last executing test programs: 5m23.411263379s ago: executing program 0 (id=7892): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r6, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000", @ANYBLOB="010100"/14, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) 5m21.998918091s ago: executing program 0 (id=7898): write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)={0x49, 0x29, 0x2, {0x3, [{{0x4, 0x3, 0x1}, 0x2, 0x2, 0x7, './file0'}, {{0x4, 0x3, 0x5}, 0x2ee2, 0x7f, 0x7, './file0'}]}}, 0x49) r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) listen(r1, 0x28) poll(&(0x7f0000000080)=[{r1, 0x101}, {r1, 0x100}], 0x2, 0x400) shutdown(r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xe}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo.', 0x0) 5m21.51474747s ago: executing program 0 (id=7905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r2, 0x1, 0x104000000, 0x10000) 5m21.280879412s ago: executing program 0 (id=7906): r0 = syz_usb_connect(0x6, 0x1cb, &(0x7f0000001a00)=ANY=[@ANYBLOB="09f49e070f8600da108ba6da974403e3ffd3ffe377d8ea151470178d7cf38e6bee8ec69427ffa34392661eda1d84dd092cd062a01bb171c1a7fe4c450c5123fd3ea9131302fa4ce38c7f7753d53440e64b17b779c3f71cb870a1e5bfdfd40a564601a536176c33913e8a1a53f0b9c3d226940c361c5da20243c68174affc34ac422af47260c36c6ac1c806ab86d3a30429f3f3017f69c86d0b0f726eeb051d6cf544195552938efcaa5f7878a7d92a5d237692015fe25d0c40507d2198bd6e9c7f8a0e9aabecef5cbdda926f4876cf6bc8bb91477440", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="c862b2fae5d6be58a34bd983f7365b9b100b", @ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x209b, 0x8, 0x1000, 0x8}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0x0, 0x70bd2b, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)="1dc39e29923b336d3af8867673a08a46f3c25d2c1c641b65ab6f123d4e95efcf5e6a68b1bf5b27290e239b29dcd3fafc52b022bf3bdf47c099f2f5b7a05298709626225fd2e86784d9a79257b8dd20ec0f9dac5a09e450f5c8712c1b90eb1f7bee73edfe4ff2be00fb23246139e99a63ab168c488488d7770e2980ecec6289a10460c4b3c2f945b6f128e7eda2da01a73ff963b731504f09236e0d94b92732786ae628ab74cf20f3deb1cf84cabdd0d05e9e9910ecb2233c5eeabf7193769638e12880522f19d63126d900f4a3024a5b5c62856183c1b637338aa966cb72a120dccf80019614c8"}, {&(0x7f0000000000)="2527995cbacdd720a5ea2f04be1ec8f66722a87cff2eb2b276c5884d0b18a65887ad68724b10c7dccb4bec3c97aa5a82ce037c994d8fc827eb00"}, {&(0x7f0000001900)="e1889d0efbba0a72fa866012c9a9e8a13f0bb0cb471e29270ce8d75e4b1c6f56c62afa363618bf69317a0681ef18198bda8599a88a48e2f2aaa122e2b2182afc9f24e6b4ba6e3decfe6512b02cac7f637e053839db5880c5d007864dfaec451e15b2d9a2a4dbee8388be7a2315c4a2eb722510085810845005addaecfe52bcbd433ac5473da2a5c70217e43e95b21b32390d94ec14018ca1ae61e39028e48fc71155f922dfd25924546ac62248317d8dd0176a1e9b5d40bb7e4732e4168c1d6b3d0ad08de20e833eb2"}], 0x1, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x9f) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f00000003c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcb, &(0x7f0000001700)=""/203, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x3, 0x10}, 0x10, 0xffffffffffffffff}, 0x94) socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@private1, 0x7d}) socket(0x26, 0x5, 0xfffffffa) shmctl$IPC_RMID(r4, 0x0) 5m18.202890556s ago: executing program 0 (id=7922): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x81, 0x3, 0x2, 0x6}, {0xfff9, 0x3, 0x1, 0x6}, {0x8, 0x3, 0x7f, 0x3ff}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, 0x0, 0x0) splice(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x400, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 5m17.217512049s ago: executing program 0 (id=7925): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/168, 0xfffffec7}], 0x1, 0xab2, 0x401, 0x0) 5m1.836670287s ago: executing program 32 (id=7925): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/168, 0xfffffec7}], 0x1, 0xab2, 0x401, 0x0) 5.313142806s ago: executing program 5 (id=9749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x14, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, '\x00'}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}, @global=@item_4={0x3, 0x1, 0x0, "41985e11"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') 4.843121568s ago: executing program 2 (id=9756): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.814565327s ago: executing program 2 (id=9758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) unshare(0x600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x9f) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x107) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000340)}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000401840f0000020a0000000200000000000000004000", @ANYRES32=r6], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x80, 0x4}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4000}]}]}, 0xfc}}, 0x40804) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={0x0, 0x60b1a859, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0xe01, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.705425238s ago: executing program 2 (id=9759): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe2$9p(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x251}], 0x1}, 0x0) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.780057869s ago: executing program 2 (id=9765): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6e09, 0x24, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181c2c34b74bee631798684f5a56d6532ffca5d36143f"}], 0x2}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.48781468s ago: executing program 4 (id=9767): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000009190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x10) 3.428852202s ago: executing program 4 (id=9768): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7ffe, 0x259}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0x627, 0x411, 0x43, 0x0, 0x0) 3.399925703s ago: executing program 4 (id=9769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) unshare(0x600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x9f) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x107) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000340)}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000401840f0000020a0000000200000000000000004000", @ANYRES32=r6], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x80, 0x4}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4000}]}]}, 0xfc}}, 0x40804) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={0x0, 0x60b1a859, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0xe01, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.306382327s ago: executing program 4 (id=9770): r0 = socket$alg(0x26, 0x5, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff0100000000000a0000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) select(0x64, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'vlan1\x00', 0x1}) request_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0) add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad765d564c904e00000019eac12067ce3b85000055000000", 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2ee1, 0x10) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x770, 0x0, 0x3, 0x0, 0x484}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x280) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000180)=""/85) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xa2040, 0x0) read$FUSE(r6, &(0x7f00000024c0)={0x2020}, 0xfffffec1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [], {}, {0x20, 0x7}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x17e}) 3.143779252s ago: executing program 4 (id=9771): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x274, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x240, 0x2, [@TCA_MATCHALL_ACT={0x23c, 0x2, [@m_bpf={0xf8, 0x9, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0xad, 0x6, "66191e4a06a6d5543376ce45aeb8ac36b93874ced503da580df8c61c4b289cf49a0907f8ef7616667c87bfb8836594a41cd2a2e4ddb579b4d763112a1ef96b2902b42ba1535c3b0146550054d6f34d5f69994a10b1c65316c6943ba3f407a8b28efaf6da8927a23db273b37028b7fa49839c5a319d30c9b0ab6de63c4063fd893279eff47b802209defa393b2169c3bf23c1c0f71f489cd552fe6cd56c0820002dc8563b4c6c195383"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x140, 0x17, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x200, 0x65f2, 0x6, 0x3, 0xfffffff8}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_TC={0x5}]}, {0xdf, 0x6, "9e974c964bd500ae59305feec7c64245c5afde15d19b4ee8cafcb15cb518d9d58d4e2c6aad5065ac398065266aed72a0060cfca725683ac455ca6ae46b505b0654513bfc14fca7098c8ef6c8713fa7fedbb49d218433a40e114244f632d0f55c812294f22a1201a3527ccedbdb02cfe7974845a96ef8e21bfcd3d262b43e3e3ef7a049399fe0b62d1431e8b863ce669270c0e9800b872b5bd8e71f9511308ad5e209c1c114028461b333bde713c2c276a6ed60bf66c32cec7973e91573e011156e11fbaff90f12f7a6f9daf6868bf6ecade39d6b370af8d4f26f21"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, 0x0, &(0x7f0000000000)=0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 3.121930968s ago: executing program 1 (id=9772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10000002) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x9}]}) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x100000000000f7) read$watch_queue(r7, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r6) socket(0x2, 0x80805, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYRESHEX=r9], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r9, &(0x7f00000192c0)=[{&(0x7f0000019380)="8492956181f597fb0ffb48658363a2a01c96049e2e9fd2a3e2e7be731a73ddea38e7ac4a3086bb42d7d8a3a640886432488ab2f34452de7280f9588015069553e24c9763fea9281e607f90155ec28699d4ef97e057f34607536543735c4962f95e6bd27486ff53e9ba7adc7f8631cdfb6d48cabde8f13ec182e08fca6f232e1008af46a9d3b53b22d819deaa5cf6f97a8d50a58ef8efab2b188030b082c0084ba17ddfa97c2fcc41de17db855ba3e7431343c9ad296952ddba0b08d6ed111d5f389ed743e990d25f88f2e305de633716dee9303e188ec4fd69d31893f61d2d259af7418c31d9b6e9ea12b6cc0eb3ab4ab1b3be887c25f5a537a8c030f7b0b841cbfef61db5f34da24d3e4115d9e82fdcaa3e26df08a58682700180aec0de731382b0580c75abe9d0dec6b7610a6f4a5039cf2413f8acd013f15a0118a1640d94113167b77dc0a38d014fa637d057c3d283b68d6d2dbed065a2ca23e7a87469396f21651029aa79cfd98650189bff70ede2571ff7280195cfe32a932e955618d8dbfc904a989f7da4b81a05efdef30440a0f05153ea81fd0cf742ab5520a7220c3986bee179f5e06408173e166f35212b493966e6224c7e5d29030643c86b27808b2be56d439a3ab1a59424c95972fa25c6fa6e57bb6aa7a5892515a35a75e814db9c5caa93f67e49229ffe3b05f1f76c59ba63166b4df5c98c1036f8a284cbaa6b62976bbb0dd39352473406376fe3aa33b6ea6a7376f6704490331eb2a013131aa15d4d0fa6b637fa9bf84ae1ff322dbadfc94478d7f1895a2d0b0d7cee96169877cde72792f01ee551a8a1cec1e54c8656d245d0747c001f0cd439cd31d9b9697ec588b59242340743e6b9eb46a2090b13044dce9cc5ecacc3bf38c5e52f2fb5d834eb7de3436ca787d1d3b7f98860628df0d59d7611fe9d109a1bf67447e68c37534ffd13a05e8b87570a18a640f6fbd16716d4c0fc34c94c8a9b5fd12f7f961cadede6763539d805828d75966795c956e8cd5e815bbd92345f93ed888203d50ca3420cf78d80be67d0719a53ef7665812b54993f2197c9534f80fc0e3c98ea3863df45388ed3e16895919c8ac8deed340fc1d50eea8e9e5b1d221854ce1c480afad4fa46d57e6327951182eab7f2fc4bdf75dbd4a31f0a132fee680f25cd25fc6cfa1d2ec1dc9c10fa1ac0273847ca56004a0c1d3727c7a5829f518602b04b7c7488391e16c93f6122ad22fc0e84f88f5ecd2e3c15b23588f2a7985f5a25b9632079f9b86da3b36424c9a80f3668fedaeb2c974ef735c7a89f7238c48e9991ca446d954003134e44476b73ba46cb9d1aa4810ecd784229af6f007e81e0b01761e190c04e8fd5ba1a64259ad0bf11d7b614d6ee7b4618636b3418e38e6e439259a0806cdc2613d797233e87f1c922f426608ec40a0384c269bcf019bc5f29fc2362a5497aa329ae0769beb61d3986d1511f862cc496b8d6e7ac5efdc40b5309d2a1535b0fc08f23c3257794137a9516b661b63ea2eb5ea479cbf0876afe938f59f6736c591ec6bf094e34e0607b7e878812d84712f84decd2099c9f8cd1a3aa62c2bc57e0b18a6efcacb90e3531356736e7e7fe2f8f5b59737fd44e3610282556dc6e73e4730f4e2dd3d3a7ca8d140483a89851ea41c7d1bf72a1b83e25cee0ccc213bf876ddc876f496d331d1114f0641015e21241231f227d159d4c74af4962a25a13510180860f695b47218aebc41baeaf2d863a3c997a52290bc9ff74e90ba192b932e8ed9f343feb126beed1d0832e3df77ddbc32472b319b2cfd8555a48765da164698f0b1a73d59759b25bfa643a376546ae6c7639a2c990e59dd0a37f3e06fd61fe6ebe597422f46559d4aaf2a000d5b7cd52c3825712ff171650a2baf86eadcb22a9c674ea664377e06414baad8fb28df1e8190f8a4a421cf866b7eb685810d6e6dab58264a527676abed7ba2397ca416e4fe68b1ec40edd51793f620ae12ed4aef283ef8501be06280c7405ccb74317047e227d1c3ce2cc97b210717dc6c712c6ded8cbd933c8f086f025e116cf30f6af3482090e9bf436ce5d9164ed4934f9dc808541d0a011abd06c3fa830d1962904370878b701baa146444fe495a7689a2aeda1be44fa384132fd4fd53739e0b067af953ea777b0a0057f9b15f0c47efb902a086cde26d3f99a756fffc9852b19a7923f7b1bf256770acabcdbf4fb85f41c6987da5f3d9a4ff77486b7552d81437962d9f27157b062a8ec2e4a730ddcfbcba5e9e7c1df04c8390b770248bc78b14fe51282640322a3a0dd887760f70a55b7a0f083ce40687ba3cab7d771951da78ebdc262e0616932bb7491780d7ea78ad191130b02b2d789726830a11949831933526b4edf0c6cbd9ab7656a78381161ddc38771b1fd9c5e4b1f3b2349c5d9c060b3b0e16779bf9a933052e89d6eafe1811e302ec31cd0256b3694784cec79c35536f304161fd622d4f6c31b16a4b50a395265dc4b5ecc47b54ac7f77de691aa61fbac135ffc395e1013ca11e8f6c14e8dee1edfacda95c1b4f5e4ab2bd3d7bf1fb04d86817b7247a8e4d8125addd72d9a2da2a8d66213e163cee56b8b2181c031b5e3da046a0699c4e17f28490f5f6a31199619dd83c39e34796f5d886a8bb8bfef189d0174aedc1e9453ed60ea21e2415b008658fc5dd5ff9a41c2aec53eb8c22dd9934d5e26054c464af5dd6ff61b154c163684d5c6c30665663278e33675dc95146a1e02c9eed91422290fc614a6c2f9c656b423834d22ae7213fa2ac6024af7d211bcf41995c5020aa47b5a9cbf9b163514878fe02a586aea758068af1d3168a94ff3d2f9229fab999e597ac027b6d8257806d426fe2e48fc8fd359bbb9885cd082182e2b64fac5bc45be45f958883ac6864628ecbf4e35f4e0e019ed70820ff82c7ba111631f465ad1f55fcdb340a4f21e26932643b4e88c09e3f006db65a2a559a990035926b3b37a12f3bcacaed37427d43cac399714b6b6612ac0c719c6583e908e23c81ecf8f602207661ce2c85cf6c3d56d49528e941c738c04c87480d61b78af74679fbb7536bd34ba5a22490838d0e7ae1e79d2fea0235eb2707def3f878e34386fb034b0d94055de011ac67cd54a23cb03f950176be68878648bd57c2b5ad7c7232aaa26d20b05807da23a7aa0522470bd607cd97c3998012a7c5d781676f1c19b9eeae3f8f427f281af4474ac01ca5b6c8acf4cb2e8dd94f37a222705857392c0b694b374c7e5bb997c0fcd817fb48c768335e8050b9706590b391b2eff06c27fefa11e924e90fb6f8eb33ebb494bc67c99b3bea7bd6e2222e934a9083dfcb5fa397704a3ad99fa3f2ecb7ff1b876d8b8a4eeaa3061a49d1da75be6d3230e9bbc4c61259fad23784db637a60419254fd8be027bba34f9c785cd2f4edd71361c162d2ba0eef94aba9ef61628ad7d8b90d735852601583ff5eb1005230ca3d78173fff8fa48af82c8e38914081d0b52d36ce820923844cb0d9ef132647e4af900e9984d3e7855076ab9c08b5bd428b7acc6bd6c6dd59849bd42ab7ccec7ff792abc04aa72b6eb2fb316779294fceb3db4c701051c5cdb2a9ccf16c3af92afcbb93581adf95c79fd8456ed4178db2808c0b46f29a8ae9f8de805904f218a76994a51788dda6460a756a16f414ea3bde0301aeada169efafeae2cd73802318d436e6628325218227d96d9fa0eacb0dd64fbe4433507d7fc6952839bfe4d971fe3dad27e603468765afd26576ee12dfb0fcdeaf2414206b89b93fb5dae6421a52a896e1e19d3701901ac072abf4d75719879d1feba3484dfff251f419b70d23e80e5b78ae9ff39f414eba3bf842cf84950101887b6af5c737049e2aae25299ab2f1bf23b7780b440aae8f0664d292753b74253782c69b1045ad0de3a97a7d4839c1f4c8133a22a0952a4df8bb3b59eafae98a38e034b95159da03106b61a233123ac65fcb1de5db1ba2cb7969399f9b67acfb3869919dfe4f1620f2b696dd3b3f02ceb5e95fcb4b3200b8a400aef74afe657aace520913fd61d2d3ffe757c4947f7cce05ced20ac5ed7f5d714be504fbe9aff83674e53af6b67110fb211431236f24b179f7aacebdb802cf926980cd4cab595d0867663f007cb4085f739de134be8fbc8b10d39097b30b22ae9b69ae6d6ca72321ddc191df3c23963bd3c78b712692b249025de21dda3f54eac08d2849163989a6351a61dd923292fea5585006e40c5d7aad555d7fecbe001a51e66bbffa07d9f5b631b4ad0730b51fb52b9a5d70ce707e191a63fcbef8c6f563442460147455d1a834fa69fe3eb5e5afbf59753021979c894cfb18de812a450ed32675058f94858fea2328bf591eeafa11e4f3b6646700c5116ee74fab229b873e958a60b6ea57cb6a94fe7162b6070ed2efeed9a35b554009f543b078496693e4420149477dd3222aae3562bc962121de94cfb51e31a62fd05e377a0c5e5273fd3c3ae42494db21a64a5ca5bd921eb4f4f66696fdd2ebe3ccc6e7561e2349ad175bc264d97a97a1aecd8f45e0e35bb1ccf6f1dbd2cf5674f5e30e75151ea5e883a5ef6c0bd6e850da5a4c705ddb523857ac0c23e9b7eadb9e90bcdab98a01e0d35460d3ceff9ebcb40ef913e71bae7e738b96486926f3c9274bb65a0f5a756d2a9c32d641cd2ab39dfa6321de3a62653682a445ccff3ed1e1290f55a2fd3a12a809a98649a94d4be5bf6b62c02c0c98a77e5590f7cb0c06432acd11afbf6c1322649c3509dd946a7615c9b72de5ba425bc132aaac381dfaf674e7a251ee6abcac829d867d325ea0d61f93e4e27eff81b61666adae432eb27fdc68611a5329bb1b940f9f68a5cabf0eb54f998a38c8bf46b02c66cf8229d7d6596a6730fd9d0e28a4ddbd40cb25f5f6c928b92a1d0ba171abda3e33de4869ac74ba0fa3522f41b5c8e0a1d409433baeeb9a8086103fb91aa714141e84ce931f97124e3ff045d205a3586680f21f511a9e0d70e318fe9ec20712ef905910714d4bc2043696b7172ce0f83d6c8b03b45a0688d9f14b2d3cf99cc3c5898bcf8896bbd4a275c9faef8e7f99ddcf72345833bfbc41e8a0a39262aeedb6e3c356a3a965ab2962da7df20466795c6aed813ebaf131fdc7cf7597ae7fd46aa587f6afcd72d4c17e2349fe66bbd5a6ff7ee052f560732657369e2a1522b2bf1d19bbab9beefd140e278dd3a72c1cf64233d318d6a89cc17f044e3ba00e4a7406696adb2ef604fbbc25bf0655d110e350274e946cd4cbcd1e370b70fd167d8019950c2eea3a79a00290b0f0e373f421bc07007317e1d777a5c5730ed6857efed27b381499e665a7dfd9843df6558b39a8faa674dd7c3dd0e15ea439c96c3955396cd5eb1702f52b942cc515fa846ceb6a27fbbf3fdd90a2e89147830e1ebccb0cc2fff898697c9df79633b1e2e809ce9c72dbaae3e22b317ec802529c9aa28295ba4dd3e8ef9a75cbe98177e7c282bcb582800ab1a27893451059f07e9aafe3835db6a989714c41583c3d9f34e1561637d03b93a93094b2fbe1887f810b00a1a53d50c27c04b5162491494633bea9fc686b64a16a0751be411bbf3452fcbc13c14f391642a3b94c81ec1870a03c4354529bd3e0f1f7ad32e176681ac8877bbd1b6e22450953761cbb89f4b8f29b9dfab27836e34d7d1e5b1f021167074a21a3", 0xfbc}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="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", 0x120}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.861786534s ago: executing program 3 (id=9773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c000000170a0108000000000139cc83888a86700b000900020073797a3000"/44], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 2.70534045s ago: executing program 3 (id=9774): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2}) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2c0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.571875992s ago: executing program 3 (id=9775): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x800) 2.492503104s ago: executing program 5 (id=9776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9110b7000900000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) 2.42505724s ago: executing program 3 (id=9777): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x7) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') ioctl$TUNGETVNETHDRSZ(r0, 0xb701, 0x0) syz_usb_connect(0x3, 0x3f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x60, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 2.332762829s ago: executing program 5 (id=9778): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000f80)}}], 0x1, 0x84) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x14, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1a8, 0x29, 0x36, {0x5e, 0x31, '\x00', [@generic={0xff, 0x31, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x330}}], 0x1, 0x810) creat(&(0x7f00000000c0)='./bus\x00', 0x118) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.073274292s ago: executing program 5 (id=9779): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7ffe, 0x259}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0x627, 0x411, 0x43, 0x0, 0x0) 1.894585986s ago: executing program 5 (id=9780): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @remote}}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000b11000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.849338113s ago: executing program 4 (id=9781): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000500)={&(0x7f0000000580)=[{0x1000, 0x200, 0x0, 0x0}], 0x1}) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x15) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x3a, 0x0, 0x3, 0x3e, 0xffffffeb, 0x87, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2, 0x3}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0x1, 0x3}]}, 0x78) fsync(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'team0\x00', &(0x7f0000000780)=@ethtool_drvinfo={0x3, "a8af2f143fde68a37744225bc00eec58ac6c5e4826a5753b987537a9e4eeba7a", "349f32f5f4348c9ce43369babe423ba72438bc756c2931ec55e59c6e71ecc602", "f61850905412aecc6ba7fdf801c887bb88abf902c5149300d3ef759cfd8c9127", "44436e106e40f6370081c93cb05175cbf5d8bc80e6154131c4f1cde0f14450d3", "c40b3dfefb0d7307c307162835ae5a318cc5018db8feb5066a1f6333af24d4ec", "b92f6d8ad0c4f00e5ed76dc3", 0x4, 0xffff, 0x4, 0x38068fcd, 0x3}}) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f0904"], 0x0) 1.710529458s ago: executing program 3 (id=9782): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x15) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7010040000000500000006000100d43ab4e5bc1b7ef10200000008000c00a80a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @empty, 0x20000d}, 0x1c) recvmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/194, 0xc2}, 0x2}], 0x1, 0x2, 0x0) r10 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0xa, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01864ba, &(0x7f0000000280)={0xc, r11, 0x0, 0xe0e0e0e0}) 1.665483335s ago: executing program 1 (id=9783): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00198008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 1.593218469s ago: executing program 5 (id=9784): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x189) setxattr$security_capability(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x8000, 0x8}, {0x40000, 0xfffffffe}]}, 0x14, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0xf, 0x10, 0x4, 0x0, 0x0, 0x4, 0x0, 0x9, 0xe, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0x80000020}}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000280)={r2, 0x9}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000a00100000000000029000000360000005e3000000000000000010000010001060000000000000738000000030c00ff0fffff00000000000066090000000000000700000000000000f7ffffffffffffffc397000000000000010000000000000007100000000002070600ff7f00000000000008e2c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add644f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c08000000b3f9b0e9c19b929779fe65f579221b8101419a348c3c19e341e07ee4"], 0x238}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x1ff) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 716.309538ms ago: executing program 2 (id=9785): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2}) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2c0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 501.956672ms ago: executing program 2 (id=9786): prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0xf}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x6, 0x0, [{0x890, 0x0, 0x2}, {0x9ab, 0x0, 0x4}, {0xac0, 0x0, 0x1000}, {0xa16, 0x0, 0xe4f9}, {0xb16, 0x0, 0xa923}, {0x4fd, 0x0, 0xfffffffffffffffb}]}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000000), 0x4001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004680)=@newtaction={0x25d0, 0x1e, 0x109, 0x70bd2d, 0x0, {}, [{0x13c, 0x1, [@m_ctinfo={0x90, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x64, 0x6, "0bc408e4219bf6823f1b2fa51f5db228cd1d0ed0fd90f572632d4f4351a96b89fa261b46a121e28acbf8d7337a88a5d70e296d0dd8f82da5ec4a702068ab96c075f39365fc28af90f4ecaeb5b4c7b140206bee61483439c84113841a2d6c9f86"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa8, 0x20, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x50, 0x6, "35026dd8fc7fcd97acd1f806de68c98b06d9539c66619cafe2c0c542579e547558cd697e12e6371dc21ec0c23b529d0d7a16f2956c7d618bba458a1c30a2e86f3ded4506de7ea6c499c407ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x4}, {0x2474, 0x1, [@m_skbmod={0x1cc, 0x7, 0x0, 0x0, {{0xb}, {0xd4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x4, 0x0, 0x8000, 0x7}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0xffffffff, 0x10000000, 0x0, 0x1ff}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xc5, 0x6b09a581, 0xd, 0x5, 0x4}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffd}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xd, 0x8, 0x9, 0x2}, 0x3}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8001}]}, {0xd0, 0x6, "6462ca83f83126a7504fb77a274b9048f4c3669f2e51aa95373871fbdc2afbb11764e054bf0f9b257cdeb54cbf9abf02fc72e5be659ebd2a7a5b3088e0986eadede148066d40987cb803c870f901d06e9841d426ff6465c254d13c19498d9cf024d36e16fb0ec741215037a582b6e1b9d93cd32cdfdb29a981b64cbb5a15715e2578818f798bed9533e56581c4142e42399f7764054c7ce1cc6c90346f2eedd3a9ee1eb06b6ab3cb0163b4c3361155b73a6cd95e820c05f534c0ba07d86cb96daa8d8d221d1e2a39c689a45c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x118, 0x19, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x607, 0x2, 0x20000000, 0x7, 0x53}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0xcd, 0x6, "cb04b74574448407c209b9c34479bf7d521d9fa8f96474dacecd1fc92ae1b974a3384fb1f03ec25f0ed397a63f353c5372ede695039b09d605fd852de8125264bb9f1febd2c428455b28be5568c38c76198283be00919091be2441af59fd85db03208b5e6d732c4cda5c59c3bd0456bf172aade9866e743e94ccec0ecbbc81e17f5babd60ce77471dd863adf1428790aa973e4e7598a12b7d6952b5305351909799a2630ee10382a2a3aea747767208a0dd72735e051a7fc98309b535bf25ebcc0d35b0b0a01cc945d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1054, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x8, 0x20000000, 0x40, 0x5}, @multicast2, @private=0xa010101, 0xff, 0x1}}]}, {0x1004, 0x6, "ff0574b5e59a9362bfd08115e0e730c131b3f84d7de27ae2f84f8daa1c837ee81f15eab11e9bab22c9d939b2b885b9bb6cd699f81b28e749ff5fe425569ca09990e05872be068c37dc6458092236b9004b98cbbb17a04b5005e131deb5fbf364a2cc5d10a2dbdcba99cbb72967ac6c35e1be66300b9afe8cefa1508ebff67ed5774b7cf5c94538850b6c3f786c75ff2174c064ad86dbae215b0b8a909dd6991477d48bf534b1a973a6506113903491e1642889f79452517f34b773f5c76e6924af9d64bdd732832e5226ad4d178ba4af16a9bb062768cc731d1e0431d7df84b2b008dec0f4ad93450f69fa8a9bb6cc8ef75f1b7add580d30643e5501fa4fc3706f3194d53e590d515ce363669043e503be00c6234edd801a0ecb0c2f357aa0fa7b52c10962dfdc8e556563d78a6b74bc8133143c8b4db217f09ef6f9895a048fc60175bff624334c8e1ce14471396730098f0c468124d5079b5ec00e6ad81759b80ea7dd009a3be3ce7485af86f3b0564eaf9b6dbbb3b707c2de97e3d623166591aa70d98fd24fc2e8129c8b1890a28fcf438b2be761877ad373c61350238097d585da600ee4a9b9085c28eeb78c13d23d8c67e31e9c06cfe7defaf12a1c680c0b90d0fd176ea8c8859fa688fdeb97c26546f60c52dc1d94cabcd330e0046072f21c7c6f3203fbd8e05892b5ddc3997557ed7e6f7b7852cae5b113bca4e8da4d08d31b6e5f148191791d2f189446c6326dd33ab687379772f58e4048fae14312ff7508e5ab1fba5816aefce58be6c92863f09dde5cce4f59d501f97a9f3b619432a270f862649264ea0470ab62e5261a1fb8e3823b2ceb5fb969a630b417a466367e44f1e0158794d81d74a0f69a99490db05c25bf7b7c33325c1fa23304dbd06c3960ba0866d681e1fc904f6890df833b2aa38c02771b4f21cd37f228b929327028b54932739964de2c7de84a0923cc30a040f1015935ae9b393bdde9abf1b59f9a9c09befa56a09a9e07619d965149cb72c0dc9815fb9769d62e667e7bc00f0ee13cbf518b6228010a343fa5e025d43256c9024be02556e36ae92f8c77d7104ae3e2b22124ecf91b46c5a4f036c93e7692caafc0b093b549ed12f687fd6a75d0d19111e80a65e998a2dc58d39e9159bbba7c304d7892d7761be0d3c40f997a3042b1928cf0145ec2cf8b94306bc958f34e1d4d507094f6a340066afb2555954bb38e22db487e48431dcf3774991a6266fca193cf602f9660e54ca91b9695149bcebabe049b09d2989634a90da7c15d038076ec07ba7ec71fd7f51aa96d20a584b0e999b035c4a96b0311a92c8fe933c27c6e366e077b35c29f3ae7c06163dbdad77d408c3c3c042321e8c2d09a0140643b0858bd7602187e3281de85b4fbe3f43b4c50aee8d7e4a9066146f6210a9052990c2321d906369bc71e85622677fb590db7d7e7f49a2db30c59a0bc9f49159cb2c6004f28f4d3d71538efc05942d5ce4790e21e69791855f0750fe11fc0cfbbc6dee3ee069f30a56cd3bc5c33118375382aae344951733009d1bd965e85f067aeb12d0bdebbf910d58b307d0bb9d12b0ebc7c62d2020e14d2599ab0c157c3698669155a72bb73d68465ca19b7ab1ad76ee24db289b946445ccbd890e4bff90539ac178d54f4ded39210d3e46f3bf3007478d950991f69cb8f8357ffcf873f5e683225c69c957e131233c5c0d0f51fb2066e4e4cf59c5352374030825aab708c36fc3dbc09706f6042c31bc7ac6a6e79c5f511bf93f7e3140f81ea6f6437370e98c74ec8c938f9b1e1f889ff20537ab807e23f97ba3de56218b0688f86f2a79b9affb8311da23667eeea424bad55e9b039bc85faa5c88e71df77d58612a30d478f2328f81a00e3ee8456f48ba22eceb0f886306f502fa13adaab799c820844da3f3b758f59a035dd19395d346e6ecfd44961d352f7d8d640d6797c6647492f63f6be7d2df5874cfb27c8e0981a372894fa985220c05c5416b2dc3969aa1067d5539f30c645612f6225308fe7295ff03bb7cb3907a1b3b6ae5e26413eadc72e411dc2c949e490c2aad1fa7e7c5565d3f2ec8b0e6e44e4d99be24aa75edb335c1c53993daf7b8bfc399ee15cc7186f463f46f501d8c5db090594ecd1c388096eefefb1fccc3e5a17ba0a2a2b588f0abce7f83177838d73a3fdc28a2518e85415f6263e504612ef00859c0071caf362cd7f19db8bf56e21c65750b0bbdd4deeba24b89279fbfdbe47c0f3bdfc8981f6974893e0d111cffeaae950ca4d1595338168bd1ca8097686cb6958600ea0147d6251921722692987534136baf6fc7e840a829b4ab0fb46caafec78c53ad5a81c1876f4d8dce6a60edd3c7137aa0058eaf3ee73de8658c0f002c0e96e396d7a2e869fff02d37917b8913933e2c7ed6d1ac69eede4d717c39ac48c3a8ea44cf87ff33dfe9a249b4cf3a495036bab40d418cf5a5c02e58129b8ba5d01ac635f0af50bcbffa14cc768c2d0590477724086117480ec5d8256cda4ae9b1667d040ff7b09e267c80196eba826a73d612afbdfcf68241a1df814190b86b630884af60e08061c65758a46e3664137c5cd83cc7564ee047c56979566dd81081b6c776748bc67801ac9510df3e0d35742de2d61c1b9042f0fe2a89a49c9af8be2d9ca6d690fec894afcb362465ce9e419c1f09492bc19fc514b493f0c5fee412b7906a4526834443e204556c3d53c8e634e4b4d78b564a89a1dd1f6e789fd619366c24d2e279aeb75a34ed787612bdc6c620bbb75be09c5db74912d194c96aa739017365c3cef1000c036ceef99da9a06b6f4eb9628e3eafb7bc7192398eecb5de403c677fcadc9f2ae23a5dd7ece6c3a3b150e6f72cb5f6a2f6791289824f589945e9ba0764c2c4b2565240983530dc257a67e082dbd27a43112e626ae52f7a1bcde8061b3c155af288b3cf8f2a76900d8e726296b2559b6a22406d2dfa0e01921949b3bbca334fa7d2f5d706fe316f5ec2f0071b6ab5731169590680a9add816e36bc6b7da0fd618765350eedc6721607f2b2c17f0613c79b43c65247e185e48b8be3f6603b32d7dd40b761d2b73ff2e65753920d8decd6b81c42150b96304c5fd8cd4310fdf8886b2ea0f591734d2ce07c5781b08f57071eadc45d53ca833c7a032038d7109bddfedebbb46d8ecc64698d96ba67bf8a5ab1bb7d999f855360408c9d07ae9fd7c3d8626d2801d5600208e45cb06aeb20a87807e395df3fb7db73a9903df512ca613ea97e49b9d157d85182cbb666153a11223d28bece0f8d9b66a49efdfb6bbbc1c9cd5ed9cb4355634dfcb298300d1e5894a9b5f5b24fa9166437f21c343624fb03698cc9a239a4578b621bacb03c8f927dd3fc021f0bf97dc52c2f7c7b99131f33ac81388eb2d73eac69168bd4a1ba1a599b7e4195a4f7fa61fd01bbc79c6b8852e1262d937fa75367570047e564b7896f72a794e2dbd3ab6a4e9f10f98da7b627c50f22e862d80f79c0998647400dda3106776aa41d5527f64ee5676d39da53ba80f3204637e4452c0f96dc51d461e7263eea1ba3aeba466b0ddffeeeabfdaba0087f52d62de9a1ac8d04526c5739f494cf49f7256369c6c55613844a5561c4f64f8f45c0bcab1ae72e1e4e46bbed3ff36bc3cbdf6444e8f087de08a57615fa47f12dc29968154390513ac7e1e5663788e2f1f6c897a13a671373af46fa00cd7b3a8734c31f8ae52c73a764e793a15362949125ee98c338b6270291f9dc88b5f8a1dd80552cce512444345d39a23e44321ad32f8b8654931c2ccaca4d2951e3a6969471e8fea5d0e187276ce021530ead59b406cd7498c9e80292bdeb195f35b8cce21678f9d0bfdb6abf56bb51bebd4bb82e1abcc5e44645362c162745a195406614653116335d1aa90f656e8001769781d23b01cc1b6fd01006f61884ab3e28dd9fbcd3e3a1a19ebf9fec8bda81b6c7e21d8ae8067a48797ad1155065e0a42235c4da6a738f49421cd7c314a25d7f71baade21044f9261d0766f65ee298eb1eae1f305aacc9ae75864145c830d1c7b5c48bcc48ecc956d02d59e966b8a83f99f50bf2cb289aaa1ec4c3de9a67a278d45fcf66737bfafd8ebcb09c76b2f5dffde1de4bf6457114ba82dd69a633edaaf2205fab8fe2c834f6c34230c8f564071290f49e73e1e9a190cfc5fbd86c82e58d5c8c46c092140908d4a35ba3051c56773a22563f72cc242b03af42f97bacdc09b4ce0122727696ec0ae63bf0ce70f26accf1bccc940391b05cc200b8e260fb31bfa7a9092911945b1b65d702da095358bdaf66baa92083c7d157eb5bcf0d1ab0cf728298a68e0bef3ecf997a3290a97cd60505edc116f409120119555d3f11aa9a9f68f8c09a8698288445fdeef6170065dbf419f4892635b3e3b8cabfc9be2a08c9c3df14f334bb548530f1c5db72cf341761fa318d75e4d480c6409fac3c0ee2ed305634ee5f0131480e33fc2b98c863a490231e95e12bac0bf65764f2e84ac0acbdaf3b2d619b998b83e0bc2d359c1fe3f914a5265886308a23162e2decea0387bc36151b51b4037e0cf5d839fd1f14904f654a77417caf388aef44587feb095f10ef02ab834b2e94a81f8130a47ee634242df0c49bda216720dd2e13a30c3efc7c43202820bd7b27102a09c60792c53090a8aef9f31c828845f955e8b7ac0cc47cdb537208865a8e4304ba05c6e793e6eb7b68666a76af958aea39f0dc61aaf1c2cad2075c2a3629285ef7f38077bfffd17f2c1db42fa88df2c6fe648d99d3a0ddc134645a363baafb3d76fef19cc9c59ca680b691f35a41100b727ca254ecbfff68757a07efb5e9d02b2143cf72d2bd57a4e67e317cd9f55cb1907b9d537645b4d51c44b3e992a369d8ef5010966af0076a78e9a3e8dddf53b3b284e3fa27ec2ce5defcf786e01af0dbbe6dc6e2f5f653e5d0c03a1578e1197397510d5def7b03ca604805fe2d4caf3de4235560c95556566117660529983bdb0c2c23c5dd92c407f625ba5e1c5230164135253301dd705e2dc2b8f08376ff7cacef53631e0cf122bdb802c7bfde2b4a15ac60f1cf6304efa7779e0b359c87beb1970e7bb694085df2ff52755dea85585b2b5ba95367bd56ce63b8b8ed37e20bbef225401f6908fa90c078d0947f90cdd051bc4b48395b86e1b82b2b8e2605cb4b91aec00f4b5d43358ca5d0c2f4bb439c1bf8795af2acc07e69841af0ce3f2e6b32ee6a113bb5173e6c1759001ef24ba7a87b022f6a5fa95f427a67cd4b6e29a2ae7a18602dcf1b5daca5f86d0ed0198f2453181188e65e7353e0cb07a65b8f88fb7ca9cf264d88d42fc16b5e8715159f30197101809e22604274b20923a3132fcd6e160d87049184c2b3ff91ad78f80942c842a9d7a76a2d4fabebe840685e432e2029babe1386797e77bc6e8f6cd7b5aa0f67f46e723c9afe34b2ff4acd6fa394976a51e052069a2ac3cca0debc09ef5515f5b0dac2f9228dd974dd7dc8b36cfe3899a6cfaade7fef2133dffd62ecd1c585eb71b011b7f484ddfb58da78e5b587fec90fc515aef8e93e85b9d12bc0d0117941a6fac6c6a9a00255654cdef434787da26b1cbc7ec8da94ba43192c3622ebaaad69e3bbe135f39cbfe7f3e5f0b035424ea20c2b940db978b511c988e427934b44defdd350d1efa000397e194395327840d710f15bd97a4396b5d7d27cd3586d4e6627ca330605ab9a61ba39a6903c848fb7b656ba67132b075573fc93633f64d80614f17d7b27ab90dfe4612a7cec3cf02ed5bc856724d58c05d91c27cc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0xf4, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x7e0, 0x5, 0xc0, 0xffff}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x5, 0x7, 0x6, 0x6}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x2, 0xfff, 0xffff}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x93f1, 0x5, 0xfffffffa, 0x7ff}, 0x2a}}]}, {0x58, 0x6, "e0a2af141b34a3aed4c48eaa1c47f5b9fd61aab5a5dc739961c6456d57cb9c5bfeea9c9b537bfa5ffa679f4b0bd569108384c8bf5bd95d1032e4da963e0c07337cb99517e6e2fdda9d73f417f63b719c438693ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x1044, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xf3ec}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xc2}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x4}, {0x4}]}, 0x25d0}, 0x1, 0x2b1e}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x8}, 0x8) io_uring_setup(0xe60, &(0x7f0000000200)={0x0, 0x7b7b, 0x200, 0x3, 0x17b}) pipe2(&(0x7f0000000080), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d1c020301090224000100000000090400000221efb0000905020200000000ff0905820200"], 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 430.757602ms ago: executing program 3 (id=9787): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x14, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, '\x00'}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}, @global=@item_4={0x3, 0x1, 0x0, "41985e11"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') 245.283439ms ago: executing program 1 (id=9788): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x800) 137.11025ms ago: executing program 1 (id=9789): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c0", 0x13}], 0x1}, 0xf5ffffff}], 0x1, 0x0) 96.651672ms ago: executing program 1 (id=9790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7ffe, 0x259}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x627, 0x411, 0x43, 0x0, 0x0) 0s ago: executing program 1 (id=9791): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) unshare(0x600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) fsopen(&(0x7f0000000080)='hpfs\x00', 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) accept$unix(r3, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) connect$unix(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): MLD Querier present - multicast optimizations disabled [ 2560.323978][T11173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2560.545686][T11177] fuse: Bad value for 'fd' [ 2560.555385][ T30] audit: type=1804 audit(1773703999.562:2528): pid=11178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9345" name="bus" dev="ramfs" ino=229113 res=1 errno=0 [ 2560.581594][T12257] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2560.663553][ T3062] usbhid 4-1:0.1: can't add hid device: -71 [ 2560.690456][ T3062] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 2560.741455][T12257] usb 5-1: Using ep0 maxpacket: 8 [ 2560.756159][ T3062] usb 4-1: USB disconnect, device number 114 [ 2560.766909][T12257] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2560.785144][T12257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.822402][T12257] usb 5-1: Product: syz [ 2560.847545][T12257] usb 5-1: Manufacturer: syz [ 2560.874578][T12257] usb 5-1: SerialNumber: syz [ 2561.011411][ T8456] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2561.162561][ T8455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2561.511322][ T8455] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 2561.672736][ T8455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2561.692301][ T8455] usb 6-1: config 0 has no interfaces? [ 2561.711385][ T8456] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2561.720308][T12257] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 2561.734671][ T8455] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2561.767693][ T8455] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2561.789483][ T8455] usb 6-1: Manufacturer: syz [ 2561.799736][ T8455] usb 6-1: SerialNumber: syz [ 2561.816373][ T8455] usb 6-1: config 0 descriptor?? [ 2561.826462][T12257] usb 5-1: USB disconnect, device number 108 [ 2561.910938][T30354] udevd[30354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2562.060138][ T3070] usb 6-1: USB disconnect, device number 49 [ 2562.345695][ T8457] usbhid 3-1:0.1: can't add hid device: -71 [ 2562.366120][ T8457] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 2562.389863][ T8457] usb 3-1: USB disconnect, device number 108 [ 2562.511333][ T8455] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2562.634837][T11204] FAULT_INJECTION: forcing a failure. [ 2562.634837][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2562.669539][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.3.9357 Tainted: G L syzkaller #0 PREEMPT(full) [ 2562.669565][T11204] Tainted: [L]=SOFTLOCKUP [ 2562.669572][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2562.669581][T11204] Call Trace: [ 2562.669587][T11204] [ 2562.669594][T11204] dump_stack_lvl+0xe8/0x150 [ 2562.669621][T11204] should_fail_ex+0x412/0x560 [ 2562.669645][T11204] _copy_from_user+0x2d/0xb0 [ 2562.669664][T11204] ip_rt_ioctl+0x44c/0x1250 [ 2562.669686][T11204] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 2562.669722][T11204] inet_ioctl+0x49d/0x560 [ 2562.669741][T11204] ? __pfx_inet_ioctl+0x10/0x10 [ 2562.669777][T11204] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2562.669801][T11204] sock_do_ioctl+0x101/0x320 [ 2562.669824][T11204] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2562.669842][T11204] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2562.669873][T11204] sock_ioctl+0x5c6/0x7f0 [ 2562.669895][T11204] ? __pfx_sock_ioctl+0x10/0x10 [ 2562.669914][T11204] ? __fget_files+0x2a/0x420 [ 2562.669934][T11204] ? __fget_files+0x3a0/0x420 [ 2562.669952][T11204] ? __fget_files+0x2a/0x420 [ 2562.669975][T11204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2562.669994][T11204] ? __pfx_sock_ioctl+0x10/0x10 [ 2562.670012][T11204] __se_sys_ioctl+0xfc/0x170 [ 2562.670032][T11204] do_syscall_64+0x14d/0xf80 [ 2562.670048][T11204] ? trace_irq_disable+0x3b/0x150 [ 2562.670067][T11204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2562.670083][T11204] ? clear_bhb_loop+0x40/0x90 [ 2562.670102][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2562.670117][T11204] RIP: 0033:0x7f037539c799 [ 2562.670131][T11204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2562.670153][T11204] RSP: 002b:00007f03761e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2562.670171][T11204] RAX: ffffffffffffffda RBX: 00007f0375615fa0 RCX: 00007f037539c799 [ 2562.670182][T11204] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000003 [ 2562.670191][T11204] RBP: 00007f03761e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2562.670200][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2562.670208][T11204] R13: 00007f0375616038 R14: 00007f0375615fa0 R15: 00007f037573fa48 [ 2562.670230][T11204] [ 2562.897715][ T8455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2563.170683][ T8455] usb 6-1: config 0 has no interfaces? [ 2563.201773][ T8455] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2563.212319][ T8455] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2563.232739][ T8455] usb 6-1: Manufacturer: syz [ 2563.291916][ T8455] usb 6-1: SerialNumber: syz [ 2563.301250][ T8457] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2563.309130][T12257] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2563.336560][T11212] fuse: Bad value for 'fd' [ 2563.337270][ T8455] usb 6-1: config 0 descriptor?? [ 2563.445659][T11214] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9361'. [ 2563.461208][ T8457] usb 5-1: Using ep0 maxpacket: 16 [ 2563.466446][T12257] usb 3-1: Using ep0 maxpacket: 16 [ 2563.480880][ T8457] usb 5-1: config 0 has no interfaces? [ 2563.486746][T12257] usb 3-1: config 0 has no interfaces? [ 2563.492306][ T8454] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2563.506231][T12257] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2563.516003][T12257] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2563.525921][ T8457] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2563.540131][ T8457] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2563.555062][T12257] usb 3-1: Manufacturer: syz [ 2563.575552][ T8457] usb 5-1: Manufacturer: syz [ 2563.599462][T12257] usb 3-1: config 0 descriptor?? [ 2563.617755][ T8457] usb 5-1: config 0 descriptor?? [ 2563.651326][ T8454] usb 4-1: Using ep0 maxpacket: 8 [ 2563.663001][ T8454] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2563.686150][ T8454] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2563.735791][ T8454] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2563.763578][ T8454] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2563.784998][ T8454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.830899][ T8454] hub 4-1:1.0: bad descriptor, ignoring hub [ 2563.854678][ T8454] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2563.895873][ T8454] cdc_wdm 4-1:1.0: skipping garbage [ 2563.931907][ T8454] cdc_wdm 4-1:1.0: skipping garbage [ 2563.943212][ T8454] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2564.026594][T11210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9359'. [ 2564.152448][ T3062] usb 4-1: USB disconnect, device number 115 [ 2564.597599][T11226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9364'. [ 2564.610793][ T8454] usb 6-1: USB disconnect, device number 50 [ 2564.881500][ T8457] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2565.031880][ T8457] usb 4-1: Using ep0 maxpacket: 32 [ 2565.042655][ T8457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 2565.054029][ T8454] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2565.062202][ T8457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2565.076558][ T8457] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2565.086480][ T8457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.096566][ T8457] usb 4-1: config 0 descriptor?? [ 2565.242406][ T8454] usb 6-1: Using ep0 maxpacket: 8 [ 2565.253192][ T8454] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 2565.266331][ T8454] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2565.275829][ T8454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.284101][ T8454] usb 6-1: Product: syz [ 2565.288434][ T8454] usb 6-1: Manufacturer: syz [ 2565.293174][ T8454] usb 6-1: SerialNumber: syz [ 2565.300670][ T8454] usb 6-1: config 0 descriptor?? [ 2565.311290][ T8454] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2565.319756][ T8454] usb 6-1: setting power ON [ 2565.324690][ T8454] dvb-usb: bulk message failed: -22 (2/0) [ 2565.333917][ T8454] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2565.371859][ T8454] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2565.406813][ T8454] usb 6-1: media controller created [ 2565.481052][ T8454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2565.505069][T12257] usb 5-1: USB disconnect, device number 109 [ 2565.546937][T11232] dvb-usb: bulk message failed: -22 (3/0) [ 2565.576289][ T8457] koneplus 0003:1E7D:2D51.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 2565.593825][T11232] dvb-usb: bulk message failed: -22 (3/0) [ 2565.636336][ T8454] usb 6-1: selecting invalid altsetting 6 [ 2565.643593][ T3062] usb 3-1: USB disconnect, device number 109 [ 2565.656576][ T8454] usb 6-1: digital interface selection failed (-22) [ 2565.694320][ T8454] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2565.769938][ T8454] usb 6-1: setting power OFF [ 2565.794838][ T8454] dvb-usb: bulk message failed: -22 (2/0) [ 2565.810327][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9366'. [ 2565.813285][ T8454] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2565.859524][T11242] FAULT_INJECTION: forcing a failure. [ 2565.859524][T11242] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.860899][T11244] fuse: Bad value for 'fd' [ 2565.894587][ T8454] (NULL device *): no alternate interface [ 2565.903514][T11242] CPU: 0 UID: 0 PID: 11242 Comm: syz.4.9370 Tainted: G L syzkaller #0 PREEMPT(full) [ 2565.903540][T11242] Tainted: [L]=SOFTLOCKUP [ 2565.903546][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2565.903554][T11242] Call Trace: [ 2565.903561][T11242] [ 2565.903569][T11242] dump_stack_lvl+0xe8/0x150 [ 2565.903595][T11242] should_fail_ex+0x412/0x560 [ 2565.903618][T11242] should_failslab+0xa8/0x100 [ 2565.903636][T11242] ? skb_clone+0x212/0x3a0 [ 2565.903653][T11242] kmem_cache_alloc_noprof+0x87/0x650 [ 2565.903669][T11242] ? __netlink_lookup+0xc6/0x8b0 [ 2565.903690][T11242] skb_clone+0x212/0x3a0 [ 2565.903709][T11242] __netlink_deliver_tap+0x404/0x850 [ 2565.903742][T11242] ? netlink_deliver_tap+0x2e/0x1b0 [ 2565.903765][T11242] netlink_deliver_tap+0x19c/0x1b0 [ 2565.903787][T11242] netlink_unicast+0x7e3/0x9b0 [ 2565.903814][T11242] ? __pfx_netlink_unicast+0x10/0x10 [ 2565.903837][T11242] ? netlink_sendmsg+0x650/0xb40 [ 2565.903856][T11242] ? skb_put+0x11b/0x210 [ 2565.903876][T11242] netlink_sendmsg+0x813/0xb40 [ 2565.903905][T11242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2565.903940][T11242] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2565.903963][T11242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2565.903984][T11242] ____sys_sendmsg+0x972/0x9f0 [ 2565.904011][T11242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2565.904037][T11242] ? import_iovec+0x73/0xa0 [ 2565.904057][T11242] ___sys_sendmsg+0x2a5/0x360 [ 2565.904079][T11242] ? __pfx____sys_sendmsg+0x10/0x10 [ 2565.904125][T11242] ? __fget_files+0x2a/0x420 [ 2565.904146][T11242] ? __fget_files+0x3a0/0x420 [ 2565.904174][T11242] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2565.904194][T11242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2565.904219][T11242] ? __pfx_ksys_write+0x10/0x10 [ 2565.904245][T11242] do_syscall_64+0x14d/0xf80 [ 2565.904262][T11242] ? trace_irq_disable+0x3b/0x150 [ 2565.904281][T11242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2565.904297][T11242] ? clear_bhb_loop+0x40/0x90 [ 2565.904315][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2565.904330][T11242] RIP: 0033:0x7fd42c79c799 [ 2565.904346][T11242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2565.904359][T11242] RSP: 002b:00007fd42d6c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2565.904376][T11242] RAX: ffffffffffffffda RBX: 00007fd42ca15fa0 RCX: 00007fd42c79c799 [ 2565.904388][T11242] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 2565.904397][T11242] RBP: 00007fd42d6c4090 R08: 0000000000000000 R09: 0000000000000000 [ 2565.904407][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2565.904415][T11242] R13: 00007fd42ca16038 R14: 00007fd42ca15fa0 R15: 00007fd42cb3fa48 [ 2565.904437][T11242] [ 2566.257916][ T8454] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2566.261782][T11246] netlink: 'syz.2.9369': attribute type 6 has an invalid length. [ 2566.270829][ T8454] usb 6-1: USB disconnect, device number 51 [ 2566.344974][ T3070] usb 4-1: USB disconnect, device number 116 [ 2566.367634][T11247] tipc: Resetting bearer [ 2566.390259][T11246] netlink: 'syz.2.9369': attribute type 7 has an invalid length. [ 2566.439981][T11246] netlink: 'syz.2.9369': attribute type 8 has an invalid length. [ 2566.758452][ T3062] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2566.922283][ T3062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2566.935478][ T3062] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2566.945921][ T3062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2566.958749][ T3062] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2567.004443][ T3062] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 2567.027263][ T3062] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 2567.040789][ T3062] usb 3-1: Product: syz [ 2567.054133][ T3062] usb 3-1: Manufacturer: syz [ 2567.069832][ T3062] usb 3-1: SerialNumber: syz [ 2567.095147][ T3062] usb 3-1: config 0 descriptor?? [ 2567.130129][ T3062] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 2567.140009][ T3062] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 2567.156050][ T3062] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2567.192151][ T3070] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2567.341191][ T3070] usb 4-1: Using ep0 maxpacket: 8 [ 2567.359336][ T3070] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2567.388303][ T3070] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2567.430618][ T3070] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2567.471743][ T3070] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2567.482239][ T3070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.512728][ T3070] hub 4-1:1.0: bad descriptor, ignoring hub [ 2567.519722][ T3070] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2567.544391][ T3070] cdc_wdm 4-1:1.0: skipping garbage [ 2567.550745][ T3070] cdc_wdm 4-1:1.0: skipping garbage [ 2567.567222][ T3070] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2567.581191][T31002] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2567.665102][ T30] audit: type=1326 audit(1773704006.662:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdead33db19 code=0x7ffc0000 [ 2567.698086][ T30] audit: type=1326 audit(1773704006.662:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2567.739700][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9374'. [ 2567.771175][T31002] usb 6-1: Using ep0 maxpacket: 16 [ 2567.784969][T31002] usb 6-1: config 0 has no interfaces? [ 2567.802285][T31002] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2567.812521][T31002] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2567.827302][ T30] audit: type=1326 audit(1773704006.662:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2567.861999][T31002] usb 6-1: Manufacturer: syz [ 2567.880416][T31002] usb 6-1: config 0 descriptor?? [ 2567.885905][ T3070] usb 4-1: USB disconnect, device number 117 [ 2567.958823][ T30] audit: type=1326 audit(1773704006.662:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdead33db19 code=0x7ffc0000 [ 2568.066487][ T30] audit: type=1326 audit(1773704006.662:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdead33db19 code=0x7ffc0000 [ 2568.205279][ T30] audit: type=1326 audit(1773704006.662:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdead33db19 code=0x7ffc0000 [ 2568.272587][ T30] audit: type=1326 audit(1773704006.662:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdead33db19 code=0x7ffc0000 [ 2568.411726][ T30] audit: type=1326 audit(1773704006.662:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2568.530230][ T30] audit: type=1326 audit(1773704006.662:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2568.611976][ T30] audit: type=1326 audit(1773704006.662:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.1.9377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2569.322408][ T3070] usb 3-1: USB disconnect, device number 110 [ 2570.196978][T11289] FAULT_INJECTION: forcing a failure. [ 2570.196978][T11289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2570.258746][T11289] CPU: 0 UID: 0 PID: 11289 Comm: syz.2.9386 Tainted: G L syzkaller #0 PREEMPT(full) [ 2570.258772][T11289] Tainted: [L]=SOFTLOCKUP [ 2570.258777][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2570.258786][T11289] Call Trace: [ 2570.258793][T11289] [ 2570.258802][T11289] dump_stack_lvl+0xe8/0x150 [ 2570.258828][T11289] should_fail_ex+0x412/0x560 [ 2570.258856][T11289] _copy_from_iter+0x1d3/0x1670 [ 2570.258890][T11289] ? __pfx__copy_from_iter+0x10/0x10 [ 2570.258908][T11289] ? trace_kmalloc+0x2a/0x110 [ 2570.258939][T11289] file_tty_write+0x4c1/0xa20 [ 2570.258979][T11289] vfs_write+0x61d/0xb90 [ 2570.259004][T11289] ? __pfx_vfs_write+0x10/0x10 [ 2570.259029][T11289] ? __fget_files+0x2a/0x420 [ 2570.259058][T11289] ksys_write+0x150/0x270 [ 2570.259077][T11289] ? __pfx_ksys_write+0x10/0x10 [ 2570.259104][T11289] do_syscall_64+0x14d/0xf80 [ 2570.259121][T11289] ? trace_irq_disable+0x3b/0x150 [ 2570.259142][T11289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2570.259158][T11289] ? clear_bhb_loop+0x40/0x90 [ 2570.259177][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2570.259192][T11289] RIP: 0033:0x7f3a4239c799 [ 2570.259208][T11289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2570.259222][T11289] RSP: 002b:00007f3a4324d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2570.259239][T11289] RAX: ffffffffffffffda RBX: 00007f3a42615fa0 RCX: 00007f3a4239c799 [ 2570.259251][T11289] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 2570.259260][T11289] RBP: 00007f3a4324d090 R08: 0000000000000000 R09: 0000000000000000 [ 2570.259269][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2570.259278][T11289] R13: 00007f3a42616038 R14: 00007f3a42615fa0 R15: 00007f3a4273fa48 [ 2570.259304][T11289] [ 2570.561219][ T8457] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2570.712367][ T8457] usb 4-1: Using ep0 maxpacket: 16 [ 2570.715840][ T8457] usb 4-1: config 0 has no interfaces? [ 2570.721671][ T8457] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2570.721698][ T8457] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2570.721716][ T8457] usb 4-1: Manufacturer: syz [ 2570.724343][ T8457] usb 4-1: config 0 descriptor?? [ 2570.982475][ T3070] usb 6-1: USB disconnect, device number 52 [ 2571.421541][ T3070] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2571.571480][ T3070] usb 6-1: Using ep0 maxpacket: 8 [ 2571.573607][ T3070] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2571.573624][ T3070] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2571.573647][ T3070] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2571.573668][ T3070] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2571.573679][ T3070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.579635][ T3070] hub 6-1:1.0: bad descriptor, ignoring hub [ 2571.579653][ T3070] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2571.580104][ T3070] cdc_wdm 6-1:1.0: skipping garbage [ 2571.580120][ T3070] cdc_wdm 6-1:1.0: skipping garbage [ 2571.580139][ T3070] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2571.781330][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9388'. [ 2571.893236][ T3070] usb 6-1: USB disconnect, device number 53 [ 2571.904202][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9392'. [ 2571.904219][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9392'. [ 2571.985981][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804aa82800: rx timeout, send abort [ 2572.251219][ T3070] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2572.405840][ T3070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2572.426282][ T3070] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2572.436619][ T3070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2572.448077][ T3070] usb 3-1: config 0 descriptor?? [ 2572.496062][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804aa82800: abort rx timeout. Force session deactivation [ 2572.631239][T12457] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 2572.670129][ T3070] usbhid 3-1:0.0: can't add hid device: -71 [ 2572.683378][ T3070] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2572.714830][ T3070] usb 3-1: USB disconnect, device number 111 [ 2572.771043][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804aa80000: rx timeout, send abort [ 2572.803125][T12457] usb 6-1: not running at top speed; connect to a high speed hub [ 2572.814365][T12457] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2572.827149][T12457] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 2572.847421][T12457] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2572.858227][T12457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.866836][T12457] usb 6-1: Product: 䥷‱戣Ｌ뻝뻌ജ멶შ퉁ᇿ봷茓ꑓㅸ繁䄲鮯挬㑹阴 [ 2572.877228][T12457] usb 6-1: Manufacturer:  [ 2572.882060][T12457] usb 6-1: SerialNumber: syz [ 2572.890802][T11319] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2572.991260][ T8454] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2573.151980][ T8454] usb 2-1: Using ep0 maxpacket: 16 [ 2573.162200][ T8454] usb 2-1: config 0 has no interfaces? [ 2573.170071][ T8454] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2573.194549][ T8454] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2573.211531][ T8454] usb 2-1: Manufacturer: syz [ 2573.241242][ T3070] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2573.267680][ T8454] usb 2-1: config 0 descriptor?? [ 2573.279417][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804aa80000: abort rx timeout. Force session deactivation [ 2573.369449][T12457] cdc_ncm 6-1:1.0: bind() failure [ 2573.388866][ T8454] usb 4-1: USB disconnect, device number 118 [ 2573.423952][T12457] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2573.438900][ T3070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2573.460184][T12457] cdc_ncm 6-1:1.1: bind() failure [ 2573.510104][ T3070] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2573.523236][T12457] usb 6-1: USB disconnect, device number 54 [ 2573.529477][ T3070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.583452][ T3070] usb 3-1: config 0 descriptor?? [ 2574.067920][ T3070] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2574.301630][ C0] usb 3-1: input irq status -75 received [ 2574.522060][ T8454] usb 3-1: USB disconnect, device number 112 [ 2574.728126][T11352] binder: 11351:11352 ioctl 4018620d 0 returned -22 [ 2575.008467][T11361] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9407'. [ 2575.041600][ T8457] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2575.147662][T11368] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9410'. [ 2575.211909][ T8457] usb 6-1: Using ep0 maxpacket: 32 [ 2575.220889][ T8457] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2575.236537][ T8457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.253094][ T8457] usb 6-1: config 0 descriptor?? [ 2575.268899][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9413'. [ 2575.299536][ T30] kauditd_printk_skb: 2383 callbacks suppressed [ 2575.299552][ T30] audit: type=1326 audit(1773704014.302:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2575.333292][ T30] audit: type=1326 audit(1773704014.342:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2575.375123][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9413'. [ 2575.389141][ T30] audit: type=1326 audit(1773704014.342:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2575.418099][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9411'. [ 2575.481877][ T30] audit: type=1326 audit(1773704014.342:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2575.520342][ T8457] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2575.538104][ T30] audit: type=1326 audit(1773704014.422:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037539e007 code=0x7ffc0000 [ 2575.565336][ T8457] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2575.580649][ T8457] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2575.594079][ T8457] usb 6-1: media controller created [ 2575.597754][T11378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9411'. [ 2575.661850][T12457] usb 2-1: USB disconnect, device number 115 [ 2575.681921][ T30] audit: type=1326 audit(1773704014.422:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2575.729653][ T8457] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2575.848135][ T30] audit: type=1326 audit(1773704014.422:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2575.991341][ T30] audit: type=1326 audit(1773704014.422:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2576.090139][ T8457] DVB: Unable to find symbol dib7000p_attach() [ 2576.126452][ T8457] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2576.142003][ T30] audit: type=1326 audit(1773704014.422:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2576.171151][ T8454] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2576.268794][ T30] audit: type=1326 audit(1773704014.422:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2576.401900][ T8457] rc_core: IR keymap rc-dib0700-rc5 not found [ 2576.410142][ T8457] Registered IR keymap rc-empty [ 2576.436316][ T8457] dvb-usb: could not initialize remote control. [ 2576.465151][ T8457] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2576.655178][ T8454] usb 2-1: Using ep0 maxpacket: 16 [ 2576.724374][T12457] usb 6-1: USB disconnect, device number 55 [ 2576.734729][ T8454] usb 2-1: config index 0 descriptor too short (expected 14385, got 18) [ 2576.814829][ T8454] usb 2-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 2576.823009][T12457] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2576.912232][ T8454] usb 2-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 2576.964754][ T8454] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 2577.007549][ T8454] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2577.019331][ T8454] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2577.045742][ T8454] usb 2-1: Product: syz [ 2577.070348][ T8454] usb 2-1: Manufacturer: syz [ 2577.088205][ T8454] usb 2-1: SerialNumber: syz [ 2577.553537][ T8457] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2577.901235][ T8457] usb 6-1: Using ep0 maxpacket: 8 [ 2577.924638][ T8457] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2578.071924][ T8457] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2578.137016][ T8457] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2578.209298][ T8457] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2578.264815][ T8457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.400826][ T8457] hub 6-1:1.0: bad descriptor, ignoring hub [ 2578.419389][ T8457] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2578.449118][ T8457] cdc_wdm 6-1:1.0: skipping garbage [ 2578.456860][ T8457] cdc_wdm 6-1:1.0: skipping garbage [ 2578.468051][ T8457] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2578.570144][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9421'. [ 2578.693185][ T8457] usb 6-1: USB disconnect, device number 56 [ 2578.825713][ T8454] usb 2-1: USB disconnect, device number 116 [ 2579.653527][ T8454] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2579.798537][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065af2400: rx timeout, send abort [ 2579.831190][ T8454] usb 4-1: Using ep0 maxpacket: 32 [ 2579.857449][ T8454] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2579.895300][ T8454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.937996][ T8454] usb 4-1: config 0 descriptor?? [ 2580.187223][ T8454] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2580.226911][ T8454] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2580.287838][ T8454] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2580.306818][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065af2400: abort rx timeout. Force session deactivation [ 2580.332260][ T8454] usb 4-1: media controller created [ 2580.377597][ T8454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2580.654557][ T8454] DVB: Unable to find symbol dib7000p_attach() [ 2580.692392][ T8454] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2580.951227][ T8454] rc_core: IR keymap rc-dib0700-rc5 not found [ 2580.970129][ T8454] Registered IR keymap rc-empty [ 2581.010355][ T8454] dvb-usb: could not initialize remote control. [ 2581.033599][ T8454] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2581.264632][T12457] usb 4-1: USB disconnect, device number 119 [ 2581.347007][T12457] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2581.391811][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9441'. [ 2581.460346][T11477] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2582.310663][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2582.310682][ T30] audit: type=1326 audit(1773704021.312:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2582.355658][ T30] audit: type=1326 audit(1773704021.352:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2582.379677][ T30] audit: type=1326 audit(1773704021.352:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2582.420051][ T30] audit: type=1326 audit(1773704021.352:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037539e007 code=0x7ffc0000 [ 2582.443435][ T30] audit: type=1326 audit(1773704021.392:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2582.567292][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9447'. [ 2582.578116][ T30] audit: type=1326 audit(1773704021.392:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2582.631406][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9447'. [ 2582.648889][ T30] audit: type=1326 audit(1773704021.392:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2582.710192][ T30] audit: type=1326 audit(1773704021.392:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2582.739662][ T30] audit: type=1326 audit(1773704021.742:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2582.787600][ T30] audit: type=1326 audit(1773704021.792:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.3.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2583.101210][T12457] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2583.283065][T12457] usb 2-1: Using ep0 maxpacket: 32 [ 2583.297586][T12457] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2583.301247][ T8456] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 2583.355772][T12457] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2583.374467][T12457] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2583.385053][T12457] usb 2-1: Product: syz [ 2583.398552][T12457] usb 2-1: Manufacturer: syz [ 2583.407557][T12457] usb 2-1: SerialNumber: syz [ 2583.424322][T12457] usb 2-1: config 0 descriptor?? [ 2583.433138][T11518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2583.445825][T12457] hub 2-1:0.0: bad descriptor, ignoring hub [ 2583.453213][T12457] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2583.546339][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9459'. [ 2583.559990][ T8456] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2583.586004][ T8456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2583.626113][ T8456] usb 6-1: Product: syz [ 2583.654552][ T8456] usb 6-1: Manufacturer: syz [ 2583.672039][ T8456] usb 6-1: SerialNumber: syz [ 2583.708698][ T8456] usb 6-1: config 0 descriptor?? [ 2583.740941][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2583.752364][ T8456] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2583.786983][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2584.230060][T11518] usb 2-1: reset high-speed USB device number 117 using dummy_hcd [ 2584.469564][T11542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2584.983198][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9470'. [ 2585.146280][T11583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9470'. [ 2585.284985][T31284] raw-gadget.0 gadget.1: failed to queue suspend event [ 2585.381602][T11518] raw-gadget.0 gadget.1: failed to queue resume event [ 2585.404556][T19059] raw-gadget.0 gadget.1: failed to queue suspend event [ 2585.421881][ T8456] gspca_stk1135: reg_w 0x200 err -71 [ 2585.433330][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2585.440675][ T8456] gspca_stk1135: Sensor write failed [ 2585.446551][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2585.455650][ T8456] gspca_stk1135: Sensor write failed [ 2585.463366][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2585.470286][ T8456] gspca_stk1135: Sensor read failed [ 2585.482518][T11518] raw-gadget.0 gadget.1: failed to queue resume event [ 2585.505580][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2585.533282][T19059] raw-gadget.0 gadget.1: failed to queue suspend event [ 2585.550574][ T8456] gspca_stk1135: Sensor read failed [ 2585.590672][ T8456] gspca_stk1135: Detected sensor type unknown (0x0) [ 2585.618924][T11518] raw-gadget.0 gadget.1: failed to queue resume event [ 2585.638184][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9476'. [ 2585.647242][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2585.694737][ T8456] gspca_stk1135: Sensor read failed [ 2585.759814][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2585.801403][ T13] raw-gadget.0 gadget.1: failed to queue suspend event [ 2585.813048][T12457] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2585.836461][T11518] raw-gadget.0 gadget.1: failed to queue disconnect event [ 2585.851581][T31002] usb 2-1: USB disconnect, device number 117 [ 2585.860218][ T8456] gspca_stk1135: Sensor read failed [ 2585.959891][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2585.991710][T12457] usb 4-1: Using ep0 maxpacket: 16 [ 2586.016304][T12457] usb 4-1: config 0 has no interfaces? [ 2586.024042][T12457] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2586.052896][T12457] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2586.081509][T12457] usb 4-1: Manufacturer: syz [ 2586.086466][ T8456] gspca_stk1135: Sensor write failed [ 2586.099841][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2586.148240][ T8456] gspca_stk1135: Sensor write failed [ 2586.157966][T12457] usb 4-1: config 0 descriptor?? [ 2586.245160][ T8456] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 2586.287732][ T8456] usb 6-1: USB disconnect, device number 57 [ 2586.524538][T11598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9476'. [ 2586.691384][ T8456] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2586.843245][ T8456] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2586.881850][ T8456] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2586.921356][ T8456] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2586.948523][ T8456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.997215][ T8456] usb 6-1: Product: syz [ 2587.021608][ T8456] usb 6-1: Manufacturer: syz [ 2587.079878][ T8456] usb 6-1: SerialNumber: syz [ 2587.451230][ T8456] usb 6-1: reset high-speed USB device number 58 using dummy_hcd [ 2587.971218][ T8454] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 2588.160519][ T8454] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2588.169979][ T8456] usb 6-1: device descriptor read/64, error -71 [ 2588.180554][ T8454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.201840][ T8454] usb 3-1: Product: syz [ 2588.206177][ T8454] usb 3-1: Manufacturer: syz [ 2588.210938][ T8454] usb 3-1: SerialNumber: syz [ 2588.234144][ T8454] usb 3-1: config 0 descriptor?? [ 2588.263321][ T8454] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2588.412905][ T3062] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2588.451249][ T8456] usb 6-1: reset high-speed USB device number 58 using dummy_hcd [ 2588.465008][T12257] usb 4-1: USB disconnect, device number 120 [ 2588.601371][ T3062] usb 5-1: Using ep0 maxpacket: 16 [ 2588.616033][ T3062] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 2588.656409][ T3062] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 2588.691937][ T3062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2588.748836][ T3062] usb 5-1: config 0 has no interface number 0 [ 2588.773446][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2588.792821][ T3062] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 2588.802855][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2588.822862][T11675] netlink: 'syz.3.9499': attribute type 6 has an invalid length. [ 2588.830741][T11675] netlink: 'syz.3.9499': attribute type 7 has an invalid length. [ 2588.837670][ T3062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.855678][T11675] netlink: 'syz.3.9499': attribute type 8 has an invalid length. [ 2588.894196][ T3062] usb 5-1: Product: syz [ 2588.920002][ T3062] usb 5-1: Manufacturer: syz [ 2588.928908][ T3062] usb 5-1: SerialNumber: syz [ 2588.956899][ T3062] usb 5-1: config 0 descriptor?? [ 2588.969602][T11677] netlink: 'syz.1.9500': attribute type 6 has an invalid length. [ 2588.983366][T11677] netlink: 'syz.1.9500': attribute type 7 has an invalid length. [ 2589.005530][ T3062] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 2589.014163][ T8456] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2589.019540][T11677] netlink: 'syz.1.9500': attribute type 8 has an invalid length. [ 2589.089085][ T8456] usb 6-1: device firmware changed [ 2589.115695][ T8456] usb 6-1: USB disconnect, device number 58 [ 2589.201698][ T3062] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2589.321907][ T8457] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2589.379663][ T3062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2589.396073][ T3062] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2589.409402][ T3062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2589.434593][ T3062] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2589.467679][ T3062] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 2589.477869][ T3062] usb 4-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 2589.496083][ T3062] usb 4-1: Product: syz [ 2589.507924][ T3062] usb 4-1: Manufacturer: syz [ 2589.518154][ T3062] usb 4-1: SerialNumber: syz [ 2589.524780][ T8457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2589.543670][ T8457] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2589.556286][ T8457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2589.567002][ T8457] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2589.577731][ T3062] usb 4-1: config 0 descriptor?? [ 2589.607642][ T8457] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 2589.621442][ T8457] usb 2-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 2589.631473][ T8457] usb 2-1: Product: syz [ 2589.635953][ T8457] usb 2-1: Manufacturer: syz [ 2589.637162][ T3062] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 2589.641870][ T8457] usb 2-1: SerialNumber: syz [ 2589.672705][ T8457] usb 2-1: config 0 descriptor?? [ 2589.694933][ T3062] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 2589.702426][ T8457] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 2589.736583][ T8457] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card [ 2589.753748][ T3062] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2589.805723][ T8457] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2589.994277][ T8454] gspca_stk1135: reg_w 0x200 err -71 [ 2590.016624][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.049452][ T8454] gspca_stk1135: Sensor write failed [ 2590.084996][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.121270][ T8454] gspca_stk1135: Sensor write failed [ 2590.150614][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.182739][ T8454] gspca_stk1135: Sensor read failed [ 2590.205046][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.241489][ T8454] gspca_stk1135: Sensor read failed [ 2590.261107][ T8454] gspca_stk1135: Detected sensor type unknown (0x0) [ 2590.290960][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.316388][ T8454] gspca_stk1135: Sensor read failed [ 2590.332459][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.339020][ T8454] gspca_stk1135: Sensor read failed [ 2590.344915][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.363966][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.370478][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.386291][ T8454] gspca_stk1135: Sensor write failed [ 2590.418785][ T8454] gspca_stk1135: serial bus timeout: status=0x00 [ 2590.440781][ T8454] gspca_stk1135: Sensor write failed [ 2590.460283][ T8454] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 2590.509462][ T8454] usb 3-1: USB disconnect, device number 113 [ 2590.658284][T11689] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9504'. [ 2591.003540][T11700] syzkaller0: entered promiscuous mode [ 2591.019414][T11700] syzkaller0: entered allmulticast mode [ 2591.309742][ T3062] usb 5-1: USB disconnect, device number 110 [ 2591.371217][T31002] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2591.415732][T11707] FAULT_INJECTION: forcing a failure. [ 2591.415732][T11707] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.446009][T11707] CPU: 0 UID: 0 PID: 11707 Comm: syz.2.9511 Tainted: G L syzkaller #0 PREEMPT(full) [ 2591.446034][T11707] Tainted: [L]=SOFTLOCKUP [ 2591.446040][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2591.446049][T11707] Call Trace: [ 2591.446056][T11707] [ 2591.446062][T11707] dump_stack_lvl+0xe8/0x150 [ 2591.446088][T11707] should_fail_ex+0x412/0x560 [ 2591.446113][T11707] should_failslab+0xa8/0x100 [ 2591.446132][T11707] __kmalloc_cache_noprof+0x88/0x660 [ 2591.446148][T11707] ? register_netdevice+0x582/0x1cf0 [ 2591.446171][T11707] register_netdevice+0x582/0x1cf0 [ 2591.446192][T11707] ? _get_random_bytes+0x1e7/0x260 [ 2591.446297][T11707] ? __pfx__get_random_bytes+0x10/0x10 [ 2591.446315][T11707] ? dev_addr_check+0x20/0x230 [ 2591.446362][T11707] ? __pfx_register_netdevice+0x10/0x10 [ 2591.446381][T11707] ? __asan_memset+0x22/0x50 [ 2591.446393][T11707] ? dev_addr_mod+0x354/0x520 [ 2591.446412][T11707] ip6gre_newlink_common+0x403/0x5b0 [ 2591.446433][T11707] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 2591.446448][T11707] ? lockdep_rtnl_is_held+0x26/0x40 [ 2591.446462][T11707] ? ip6gre_tunnel_find+0x501/0x5a0 [ 2591.446484][T11707] ip6gre_newlink+0x228/0x350 [ 2591.446533][T11707] ? __pfx_ip6gre_newlink+0x10/0x10 [ 2591.446552][T11707] rtnl_newlink_create+0x329/0xb70 [ 2591.446572][T11707] ? __mutex_lock+0x5ac/0x1300 [ 2591.446592][T11707] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2591.446611][T11707] ? __pfx___mutex_lock+0x10/0x10 [ 2591.446636][T11707] ? ns_capable+0x89/0xe0 [ 2591.446667][T11707] rtnl_newlink+0x1666/0x1be0 [ 2591.446700][T11707] ? __pfx_rtnl_newlink+0x10/0x10 [ 2591.446718][T11707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2591.446760][T11707] ? kasan_quarantine_put+0xbb/0x1f0 [ 2591.446776][T11707] ? lockdep_hardirqs_on+0x7a/0x110 [ 2591.446794][T11707] ? kmem_cache_free+0x187/0x630 [ 2591.446809][T11707] ? nlmon_xmit+0xb0/0x100 [ 2591.446837][T11707] ? __lock_acquire+0x6b5/0x2cf0 [ 2591.446860][T11707] ? __local_bh_enable_ip+0xd0/0x130 [ 2591.446877][T11707] ? lockdep_hardirqs_on+0x7a/0x110 [ 2591.446891][T11707] ? __dev_queue_xmit+0x277/0x3890 [ 2591.446907][T11707] ? __local_bh_enable_ip+0xd0/0x130 [ 2591.446923][T11707] ? __dev_queue_xmit+0x277/0x3890 [ 2591.446958][T11707] ? __pfx_rtnl_newlink+0x10/0x10 [ 2591.446978][T11707] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2591.447002][T11707] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2591.447022][T11707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2591.447041][T11707] ? ref_tracker_free+0x693/0x840 [ 2591.447061][T11707] ? __copy_skb_header+0xa3/0x4a0 [ 2591.447079][T11707] ? __pfx_ref_tracker_free+0x10/0x10 [ 2591.447105][T11707] netlink_rcv_skb+0x232/0x4b0 [ 2591.447128][T11707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2591.447150][T11707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2591.447181][T11707] ? netlink_deliver_tap+0x2e/0x1b0 [ 2591.447209][T11707] netlink_unicast+0x80f/0x9b0 [ 2591.447236][T11707] ? __pfx_netlink_unicast+0x10/0x10 [ 2591.447255][T11707] ? netlink_sendmsg+0x650/0xb40 [ 2591.447274][T11707] ? skb_put+0x11b/0x210 [ 2591.447294][T11707] netlink_sendmsg+0x813/0xb40 [ 2591.447321][T11707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2591.447344][T11707] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2591.447365][T11707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2591.447386][T11707] ____sys_sendmsg+0x972/0x9f0 [ 2591.447412][T11707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2591.447437][T11707] ? import_iovec+0x73/0xa0 [ 2591.447457][T11707] ___sys_sendmsg+0x2a5/0x360 [ 2591.447478][T11707] ? __pfx____sys_sendmsg+0x10/0x10 [ 2591.447527][T11707] ? __fget_files+0x2a/0x420 [ 2591.447548][T11707] ? __fget_files+0x3a0/0x420 [ 2591.447578][T11707] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2591.447598][T11707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2591.447623][T11707] ? __pfx_ksys_write+0x10/0x10 [ 2591.447661][T11707] do_syscall_64+0x14d/0xf80 [ 2591.447677][T11707] ? trace_irq_disable+0x3b/0x150 [ 2591.447697][T11707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2591.447714][T11707] ? clear_bhb_loop+0x40/0x90 [ 2591.447733][T11707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2591.447749][T11707] RIP: 0033:0x7f3a4239c799 [ 2591.447766][T11707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2591.447779][T11707] RSP: 002b:00007f3a4324d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2591.447796][T11707] RAX: ffffffffffffffda RBX: 00007f3a42615fa0 RCX: 00007f3a4239c799 [ 2591.447808][T11707] RDX: 16c3035570970880 RSI: 0000200000000340 RDI: 0000000000000004 [ 2591.447818][T11707] RBP: 00007f3a4324d090 R08: 0000000000000000 R09: 0000000000000000 [ 2591.447828][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2591.447838][T11707] R13: 00007f3a42616038 R14: 00007f3a42615fa0 R15: 00007f3a4273fa48 [ 2591.447864][T11707] [ 2591.921217][T31002] usb 6-1: Using ep0 maxpacket: 16 [ 2592.084001][T31002] usb 6-1: config 0 has no interfaces? [ 2592.102722][ T3062] usb 4-1: USB disconnect, device number 121 [ 2592.145591][T31002] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2592.390170][T31002] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2592.423591][T31002] usb 6-1: Manufacturer: syz [ 2592.442480][T31002] usb 6-1: config 0 descriptor?? [ 2592.584559][ T8454] usb 2-1: USB disconnect, device number 118 [ 2592.996655][T11731] FAULT_INJECTION: forcing a failure. [ 2592.996655][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.029817][T11731] CPU: 0 UID: 0 PID: 11731 Comm: syz.2.9518 Tainted: G L syzkaller #0 PREEMPT(full) [ 2593.029845][T11731] Tainted: [L]=SOFTLOCKUP [ 2593.029850][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2593.029859][T11731] Call Trace: [ 2593.029866][T11731] [ 2593.029874][T11731] dump_stack_lvl+0xe8/0x150 [ 2593.029909][T11731] should_fail_ex+0x412/0x560 [ 2593.029937][T11731] should_failslab+0xa8/0x100 [ 2593.029956][T11731] ? skb_clone+0x212/0x3a0 [ 2593.029974][T11731] kmem_cache_alloc_noprof+0x87/0x650 [ 2593.029998][T11731] skb_clone+0x212/0x3a0 [ 2593.030019][T11731] __netlink_deliver_tap+0x404/0x850 [ 2593.030051][T11731] ? netlink_deliver_tap+0x2e/0x1b0 [ 2593.030073][T11731] netlink_deliver_tap+0x19c/0x1b0 [ 2593.030095][T11731] netlink_sendskb+0x68/0x140 [ 2593.030117][T11731] netlink_unicast+0x3a3/0x9b0 [ 2593.030144][T11731] ? __pfx_netlink_unicast+0x10/0x10 [ 2593.030172][T11731] nfnetlink_rcv+0x2517/0x27b0 [ 2593.030251][T11731] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2593.030284][T11731] ? ref_tracker_free+0x693/0x840 [ 2593.030328][T11731] ? __netlink_deliver_tap+0x807/0x850 [ 2593.030348][T11731] ? netlink_deliver_tap+0x2e/0x1b0 [ 2593.030384][T11731] netlink_unicast+0x80f/0x9b0 [ 2593.030411][T11731] ? __pfx_netlink_unicast+0x10/0x10 [ 2593.030432][T11731] ? netlink_sendmsg+0x650/0xb40 [ 2593.030451][T11731] ? skb_put+0x11b/0x210 [ 2593.030470][T11731] netlink_sendmsg+0x813/0xb40 [ 2593.030499][T11731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2593.030523][T11731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2593.030546][T11731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2593.030567][T11731] ____sys_sendmsg+0x972/0x9f0 [ 2593.030592][T11731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2593.030617][T11731] ? import_iovec+0x73/0xa0 [ 2593.030638][T11731] ___sys_sendmsg+0x2a5/0x360 [ 2593.030660][T11731] ? __pfx____sys_sendmsg+0x10/0x10 [ 2593.030708][T11731] ? __fget_files+0x2a/0x420 [ 2593.030729][T11731] ? __fget_files+0x3a0/0x420 [ 2593.030757][T11731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2593.030778][T11731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2593.030804][T11731] ? __pfx_ksys_write+0x10/0x10 [ 2593.030831][T11731] do_syscall_64+0x14d/0xf80 [ 2593.030852][T11731] ? trace_irq_disable+0x3b/0x150 [ 2593.030872][T11731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2593.030895][T11731] ? clear_bhb_loop+0x40/0x90 [ 2593.030914][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2593.030929][T11731] RIP: 0033:0x7f3a4239c799 [ 2593.030946][T11731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2593.030959][T11731] RSP: 002b:00007f3a4324d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2593.030976][T11731] RAX: ffffffffffffffda RBX: 00007f3a42615fa0 RCX: 00007f3a4239c799 [ 2593.030988][T11731] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2593.030997][T11731] RBP: 00007f3a4324d090 R08: 0000000000000000 R09: 0000000000000000 [ 2593.031007][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2593.031017][T11731] R13: 00007f3a42616038 R14: 00007f3a42615fa0 R15: 00007f3a4273fa48 [ 2593.031042][T11731] [ 2593.593168][ T3062] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 2593.724702][T11747] netlink: 'syz.2.9524': attribute type 6 has an invalid length. [ 2593.732699][T31002] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2593.748192][T11747] netlink: 'syz.2.9524': attribute type 7 has an invalid length. [ 2593.756971][T11747] netlink: 'syz.2.9524': attribute type 8 has an invalid length. [ 2593.766769][ T3062] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2593.779504][ T3062] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2593.804141][ T3062] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2593.835626][ T3062] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2593.856577][ T3062] usb 4-1: Manufacturer: syz [ 2593.861538][ T3062] usb 4-1: SerialNumber: syz [ 2593.891379][T31002] usb 2-1: Using ep0 maxpacket: 8 [ 2593.907046][T31002] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 2593.938141][T31002] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2593.960705][T31002] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2593.982348][T31002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.051248][ T3070] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2594.108822][ T3062] usb 4-1: USB disconnect, device number 122 [ 2594.131221][T12457] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2594.203097][ T3070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2594.215024][ T3070] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2594.225073][ T3070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2594.228381][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2594.245983][ T3070] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2594.264030][ T3070] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 2594.275992][ T3070] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 2594.284776][ T3070] usb 3-1: Product: syz [ 2594.285110][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2594.297861][ T3070] usb 3-1: Manufacturer: syz [ 2594.302881][T12457] usb 5-1: Using ep0 maxpacket: 8 [ 2594.308539][ T3070] usb 3-1: SerialNumber: syz [ 2594.316766][T12457] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.328138][ T3070] usb 3-1: config 0 descriptor?? [ 2594.339551][ T3070] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 2594.354926][T31002] usb 2-1: string descriptor 0 read error: -71 [ 2594.362148][T12457] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2594.371189][ T3070] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 2594.379571][T31002] hub 2-1:32.0: bad descriptor, ignoring hub [ 2594.385836][T12457] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2594.398405][T31002] hub 2-1:32.0: probe with driver hub failed with error -5 [ 2594.406154][ T3070] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2594.423425][T12457] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2594.474092][T12457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.528100][T12457] hub 5-1:1.0: bad descriptor, ignoring hub [ 2594.552463][T12457] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2594.566191][T31002] usb 2-1: USB disconnect, device number 119 [ 2594.581233][T12457] cdc_wdm 5-1:1.0: skipping garbage [ 2594.588955][T12457] cdc_wdm 5-1:1.0: skipping garbage [ 2594.597989][T12457] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2594.641717][ T3062] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2594.729997][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9525'. [ 2594.788445][T12457] usb 6-1: USB disconnect, device number 59 [ 2594.844557][ T3062] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.857060][ T3062] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2594.885337][T31002] usb 5-1: USB disconnect, device number 111 [ 2594.924168][ T3062] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2594.940553][ T3062] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2594.962750][ T3062] usb 4-1: Manufacturer: syz [ 2594.977136][ T3062] usb 4-1: SerialNumber: syz [ 2595.156326][T11761] FAULT_INJECTION: forcing a failure. [ 2595.156326][T11761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2595.169887][T11761] CPU: 1 UID: 0 PID: 11761 Comm: syz.5.9529 Tainted: G L syzkaller #0 PREEMPT(full) [ 2595.169916][T11761] Tainted: [L]=SOFTLOCKUP [ 2595.169923][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2595.169933][T11761] Call Trace: [ 2595.169940][T11761] [ 2595.169948][T11761] dump_stack_lvl+0xe8/0x150 [ 2595.169974][T11761] should_fail_ex+0x412/0x560 [ 2595.170000][T11761] _copy_from_user+0x2d/0xb0 [ 2595.170018][T11761] ____sys_sendmsg+0x308/0x9f0 [ 2595.170044][T11761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2595.170069][T11761] ? import_iovec+0x73/0xa0 [ 2595.170088][T11761] ___sys_sendmsg+0x2a5/0x360 [ 2595.170108][T11761] ? __pfx____sys_sendmsg+0x10/0x10 [ 2595.170130][T11761] ? kstrtouint+0x6e/0xe0 [ 2595.170170][T11761] ? __fget_files+0x2a/0x420 [ 2595.170191][T11761] ? __fget_files+0x3a0/0x420 [ 2595.170220][T11761] __sys_sendmmsg+0x27c/0x4e0 [ 2595.170242][T11761] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2595.170257][T11761] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2595.170296][T11761] ? ksys_write+0x242/0x270 [ 2595.170315][T11761] ? __pfx_ksys_write+0x10/0x10 [ 2595.170337][T11761] __x64_sys_sendmmsg+0xa0/0xc0 [ 2595.170356][T11761] do_syscall_64+0x14d/0xf80 [ 2595.170372][T11761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2595.170388][T11761] ? clear_bhb_loop+0x40/0x90 [ 2595.170407][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2595.170422][T11761] RIP: 0033:0x7f0a7139c799 [ 2595.170438][T11761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2595.170452][T11761] RSP: 002b:00007f0a72324028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2595.170470][T11761] RAX: ffffffffffffffda RBX: 00007f0a71615fa0 RCX: 00007f0a7139c799 [ 2595.170481][T11761] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 2595.170492][T11761] RBP: 00007f0a72324090 R08: 0000000000000000 R09: 0000000000000000 [ 2595.170501][T11761] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2595.170511][T11761] R13: 00007f0a71616038 R14: 00007f0a71615fa0 R15: 00007f0a7173fa48 [ 2595.170536][T11761] [ 2595.538449][T11768] netlink: 552 bytes leftover after parsing attributes in process `syz.4.9532'. [ 2595.891152][ T8454] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 2596.054023][ T8454] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2596.075041][ T8454] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2596.081140][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 2596.081156][ T30] audit: type=1326 audit(1773704035.082:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7139c799 code=0x7ffc0000 [ 2596.123126][ T30] audit: type=1326 audit(1773704035.122:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7139c799 code=0x7ffc0000 [ 2596.147623][ T30] audit: type=1326 audit(1773704035.132:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a7139c799 code=0x7ffc0000 [ 2596.189330][ T30] audit: type=1326 audit(1773704035.132:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7139c799 code=0x7ffc0000 [ 2596.216757][ T30] audit: type=1326 audit(1773704035.132:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a7139e007 code=0x7ffc0000 [ 2596.240518][ T30] audit: type=1326 audit(1773704035.152:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0a7135cfce code=0x7ffc0000 [ 2596.245320][ T8454] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2596.265936][ T30] audit: type=1326 audit(1773704035.152:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0a7135cfce code=0x7ffc0000 [ 2596.298442][ T30] audit: type=1326 audit(1773704035.152:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0a7135cfce code=0x7ffc0000 [ 2596.325294][ T30] audit: type=1326 audit(1773704035.152:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0a7135cfce code=0x7ffc0000 [ 2596.357114][ T30] audit: type=1326 audit(1773704035.222:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.5.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7139c799 code=0x7ffc0000 [ 2596.380362][ T8454] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2596.388948][ T8454] usb 5-1: Manufacturer: syz [ 2596.392313][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9534'. [ 2596.393706][ T8454] usb 5-1: SerialNumber: syz [ 2596.424357][ T3062] usb 4-1: USB disconnect, device number 123 [ 2596.461232][T12457] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2596.507006][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9534'. [ 2596.624884][T12457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2596.638305][T12457] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2596.651444][T12457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.681570][ T8454] usb 3-1: USB disconnect, device number 114 [ 2596.690746][T12457] usb 2-1: config 0 descriptor?? [ 2596.831562][ T8457] usb 5-1: USB disconnect, device number 112 [ 2596.922944][T12457] usbhid 2-1:0.0: can't add hid device: -71 [ 2596.942426][T12457] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2597.003418][T12457] usb 2-1: USB disconnect, device number 120 [ 2597.292980][ T3062] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2597.451242][T12457] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2597.463410][ T3062] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2597.488828][ T3062] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2597.515595][ T3062] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2597.534431][ T3062] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2597.565464][ T3062] usb 5-1: Manufacturer: syz [ 2597.585485][ T3062] usb 5-1: SerialNumber: syz [ 2597.648675][T12457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2597.698451][T12457] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2597.769605][T12457] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2597.814781][T12457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.894839][T12457] usb 2-1: config 0 descriptor?? [ 2598.371402][T12457] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2598.675339][ C1] usb 2-1: input irq status -75 received [ 2598.879298][ T3062] usb 2-1: USB disconnect, device number 121 [ 2598.908163][T31002] usb 5-1: USB disconnect, device number 113 [ 2599.251755][ T8454] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2599.411215][ T8454] usb 3-1: Using ep0 maxpacket: 16 [ 2599.438316][ T8454] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2599.457101][ T8454] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2599.475131][ T8454] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2599.498312][ T8454] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2599.523064][ T8454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.550264][ T8454] usb 3-1: Product: syz [ 2599.564521][ T8454] usb 3-1: Manufacturer: syz [ 2599.582996][ T8454] usb 3-1: SerialNumber: syz [ 2600.061479][ T8457] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2600.261855][ T8457] usb 2-1: Using ep0 maxpacket: 16 [ 2600.272355][ T8457] usb 2-1: config 0 has no interfaces? [ 2600.279280][ T8457] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2600.289452][ T8457] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2600.297853][ T8457] usb 2-1: Manufacturer: syz [ 2600.308549][ T8457] usb 2-1: config 0 descriptor?? [ 2600.812072][ T8457] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2600.971334][ T8457] usb 6-1: Using ep0 maxpacket: 32 [ 2600.987887][ T8457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2601.002387][ T8457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2601.014803][ T8457] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2601.048108][ T8457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.078272][ T8457] usb 6-1: config 0 descriptor?? [ 2601.086759][ T8457] hub 6-1:0.0: USB hub found [ 2601.186463][T11872] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9560'. [ 2601.466510][ T8457] hub 6-1:0.0: 1 port detected [ 2602.041501][ T8454] usb 3-1: 0:2 : does not exist [ 2602.095676][ T8454] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 2602.234392][ T8457] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2602.234670][T31002] usb 6-1: USB disconnect, device number 60 [ 2602.355329][ T3062] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2602.367835][ T8454] usb 3-1: USB disconnect, device number 115 [ 2602.466189][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2602.517356][ T3062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.536002][ T3062] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2602.546401][ T3062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.556602][T11882] FAULT_INJECTION: forcing a failure. [ 2602.556602][T11882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2602.576488][ T3062] usb 4-1: config 0 descriptor?? [ 2602.589746][T11882] CPU: 1 UID: 0 PID: 11882 Comm: syz.2.9564 Tainted: G L syzkaller #0 PREEMPT(full) [ 2602.589764][T11882] Tainted: [L]=SOFTLOCKUP [ 2602.589768][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2602.589774][T11882] Call Trace: [ 2602.589779][T11882] [ 2602.589784][T11882] dump_stack_lvl+0xe8/0x150 [ 2602.589806][T11882] should_fail_ex+0x412/0x560 [ 2602.589824][T11882] _copy_from_iter+0x1d3/0x1670 [ 2602.589844][T11882] ? rcu_is_watching+0x15/0xb0 [ 2602.589861][T11882] ? __pfx__copy_from_iter+0x10/0x10 [ 2602.589878][T11882] ? netlink_sendmsg+0x650/0xb40 [ 2602.589895][T11882] ? skb_put+0x11b/0x210 [ 2602.589908][T11882] netlink_sendmsg+0x6c0/0xb40 [ 2602.589925][T11882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2602.589940][T11882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2602.589955][T11882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2602.589969][T11882] ____sys_sendmsg+0x972/0x9f0 [ 2602.589984][T11882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2602.589998][T11882] ? import_iovec+0x73/0xa0 [ 2602.590008][T11882] ___sys_sendmsg+0x2a5/0x360 [ 2602.590021][T11882] ? __pfx____sys_sendmsg+0x10/0x10 [ 2602.590046][T11882] ? __fget_files+0x2a/0x420 [ 2602.590060][T11882] ? __fget_files+0x3a0/0x420 [ 2602.590077][T11882] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2602.590089][T11882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2602.590103][T11882] ? __pfx_ksys_write+0x10/0x10 [ 2602.590119][T11882] do_syscall_64+0x14d/0xf80 [ 2602.590131][T11882] ? trace_irq_disable+0x3b/0x150 [ 2602.590144][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.590154][T11882] ? clear_bhb_loop+0x40/0x90 [ 2602.590165][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.590174][T11882] RIP: 0033:0x7f3a4239c799 [ 2602.590185][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2602.590192][T11882] RSP: 002b:00007f3a4324d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2602.590206][T11882] RAX: ffffffffffffffda RBX: 00007f3a42615fa0 RCX: 00007f3a4239c799 [ 2602.590213][T11882] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 2602.590219][T11882] RBP: 00007f3a4324d090 R08: 0000000000000000 R09: 0000000000000000 [ 2602.590224][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2602.590230][T11882] R13: 00007f3a42616038 R14: 00007f3a42615fa0 R15: 00007f3a4273fa48 [ 2602.590244][T11882] [ 2602.844093][ T3062] usbhid 4-1:0.0: can't add hid device: -71 [ 2602.850115][ T3062] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2602.861709][ T3062] usb 4-1: USB disconnect, device number 124 [ 2603.028745][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2603.028762][ T30] audit: type=1326 audit(1773704042.032:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.153775][ T30] audit: type=1326 audit(1773704042.092:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.193391][ T30] audit: type=1326 audit(1773704042.162:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.217077][ T30] audit: type=1326 audit(1773704042.162:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.274046][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9565'. [ 2603.285788][T12457] usb 2-1: USB disconnect, device number 122 [ 2603.361143][ T3062] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2603.404560][ T30] audit: type=1326 audit(1773704042.342:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.439978][T11894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9565'. [ 2603.506082][ T30] audit: type=1326 audit(1773704042.342:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.536468][ T3062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.555356][ T3062] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2603.606400][ T30] audit: type=1326 audit(1773704042.342:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.639605][ T3062] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2603.662179][ T3062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.678001][ T30] audit: type=1326 audit(1773704042.682:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.2.9565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3a4239c799 code=0x7ffc0000 [ 2603.717947][ T3062] usb 4-1: config 0 descriptor?? [ 2603.833941][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9573'. [ 2603.903719][T11912] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2604.154222][ T3062] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2604.381258][ T8457] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2604.490111][ C1] usb 4-1: input irq status -75 received [ 2604.563098][ T8457] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 2604.607534][ T8457] usb 6-1: config 0 has no interface number 0 [ 2604.680110][ T8457] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2604.711623][ T8454] usb 4-1: USB disconnect, device number 125 [ 2604.787772][ T8457] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2604.869961][ T8457] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2604.934078][ T8457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2604.975605][ T8457] usb 6-1: Product: syz [ 2604.990409][ T8457] usb 6-1: Manufacturer: syz [ 2605.025555][ T8457] usb 6-1: SerialNumber: syz [ 2605.062402][ T8457] usb 6-1: config 0 descriptor?? [ 2605.087788][T11919] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2605.097352][ T8457] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2605.120864][ T8457] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2605.228537][ T8454] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2605.306831][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 2605.422918][ T8454] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2605.437386][ T8454] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=7c.79 [ 2605.453251][ T8454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.465348][ T8454] usb 3-1: Product: syz [ 2605.469562][ T8454] usb 3-1: Manufacturer: syz [ 2605.474711][ T8454] usb 3-1: SerialNumber: syz [ 2605.515074][ T8454] comedi comedi5: Wrong number of endpoints [ 2605.531205][ T3062] usb 6-1: USB disconnect, device number 61 [ 2605.537258][ T8454] dt9812 3-1:2.0: driver 'dt9812' failed to auto-configure device. [ 2605.583180][ T3062] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2605.617726][ T3062] cyberjack 6-1:0.69: device disconnected [ 2605.707474][T12457] usb 3-1: USB disconnect, device number 116 [ 2606.082033][ T8454] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2606.271448][ T8454] usb 4-1: Using ep0 maxpacket: 16 [ 2606.302932][ T8454] usb 4-1: config 0 has no interfaces? [ 2606.352352][ T8454] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2606.393590][ T8454] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2606.443870][ T8454] usb 4-1: Manufacturer: syz [ 2606.489329][ T8454] usb 4-1: config 0 descriptor?? [ 2606.531294][ T8456] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 2606.746979][ T8456] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2606.789676][ T8456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.805472][ T8457] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2606.837399][ T8456] usb 6-1: Product: syz [ 2606.871712][ T8456] usb 6-1: Manufacturer: syz [ 2606.890496][ T8456] usb 6-1: SerialNumber: syz [ 2606.922470][ T8456] usb 6-1: config 0 descriptor?? [ 2606.948670][ T8456] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2606.981319][ T8457] usb 5-1: Using ep0 maxpacket: 16 [ 2606.997974][ T8457] usb 5-1: config 0 has no interfaces? [ 2607.028752][ T8457] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2607.051382][ T8457] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2607.079567][ T8457] usb 5-1: Manufacturer: syz [ 2607.112670][ T8457] usb 5-1: config 0 descriptor?? [ 2607.151167][ T8454] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2607.343379][ T8454] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2607.387811][ T8454] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2607.416956][ T8454] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2607.446674][ T8454] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2607.466605][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9594'. [ 2607.483177][ T8454] usb 3-1: Product: syz [ 2607.508361][ T8454] usb 3-1: Manufacturer: syz [ 2607.529877][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9594'. [ 2607.548209][ T8454] usb 3-1: SerialNumber: syz [ 2607.565677][T11983] netlink: 'syz.1.9594': attribute type 2 has an invalid length. [ 2607.591019][ T8454] usb 3-1: config 0 descriptor?? [ 2607.598040][T11985] binder: 11980:11985 ioctl c0306201 2000000003c0 returned -14 [ 2607.622132][ T8454] usb 3-1: selecting invalid altsetting 0 [ 2607.877425][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.896378][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.930847][ T8454] usb 3-1: USB disconnect, device number 117 [ 2608.649156][ T8456] gspca_stk1135: reg_w 0x200 err -71 [ 2608.662534][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.675777][ T8456] gspca_stk1135: Sensor write failed [ 2608.683057][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.690031][ T8456] gspca_stk1135: Sensor write failed [ 2608.698322][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.711629][ T8456] gspca_stk1135: Sensor read failed [ 2608.717620][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.727930][ T8456] gspca_stk1135: Sensor read failed [ 2608.734014][ T8456] gspca_stk1135: Detected sensor type unknown (0x0) [ 2608.742188][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.749202][ T8456] gspca_stk1135: Sensor read failed [ 2608.756594][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.764219][ T8456] gspca_stk1135: Sensor read failed [ 2608.792873][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.800173][ T8456] gspca_stk1135: Sensor write failed [ 2608.823383][ T8456] gspca_stk1135: serial bus timeout: status=0x00 [ 2608.830684][ T8456] gspca_stk1135: Sensor write failed [ 2608.840799][ T8456] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 2608.858830][ T8456] usb 6-1: USB disconnect, device number 62 [ 2609.051498][T12257] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2609.211345][T12257] usb 3-1: Using ep0 maxpacket: 8 [ 2609.221561][T12257] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2609.248610][T12257] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2609.268609][T12257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2609.280783][T12257] usb 3-1: Product: syz [ 2609.286187][T12257] usb 3-1: Manufacturer: syz [ 2609.291737][T12257] usb 3-1: SerialNumber: syz [ 2609.300660][T12257] usb 3-1: config 0 descriptor?? [ 2609.320931][T12257] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2609.523761][T12001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.561761][T12001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2609.667144][ T3062] usb 5-1: USB disconnect, device number 114 [ 2609.999133][T12257] gspca_zc3xx: reg_w_i err -71 [ 2610.006091][ T8454] usb 4-1: USB disconnect, device number 126 [ 2610.219491][T12024] netlink: 'syz.3.9607': attribute type 1 has an invalid length. [ 2610.336576][T12024] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 2610.348173][T12024] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 2610.386223][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9607'. [ 2610.423172][T12026] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2610.603112][T12257] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2610.641991][T12257] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2610.687329][T12257] usb 3-1: USB disconnect, device number 118 [ 2610.822380][ T30] audit: type=1326 audit(1773704049.822:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2610.852214][ T30] audit: type=1326 audit(1773704049.822:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2610.878947][ T30] audit: type=1326 audit(1773704049.832:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2610.955807][ T30] audit: type=1326 audit(1773704049.832:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2610.982735][ T30] audit: type=1326 audit(1773704049.832:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2611.010565][ T30] audit: type=1326 audit(1773704049.832:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdead39e007 code=0x7ffc0000 [ 2611.047872][ T30] audit: type=1326 audit(1773704049.852:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2611.173116][ T30] audit: type=1326 audit(1773704049.852:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2611.173144][ T30] audit: type=1326 audit(1773704049.852:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2611.173164][ T30] audit: type=1326 audit(1773704049.852:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.1.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2611.561316][ T3062] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 2611.725802][ T3062] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2611.737845][ T3062] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2611.755411][ T3062] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2611.765057][T12457] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2611.776283][ T3062] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2611.785177][ T3062] usb 4-1: Manufacturer: syz [ 2611.789923][ T3062] usb 4-1: SerialNumber: syz [ 2611.942705][T12457] usb 6-1: Using ep0 maxpacket: 32 [ 2611.964687][T12457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2611.991844][T12457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2612.009071][T12457] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2612.029809][ T3062] usb 4-1: USB disconnect, device number 127 [ 2612.043986][T12457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.087907][T12457] usb 6-1: config 0 descriptor?? [ 2612.127836][T12457] hub 6-1:0.0: USB hub found [ 2612.533908][ T3062] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2612.588842][T12457] hub 6-1:0.0: 1 port detected [ 2612.693877][ T3062] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2612.730458][ T3062] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2612.785214][ T3062] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2612.803908][ T3062] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2612.816525][ T3062] usb 4-1: Manufacturer: syz [ 2612.825284][ T3062] usb 4-1: SerialNumber: syz [ 2612.991226][T11751] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2613.095686][T12457] usb 6-1: USB disconnect, device number 63 [ 2613.281707][ T3062] usb 4-1: USB disconnect, device number 2 [ 2613.305015][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9632'. [ 2613.343682][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9632'. [ 2613.353793][T12105] netlink: 212 bytes leftover after parsing attributes in process `syz.1.9636'. [ 2613.433039][T12111] netlink: 532 bytes leftover after parsing attributes in process `syz.2.9639'. [ 2613.617743][T12119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9642'. [ 2613.642047][T12119] bridge1: entered promiscuous mode [ 2613.647388][T12119] bridge1: entered allmulticast mode [ 2613.659729][T12119] team0: Port device bridge1 added [ 2613.772469][T12127] FAULT_INJECTION: forcing a failure. [ 2613.772469][T12127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2613.807545][T12127] CPU: 0 UID: 0 PID: 12127 Comm: syz.5.9645 Tainted: G L syzkaller #0 PREEMPT(full) [ 2613.807572][T12127] Tainted: [L]=SOFTLOCKUP [ 2613.807579][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2613.807588][T12127] Call Trace: [ 2613.807596][T12127] [ 2613.807603][T12127] dump_stack_lvl+0xe8/0x150 [ 2613.807627][T12127] should_fail_ex+0x412/0x560 [ 2613.807643][T12127] _copy_from_user+0x2d/0xb0 [ 2613.807654][T12127] video_usercopy+0x36f/0x14b0 [ 2613.807789][T12127] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2613.807802][T12127] ? __pfx___video_do_ioctl+0x10/0x10 [ 2613.807819][T12127] ? __pfx_video_usercopy+0x10/0x10 [ 2613.807848][T12127] ? __fget_files+0x2a/0x420 [ 2613.807871][T12127] ? __fget_files+0x2a/0x420 [ 2613.807891][T12127] ? __fget_files+0x3a0/0x420 [ 2613.807910][T12127] v4l2_ioctl+0x18d/0x1e0 [ 2613.807923][T12127] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2613.807935][T12127] __se_sys_ioctl+0xfc/0x170 [ 2613.807947][T12127] do_syscall_64+0x14d/0xf80 [ 2613.807957][T12127] ? trace_irq_disable+0x3b/0x150 [ 2613.807976][T12127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2613.807992][T12127] ? clear_bhb_loop+0x40/0x90 [ 2613.808011][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2613.808027][T12127] RIP: 0033:0x7f0a7139c799 [ 2613.808043][T12127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2613.808054][T12127] RSP: 002b:00007f0a72324028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2613.808065][T12127] RAX: ffffffffffffffda RBX: 00007f0a71615fa0 RCX: 00007f0a7139c799 [ 2613.808072][T12127] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2613.808078][T12127] RBP: 00007f0a72324090 R08: 0000000000000000 R09: 0000000000000000 [ 2613.808084][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2613.808090][T12127] R13: 00007f0a71616038 R14: 00007f0a71615fa0 R15: 00007f0a7173fa48 [ 2613.808104][T12127] [ 2614.007685][T12457] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2614.161242][T12457] usb 2-1: Using ep0 maxpacket: 16 [ 2614.169982][T12457] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2614.222035][T12457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2614.278297][T12457] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2614.299045][T12457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.322606][T12457] usb 2-1: Product: syz [ 2614.335019][T12457] usb 2-1: Manufacturer: syz [ 2614.343832][T12457] usb 2-1: SerialNumber: syz [ 2614.366843][T12457] usb 2-1: config 0 descriptor?? [ 2614.379859][T12457] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2614.389776][T12457] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2614.989691][T12457] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2615.031896][T12457] em28xx 2-1:0.0: Config register raw data: 0x36 [ 2615.050742][T12457] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 2615.062702][T12457] em28xx 2-1:0.0: No AC97 audio processor [ 2615.068787][T12257] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2615.231629][T12257] usb 3-1: Using ep0 maxpacket: 32 [ 2615.246849][T12257] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 2615.264125][T12257] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2615.277815][T12257] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2615.300001][T12257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2615.316572][T12257] usb 3-1: Product: syz [ 2615.326693][T12257] usb 3-1: Manufacturer: syz [ 2615.343142][T12257] usb 3-1: SerialNumber: syz [ 2615.443991][T12119] bridge0: port 4(team0) entered blocking state [ 2615.450741][T12119] bridge0: port 4(team0) entered disabled state [ 2615.457608][T12119] team0: entered allmulticast mode [ 2615.470118][T12119] team_slave_0: entered allmulticast mode [ 2615.478348][T12119] team_slave_1: entered allmulticast mode [ 2615.487066][T12119] team0: entered promiscuous mode [ 2615.492359][T12119] team_slave_0: entered promiscuous mode [ 2615.498428][T12119] team_slave_1: entered promiscuous mode [ 2615.505710][T12119] bridge0: port 4(team0) entered blocking state [ 2615.512708][T12119] bridge0: port 4(team0) entered forwarding state [ 2615.538659][T12457] usb 2-1: USB disconnect, device number 123 [ 2615.581168][ T8454] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 2615.589048][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9657'. [ 2615.754980][ T8454] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2615.774294][T11751] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2615.790018][T11751] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2615.798575][ T8454] usb 6-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2615.818563][T11751] usb 5-1: can't read configurations, error -71 [ 2615.837560][ T8454] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2615.849042][T12161] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2615.869432][ T8454] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2615.906811][ T8454] usb 6-1: Manufacturer: syz [ 2615.942056][ T8454] usb 6-1: SerialNumber: syz [ 2616.215816][ T8454] usb 6-1: USB disconnect, device number 64 [ 2616.752101][ T8454] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2616.943097][ T8454] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2616.943126][ T8454] usb 6-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2616.945392][ T8454] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2616.945440][ T8454] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2616.945459][ T8454] usb 6-1: Manufacturer: syz [ 2616.945491][ T8454] usb 6-1: SerialNumber: syz [ 2617.244190][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9668'. [ 2617.261184][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9668'. [ 2617.377399][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9672'. [ 2617.387235][T12196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9672'. [ 2617.394001][ T8454] usb 6-1: USB disconnect, device number 65 [ 2617.825982][T12257] cdc_ncm 3-1:1.0: bind() failure [ 2617.934240][T12257] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2617.986643][T12257] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2618.020884][T12257] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2618.075816][T12257] usb 3-1: USB disconnect, device number 119 [ 2618.332276][ T8457] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2618.364114][T12231] FAULT_INJECTION: forcing a failure. [ 2618.364114][T12231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2618.399500][T12231] CPU: 1 UID: 0 PID: 12231 Comm: syz.5.9683 Tainted: G L syzkaller #0 PREEMPT(full) [ 2618.399529][T12231] Tainted: [L]=SOFTLOCKUP [ 2618.399535][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2618.399545][T12231] Call Trace: [ 2618.399552][T12231] [ 2618.399560][T12231] dump_stack_lvl+0xe8/0x150 [ 2618.399582][T12231] should_fail_ex+0x412/0x560 [ 2618.399601][T12231] _copy_to_user+0x31/0xb0 [ 2618.399614][T12231] simple_read_from_buffer+0xe1/0x170 [ 2618.399633][T12231] proc_fail_nth_read+0x1bb/0x230 [ 2618.399665][T12231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2618.399689][T12231] ? rw_verify_area+0x2a6/0x4d0 [ 2618.399705][T12231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2618.399726][T12231] vfs_read+0x20c/0xa70 [ 2618.399736][T12231] ? fdget_pos+0x246/0x320 [ 2618.399749][T12231] ? __fget_files+0x2a/0x420 [ 2618.399763][T12231] ? __pfx___mutex_lock+0x10/0x10 [ 2618.399775][T12231] ? __pfx_vfs_read+0x10/0x10 [ 2618.399786][T12231] ? __fget_files+0x2a/0x420 [ 2618.399809][T12231] ? __fget_files+0x3a0/0x420 [ 2618.399829][T12231] ? __fget_files+0x2a/0x420 [ 2618.399857][T12231] ksys_read+0x150/0x270 [ 2618.399875][T12231] ? __pfx_ksys_read+0x10/0x10 [ 2618.399891][T12231] do_syscall_64+0x14d/0xf80 [ 2618.399901][T12231] ? trace_irq_disable+0x3b/0x150 [ 2618.399914][T12231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2618.399924][T12231] ? clear_bhb_loop+0x40/0x90 [ 2618.399935][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2618.399950][T12231] RIP: 0033:0x7f0a7135cfce [ 2618.399967][T12231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2618.399980][T12231] RSP: 002b:00007f0a72323fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2618.399997][T12231] RAX: ffffffffffffffda RBX: 00007f0a723246c0 RCX: 00007f0a7135cfce [ 2618.400009][T12231] RDX: 000000000000000f RSI: 00007f0a723240a0 RDI: 0000000000000004 [ 2618.400018][T12231] RBP: 00007f0a72324090 R08: 0000000000000000 R09: 0000000000000000 [ 2618.400026][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2618.400031][T12231] R13: 00007f0a71616038 R14: 00007f0a71615fa0 R15: 00007f0a7173fa48 [ 2618.400046][T12231] [ 2619.071223][ T8457] usb 2-1: device descriptor read/64, error -71 [ 2619.144023][T12236] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9685'. [ 2619.311349][ T8457] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2619.451800][ T8457] usb 2-1: device descriptor read/64, error -71 [ 2619.562315][ T8457] usb usb2-port1: attempt power cycle [ 2619.911190][ T8457] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2619.945887][ T8457] usb 2-1: device descriptor read/8, error -71 [ 2620.192646][ T8457] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2620.238438][ T8457] usb 2-1: device descriptor read/8, error -71 [ 2620.364063][ T8457] usb usb2-port1: unable to enumerate USB device [ 2620.461292][T12256] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2620.981400][ T8456] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2621.131205][ T8456] usb 4-1: device descriptor read/64, error -71 [ 2621.234052][T12286] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2621.362031][T12290] netlink: 'syz.5.9705': attribute type 18 has an invalid length. [ 2621.370143][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9705'. [ 2621.381765][ T8456] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2621.402885][T19059] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2621.402988][T12290] netlink: 'syz.5.9705': attribute type 18 has an invalid length. [ 2621.451638][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9705'. [ 2621.452478][T19059] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2621.539030][T19059] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2621.551261][ T8456] usb 4-1: device descriptor read/64, error -71 [ 2621.591375][T19059] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2621.698970][ T8456] usb usb4-port1: attempt power cycle [ 2621.872860][T12302] netlink: 308 bytes leftover after parsing attributes in process `syz.4.9708'. [ 2622.051225][ T8456] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2622.088478][ T8456] usb 4-1: device descriptor read/8, error -71 [ 2622.351482][ T8456] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2622.385673][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 2622.385687][ T30] audit: type=1326 audit(1773704061.392:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2622.453675][ T30] audit: type=1326 audit(1773704061.452:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2622.524421][ T8456] usb 4-1: device descriptor read/8, error -71 [ 2622.542726][ T30] audit: type=1326 audit(1773704061.452:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2622.671602][ T8456] usb usb4-port1: unable to enumerate USB device [ 2622.709046][ T30] audit: type=1326 audit(1773704061.492:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2622.810687][ T30] audit: type=1326 audit(1773704061.492:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdead39e007 code=0x7ffc0000 [ 2622.843665][ T30] audit: type=1326 audit(1773704061.492:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2622.896448][ T30] audit: type=1326 audit(1773704061.502:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2622.929707][ T30] audit: type=1326 audit(1773704061.502:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2622.980380][ T30] audit: type=1326 audit(1773704061.502:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdead35cfce code=0x7ffc0000 [ 2623.033150][ T30] audit: type=1326 audit(1773704061.502:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.1.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead39c799 code=0x7ffc0000 [ 2623.772741][ T8456] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2623.821204][T11751] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2623.953289][ T8456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2623.967908][ T8456] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2624.006903][ T8456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2624.032972][T11751] usb 5-1: Using ep0 maxpacket: 16 [ 2624.041837][T11751] usb 5-1: config 0 has no interfaces? [ 2624.058393][T11751] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2624.077782][ T8456] usb 3-1: config 0 descriptor?? [ 2624.084937][T11751] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2624.111275][ T3062] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 2624.134589][T11751] usb 5-1: Manufacturer: syz [ 2624.160464][T11751] usb 5-1: config 0 descriptor?? [ 2624.273384][ T3062] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2624.291323][ T3062] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 2624.311580][ T3062] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2624.320977][ T3062] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2624.345754][ T8456] usbhid 3-1:0.0: can't add hid device: -71 [ 2624.367123][ T8456] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2624.378306][ T3062] usb 4-1: Manufacturer: syz [ 2624.392852][ T3062] usb 4-1: SerialNumber: syz [ 2624.412108][ T8456] usb 3-1: USB disconnect, device number 120 [ 2624.645178][ T3062] usb 4-1: USB disconnect, device number 7 [ 2624.851324][ T8456] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2625.008568][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9735'. [ 2625.045777][T12373] bridge1: entered promiscuous mode [ 2625.051182][T12373] bridge1: entered allmulticast mode [ 2625.057663][ T8456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2625.063403][T12373] team0: Port device bridge1 added [ 2625.092764][ T8456] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2625.110912][ T8456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2625.159379][ T8456] usb 3-1: config 0 descriptor?? [ 2625.321206][ T8457] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2625.355920][T12377] syzkaller0: entered promiscuous mode [ 2625.361687][T12377] syzkaller0: entered allmulticast mode [ 2625.511210][ T8457] usb 6-1: Using ep0 maxpacket: 16 [ 2625.527915][ T8457] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2625.567310][ T8457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2625.613725][ T8457] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2625.634946][ T8457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2625.653581][ T8457] usb 6-1: Product: syz [ 2625.663476][ T8457] usb 6-1: Manufacturer: syz [ 2625.673566][ T8457] usb 6-1: SerialNumber: syz [ 2625.688442][ T8457] usb 6-1: config 0 descriptor?? [ 2625.716147][ T8457] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2625.726889][ T8457] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2625.785678][ T8456] usbhid 3-1:0.0: can't add hid device: -71 [ 2625.797525][ T8456] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2625.819428][ T8456] usb 3-1: USB disconnect, device number 121 [ 2626.349866][ T8457] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2626.377022][ T8457] em28xx 6-1:0.0: Config register raw data: 0x36 [ 2626.431889][ T8457] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 2626.449655][ T8457] em28xx 6-1:0.0: No AC97 audio processor [ 2626.748896][ T3062] usb 5-1: USB disconnect, device number 117 [ 2626.795978][T12373] bridge0: port 3(team0) entered blocking state [ 2626.822848][T12373] bridge0: port 3(team0) entered disabled state [ 2626.836153][T12373] team0: entered allmulticast mode [ 2626.841949][T12373] team_slave_0: entered allmulticast mode [ 2626.848100][T12373] team_slave_1: entered allmulticast mode [ 2626.854730][T12457] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2626.888342][T12373] team0: entered promiscuous mode [ 2626.905780][T12373] team_slave_0: entered promiscuous mode [ 2626.932039][T12373] team_slave_1: entered promiscuous mode [ 2626.985118][ T8457] usb 6-1: USB disconnect, device number 66 [ 2627.024669][T12457] usb 2-1: Using ep0 maxpacket: 16 [ 2627.070034][T12457] usb 2-1: config 0 has no interfaces? [ 2627.089630][T12457] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2627.121230][T12457] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2627.129317][T12457] usb 2-1: Manufacturer: syz [ 2627.183156][T12457] usb 2-1: config 0 descriptor?? [ 2627.191440][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2627.541190][T12457] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2627.731812][T12457] usb 5-1: Using ep0 maxpacket: 8 [ 2627.771637][T12457] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2627.805397][T12457] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2627.807673][T12417] netlink: 'syz.5.9744': attribute type 10 has an invalid length. [ 2627.852422][T12417] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9744'. [ 2627.871872][T12457] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2627.918972][T12457] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2627.956255][T12457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2627.997957][T12457] hub 5-1:1.0: bad descriptor, ignoring hub [ 2628.022537][T12457] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2628.047367][T12457] cdc_wdm 5-1:1.0: skipping garbage [ 2628.053837][T12457] cdc_wdm 5-1:1.0: skipping garbage [ 2628.060085][T12457] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2628.196666][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9742'. [ 2628.321793][T12257] usb 5-1: USB disconnect, device number 118 [ 2629.062632][ T3062] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2629.245700][ T3062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2629.270515][ T3062] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2629.303149][ T3062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.327108][ T3062] usb 6-1: config 0 descriptor?? [ 2629.552133][ T3062] usbhid 6-1:0.0: can't add hid device: -71 [ 2629.573330][ T3062] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2629.607480][ T3062] usb 6-1: USB disconnect, device number 67 [ 2629.816527][T12457] usb 2-1: USB disconnect, device number 2 [ 2630.131200][ T3062] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2630.178560][T12460] syzkaller0: entered promiscuous mode [ 2630.186300][T12460] syzkaller0: entered allmulticast mode [ 2630.192022][T11751] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2630.331347][ T3062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2630.346091][ T3062] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2630.356540][ T3062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.364726][T11751] usb 4-1: Using ep0 maxpacket: 8 [ 2630.373841][T11751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2630.386836][ T3062] usb 6-1: config 0 descriptor?? [ 2630.397157][T11751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2630.420161][T11751] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2630.445045][T11751] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2630.454980][T11751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.478871][T11751] hub 4-1:1.0: bad descriptor, ignoring hub [ 2630.485027][T11751] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2630.493060][T11751] cdc_wdm 4-1:1.0: skipping garbage [ 2630.498379][T11751] cdc_wdm 4-1:1.0: skipping garbage [ 2630.504219][T11751] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2630.572168][T12457] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2630.675454][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9761'. [ 2630.722181][T12457] usb 3-1: device descriptor read/64, error -71 [ 2630.801513][T11751] usb 4-1: USB disconnect, device number 8 [ 2630.971285][T12457] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2631.027091][ T3062] usbhid 6-1:0.0: can't add hid device: -71 [ 2631.046915][ T3062] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2631.075107][ T3062] usb 6-1: USB disconnect, device number 68 [ 2631.131272][T12457] usb 3-1: device descriptor read/64, error -71 [ 2631.253107][T12457] usb usb3-port1: attempt power cycle [ 2631.273692][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9773'. [ 2631.642329][T12457] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2631.682728][T12457] usb 3-1: device descriptor read/8, error -71 [ 2631.976653][T12457] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2632.021843][T12457] usb 3-1: device descriptor read/8, error -71 [ 2632.151859][T12457] usb usb3-port1: unable to enumerate USB device [ 2632.558197][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2632.558214][ T30] audit: type=1326 audit(1773704071.562:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2632.589428][ T8457] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2632.609900][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9782'. [ 2632.631014][ T30] audit: type=1326 audit(1773704071.602:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2632.659807][ T30] audit: type=1326 audit(1773704071.602:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2632.683316][ T30] audit: type=1326 audit(1773704071.602:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2632.710550][ T30] audit: type=1326 audit(1773704071.602:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037539e007 code=0x7ffc0000 [ 2632.733568][T12257] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2632.733860][ T30] audit: type=1326 audit(1773704071.602:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2632.762765][ T8457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2632.764338][T12457] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2632.798622][ T8457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2632.813010][ T8457] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2632.821625][ T30] audit: type=1326 audit(1773704071.602:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2632.861166][ T8457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.876321][ T30] audit: type=1326 audit(1773704071.602:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2632.882544][ T8457] usb 5-1: config 0 descriptor?? [ 2632.920437][ T30] audit: type=1326 audit(1773704071.612:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f037535cfce code=0x7ffc0000 [ 2632.948653][ T30] audit: type=1326 audit(1773704071.612:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12512 comm="syz.3.9782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037539c799 code=0x7ffc0000 [ 2632.953119][T12257] usb 6-1: Using ep0 maxpacket: 32 [ 2632.983705][T12457] usb 2-1: Using ep0 maxpacket: 8 [ 2632.990460][T12457] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2633.000834][T12457] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2633.013698][T12457] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2633.025208][T12457] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2633.025692][T12257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2633.034357][T12457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.054028][T12257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2633.059777][T12457] hub 2-1:1.0: bad descriptor, ignoring hub [ 2633.074916][T12457] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2633.088731][T12257] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2633.089145][T12457] cdc_wdm 2-1:1.0: skipping garbage [ 2633.097996][T12257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.109386][T12257] usb 6-1: config 0 descriptor?? [ 2633.127760][T12457] cdc_wdm 2-1:1.0: skipping garbage [ 2633.152338][T12457] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2633.161986][T12257] hub 6-1:0.0: USB hub found [ 2633.268816][T12516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9783'. [ 2633.360751][ T8457] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2633.397423][ T8457] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2633.405573][ T8456] usb 2-1: USB disconnect, device number 3 [ 2633.438319][ T8457] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2633.479490][ T8457] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2633.497065][ T8457] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2633.517234][ T8457] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2633.561228][ T8457] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 2633.581197][T12257] hub 6-1:0.0: 1 port detected [ 2633.596976][ T8457] cp2112 0003:10C4:EA90.0045: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2633.722694][ T8457] cp2112 0003:10C4:EA90.0045: Part Number: 0x00 Device Version: 0x00 [ 2633.814741][T12531] netlink: 'syz.2.9786': attribute type 6 has an invalid length. [ 2633.841410][T12531] netlink: 'syz.2.9786': attribute type 7 has an invalid length. [ 2633.858829][T12531] netlink: 'syz.2.9786': attribute type 8 has an invalid length. [ 2633.933914][T12457] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2634.038551][T12257] usb 6-1: USB disconnect, device number 69 [ 2634.105718][T12457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2634.133136][ T8455] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2634.134222][T12457] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2634.180639][T12457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.246882][T12457] usb 4-1: config 0 descriptor?? [ 2634.305669][T12510] cp2112 0003:10C4:EA90.0045: Error starting transaction: -38 [ 2634.345249][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2634.366209][ T8455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2634.386234][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2634.405145][ T8455] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2634.427104][ T8457] cp2112 0003:10C4:EA90.0045: error reading lock byte: -71 [ 2634.451272][ T8455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2634.470134][T12457] usbhid 4-1:0.0: can't add hid device: -71 [ 2634.486676][T12457] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2634.503235][ T8457] usb 5-1: USB disconnect, device number 119 [ 2634.509458][ T8455] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2634.521184][T12457] usb 4-1: USB disconnect, device number 9 [ 2634.576091][ T8455] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 2634.619226][ T8455] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 2634.638255][ T8455] usb 3-1: Product: syz [ 2634.646822][ T8455] usb 3-1: Manufacturer: syz [ 2634.657426][ T8455] usb 3-1: SerialNumber: syz [ 2634.679590][ T8455] usb 3-1: config 0 descriptor?? [ 2634.697989][ T8455] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 2634.723936][ T8455] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 2634.724066][T12542] [ 2634.731806][ T8455] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2634.734008][T12542] ===================================================== [ 2634.749423][T12542] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2634.756921][T12542] syzkaller #0 Tainted: G L [ 2634.762879][T12542] ----------------------------------------------------- [ 2634.769896][T12542] syz.1.9791/12542 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2634.777592][T12542] ffff888054259f30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2634.786270][T12542] [ 2634.786270][T12542] and this task is already holding: [ 2634.793615][T12542] ffff888078c3c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2634.803426][T12542] which would create a new lock dependency: [ 2634.809464][T12542] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2634.817524][T12542] [ 2634.817524][T12542] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2634.826999][T12542] (&dev->event_lock#2){..-.}-{3:3} [ 2634.827025][T12542] [ 2634.827025][T12542] ... which became SOFTIRQ-irq-safe at: [ 2634.839874][T12542] lock_acquire+0xf0/0x2e0 [ 2634.844376][T12542] _raw_spin_lock_irqsave+0x40/0x60 [ 2634.849644][T12542] input_event+0x76/0xe0 [ 2634.854015][T12542] pegasus_irq+0x26f/0x5a0 [ 2634.858540][T12542] __usb_hcd_giveback_urb+0x376/0x540 [ 2634.864016][T12542] dummy_timer+0xbbd/0x45d0 [ 2634.868592][T12542] __hrtimer_run_queues+0x53a/0xcc0 [ 2634.873861][T12542] hrtimer_run_softirq+0x182/0x5a0 [ 2634.879037][T12542] handle_softirqs+0x22a/0x870 [ 2634.883862][T12542] do_softirq+0x76/0xd0 [ 2634.888078][T12542] __local_bh_enable_ip+0xf8/0x130 [ 2634.893263][T12542] __alloc_skb+0x1aa/0x7d0 [ 2634.897737][T12542] alloc_skb_with_frags+0xca/0x890 [ 2634.902969][T12542] sock_alloc_send_pskb+0x878/0x990 [ 2634.908228][T12542] unix_dgram_sendmsg+0x460/0x18e0 [ 2634.913472][T12542] __sys_sendto+0x672/0x710 [ 2634.918040][T12542] __x64_sys_sendto+0xde/0x100 [ 2634.923115][T12542] do_syscall_64+0x14d/0xf80 [ 2634.927794][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2634.933760][T12542] [ 2634.933760][T12542] to a SOFTIRQ-irq-unsafe lock: [ 2634.940756][T12542] (tasklist_lock){.+.+}-{3:3} [ 2634.940775][T12542] [ 2634.940775][T12542] ... which became SOFTIRQ-irq-unsafe at: [ 2634.953360][T12542] ... [ 2634.953417][T12542] lock_acquire+0xf0/0x2e0 [ 2634.960479][T12542] _raw_read_lock+0x36/0x50 [ 2634.965057][T12542] __do_wait+0xde/0x740 [ 2634.969277][T12542] do_wait+0x1e7/0x540 [ 2634.973405][T12542] kernel_wait+0xd6/0x1c0 [ 2634.977794][T12542] call_usermodehelper_exec_work+0xbe/0x230 [ 2634.983748][T12542] process_scheduled_works+0xb6e/0x18c0 [ 2634.989355][T12542] worker_thread+0xa53/0xfc0 [ 2634.994007][T12542] kthread+0x388/0x470 [ 2634.998164][T12542] ret_from_fork+0x51e/0xb90 [ 2635.002820][T12542] ret_from_fork_asm+0x1a/0x30 [ 2635.007647][T12542] [ 2635.007647][T12542] other info that might help us debug this: [ 2635.007647][T12542] [ 2635.017855][T12542] Chain exists of: [ 2635.017855][T12542] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2635.017855][T12542] [ 2635.031391][T12542] Possible interrupt unsafe locking scenario: [ 2635.031391][T12542] [ 2635.039688][T12542] CPU0 CPU1 [ 2635.045035][T12542] ---- ---- [ 2635.050429][T12542] lock(tasklist_lock); [ 2635.054648][T12542] local_irq_disable(); [ 2635.061377][T12542] lock(&dev->event_lock#2); [ 2635.068607][T12542] lock(&client->buffer_lock); [ 2635.075952][T12542] [ 2635.079384][T12542] lock(&dev->event_lock#2); [ 2635.084264][T12542] [ 2635.084264][T12542] *** DEADLOCK *** [ 2635.084264][T12542] [ 2635.092381][T12542] 7 locks held by syz.1.9791/12542: [ 2635.097567][T12542] #0: ffff88802b635118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 2635.106718][T12542] #1: ffff88801e370230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2635.116780][T12542] #2: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2635.126403][T12542] #3: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2635.136025][T12542] #4: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2635.145129][T12542] #5: ffff888078c3c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2635.155309][T12542] #6: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2635.164343][T12542] [ 2635.164343][T12542] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2635.174721][T12542] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2635.180343][T12542] IN-SOFTIRQ-W at: [ 2635.184470][T12542] lock_acquire+0xf0/0x2e0 [ 2635.190696][T12542] _raw_spin_lock_irqsave+0x40/0x60 [ 2635.197697][T12542] input_event+0x76/0xe0 [ 2635.203743][T12542] pegasus_irq+0x26f/0x5a0 [ 2635.209956][T12542] __usb_hcd_giveback_urb+0x376/0x540 [ 2635.217141][T12542] dummy_timer+0xbbd/0x45d0 [ 2635.223456][T12542] __hrtimer_run_queues+0x53a/0xcc0 [ 2635.230453][T12542] hrtimer_run_softirq+0x182/0x5a0 [ 2635.237451][T12542] handle_softirqs+0x22a/0x870 [ 2635.244014][T12542] do_softirq+0x76/0xd0 [ 2635.249974][T12542] __local_bh_enable_ip+0xf8/0x130 [ 2635.256904][T12542] __alloc_skb+0x1aa/0x7d0 [ 2635.263121][T12542] alloc_skb_with_frags+0xca/0x890 [ 2635.270028][T12542] sock_alloc_send_pskb+0x878/0x990 [ 2635.277022][T12542] unix_dgram_sendmsg+0x460/0x18e0 [ 2635.284024][T12542] __sys_sendto+0x672/0x710 [ 2635.290326][T12542] __x64_sys_sendto+0xde/0x100 [ 2635.296889][T12542] do_syscall_64+0x14d/0xf80 [ 2635.303280][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2635.310971][T12542] INITIAL USE at: [ 2635.314972][T12542] lock_acquire+0xf0/0x2e0 [ 2635.321105][T12542] _raw_spin_lock_irqsave+0x40/0x60 [ 2635.328029][T12542] input_inject_event+0xa5/0x340 [ 2635.334691][T12542] kbd_led_trigger_activate+0xbc/0x100 [ 2635.341866][T12542] led_trigger_set+0x535/0x960 [ 2635.348433][T12542] led_trigger_set_default+0x260/0x2a0 [ 2635.355616][T12542] led_classdev_register_ext+0x787/0x9c0 [ 2635.363111][T12542] input_leds_connect+0x517/0x790 [ 2635.369860][T12542] input_register_device+0xd00/0x1160 [ 2635.376958][T12542] atkbd_connect+0x731/0xa50 [ 2635.383282][T12542] serio_driver_probe+0x82/0xd0 [ 2635.389912][T12542] really_probe+0x267/0xaf0 [ 2635.396187][T12542] __driver_probe_device+0x18c/0x320 [ 2635.403189][T12542] driver_probe_device+0x4f/0x240 [ 2635.409929][T12542] __driver_attach+0x349/0x640 [ 2635.416411][T12542] bus_for_each_dev+0x23b/0x2c0 [ 2635.422998][T12542] serio_handle_event+0x20a/0xdd0 [ 2635.429735][T12542] process_scheduled_works+0xb6e/0x18c0 [ 2635.436993][T12542] worker_thread+0xa53/0xfc0 [ 2635.443295][T12542] kthread+0x388/0x470 [ 2635.449075][T12542] ret_from_fork+0x51e/0xb90 [ 2635.455395][T12542] ret_from_fork_asm+0x1a/0x30 [ 2635.461960][T12542] } [ 2635.464530][T12542] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 2635.473721][T12542] -> (&client->buffer_lock){....}-{3:3} { [ 2635.479447][T12542] INITIAL USE at: [ 2635.483322][T12542] lock_acquire+0xf0/0x2e0 [ 2635.489279][T12542] _raw_spin_lock+0x2e/0x40 [ 2635.495322][T12542] evdev_handle_get_val+0x70/0x9f0 [ 2635.501984][T12542] evdev_ioctl_handler+0x127b/0x1fe0 [ 2635.508807][T12542] __se_sys_ioctl+0xfc/0x170 [ 2635.514940][T12542] do_syscall_64+0x14d/0xf80 [ 2635.521070][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2635.528529][T12542] } [ 2635.531002][T12542] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 2635.539161][T12542] ... acquired at: [ 2635.542947][T12542] _raw_spin_lock+0x2e/0x40 [ 2635.547599][T12542] evdev_handle_get_val+0x70/0x9f0 [ 2635.552858][T12542] evdev_ioctl_handler+0x127b/0x1fe0 [ 2635.558289][T12542] __se_sys_ioctl+0xfc/0x170 [ 2635.563034][T12542] do_syscall_64+0x14d/0xf80 [ 2635.567775][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2635.573813][T12542] [ 2635.576133][T12542] [ 2635.576133][T12542] the dependencies between the lock to be acquired [ 2635.576139][T12542] and SOFTIRQ-irq-unsafe lock: [ 2635.589605][T12542] -> (tasklist_lock){.+.+}-{3:3} { [ 2635.594955][T12542] HARDIRQ-ON-R at: [ 2635.599102][T12542] lock_acquire+0xf0/0x2e0 [ 2635.605506][T12542] _raw_read_lock+0x36/0x50 [ 2635.611986][T12542] __do_wait+0xde/0x740 [ 2635.618120][T12542] do_wait+0x1e7/0x540 [ 2635.624177][T12542] kernel_wait+0xd6/0x1c0 [ 2635.630666][T12542] call_usermodehelper_exec_work+0xbe/0x230 [ 2635.638549][T12542] process_scheduled_works+0xb6e/0x18c0 [ 2635.646102][T12542] worker_thread+0xa53/0xfc0 [ 2635.652673][T12542] kthread+0x388/0x470 [ 2635.658724][T12542] ret_from_fork+0x51e/0xb90 [ 2635.665356][T12542] ret_from_fork_asm+0x1a/0x30 [ 2635.672134][T12542] SOFTIRQ-ON-R at: [ 2635.676276][T12542] lock_acquire+0xf0/0x2e0 [ 2635.682673][T12542] _raw_read_lock+0x36/0x50 [ 2635.689147][T12542] __do_wait+0xde/0x740 [ 2635.695297][T12542] do_wait+0x1e7/0x540 [ 2635.701339][T12542] kernel_wait+0xd6/0x1c0 [ 2635.707639][T12542] call_usermodehelper_exec_work+0xbe/0x230 [ 2635.715513][T12542] process_scheduled_works+0xb6e/0x18c0 [ 2635.723052][T12542] worker_thread+0xa53/0xfc0 [ 2635.729696][T12542] kthread+0x388/0x470 [ 2635.735750][T12542] ret_from_fork+0x51e/0xb90 [ 2635.742320][T12542] ret_from_fork_asm+0x1a/0x30 [ 2635.749065][T12542] INITIAL USE at: [ 2635.753106][T12542] lock_acquire+0xf0/0x2e0 [ 2635.759425][T12542] _raw_write_lock_irq+0x3d/0x50 [ 2635.766273][T12542] copy_process+0x247a/0x3cd0 [ 2635.772847][T12542] kernel_clone+0x248/0x8e0 [ 2635.779234][T12542] user_mode_thread+0x110/0x180 [ 2635.785970][T12542] rest_init+0x23/0x300 [ 2635.792011][T12542] start_kernel+0x385/0x3d0 [ 2635.798477][T12542] x86_64_start_reservations+0x24/0x30 [ 2635.805859][T12542] x86_64_start_kernel+0x143/0x1c0 [ 2635.812855][T12542] common_startup_64+0x13e/0x147 [ 2635.819678][T12542] INITIAL READ USE at: [ 2635.824158][T12542] lock_acquire+0xf0/0x2e0 [ 2635.830898][T12542] _raw_read_lock+0x36/0x50 [ 2635.837719][T12542] __do_wait+0xde/0x740 [ 2635.844194][T12542] do_wait+0x1e7/0x540 [ 2635.850579][T12542] kernel_wait+0xd6/0x1c0 [ 2635.857224][T12542] call_usermodehelper_exec_work+0xbe/0x230 [ 2635.865440][T12542] process_scheduled_works+0xb6e/0x18c0 [ 2635.873308][T12542] worker_thread+0xa53/0xfc0 [ 2635.880219][T12542] kthread+0x388/0x470 [ 2635.886617][T12542] ret_from_fork+0x51e/0xb90 [ 2635.893541][T12542] ret_from_fork_asm+0x1a/0x30 [ 2635.900722][T12542] } [ 2635.903375][T12542] ... key at: [] tasklist_lock+0x18/0x40 [ 2635.911377][T12542] ... acquired at: [ 2635.915335][T12542] _raw_read_lock+0x36/0x50 [ 2635.919987][T12542] send_sigio+0x101/0x370 [ 2635.924463][T12542] dnotify_handle_event+0x169/0x440 [ 2635.929809][T12542] fsnotify+0x1831/0x1ae0 [ 2635.934281][T12542] path_openat+0x15c2/0x3860 [ 2635.939024][T12542] do_file_open+0x23e/0x4a0 [ 2635.943677][T12542] do_sys_openat2+0x113/0x200 [ 2635.948509][T12542] __x64_sys_creat+0x8f/0xc0 [ 2635.953512][T12542] do_syscall_64+0x14d/0xf80 [ 2635.958271][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2635.964414][T12542] [ 2635.966732][T12542] -> (&f_owner->lock){....}-{3:3} { [ 2635.972108][T12542] INITIAL USE at: [ 2635.976077][T12542] lock_acquire+0xf0/0x2e0 [ 2635.982225][T12542] _raw_write_lock_irq+0x3d/0x50 [ 2635.988879][T12542] __f_setown+0x67/0x370 [ 2635.995010][T12542] fcntl_dirnotify+0x3f9/0x6a0 [ 2636.001675][T12542] do_fcntl+0x77e/0x1a20 [ 2636.008243][T12542] __se_sys_fcntl+0xc8/0x150 [ 2636.014896][T12542] do_syscall_64+0x14d/0xf80 [ 2636.021662][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.029730][T12542] INITIAL READ USE at: [ 2636.034173][T12542] lock_acquire+0xf0/0x2e0 [ 2636.040868][T12542] _raw_read_lock_irqsave+0x48/0x60 [ 2636.048239][T12542] send_sigio+0x38/0x370 [ 2636.054647][T12542] dnotify_handle_event+0x169/0x440 [ 2636.062178][T12542] fsnotify+0x1831/0x1ae0 [ 2636.068694][T12542] path_openat+0x15c2/0x3860 [ 2636.075642][T12542] do_file_open+0x23e/0x4a0 [ 2636.082303][T12542] do_sys_openat2+0x113/0x200 [ 2636.089143][T12542] __x64_sys_openat+0x138/0x170 [ 2636.096150][T12542] do_syscall_64+0x14d/0xf80 [ 2636.102896][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.111197][T12542] } [ 2636.113759][T12542] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2636.122747][T12542] ... acquired at: [ 2636.126613][T12542] _raw_read_lock_irqsave+0x48/0x60 [ 2636.131962][T12542] send_sigio+0x38/0x370 [ 2636.136441][T12542] kill_fasync+0x24d/0x4d0 [ 2636.141030][T12542] lease_break_callback+0x26/0x30 [ 2636.146232][T12542] __break_lease+0x81c/0x1e80 [ 2636.151151][T12542] __vfs_setxattr_locked+0x204/0x2c0 [ 2636.156589][T12542] vfs_setxattr+0x163/0x360 [ 2636.161243][T12542] filename_setxattr+0x296/0x630 [ 2636.166332][T12542] path_setxattrat+0x3eb/0x440 [ 2636.171257][T12542] __x64_sys_lsetxattr+0xbf/0xe0 [ 2636.176340][T12542] do_syscall_64+0x14d/0xf80 [ 2636.181164][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.187237][T12542] [ 2636.189536][T12542] -> (&new->fa_lock){....}-{3:3} { [ 2636.194632][T12542] INITIAL USE at: [ 2636.198545][T12542] lock_acquire+0xf0/0x2e0 [ 2636.204507][T12542] _raw_write_lock_irq+0x3d/0x50 [ 2636.210982][T12542] fasync_remove_entry+0xf1/0x1c0 [ 2636.217545][T12542] lease_modify+0x4f7/0x6c0 [ 2636.223588][T12542] locks_remove_file+0x5f0/0xf70 [ 2636.230081][T12542] __fput+0x3ae/0xa70 [ 2636.235618][T12542] task_work_run+0x1d9/0x270 [ 2636.241747][T12542] exit_to_user_mode_loop+0xed/0x480 [ 2636.248568][T12542] do_syscall_64+0x32d/0xf80 [ 2636.254693][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.262134][T12542] INITIAL READ USE at: [ 2636.266436][T12542] lock_acquire+0xf0/0x2e0 [ 2636.272827][T12542] _raw_read_lock_irqsave+0x48/0x60 [ 2636.279996][T12542] kill_fasync+0x199/0x4d0 [ 2636.286381][T12542] lease_break_callback+0x26/0x30 [ 2636.293388][T12542] __break_lease+0x81c/0x1e80 [ 2636.300039][T12542] __vfs_setxattr_locked+0x204/0x2c0 [ 2636.307296][T12542] vfs_setxattr+0x163/0x360 [ 2636.313779][T12542] filename_setxattr+0x296/0x630 [ 2636.320699][T12542] path_setxattrat+0x3eb/0x440 [ 2636.327431][T12542] __x64_sys_lsetxattr+0xbf/0xe0 [ 2636.334356][T12542] do_syscall_64+0x14d/0xf80 [ 2636.340919][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.348786][T12542] } [ 2636.351264][T12542] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2636.359927][T12542] ... acquired at: [ 2636.363724][T12542] _raw_read_lock_irqsave+0x48/0x60 [ 2636.369073][T12542] kill_fasync+0x199/0x4d0 [ 2636.373647][T12542] evdev_pass_values+0x627/0xbd0 [ 2636.378737][T12542] evdev_events+0x1e6/0x340 [ 2636.383388][T12542] input_pass_values+0x288/0x890 [ 2636.388471][T12542] input_event_dispose+0x330/0x6b0 [ 2636.393730][T12542] input_inject_event+0x1dd/0x340 [ 2636.398898][T12542] evdev_write+0x325/0x4c0 [ 2636.403462][T12542] vfs_write+0x29a/0xb90 [ 2636.407848][T12542] ksys_write+0x150/0x270 [ 2636.412320][T12542] do_syscall_64+0x14d/0xf80 [ 2636.417056][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.423099][T12542] [ 2636.425401][T12542] [ 2636.425401][T12542] stack backtrace: [ 2636.431262][T12542] CPU: 1 UID: 0 PID: 12542 Comm: syz.1.9791 Tainted: G L syzkaller #0 PREEMPT(full) [ 2636.431278][T12542] Tainted: [L]=SOFTLOCKUP [ 2636.431281][T12542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2636.431288][T12542] Call Trace: [ 2636.431294][T12542] [ 2636.431298][T12542] dump_stack_lvl+0xe8/0x150 [ 2636.431313][T12542] __lock_acquire+0x2a94/0x2cf0 [ 2636.431330][T12542] lock_acquire+0xf0/0x2e0 [ 2636.431341][T12542] ? kill_fasync+0x199/0x4d0 [ 2636.431353][T12542] _raw_read_lock_irqsave+0x48/0x60 [ 2636.431363][T12542] ? kill_fasync+0x199/0x4d0 [ 2636.431372][T12542] kill_fasync+0x199/0x4d0 [ 2636.431381][T12542] ? kill_fasync+0x53/0x4d0 [ 2636.431390][T12542] evdev_pass_values+0x627/0xbd0 [ 2636.431406][T12542] ? evdev_pass_values+0x611/0xbd0 [ 2636.431420][T12542] evdev_events+0x1e6/0x340 [ 2636.431432][T12542] ? evdev_events+0x79/0x340 [ 2636.431444][T12542] ? input_pass_values+0x8d/0x890 [ 2636.431457][T12542] input_pass_values+0x288/0x890 [ 2636.431470][T12542] ? input_handle_event+0x70c/0xf30 [ 2636.431481][T12542] input_event_dispose+0x330/0x6b0 [ 2636.431491][T12542] input_inject_event+0x1dd/0x340 [ 2636.431502][T12542] ? input_inject_event+0xb6/0x340 [ 2636.431512][T12542] evdev_write+0x325/0x4c0 [ 2636.431526][T12542] ? __pfx_evdev_write+0x10/0x10 [ 2636.431539][T12542] ? bpf_lsm_file_permission+0x9/0x20 [ 2636.431551][T12542] ? security_file_permission+0x75/0x260 [ 2636.431564][T12542] ? rw_verify_area+0x255/0x4d0 [ 2636.431574][T12542] ? __pfx_evdev_write+0x10/0x10 [ 2636.431586][T12542] vfs_write+0x29a/0xb90 [ 2636.431597][T12542] ? __pfx_vfs_write+0x10/0x10 [ 2636.431606][T12542] ? __pfx_do_futex+0x10/0x10 [ 2636.431619][T12542] ksys_write+0x150/0x270 [ 2636.431628][T12542] ? __pfx_ksys_write+0x10/0x10 [ 2636.431639][T12542] do_syscall_64+0x14d/0xf80 [ 2636.431649][T12542] ? trace_irq_disable+0x3b/0x150 [ 2636.431662][T12542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.431671][T12542] ? clear_bhb_loop+0x40/0x90 [ 2636.431681][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.431690][T12542] RIP: 0033:0x7fdead39c799 [ 2636.431705][T12542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2636.431714][T12542] RSP: 002b:00007fdeae184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2636.431725][T12542] RAX: ffffffffffffffda RBX: 00007fdead616090 RCX: 00007fdead39c799 [ 2636.431732][T12542] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 2636.431738][T12542] RBP: 00007fdead432c99 R08: 0000000000000000 R09: 0000000000000000 [ 2636.431744][T12542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2636.431750][T12542] R13: 00007fdead616128 R14: 00007fdead616090 R15: 00007fdead73fa48 [ 2636.431759][T12542] [ 2636.920794][ T8457] usb 3-1: USB disconnect, device number 126 [ 2638.752797][T12545] Bluetooth: hci0: command 0x0406 tx timeout