, last CPU#0: [ 744.444879][ T31] #0: ffff888012214460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 744.444947][ T31] #1: ffff88807d6d3ed8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0x242/0x1a40 [ 744.445006][ T31] #2: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 744.445059][ T31] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 744.445120][ T31] locks held by kworker/u8:10/6411: 4, last CPU#0: [ 744.445137][ T31] #0: ffff88802858b140 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.445204][ T31] #1: ffffc90005c47c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.445268][ T31] #2: ffff888055d19440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 744.445334][ T31] #3: ffff88807c113ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 744.445399][ T31] locks held by kworker/u8:12/6413: 3, on CPU#1: [ 744.445417][ T31] #0: ffff888026579140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.445480][ T31] #1: ffffc9000da8fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.445542][ T31] #2: ffffffff90251500 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 744.445657][ T31] locks held by kworker/u8:13/6414: 4, on CPU#0: [ 744.445675][ T31] #0: ffff88807ec84940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.445743][ T31] #1: ffffc90005de7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.445805][ T31] #2: ffff888078555440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 744.445870][ T31] #3: ffff88807c115c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 744.445943][ T31] locks held by kworker/u8:15/6417: 4, last CPU#0: [ 744.445960][ T31] #0: ffff88802858b140 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446028][ T31] #1: ffffc90005847c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446090][ T31] #2: ffff888055d19440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 744.446156][ T31] #3: ffff88807c114888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 744.446222][ T31] locks held by kworker/u8:18/6420: 2, last CPU#0: [ 744.446240][ T31] #0: ffff88802657d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446301][ T31] #1: ffffc90005727c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446365][ T31] locks held by syz.0.269/6626: 1, on CPU#1: [ 744.446381][ T31] #0: ffffffff90251500 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 744.446437][ T31] locks held by kworker/u8:19/9163: 2, last CPU#0: [ 744.446454][ T31] #0: ffff888033d2d940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446522][ T31] #1: ffffc9000347fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446587][ T31] locks held by syz-executor/10764: 3, last CPU#0: [ 744.446604][ T31] #0: ffff8880296442e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 744.446703][ T31] #1: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 744.446757][ T31] #2: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 744.446820][ T31] locks held by kworker/u8:21/16409: 3, last CPU#0: [ 744.446837][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446906][ T31] #1: ffffc9000e79fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.446971][ T31] #2: ffff88805758b258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 744.447052][ T31] locks held by kworker/u8:22/16410: 4, on CPU#1: [ 744.447069][ T31] #0: ffff88807ec85140 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.447136][ T31] #1: ffffc9000e70fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 744.447199][ T31] #2: ffff8880784e1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 744.447265][ T31] #3: ffff888056d56640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 744.447332][ T31] locks held by syz.0.1615/18350: 1, last CPU#0: [ 744.447349][ T31] #0: ffffffff90251500 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa6/0x130 [ 744.447473][ T31] locks held by syz.3.2127/22190: 2, last CPU#0: [ 744.447491][ T31] #0: ffff88807ccce460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 744.447556][ T31] #1: ffff88806affd0f0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 744.447639][ T31] locks held by syz.3.2127/22192: 3, last CPU#0: [ 744.447656][ T31] #0: ffff88807ccce460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 744.447720][ T31] #1: ffff88807e5526b8 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 744.447788][ T31] #2: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: filemap_get_entry+0xcd/0x3f0 [ 744.447855][ T31] locks held by syz-executor/22224: 3, last CPU#0: [ 744.447873][ T31] #0: ffff8880772eb808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 744.447945][ T31] #1: ffff88801b0983b8 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x70 [ 744.448001][ T31] #2: ffffffff8eeac1b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 744.448058][ T31] [ 744.448065][ T31] ============================================= [ 744.448065][ T31] [ 744.448077][ T31] NMI backtrace for cpu 0 [ 744.448095][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 744.448125][ T31] Tainted: [L]=SOFTLOCKUP [ 744.448134][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.448148][ T31] Call Trace: [ 744.448157][ T31] [ 744.448168][ T31] dump_stack_lvl+0xe8/0x150 [ 744.448203][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 744.448267][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 744.448313][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 744.448347][ T31] sys_info+0x135/0x170 [ 744.448400][ T31] watchdog+0xfd7/0x1030 [ 744.448437][ T31] ? watchdog+0x1c7/0x1030 [ 744.448468][ T31] kthread+0x38b/0x480 [ 744.448490][ T31] ? __pfx_watchdog+0x10/0x10 [ 744.448510][ T31] ? __pfx_kthread+0x10/0x10 [ 744.448534][ T31] ret_from_fork+0x514/0xb70 [ 744.448559][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 744.448595][ T31] ? __switch_to+0xc89/0x1420 [ 744.448629][ T31] ? __pfx_kthread+0x10/0x10 [ 744.448652][ T31] ret_from_fork_asm+0x1a/0x30 [ 744.448704][ T31] [ 744.448713][ T31] Sending NMI from CPU 0 to CPUs 1: [ 744.448781][ C1] NMI backtrace for cpu 1 [ 744.448798][ C1] CPU: 1 UID: 0 PID: 1013 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.448825][ C1] Tainted: [L]=SOFTLOCKUP [ 744.448832][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.448845][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 744.448869][ C1] RIP: 0010:memset_orig+0x15/0xb0 [ 744.448895][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 [ 744.448913][ C1] RSP: 0018:ffffc90000a182d0 EFLAGS: 00000206 [ 744.448929][ C1] RAX: 0000000000000000 RBX: ffff888157204c80 RCX: 0000000000000000 [ 744.448942][ C1] RDX: 0000000000000020 RSI: 0000000000000000 RDI: ffff8881573d2200 [ 744.448956][ C1] RBP: dffffc0000000000 R08: ffff8881573d221f R09: 1ffff1102ae7a443 [ 744.448971][ C1] R10: ffff8881573d2200 R11: ffffed102ae7a444 R12: ffff888157204d08 [ 744.448986][ C1] R13: 1ffff1102ae409a9 R14: ffff8881573d2080 R15: 0000000000000180 [ 744.449001][ C1] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 744.449017][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.449031][ C1] CR2: 00007f54d9d5d008 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 744.449048][ C1] Call Trace: [ 744.449056][ C1] [ 744.449063][ C1] __alloc_skb+0x46f/0x7a0 [ 744.449122][ C1] synproxy_send_client_synack+0x175/0xde0 [ 744.449165][ C1] ? lock_acquire+0x115/0x350 [ 744.449184][ C1] ? synproxy_pernet+0x45/0x270 [ 744.449228][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 744.449247][ C1] ? nft_tunnel_obj_init+0xcb0/0x1950 [ 744.449295][ C1] ? synproxy_pernet+0x45/0x270 [ 744.449319][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 744.449343][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 744.449366][ C1] ? nf_ip_checksum+0x13c/0x510 [ 744.449416][ C1] nft_synproxy_do_eval+0x335/0x550 [ 744.449439][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 744.449464][ C1] ? __ip_vs_service_find+0x843/0x8d0 [ 744.449530][ C1] nft_do_chain+0x48d/0x1b10 [ 744.449581][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 744.449606][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 744.449643][ C1] nft_do_chain_inet+0x360/0x4b0 [ 744.449707][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 744.449734][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 744.449763][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 744.449785][ C1] nf_hook_slow+0xc5/0x220 [ 744.449841][ C1] NF_HOOK+0x21f/0x3c0 [ 744.449884][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 744.449906][ C1] ? NF_HOOK+0x9e/0x3c0 [ 744.449925][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 744.449947][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 744.449971][ C1] ? ip_local_deliver+0x113/0x190 [ 744.449994][ C1] NF_HOOK+0x336/0x3c0 [ 744.450015][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 744.450035][ C1] ? NF_HOOK+0x9e/0x3c0 [ 744.450054][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 744.450076][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 744.450096][ C1] ? ip_rcv_core+0x88d/0xd50 [ 744.450119][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 744.450139][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 744.450160][ C1] process_backlog+0xa6b/0x18b0 [ 744.450202][ C1] ? process_backlog+0x3de/0x18b0 [ 744.450228][ C1] __napi_poll+0xaa/0x330 [ 744.450280][ C1] net_rx_action+0x61d/0xf50 [ 744.450305][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 744.450322][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 744.450356][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 744.450388][ C1] handle_softirqs+0x226/0x860 [ 744.450416][ C1] ? do_softirq+0x77/0xd0 [ 744.450443][ C1] ? kernel_fpu_end+0x62/0x80 [ 744.450466][ C1] do_softirq+0x77/0xd0 [ 744.450490][ C1] [ 744.450496][ C1] [ 744.450503][ C1] __local_bh_enable_ip+0x100/0x140 [ 744.450529][ C1] blake2s_compress+0xfa/0x1c00 [ 744.450582][ C1] ? __asan_memset+0x22/0x50 [ 744.450612][ C1] ? encode_point+0x8346/0x84b0 [ 744.450645][ C1] ? __pfx_encode_point+0x10/0x10 [ 744.450671][ C1] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 744.450701][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 744.450726][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 744.450744][ C1] ? kernel_fpu_end+0x62/0x80 [ 744.450779][ C1] blake2s_final+0x10f/0x260 [ 744.450806][ C1] hmac+0x2dc/0x3b0 [ 744.450834][ C1] ? __pfx_hmac+0x10/0x10 [ 744.450879][ C1] kdf+0x12d/0x290 [ 744.450908][ C1] ? __pfx_kdf+0x10/0x10 [ 744.450945][ C1] wg_noise_handshake_create_initiation+0x29e/0x810 [ 744.450977][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 744.451006][ C1] ? __lock_acquire+0x747/0x2de0 [ 744.451031][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 744.451063][ C1] ? lock_acquire+0x115/0x350 [ 744.451085][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 744.451109][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 744.451126][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 744.451147][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 744.451169][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 744.451190][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 744.451216][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 744.451249][ C1] ? rcu_is_watching+0x16/0xb0 [ 744.451272][ C1] ? process_scheduled_works+0x97a/0x1630 [ 744.451298][ C1] process_scheduled_works+0xc3d/0x1630 [ 744.451339][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 744.451368][ C1] ? assign_work+0x3cf/0x5d0 [ 744.451400][ C1] worker_thread+0xa47/0xfb0 [ 744.451433][ C1] ? __kthread_parkme+0x71/0x1f0 [ 744.451466][ C1] kthread+0x38b/0x480 [ 744.451484][ C1] ? __pfx_worker_thread+0x10/0x10 [ 744.451509][ C1] ? __pfx_kthread+0x10/0x10 [ 744.451528][ C1] ret_from_fork+0x514/0xb70 [ 744.451546][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 744.451577][ C1] ? __switch_to+0xc89/0x1420 [ 744.451605][ C1] ? __pfx_kthread+0x10/0x10 [ 744.451623][ C1] ret_from_fork_asm+0x1a/0x30 [ 744.451661][ C1] [ 744.451756][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 746.967929][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 746.978649][ T31] Tainted: [L]=SOFTLOCKUP [ 746.982994][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.993082][ T31] Call Trace: [ 746.996404][ T31] [ 746.999367][ T31] vpanic+0x56d/0xa60 [ 747.003401][ T31] ? __pfx_vpanic+0x10/0x10 [ 747.007950][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 747.013535][ T31] panic+0xc5/0xd0 [ 747.017295][ T31] ? __pfx_panic+0x10/0x10 [ 747.021753][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 747.026816][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 747.033018][ T31] watchdog+0x1030/0x1030 [ 747.037399][ T31] ? watchdog+0x1c7/0x1030 [ 747.041857][ T31] kthread+0x38b/0x480 [ 747.045961][ T31] ? __pfx_watchdog+0x10/0x10 [ 747.050663][ T31] ? __pfx_kthread+0x10/0x10 [ 747.055286][ T31] ret_from_fork+0x514/0xb70 [ 747.059911][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 747.065063][ T31] ? __switch_to+0xc89/0x1420 [ 747.069791][ T31] ? __pfx_kthread+0x10/0x10 [ 747.074415][ T31] ret_from_fork_asm+0x1a/0x30 [ 747.079260][ T31] [ 747.082914][ T31] Kernel Offset: disabled [ 747.087261][ T31] Rebooting in 86400 seconds..