last executing test programs: 30.073192761s ago: executing program 0 (id=1079): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff70) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x4}, 0x8) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x5, &(0x7f00000000c0)=0x1) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="846cb78afbe02da53bdb47824464b10100d4ebc43734c99d9b8cf4ab4cb49805", 0x20}], 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) (async) syz_usb_disconnect(r0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff70) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x4}, 0x8) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) ioctl$TCXONC(r2, 0x540a, 0x2) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x5, &(0x7f00000000c0)=0x1) (async) ioctl$TCXONC(r2, 0x540a, 0x1) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="846cb78afbe02da53bdb47824464b10100d4ebc43734c99d9b8cf4ab4cb49805", 0x20}], 0x1) (async) 28.333669815s ago: executing program 0 (id=1090): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x9, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$dsp(r0, &(0x7f0000000100)="2aa48d6ef8ea23bb7dad5dbe83ca7b0e15aaf433e45cfdd891d7e40ce3431f4cc3c2a42ce828ac252f951167b5d8e9b39f506ef857455e9bd49907b0b374b1cc033897a037dea26a2898bce65ce3a2f2c5e399c33666", 0x56) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100036e80e220f0031d582aa7030109021b00020507200909044b0000ff0107050904381100c5685aff"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 27.228889698s ago: executing program 3 (id=1100): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x20, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xfffffffffffffffc, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x8, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x9, 0x7, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000640)={r4, r5, r6, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = io_uring_setup(0x1386, &(0x7f0000000040)={0x0, 0x1589, 0x100, 0x1, 0x39}) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595d, 0x800, 0x0, 0x4f, 0x0, r8}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}}) r12 = syz_io_uring_complete(r9, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x400000b6, 0x0, 0x7f}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 24.981831805s ago: executing program 0 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000840)={0x7, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0xde23, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x108) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="070000000000000002004e21e0000001"], 0x90) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = epoll_create1(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xffffffffffffffff}]}) ioctl$FS_IOC_SETFLAGS(r4, 0x80088a02, &(0x7f0000000000)=0x100) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x200, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4, 0x3}, 0x10) bind$tipc(r11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4001, 0x1}, 0x10) bind$tipc(r10, 0x0, 0x0) close(r10) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x204142, 0x0) read$alg(r12, &(0x7f0000000340)=""/56, 0x38) writev(r8, &(0x7f0000000480)=[{&(0x7f00000001c0)="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"/375, 0xfffffffffffffe6c}, {0x0}, {&(0x7f00000004c0)="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", 0xf2}, {0x0, 0xffffffffffffffb5}], 0x100000000000037d) 23.966262376s ago: executing program 2 (id=1117): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x1, 0x2, 0x355, 0x0, 0x11}) syz_usbip_server_init(0x3) 23.89827357s ago: executing program 3 (id=1119): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0xf7fffffc, 0x1, 0x0, 0x800, 0x0, r2}, 0x0, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r6 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'veth0\x00'}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000240)={r8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x200400) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003b1528bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r6, @ANYRESHEX=r3], 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 23.538573042s ago: executing program 0 (id=1124): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x93) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564) madvise(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0xb) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000814000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x0, 0x0, 0x0, 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = creat(&(0x7f0000000140)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, 0x0, 0x0) r6 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000680)) r7 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, 0x0, 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff91) 23.409752448s ago: executing program 2 (id=1125): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d800000117"], 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008800) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r8, 0x80044df9, &(0x7f0000000780)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 23.303139423s ago: executing program 2 (id=1126): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x400, 0x0, 0x100}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) 23.253884638s ago: executing program 2 (id=1127): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x28, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) 22.415508641s ago: executing program 3 (id=1129): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$midi(0x2, 0xb4, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x1, 0x1, 0x0, 0xd0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x92}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x0, 0x3, [{0xf5, 0x3}, {0x6, 0x7}, {0x9, 0x4}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xd924, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0xd0, 0x7, [{0xe, 0x8}, {0xfb, 0x6}, {0x7, 0x2}, {0xf9, 0x81}, {0x10, 0x5}, {0xfe, 0x1}, {0x41, 0x80}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xd9, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x7, 0x9, {0x14, 0x25, 0x1, 0x10, "4c812b13142363783c0cc685a534641a"}}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x7, 0x1, 0x7f, {0xf, 0x25, 0x1, 0xb, "87efd588289d69aade56fa"}}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5b, 0x7f, 0xc, {0x8, 0x25, 0x1, 0x4, "41cd923e"}}}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0xca, 0x4c, 0x40, 0x1}, 0x6d, &(0x7f0000000140)={0x5, 0xf, 0x6d, 0x3, [@generic={0x5a, 0x10, 0x3, "12ca55c0217a2656bafe216256eeca5d5942291ef357a1321b599d943117940c2321251dd3fb0baf2507c56d651a6ad2c348ac762cb24162d613a67053f6b82acc3d9b73f43d1494d966c3e0cdf4fb74e4639747400bd6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0xb, 0x9, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x25, &(0x7f00000001c0)=@string={0x25, 0x3, "6f48eb10ad4519e24e8cdaceb06bbace5f560afe752a366978a5ebd04f5fce16b31102"}}, {0x51, &(0x7f0000000200)=@string={0x51, 0x3, "3a6ff19369885994d11b71048e26a329c8cb9c651f1f60c4bcca8eb57566ac8b117ed735bed7a22be4ca51323b2c859f1c973ac038a9d982fcdc9971cfc1a30abd73e0ec868b51a5b01f93c1c79608"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x426}}, {0x40, &(0x7f0000000300)=@string={0x40, 0x3, "4d046054194f79b052c9898df9243aeb74fb04eaf409bcb049b560b4ca1424e61c06690093b1c9d07e551a6538c58c695f17077326dc7f8fc05fd21c08d9"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 21.525400722s ago: executing program 2 (id=1131): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000030500000400fddbde3500000000", @ANYRES32=0x0, @ANYBLOB="610001000000000008001e0081000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000f00)="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", 0x2000, &(0x7f0000005440)={&(0x7f00000001c0)={0x50, 0x0, 0x6, {0x7, 0x2d, 0xff, 0x1402c004, 0xcd, 0x6, 0x6, 0x7ff, 0x0, 0x0, 0x8, 0x8}}, &(0x7f0000000140)={0x18, 0x0, 0x3fb, {0x1}}, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x3, {0x60d8f271}}, &(0x7f00000002c0)={0x18, 0x0, 0x80, {0x2}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x9169}}, &(0x7f0000000380)={0x28, 0x0, 0x8001, {{0x3, 0x4}}}, &(0x7f00000003c0)={0x60, 0x0, 0x6830, {{0xfffffffffffffff9, 0x1f, 0x0, 0x7, 0x7, 0x9, 0x2, 0xf}}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x6, {0x53}}, &(0x7f0000000480)={0x16, 0x0, 0x8, {'{/}-}\x00'}}, &(0x7f00000004c0)={0x20, 0x0, 0xd626, {0x0, 0x8}}, &(0x7f0000000640)={0x78, 0xffffffffffffffda, 0x7, {0x6, 0xe2af, 0x0, {0x2, 0x3, 0xffe, 0x4, 0x3, 0x4, 0x800, 0x4b79, 0x4, 0x8000, 0xe48, 0x0, 0x0, 0x4, 0xfffffffc}}}, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x6, {0x4, 0x3, 0xfffffffffffffff8, 0x100, 0x7, 0xa, {0x0, 0x0, 0x4b, 0x4, 0x5, 0x196, 0x1ff, 0x2ad, 0xe, 0x2000, 0x4, 0x0, 0x0, 0x3, 0x9}}}, &(0x7f0000000780)=ANY=[@ANYBLOB="58000000feffffffff070000000000000200000000000000050000000000000001000000060000002c000000000000000600000000200000000000800000000009000000ff7f00002f6465762f7367230000000000000000"], &(0x7f0000000940)=ANY=[@ANYBLOB="3803000000000000c00d000000000000010000000000000002000000000000000100008000000000de0e00000000000000000500ffffff7f0000000000000000080000000000000031f800000000000000020000000000000e00000000000000665a000000000000fbffffff04000000fa00000000800000ff070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000ffffff7f0000000006000000000000000b0000000000000008000000090000006272696467653000010000000000000001000000000000000000000000000000a603000000000000000100000f0000000200000000000000443a0000000000000100000000000000ffff000000000000080000000000000009000000000000001000000006000000000000000020000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a3a6e01e40000000000000000600000000000000090000000000000003000000060000007d2e250000000000000000000000000000000000000000000200000000000000f90700000000000000020000e6060000050000000000000006000000000000000300000000000000ffffffffffffff7f1c000000000000000400000000000000ff0f00000100000008000000002000000200000019607c65fb5d3d", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00080000020000000000000005000000000000008ea2ffffffffffff040000000104000066756c6c00000000020000000000000003000000000000004f0b000000000000feffffffffffffff04000000a0c90000040000000000000008000000000000001300000000000000000000000100000003000000000000008e0e0000000000009c7500000c000000010000000010000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000080000000000000000000000000000000100008000000000090000000e0000002f6465762f7367230000000000000000060000000000000002000000000000000b0000000000000002000000000000000900000009000000050000000000000002000000000000000800000000000000fa0300000000000004000000000000000700000000000000ffffffff06000000c10700000020000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a000000090000000000000000000000000000000000010000000000040000000100010066756c6c00000000"], &(0x7f0000000cc0)={0xa0, 0x0, 0x930b, {{0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x8, {0x1, 0x0, 0x100000001, 0xb, 0xcc, 0x2, 0xfffffaca, 0xd9, 0x7, 0x2000, 0x9, 0x0, 0xee01, 0x6, 0x8}}, {0x0, 0x2}}}, &(0x7f0000000d80)={0x20, 0x0, 0xfff, {0x3, 0x4, 0xd0a, 0x1ff}}, &(0x7f0000005300)={0x130, 0x0, 0x5, {0x7a2c90, 0x4, 0x0, '\x00', {0x800, 0xff, 0x4, 0x4, 0x0, 0x0, 0xc000, '\x00', 0x7, 0xff, 0x1, 0x4, {0x3, 0x200}, {0x6, 0x1}, {0xffffffff, 0x3}, {0x8, 0x7fff}, 0x2, 0x8, 0x200, 0x2}}}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) write$cgroup_pressure(r4, &(0x7f0000000180)={'full', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x10) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xfff}, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) 20.660429957s ago: executing program 1 (id=1139): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x7, &(0x7f0000000140)=[{0x6, 0x85, 0x7, 0x7ffc0001}, {0x5, 0x1, 0x7, 0x10}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x8, 0x3, 0x1ff}, {0x4, 0x40, 0x1, 0x8000}, {0x8001, 0x4, 0x1, 0x8}, {0x6, 0x89, 0xff, 0x7fffffff}]}) (async, rerun: 32) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) r1 = gettid() ioprio_get$pid(0x2, r1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r2, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x8000000000000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 20.535064437s ago: executing program 3 (id=1141): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0xf7fffffc, 0x1, 0x0, 0x800, 0x0, r2}, 0x0, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'veth0\x00'}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000240)={r7}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x200400) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003b1528bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r6, @ANYRESHEX=r3], 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 20.393915468s ago: executing program 0 (id=1142): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="40170d0000000560b833179f115be4d6"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) 20.298193013s ago: executing program 1 (id=1143): syz_usb_connect$cdc_ecm(0x4, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x53, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "63a264ec"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x1, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm_detail={0x10, 0x24, 0x13, 0x92, "1577be4663dacfae9fdc8ad3"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x32, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x100, 0x9c, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0xe, 0x9, 0x40, 0xfb}, 0x5e, &(0x7f00000000c0)={0x5, 0xf, 0x5e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x80, 0x20, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x800, 0x0, 0x5, [0x0, 0xff0000, 0xffc0c0, 0x5f3f, 0x3f00, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3a, "b1552286b42403fdb7f646b95f03601b"}, @ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x6, 0xf00f, 0x4, [0x0, 0x6f]}, @ptm_cap={0x3}]}, 0xa, [{0x102, &(0x7f0000000140)=@string={0x102, 0x3, "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"}}, {0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "058365be7214ce9aa4627d99360f647206ffd6e234a44c4e2651bc22baf0096774bc335eef45b69def86eb3837a8130e17973e4dede932ce8eae0d3d1f2c6cc31a6fe85cdef951c9675ac6538b7035ba977c6997b66bd877b279"}}, {0xcd, &(0x7f0000000300)=@string={0xcd, 0x3, "6f791fae068a2aa7529bc413f295f891d493200afb242ba55a977898f9db51fe2da4c36e297bbfbd049ca0023e03d1720a0bb2543e5f61c7ea5f68f22fa945521361d6dfd4d762c8d14dc99b536cd7677e748c94d71b4a604d0789e686a169d67136e504943baeb2448a34136d64ec3f7c79d0a5637635e6b816aa4d805a224464dea495a7910b69ab36cf32b59f9e8139c27b0663df9b56481f51fabdd6fcab1710d807128c47010e422c481382a1af31e709811cb5b8ce2e9e047d5fcdc44bde9675afe20f6e8f858273"}}, {0x46, &(0x7f0000000400)=@string={0x46, 0x3, "633ab2bf660eb8513f4f95c139479fac69009b94674ca0e2f4cc18c94addb5c1f8471dc71352aefdf0fc9991963af3f6d7484c1075a9af304a3e1f59d165c2a2d019ca0c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xbdd9cf043c4579c2}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4e, &(0x7f0000000500)=@string={0x4e, 0x3, "a846fcfb6f057ac9b663e35ebd0544f7c5199ca165b20a874d84339bae191784f7ee2cbd2c80ce246c4d263365d1c387e8ce78fe9981ed26cf8069727d8082367c6cb35867676d23d7a28641"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x4e, &(0x7f00000005c0)=@string={0x4e, 0x3, "3b73f8c71c8817c891d5adfd55f260c9183ff0033878efcc61c0e3f6238b9ad58c1d4c4e11e3465bc6921bc9195197c90d86c7d2c03faccf6f2110411f84017178e6bc5f11a2b3d0122076f7"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x200a}}]}) (async) syz_usb_connect$cdc_ecm(0x4, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x53, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "63a264ec"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x1, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm_detail={0x10, 0x24, 0x13, 0x92, "1577be4663dacfae9fdc8ad3"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x32, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x100, 0x9c, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0xe, 0x9, 0x40, 0xfb}, 0x5e, &(0x7f00000000c0)={0x5, 0xf, 0x5e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x80, 0x20, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x800, 0x0, 0x5, [0x0, 0xff0000, 0xffc0c0, 0x5f3f, 0x3f00, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3a, "b1552286b42403fdb7f646b95f03601b"}, @ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x6, 0xf00f, 0x4, [0x0, 0x6f]}, @ptm_cap={0x3}]}, 0xa, [{0x102, &(0x7f0000000140)=@string={0x102, 0x3, "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"}}, {0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "058365be7214ce9aa4627d99360f647206ffd6e234a44c4e2651bc22baf0096774bc335eef45b69def86eb3837a8130e17973e4dede932ce8eae0d3d1f2c6cc31a6fe85cdef951c9675ac6538b7035ba977c6997b66bd877b279"}}, {0xcd, &(0x7f0000000300)=@string={0xcd, 0x3, "6f791fae068a2aa7529bc413f295f891d493200afb242ba55a977898f9db51fe2da4c36e297bbfbd049ca0023e03d1720a0bb2543e5f61c7ea5f68f22fa945521361d6dfd4d762c8d14dc99b536cd7677e748c94d71b4a604d0789e686a169d67136e504943baeb2448a34136d64ec3f7c79d0a5637635e6b816aa4d805a224464dea495a7910b69ab36cf32b59f9e8139c27b0663df9b56481f51fabdd6fcab1710d807128c47010e422c481382a1af31e709811cb5b8ce2e9e047d5fcdc44bde9675afe20f6e8f858273"}}, {0x46, &(0x7f0000000400)=@string={0x46, 0x3, "633ab2bf660eb8513f4f95c139479fac69009b94674ca0e2f4cc18c94addb5c1f8471dc71352aefdf0fc9991963af3f6d7484c1075a9af304a3e1f59d165c2a2d019ca0c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xbdd9cf043c4579c2}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4e, &(0x7f0000000500)=@string={0x4e, 0x3, "a846fcfb6f057ac9b663e35ebd0544f7c5199ca165b20a874d84339bae191784f7ee2cbd2c80ce246c4d263365d1c387e8ce78fe9981ed26cf8069727d8082367c6cb35867676d23d7a28641"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x4e, &(0x7f00000005c0)=@string={0x4e, 0x3, "3b73f8c71c8817c891d5adfd55f260c9183ff0033878efcc61c0e3f6238b9ad58c1d4c4e11e3465bc6921bc9195197c90d86c7d2c03faccf6f2110411f84017178e6bc5f11a2b3d0122076f7"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_open_dev$dri(&(0x7f0000000740), 0x2, 0x608902) (async) r0 = syz_open_dev$dri(&(0x7f0000000740), 0x2, 0x608902) syz_usb_connect(0x2, 0x780, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x92, 0x2f, 0x2e, 0xff, 0x12d1, 0xebc, 0xeeab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76e, 0x2, 0x5, 0x6, 0x40, 0x5, "", [{{0x9, 0x4, 0x9, 0x2, 0x7, 0xff, 0x4, 0xa, 0x8, [@generic={0x67, 0xb, "9179cb8a1e12b8e9e2d0a6792ceea1d6bf6b6509c0795d13bdbaed322a82ae3b63c6a46fa65a2f77e87996ac8480c9121376ca9a5d95dfbcc7123e059d8a7e5aa8120df0df0066fe29a1b4e67f922417bc255bf182f64e3f456ad2283a6b07f13675e8b55b"}], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x7, 0x9, 0xb}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xff, 0xfc, 0x7, [@generic={0xa2, 0x92975e6aa34d4411, "a31fe39cb4db58d9ed6b77543f9645aed48806b1afe3f589370420a00d17edfd18565a387a26231d22a60942c8eb238d5fd0fcc991f2f64fe8a5d1d9008cf17dfc7285023eb3a97c80ca5e18e2faf1d263c94bb337b5e86c0089fea40e6d36b20324782fa7e0736d97a2e75c959ea4c9ee96f301f384bc5c62a251109807b491357f3af858eb9411e28eff2b94398b49af7691d14026172d4a29f47716b1385f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0xfd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x0, 0xf7, 0x3, [@generic={0x44, 0x11, "af5dfb2f7081a380aafee474c2f894a18ea828f5304e98cd78fc47210111a668dfd72da9e8c67b48bc46a71e941ef0fe28fdc54030e31c4088e5df8ed2f7d317dc51"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x6, 0x6, 0x36}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x1, 0x0, 0x7f, [@generic={0xd7, 0x24, "54ad7f134fe9eaaedcd013ec0363a2d5fb9f8d686dd70b6ab4f1c2015fb4c1438f6f30c43e222e9f252493999b88008ba7cc4c17a918674b88581d018c5f12436eeffac6bcc26248c2b2f7a6bf7e652c6827e9cae67cbca2de3d38cebca16dcfd8870001b2a227c37ef4fd7f94e917d8fb15d769f15d1528700833cc417719be5e5af564576f60ab62cb6c519ec6f74bfd11bbc62c726f39abecf189565b2f98d1633076488f1c229f51c0960623ce515a4c704b0c42f1603373fbc4fa04883898646c739d38ee711b3da3f89a1cf58daf8e493148"}, @generic={0x20, 0x21, "06e186d86349774701059fb284cc31d3f28d0a5f618c7e75d4e3933809b0"}]}}, {{0x9, 0x5, 0xf, 0x5, 0x30, 0x2, 0x7, 0x1}}]}}, {{0x9, 0x4, 0x6f, 0x50, 0xc, 0x61, 0xee, 0xcc, 0x7f, [@hid_hid={0x9, 0x21, 0xfff7, 0x2, 0x1, {0x22, 0xdc2}}], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfd, 0x6, 0x5}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x0, 0x80, 0x24, [@generic={0x6a, 0x23, "daa5ac5a63597dc24f1358f9d7e32b2011550a46ae5522b5816de871bccdb5b29654f088a9383d2a03c5ac2c0eaa21f545f6c8608bbf120719726fb2bcab54bb4ba0b47ef7db3cc646f31eec48c11ce7985255954c650e520ef4302dba1aa9cd14389649fc11d471"}, @generic={0x98, 0xb, "ecac09009c75d0dbaa48c41df277b12808d919b9bea7205da58c05fff389fa55cdb1f715805bba4447589e038e881f65d00a1adba87805b5014e10ec6bbb54833ef4a5eb18e1f71410ccd125db81bab853ab49a9a8110aacd3d5a032b556deb64f27916787e940fd7a97cf457c81c25bd94a94d3df297c4ca2d5e7ed7d7bd75956b39fc85ff7f0f0d08a79d4d4dbb600ce5967087e4b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x0, 0x9}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0xf9, 0xa2, 0x2, [@generic={0x8d, 0x24, "85db2cb388878c18ce3c5636322a9d627f97ab8c893936184de04a77c9183a679f6666069a576a93c6e1ce7505e7795190b1c25871f0f2cfd752f6c24126b68bb57e26ebadec02dda1f2560b8cd142c5f3710ec79e4d67ceeda22fea0476909ef5b4c7fbc953f111fc6280db4e2c4950168b1e3f21b512e733f67843849286a0b5b9138a6bd54729c0e5e9"}, @generic={0x1d, 0xe, "0cb45cf7dcfb8c75402c31376338fa8a767568b6205b3f00d8528f"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0xf0, 0x2f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x91, 0xd}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xff, 0x7, 0x1}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x2, 0xa3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0xad5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x7}, @generic={0x78, 0x21, "1b53b181f8f8a6bd59105d951001ea3a0d0e37f10c10a1d8721d3c782ccdbf1383a9c653edcd56a4932d6b3c9344ee00e76805471b9ad2f32ce1308cd966540d5c5647ba8784cf3bf1c11aef46808392c8d344b6daa19fdf1a7bd66a13cc2f79de39a630c7d3d32e13b55f14b01b7bb466efaaaac9a4"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x4, 0x2, 0x9, [@generic={0x25, 0x2, "4ef92c63044612764fcd55ce085e960fa4bef81c5c90b664854ccf322445271766502e"}, @generic={0x88, 0xc, "7133a1921c3dd9d3f9e59370b2b4efdd1f0e7e6021a6bfbe790898efe4a64abebe5c232e336695ecd9f12d7847998be26c4e6ee6821b4574135b69c3666fbd2bb36147efe16fc6b941162e9508f0dd65ca7a9a33604623c017f7ec7b95b01bdb843cd88662318a3575ad681f9d9666796c0779a4580c22ba181828962190f33d7492185d60c5"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0x8b}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x81, 0x6, 0x5, [@generic={0xed, 0x31, "eb8c6724e172e54d1849430bba041c0ce568c3d0e0013b8ed4d8cdfeea0bd50967ce434a1a568d8e9b7442254ac40192842b349eb5bb5bd5047ccd46a0860292856c96ea635ad63a8c4bb401202d032adfdcd13269aed8e0205d4284624cc9f2f41950ccf1ae36eeaa45cbbc14bc95c2a76ebdb25356a2899daae198784439a8ca871bd28a84e0f47211cf93e065c3b29bde84b43ed8b4e6346ed1af3ad3fc076c2bc26c5ded14152171f92dca7747bb0f0ea06cf59b4f66c917f70d225ac612088c6e7af23007bf7d3d5095600c3944d6d57dd54c4ecde52c719f8f2c3bbca284fb64d3a7b1e7c6df3937"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x5, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x7}, @generic={0x6c, 0xb, "71debeacc4833fa74b1507bd4eb707a41ad2a9dd96e1f8aa2e06a80a50db31cff58da6a0f6e5a9b5d198dedcd98951d9b9392ac1afc2925a48bbff225805dfcb9e20bd2e2dd5fe956df4eb566f2b97536aaa600199d749e94e3fed532f929aee3801bdda0dbeecb3b3ee"}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0x0, 0x2, 0x94, 0x10, 0xbe}, 0x102, &(0x7f0000000f40)={0x5, 0xf, 0x102, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x7, 0x7f}, @generic={0xd5, 0x10, 0x2, "a41df83ded443b487add8d7a1368144204b586994955190763769fb1783e230f502513c2ce6b8c693168eb691932b0deb30f1546efa7589a650f914699f46e6467df1637e52213f0f7519f5bc6e25401af622ebcfb9f6b3bbb21be0d83cedd201d667e08387518feed47ea2b97886c4b85059dd629804a6d3dde3a0d15970425b728d3a3043f96d3486664c0e3e7ab0525f2feb500d0fcc8c3246e15a32973122e44e4f19f76ddda629555dc5ff0ca86e80eac74a80e88f21389d9d0b40b3d6c375bf3c449a3aaa49c5b2821dab61ac400a5"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0xb, 0x4, 0x55ef, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x6c, 0x6, 0x0, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x8, 0x7, 0x7, 0xf}]}, 0x7, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x43f}}, {0xc2, &(0x7f00000010c0)=@string={0xc2, 0x3, "c3e044b96b218a0777f666d5d8b6a5f253d3384539e4b56285b207406296e0cb968285d8fd1435d66de3654b74f22df4b7edc6f711261cd16c0b85f0f719ec8ac318dbb6fc904c765384b1184ff937e34c62da1e4c35511274bda5677e5a7db432c1a557c9a832a50015d8b9167b2b123075d250a8103d8f20a61fe82a3dc624d1ed966a7cceb8624541ed64cc9ddbb289ee36ff1bfaee4d0d05a2ccfda23af3c0fa7348f1d5a30976e4f07e012ea5b38487978b851cd589029c6990f463c366"}}, {0x98, &(0x7f00000011c0)=@string={0x98, 0x3, "5be8905b59ba9534eddcdbf94dc6f1739efe164dc4eda4f8af45b4ebff486085e96bfe7e8746f74a6fdcf95f463baa542f766832a1e9c7f676383e830fee385d7106135962319f8f564b379365963831bf484610d6932e44f36c05cefb40dd623222a2a7c0fb811def11f434aac5898d83ae7e2b87eac9c114a3a633dbfd161c25e9eb3df875b659e28206bd74f78fc612d73b1dab1f"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0xb6bbf43fee73ea00}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x41c}}, {0xc0, &(0x7f0000001300)=@string={0xc0, 0x3, "9db91eb5449686c355baf8652d446c5093dad588afe00e96f0b62719750538a50c3014695ead3e381b701aa4e2e28fae2a4206abf14a8e13ed27ef9ef38da3d9ea3262631eda6b00993bef8ba3da72adb4a36f4448dcf899c5d06a0d75ffdf77cb26494022561420d6c448cf919ee34cce1f0ebd90e737b9fe4d676347b9f76989ff20d1206b05c34905f9f15b04a6194904aa8ab930ea328036f4e2d3e47066baf06e88d06e5f9d8b343a1871363204ee4d61a4b332c0d1d4477c9cf4e3"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x2401}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000014c0), 0x200, 0x0) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000014c0), 0x200, 0x0) sendfile(r1, r2, &(0x7f0000001500)=0x2, 0xb) syz_usb_connect$cdc_ncm(0x5, 0x93, &(0x7f0000001540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0xc, 0x10, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9da705a816d3"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x800, 0x3, 0xad}, {0x6, 0x24, 0x1a, 0x7f, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x6a, 0xb, 0x0, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xa1c9, 0x2, 0x3, 0x9, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x8, 0x80, 0x3d}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xd2, 0x2, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x1, 0xd1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x7}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x201, 0x1, 0x3, 0xe4, 0x40, 0xd}, 0x11f, &(0x7f0000001640)={0x5, 0xf, 0x11f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x0, 0xfd, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b21a66abc190b0379a5fd0c476faf5ad"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x43, 0x4f, 0x81}, @generic={0xe5, 0x10, 0x3, "5ec4962f41142746f6c88e58eefd1b778aa5aa4ddedaeda9c88abbf23b08da8d4623aa807dc4e81927a35ed62be78932da81b6ae695718bee84798ba23d4baf7ffacd68d4ce1225ab1c1c32c66e04cbac2bd67cd378dd9d4cf26ac62d402d9c08673459afc0a3c804d28622e136179e299a5a580f8baad29fd3ff1de3a447d5181dabfee7b38ce09790cd9c2fbfdcd70f4979c809b40e4978c8fb8a592c322bff69cab4d4b8f1e5e99df57f4162a29b5c6d1fc46c746cdee205270ef095eced2c80c61d32b31257c789db1f7efd1b31b8d5e86839b74626f045e6046bcc979633f6d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x5, 0x7, 0xb, 0x81}]}, 0x3, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x4870}}, {0x95, &(0x7f00000017c0)=@string={0x95, 0x3, "6fc0e5b9f73a36069006b1d9970c30b0ea511c63541cd89c9c8c8a23141170e6196726d6572bcc81f59f302be207df39410a8ff03b6047dba8a58886ecd55548442f01d96cc1cf0d2cb2f44c7985bba39b78915d91f12a0b4a0c979e01fd35986f76b2c9b76f194ce982e604277c8edf34f6c2c4c76da9a74cea6ffb8607b44a6cba90e566ca8440260a60b83633d04bd313a1"}}, {0xc7, &(0x7f0000001880)=@string={0xc7, 0x3, "10edd838f88459d06d909441d49484f002f6ab3b4c5af59b86982df5c2a48cf8f2e4eb67b26f5386d3bf164fd5b4f3378032476f49ec7f3d496f65a857dc8ad5a6f729a7f3bf6015b6c8abcab69199f3fcca13ddfa37b24132bc01c53aa5f6e44acc1c5d3d4fcac15a962eb3bf88fe434044e3f6859c8c3fdc443ea76092142e0fd60c4a92166fb3048a528652d81b3f5dc8844196602cc12f2257de1eb6b87002ac2a5042ce12b5cc4d6854866ba25c02ef9c511545c45263bcb9a783ba9fa9fad67a7e07"}}]}) (async) syz_usb_connect$cdc_ncm(0x5, 0x93, &(0x7f0000001540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0xc, 0x10, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9da705a816d3"}, {0x5, 0x24, 0x0, 0xb6}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x800, 0x3, 0xad}, {0x6, 0x24, 0x1a, 0x7f, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x6a, 0xb, 0x0, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xa1c9, 0x2, 0x3, 0x9, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x8, 0x80, 0x3d}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xd2, 0x2, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x1, 0xd1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x7}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x201, 0x1, 0x3, 0xe4, 0x40, 0xd}, 0x11f, &(0x7f0000001640)={0x5, 0xf, 0x11f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x0, 0xfd, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b21a66abc190b0379a5fd0c476faf5ad"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x43, 0x4f, 0x81}, @generic={0xe5, 0x10, 0x3, "5ec4962f41142746f6c88e58eefd1b778aa5aa4ddedaeda9c88abbf23b08da8d4623aa807dc4e81927a35ed62be78932da81b6ae695718bee84798ba23d4baf7ffacd68d4ce1225ab1c1c32c66e04cbac2bd67cd378dd9d4cf26ac62d402d9c08673459afc0a3c804d28622e136179e299a5a580f8baad29fd3ff1de3a447d5181dabfee7b38ce09790cd9c2fbfdcd70f4979c809b40e4978c8fb8a592c322bff69cab4d4b8f1e5e99df57f4162a29b5c6d1fc46c746cdee205270ef095eced2c80c61d32b31257c789db1f7efd1b31b8d5e86839b74626f045e6046bcc979633f6d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x5, 0x7, 0xb, 0x81}]}, 0x3, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x4870}}, {0x95, &(0x7f00000017c0)=@string={0x95, 0x3, "6fc0e5b9f73a36069006b1d9970c30b0ea511c63541cd89c9c8c8a23141170e6196726d6572bcc81f59f302be207df39410a8ff03b6047dba8a58886ecd55548442f01d96cc1cf0d2cb2f44c7985bba39b78915d91f12a0b4a0c979e01fd35986f76b2c9b76f194ce982e604277c8edf34f6c2c4c76da9a74cea6ffb8607b44a6cba90e566ca8440260a60b83633d04bd313a1"}}, {0xc7, &(0x7f0000001880)=@string={0xc7, 0x3, "10edd838f88459d06d909441d49484f002f6ab3b4c5af59b86982df5c2a48cf8f2e4eb67b26f5386d3bf164fd5b4f3378032476f49ec7f3d496f65a857dc8ad5a6f729a7f3bf6015b6c8abcab69199f3fcca13ddfa37b24132bc01c53aa5f6e44acc1c5d3d4fcac15a962eb3bf88fe434044e3f6859c8c3fdc443ea76092142e0fd60c4a92166fb3048a528652d81b3f5dc8844196602cc12f2257de1eb6b87002ac2a5042ce12b5cc4d6854866ba25c02ef9c511545c45263bcb9a783ba9fa9fad67a7e07"}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a00)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00000019c0)="d3249399146858", 0x7}, 0x68) r3 = accept4$packet(r1, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001ac0)=0x14, 0x81000) readv(r3, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/83, 0x53}], 0x1) io_setup(0xffff, &(0x7f0000001bc0)=0x0) r5 = eventfd(0x4) io_submit(r4, 0x5, &(0x7f0000002100)=[&(0x7f0000001cc0)={0x0, 0x0, 0x0, 0xd, 0x3, r2, &(0x7f0000001c00)="0f353e9c7575238c3a422372a6af494157cc5956b84084ab38db3e98dedda11cad8b32793b014125e9c6dda3cfbb1999983622d107aed803265f7bd9bd82862f59520d4238bd7b401b304c177c827a4430397d33134976b1e2bac030afacaf118b371cab159b8c13d1e0ad0b7b7f87484c6ebd42844877a75e4ce7ce1094d34d357d1be16d291b31cfe3306230532d880714fbb1c39800e90f1d412dc40e47530c203ca34bb6f12a059264fb5bf82f3cffd0bf0830fc18e1a9", 0xb9, 0x0, 0x0, 0x1, r1}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x2, 0xe6, r2, &(0x7f0000001d00)="1cd3ae63114bec5cd66b2737c04386c7a93cfa48b2b306c30cf62ef72963bb125c8bc4f9412d79a3a4ee1f922ed60aa2c61ee8db88c3b0e48f078594dc0da0e842e7cb", 0x43, 0x1ff, 0x0, 0x0, r1}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000001dc0)="597851f0d643f6e8d006bcf64128fbea21366721deecec200bd300c01ea87830ed65db26965d17bdea7a3be4161c4832e82ed67da29c713f3351cda442cdcb675f6e7d3f84a3aec73b033f8d4fbfcce4bacc0a6bf93c748258608f322d1328ede1a9812f98478371051e2db2cefd071fa3f5264937352fe8", 0x78, 0xdec, 0x0, 0x2, r1}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000001e80)="565562567d9f9fc244aef9d177cdbe6aed6f6d93b40e561039b04f906195bb63c54782ad1a69ab2c203b7fb0dda4e82010837db299df55d16493f411637ac65948e7ff135c875a13189b207a444e8cea94eff9bdc189ddfcf2ab7dec8b1a3ba5a1d0cc39143199fcfd29b2828fc6aea7d9a3cd5a742622778d0ba5ca90f0c6ed9a5954cb4a389b3ddf4cf5d9f17b6c016b3e68298a6aa6aa1698d3e988bbb5cb11d57b4bff7aa8e42e223e64de76e7b3511986db78f956581e3ddae97ffed7e8d77e9cd16a722921298e", 0xca, 0x2, 0x0, 0x1, r1}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000001fc0)="b51816d71b1b26e0634321f87ecca7702e4300ab28b6955a154d0fb8e5be116b20ae7a3ba3b90c513d2603b54fec642c6ac0f2802ab120e607a1118b58d041bd00716ad650d6d347e8e57025aa9edb36f6b5b2033576dee06d3ae5ed90092b85da05c4545bca4f263e5044bbe2bd53b4d01d14a2f533d9f69030085b38d0a7d6dcda5082d785ed62661ece333cb5b16e42b70dee6e448e5ea4fed35f016ba4cc20d8410f508968399e96554cc5ea627c9162d017e5dfb24775e41b2fccf193f4a477cc99ba72182735e4", 0xca, 0x5dd, 0x0, 0x2, r5}]) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002140)={0x0, 0x1}, &(0x7f0000002180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000021c0)={r6, 0x1000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000021c0)={r6, 0x1000}, 0x8) dup2(r0, r2) (async) r7 = dup2(r0, r2) fcntl$getownex(r0, 0x10, &(0x7f0000002200)={0x0, 0x0}) capset(&(0x7f0000002240)={0x19980330, r8}, &(0x7f0000002280)={0x9, 0x7fff, 0x3, 0x5, 0x1, 0x6}) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f00000023c0)={{{0x4, 0x1}}, 0xec, 0x6, &(0x7f00000022c0)="59aa7103ad872b81ea3cbea824066e5fc3c363cc3d62b189bdff982ba7263e74c9c36df4a8eee38c0d82c3d388971e25ed83dbd4baebbb3f99f15b4b42045a0d2d9cad60971d85ce28bd70c0bae8a7c37ae386de14154eaff7f1fdeb39ab9b6ff84fc27bced2b25ed8668f075433dbda41c0ab4110a610abaad2c26360087bfaeebe299e8b88f926f5a9d1fbafbedb272cdd8c3f7a0deb8e43da337a763b7067bb658c06d1ea5732272416b0982633be7d9c8fada1fe91aaa70aa5ccf4313a3324762e482bb67aaeeafa545e81569eb56bc10fa6d9edf7b2091e8e7cbcc8b4a758ff732bcbdc9dd7eb9ee477"}) (async) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f00000023c0)={{{0x4, 0x1}}, 0xec, 0x6, &(0x7f00000022c0)="59aa7103ad872b81ea3cbea824066e5fc3c363cc3d62b189bdff982ba7263e74c9c36df4a8eee38c0d82c3d388971e25ed83dbd4baebbb3f99f15b4b42045a0d2d9cad60971d85ce28bd70c0bae8a7c37ae386de14154eaff7f1fdeb39ab9b6ff84fc27bced2b25ed8668f075433dbda41c0ab4110a610abaad2c26360087bfaeebe299e8b88f926f5a9d1fbafbedb272cdd8c3f7a0deb8e43da337a763b7067bb658c06d1ea5732272416b0982633be7d9c8fada1fe91aaa70aa5ccf4313a3324762e482bb67aaeeafa545e81569eb56bc10fa6d9edf7b2091e8e7cbcc8b4a758ff732bcbdc9dd7eb9ee477"}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r7, 0xc0207511, &(0x7f0000002400)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioprio_get$pid(0x1, r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000024c0), 0x3) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000002500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xd0, 0xe2, "", [{{0x9, 0x4, 0x0, 0xae, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x8000, 0xe, 0x1, {0x22, 0x277}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x1, 0x5}}]}}}]}}]}}, &(0x7f0000002c00)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x250, 0x8, 0x7, 0x9, 0x20, 0x10}, 0xde, &(0x7f0000002580)={0x5, 0xf, 0xde, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "24854b0fcfd9b4724644812ae7fcc033"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x64, 0x4, 0x10000, 0xf0f, 0x5, [0xff0000, 0xc0cf, 0x30, 0xff00a0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x2, 0xd}, @generic={0x9f, 0x10, 0x3, "212881d6ed21a491f2a23e9b0d760c927c3d836660d6fce93b266d369f4c9437a48b9c0961ff7cfc270ce9f80ecf4f0f0971feedad4d23bb84da4a0aca5a558211f48b763b163cdef7107ab8929d604299c7e529a1313bbea18626e506c9704349be5740b484241007b8a23e4f6bedb76e8dcc3d2bd7fb011a77bed7ad821918c82311c857d22749a17a80bf171238b2651b203662f5298129681bf6"}]}, 0x9, [{0xef, &(0x7f0000002680)=@string={0xef, 0x3, "3ae2e0439aae83f0c11c9f30b65fea46c768d7c687b5837fedd893f38a9a5bede02f0f42a22c4c1ff01a6071897f80498700ee3a4d2ed23efa01d3c9dd9f93b54ec40e68fcaf391214059dc533850ed2d1731e6582419b11447d24831cad8f90728fa867b9d794aa07d746483c433d2ebcb4e8279a5e500de4433234e226d9e69c3a6b47d52a5d0dba80568d9fb1f06334f69f3053752da588d27c005f00863e9c695596fdd6c1152e9c84cb5d58166406d761e24d9f83a1c2a58221c09099637a5b8e6ee893031ab5b2bf56c638666f9979a99a5c82030ec98553b3d9efbd0c779e9213a87873bfb211d8fdb7"}}, {0x9, &(0x7f0000002780)=@string={0x9, 0x3, "f58fb98c1a874a"}}, {0xba, &(0x7f00000027c0)=@string={0xba, 0x3, "a9cf93b4e6979d89b2659de8b775a89e9cacb1808ce45ec40ce70db2941b2edb70c3e59792ed89cb4c3516bf598587ef2e87b405b45a5171050191375fe19b717c407d34feb8e8075fced9d587ee74b26eb487ea85cef43b673623c8fe35fbd2f578366b2ef74b2a43d4c1c0898c33ac36760e1513243d64dd30778902c5c7eb0c55bcb33deb3b806f2b6f27c7cab0c92d79fa6cf51db501d9ba1b0d3a9a81602e6ce5401c736058f81c239ce7a8182e26c73733c8666e91"}}, {0xae, &(0x7f0000002880)=@string={0xae, 0x3, "87637f81983bf3f805744042c23cd01b8fb43dce1dcadb318a5724ba715054ff548d6ac30279fa782696848eec07d754a2c2e261bbf925ecb5ce2d52bdc97d6b2d80c929ecf5effd326eb19d953fdd582095c9cd8ff935e521563e0fd84ba3b128b9f15df4ed6504b1f4667cae255c1e81d29d683d01106e8eefa3420a0cc441739e4f133f4f0cd7dca4f3ec86c1a9499794008c9c76e0292739126f7ac4c9108f60bd3ca996682d207d772c"}}, {0xfd, &(0x7f0000002940)=@string={0xfd, 0x3, "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"}}, {0xc8, &(0x7f0000002a40)=@string={0xc8, 0x3, "2efc6aed29234c8ce4895e39dce7de279006aafe5473fbbb81f803c0ef06da3b0355164e1c5a78a927568b1505aaba96fdc188b2c75464d69279dc973fb4326457d7f80666c2d7c92d342537b6beeece401508696b0ffaf1c9f7d02bfe23d353b08c1fccae6a04d8e61b33b3a7b03556e9d7f66af18b0e5613d3f0bd4dcd38b5c7e3061ed74d53d8098f6f4c822b4163fe34ebb238168c8b2494e14cb3a72cf0e2ca0f5831edb5297aa2666bc71cd6ac4807306922bc5c468b14b48e2f5551b3557e4bf7241c"}}, {0xf, &(0x7f0000002b40)=@string={0xf, 0x3, "a9198a5f87e22422dbf1e6bc96"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000002bc0)=@lang_id={0x4, 0x3, 0x100c}}]}) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000002f80)={{'\x00', 0x3}, {0x614}, 0x84, 0x0, 0x0, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)="8496fa69b1c5f943ab0fc302ea5fc4021085307a788b1795665af3361c9c13dc4cbe4f424e97895eff93f17c9ee801f4a0614f4392229381", 0x38, 0x0, &(0x7f0000002d80)={0x2, 0x133, {0x0, 0xc, 0x5a, "5d79faaf7384b459d2e9779dc5a7bf74287d80b236fae249a3c5ea0620556169ea7f8ba23c7b9e1e6b4d16df162864d13d1d013e72a2f9455f4327ac3f20c71c7d2f06559962f43133cbb6deb541878ed17b94d2ab8298a16366", 0xcc, "6ef32cb6bf13db561ba14df6457d8d3d50c00bd93abafd3453074179e9a32d4624c8b023e6bc50fb286506af1d1bf51cb2585b0fd9a400f43ebf1bfcd070f1c1b1d58387db7a7bbc5198d9f000b019896f48fd95658d7c13b051be71b3b852f70434285e854fcda98c05180b815eed538f073868a76dfda6f2db416ed91f3f33da094dc2b91ff54729227859debbabf6859fdb164a1cccb9cadf8d68a9af5c0bb72d8a600e571ca107728f8c81aab1bb1fc7de9f933a60d9d7048a5e58275c7258469fc33517845bed3a4ff9"}, 0xbf, "2062b048acec7ff02a45393a3c27d133a17ab6a8a140697cd133a3c97af14cc506fe756c54ec5433eef423da78fc9a9fdbb1cf7f3958b9cf9e68265b0fb86d12d03da4550f5f6967c310ac0479446137099c936493fc96888735ea1aeb4797c1f0801f2d571f7068e8925f2799f262553281a8d6ec3c5c8c4b2ce5208a2b55015da7eb2c77eaf2a39651689a9f0a59226d76d0fa5cb22495e3cdc706d00969d7d565f2f7a4f3079ed92d316e293ae67345aaea75ca1de4c4f71878cdad8d11"}, 0x1fe}) (async) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000002f80)={{'\x00', 0x3}, {0x614}, 0x84, 0x0, 0x0, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)="8496fa69b1c5f943ab0fc302ea5fc4021085307a788b1795665af3361c9c13dc4cbe4f424e97895eff93f17c9ee801f4a0614f4392229381", 0x38, 0x0, &(0x7f0000002d80)={0x2, 0x133, {0x0, 0xc, 0x5a, "5d79faaf7384b459d2e9779dc5a7bf74287d80b236fae249a3c5ea0620556169ea7f8ba23c7b9e1e6b4d16df162864d13d1d013e72a2f9455f4327ac3f20c71c7d2f06559962f43133cbb6deb541878ed17b94d2ab8298a16366", 0xcc, "6ef32cb6bf13db561ba14df6457d8d3d50c00bd93abafd3453074179e9a32d4624c8b023e6bc50fb286506af1d1bf51cb2585b0fd9a400f43ebf1bfcd070f1c1b1d58387db7a7bbc5198d9f000b019896f48fd95658d7c13b051be71b3b852f70434285e854fcda98c05180b815eed538f073868a76dfda6f2db416ed91f3f33da094dc2b91ff54729227859debbabf6859fdb164a1cccb9cadf8d68a9af5c0bb72d8a600e571ca107728f8c81aab1bb1fc7de9f933a60d9d7048a5e58275c7258469fc33517845bed3a4ff9"}, 0xbf, "2062b048acec7ff02a45393a3c27d133a17ab6a8a140697cd133a3c97af14cc506fe756c54ec5433eef423da78fc9a9fdbb1cf7f3958b9cf9e68265b0fb86d12d03da4550f5f6967c310ac0479446137099c936493fc96888735ea1aeb4797c1f0801f2d571f7068e8925f2799f262553281a8d6ec3c5c8c4b2ce5208a2b55015da7eb2c77eaf2a39651689a9f0a59226d76d0fa5cb22495e3cdc706d00969d7d565f2f7a4f3079ed92d316e293ae67345aaea75ca1de4c4f71878cdad8d11"}, 0x1fe}) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000003000)={0x1, 0x9}, 0x8) r10 = syz_open_dev$usbfs(&(0x7f0000003040), 0x9, 0x200000) ioctl$USBDEVFS_SETINTERFACE(r10, 0x80085504, &(0x7f0000003080)={0x40fb, 0x213}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000003100)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000003100)='syz1\x00', 0x200002, 0x0) 19.483352951s ago: executing program 1 (id=1144): r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x8000, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 19.377849055s ago: executing program 1 (id=1145): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x2, 0x5, 0x8001, 0x20, 0x6f5, 0x16, 0x4}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x204400, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESHEX=r4, @ANYRES16, @ANYRESDEC=r0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000080)=r5) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21802004}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x17c, r0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x71}, @void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xa4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x80, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x7a, 0xb, "76e96d16ded564cf3c60361c5647148ddf2e3528c4a7512cbd7447caceb615f7c6fd6e64e8740c59cde1eb7c8871830b68d6ddcda172132842bbfba077c0a8f4c8e007e5efb0a5cb959eeb0e6806c90fbcb2d433f9dfa76a2e7ce1433e9bc3da64116d23a52a1451faa3f1e0cf97861ab48d484c97a7"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xa0, 0x8, {0x5b36, 0x6, "ef68bb9244c82da4ba093e667b6b32a437102007170c590df0267bc3607528a6b65b93374809881191a9e63f7fbda38dd6c1a0f7d01234757fcb4aad09fc89f01995b90507ffa1abdb639b0fe159d2c0fc8103b3d6995592580f358dce039e6f4120fa73e98507675cc38c4373d8d57902bae7a1329e89fca811758bf15b208381e4f92ddd53160673e7b874bff5f142f2833743"}}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000000000fef8df2553000000080006c3207375765b8873681ae9c6c3ab6025fc9f54812681208e4c20c945c3d7623df57ff9e33ef3efe0ae74bb96f45a64835cc4868a69375cb178d9ff83431eb120ef546ad0cc5dc8f274b80fdd11323adb096b88253bbb9d65ecb1a1cb7bfc5c2c45a37dba430d7eca300757a63ff61e1562852c1eb6515164fc8ed40fef616da9ec05b5b51618789da99eae24b9ae6f59a23e323ddb565d7e1ed76dd905419d26ed99570da423e1cbe6b86c5f504421fbab11a9815df88da1539ccba89b177526f21733c3cf311680db04e2cc30aa1e33f914", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x2, 0x5, 0x8001, 0x20, 0x6f5, 0x16, 0x4}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') (async) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x204400, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESHEX=r4, @ANYRES16, @ANYRESDEC=r0]) (async) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000080)=r5) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21802004}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x17c, r0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x71}, @void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xa4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x80, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x7a, 0xb, "76e96d16ded564cf3c60361c5647148ddf2e3528c4a7512cbd7447caceb615f7c6fd6e64e8740c59cde1eb7c8871830b68d6ddcda172132842bbfba077c0a8f4c8e007e5efb0a5cb959eeb0e6806c90fbcb2d433f9dfa76a2e7ce1433e9bc3da64116d23a52a1451faa3f1e0cf97861ab48d484c97a7"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xa0, 0x8, {0x5b36, 0x6, "ef68bb9244c82da4ba093e667b6b32a437102007170c590df0267bc3607528a6b65b93374809881191a9e63f7fbda38dd6c1a0f7d01234757fcb4aad09fc89f01995b90507ffa1abdb639b0fe159d2c0fc8103b3d6995592580f358dce039e6f4120fa73e98507675cc38c4373d8d57902bae7a1329e89fca811758bf15b208381e4f92ddd53160673e7b874bff5f142f2833743"}}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000000000fef8df2553000000080006c3207375765b8873681ae9c6c3ab6025fc9f54812681208e4c20c945c3d7623df57ff9e33ef3efe0ae74bb96f45a64835cc4868a69375cb178d9ff83431eb120ef546ad0cc5dc8f274b80fdd11323adb096b88253bbb9d65ecb1a1cb7bfc5c2c45a37dba430d7eca300757a63ff61e1562852c1eb6515164fc8ed40fef616da9ec05b5b51618789da99eae24b9ae6f59a23e323ddb565d7e1ed76dd905419d26ed99570da423e1cbe6b86c5f504421fbab11a9815df88da1539ccba89b177526f21733c3cf311680db04e2cc30aa1e33f914", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) (async) 19.283205632s ago: executing program 1 (id=1146): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000007, 0x11, r7, 0x518f1000) fgetxattr(r7, &(0x7f0000000540)=@known='user.incfs.id\x00', &(0x7f0000000580)=""/63, 0x3f) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r9, &(0x7f0000000200)={0x0, 0x1460, 0x1, 0x3, 0xb6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1e, 0x60, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x4, 0x2009, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x400, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 19.0486899s ago: executing program 3 (id=1148): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000340)='./file0/file0\x00', 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x0, 0x229}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x4, 0x2, 0xe9b, 0x3, 0x7f, 0x7f, 0x44232, 0x9, 0x80, 0x93e, 0x1, 0x0, 0x4, 0x4, 0x10009, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$setopts(0x4200, r6, 0x2, 0x15) connect$inet6(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140)={0x4, 0x1000, 0x400, 0x1}, 0x10) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) 19.032569506s ago: executing program 1 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000000)={0x4}, 0x0) 18.881768184s ago: executing program 3 (id=1150): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x400, 0x0, 0x100}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0xc0}) (fail_nth: 1) 18.607033382s ago: executing program 0 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r2, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x1, 0xc201}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x60000}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c844}, 0x20004000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000100)=[0x1, 0x1], &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, &(0x7f00000001c0)="f265f4baf80c66b8ea9b498f66efbafc0ced66f30f16270f01ca0f0179f966b8c4df04ab0f23c80f21f866350000c0000f23f80f23f40fe2b0d700ba6100edb8c1000f00d0", 0x45}], 0x1, 0x5c, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="2006d50300005526024b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000880)=@svm={0x6, 0x1, 0x1080, {0x41000}, {"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"}}) 18.511501846s ago: executing program 2 (id=1152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42, 0x30000}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x4005) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8442, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) (async) close(r1) (async) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42, 0x30000}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x4005) (async) 17.291610517s ago: executing program 4 (id=1153): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSBRK(r0, 0x5409, 0xffffffffffffffc0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001000)={r1, 0x2}) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000002000)='./file0\x00', 0x10100, 0xd1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000002040)={@id={0x2, 0x0, @d}}) (async) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000002080)={'filter\x00', 0x0, [0xd, 0x1000, 0xffff8001]}, &(0x7f0000002100)=0x44) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = syz_io_uring_complete(0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000002280)={0x20, 0x2, &(0x7f0000002180)="6549790aaeaa5c03044ee6c9137603b043f552a0bbc65afd32be0b70da3b8a4888918dc042bff041a79ed9859efef17816ff207ae4619e2ee08756a34804c1b335910a13669aafd0fd7acb347bc9370a540f2ff50ef73d4dbd9e4750cb56ba065e97c042e28cccdb0d04537e382d613229c3d7625b5e1a8b056a1707f4738b7b789cabbe24994864260273fbe1e520460d57d88434954bb4c4b8acbd4d8f2f8c97f18fad6608d9951023a2113dd3425765741771d460c059fcc5b2c2aee6fed33c", 0x9, 0x23d}) (async) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000002300)={0x1, &(0x7f00000022c0)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000002340)={r4, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000002380)={0x48}) (async) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000002400)="48a6427e35b4d9cb46d2883ad3a7fe385719ea6499f5be5663261e4a033ae250e510d6c22c059f21ef0e8ac4773c8847705e57aab938f4f939d6e27452b9e748291f690cf934f095addb0d6e99f30198d2431a8cce2365f89682a390448b0c8d733d3b61fc7758b6f8c6bb13ee4a0cda09b6afcfbb104f4119519e08f7dbe2e592d331f6319aaed3ca35e666cdca88602a9037493b5902e9161c99dae1b953498b85d8f2b1408b35324108f174cd5a0c6f7f586982e16d9f51a03c654b76e885133540f6d39b19743c8d7692044794feb8a25c2b45925443782688b01af4fc80d7b0b4823dba6d11dac7b50670b35ff671b252d8129699b46aea3006f649f8", 0xff) ioctl$KDMKTONE(r3, 0x4b30, 0x80000001) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(r2, &(0x7f0000002600)={&(0x7f0000002500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002580)}], 0x1, 0x0, 0x0, 0x800}, 0x40) (async) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000002640), &(0x7f0000002680), 0x2, 0x0) (async) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000026c0)=[0x7ff, 0x4]) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000002700)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000027c0), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x85) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000028c0), 0x2000) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4041890) (async) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002a80), 0xc0000, 0x0) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b00)={0xac, 0x0, 0xc00, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5a}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002c40)=r10, 0x4) 17.225766371s ago: executing program 4 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000005000005000000000000e9b80000000000", @ANYRES32=0x0, @ANYBLOB="0402000010180000140003006272696467655f736c6176655f31000008001b00020000000500210081000000"], 0x44}}, 0x4040) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x8, 0x3}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) 17.220051541s ago: executing program 4 (id=1155): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x801, 0x100) syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) 16.364239929s ago: executing program 4 (id=1156): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r4, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x801, 0x100) syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) 15.453267217s ago: executing program 4 (id=1157): socket(0x10, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_xfrm(r0, 0x0, 0xe61c1323c3c20c32) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x62040200) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async, rerun: 64) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 15.165785557s ago: executing program 4 (id=1158): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0xf7fffffc, 0x1, 0x0, 0x800, 0x0, r2}, 0x0, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'veth0\x00'}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000240)={r7}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x200400) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003b1528bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r6, @ANYRESHEX=r3], 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 3.505031456s ago: executing program 32 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r2, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x1, 0xc201}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x60000}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c844}, 0x20004000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000100)=[0x1, 0x1], &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, &(0x7f00000001c0)="f265f4baf80c66b8ea9b498f66efbafc0ced66f30f16270f01ca0f0179f966b8c4df04ab0f23c80f21f866350000c0000f23f80f23f40fe2b0d700ba6100edb8c1000f00d0", 0x45}], 0x1, 0x5c, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="2006d50300005526024b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000880)=@svm={0x6, 0x1, 0x1080, {0x41000}, {"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"}}) 3.477459314s ago: executing program 33 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000000)={0x4}, 0x0) 3.434134376s ago: executing program 34 (id=1152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42, 0x30000}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x4005) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8442, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) (async) close(r1) (async) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42, 0x30000}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x4005) (async) 3.393628646s ago: executing program 35 (id=1150): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x400, 0x0, 0x100}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0xc0}) (fail_nth: 1) 0s ago: executing program 36 (id=1158): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0xf7fffffc, 0x1, 0x0, 0x800, 0x0, r2}, 0x0, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'veth0\x00'}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000240)={r7}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x200400) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003b1528bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r6, @ANYRESHEX=r3], 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) kernel console output (not intermixed with test programs): config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 264.569761][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.590276][ T5683] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 264.605604][ T5683] usb 5-1: config 168 interface 0 has no altsetting 0 [ 264.613094][ T8656] netlink: 'syz.2.823': attribute type 4 has an invalid length. [ 264.615187][ T5683] usb 5-1: string descriptor 0 read error: -22 [ 264.627423][ T5683] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 264.636736][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.649218][ T5683] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 264.737978][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.746829][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.863680][ T5703] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 264.899166][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 264.899183][ T29] audit: type=1326 audit(1781973384.971:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.4.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48fbb9ce59 code=0x0 [ 264.931485][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.826'. [ 265.008898][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'. [ 265.018809][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.029967][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.030119][ T5703] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.030156][ T5703] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 265.032347][ T5703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.032374][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.032394][ T5703] usb 3-1: Product: syz [ 265.032409][ T5703] usb 3-1: Manufacturer: syz [ 265.032423][ T5703] usb 3-1: SerialNumber: syz [ 265.039702][ T5703] cdc_mbim 3-1:1.0: skipping garbage [ 265.058953][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.059347][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.063504][ T5712] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 265.242042][ T8656] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 265.264541][ T5712] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 265.293192][ T5712] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 265.308753][ T5712] usb 4-1: USB disconnect, device number 54 [ 265.616260][ T8682] netlink: 'syz.1.830': attribute type 9 has an invalid length. [ 265.656873][ T29] audit: type=1326 audit(1781973385.731:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.1.831" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ad119ce59 code=0x0 [ 265.852631][ T8656] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 265.862154][ T5703] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 265.871075][ T5703] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 266.063318][ T5703] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 266.072946][ T5703] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device [ 266.080499][ T5703] wwan wwan0: port wwan0mbim0 attached [ 266.089284][ T5703] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, a6:50:b7:5d:e4:a5 [ 266.104189][ T5703] usb 3-1: USB disconnect, device number 46 [ 266.114298][ T5703] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 266.165328][ T5703] wwan wwan0: port wwan0mbim0 disconnected [ 266.174164][ T5712] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 266.355220][ T5712] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 266.365605][ T5712] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 266.376003][ T5712] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.385282][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.594396][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.607559][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.779655][ T5703] usb 5-1: USB disconnect, device number 37 [ 266.839654][ T8711] qrtr: Invalid version 0 [ 266.845341][ T8712] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 266.867154][ T8711] syzkaller1: entered promiscuous mode [ 266.877076][ T8711] syzkaller1: entered allmulticast mode [ 267.224090][ T5703] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 267.247296][ T8715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.274698][ T8715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.363738][ T5703] usb 5-1: device descriptor read/64, error -71 [ 267.404320][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 267.613715][ T5703] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 267.743676][ T5703] usb 5-1: device descriptor read/64, error -71 [ 267.854077][ T5703] usb usb5-port1: attempt power cycle [ 268.195810][ T5703] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 268.224594][ T5703] usb 5-1: device descriptor read/8, error -71 [ 268.463727][ T5703] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 268.463893][ T5712] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 268.484097][ T5703] usb 5-1: device descriptor read/8, error -71 [ 268.593873][ T5703] usb usb5-port1: unable to enumerate USB device [ 268.626520][ T5712] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.635534][ T5712] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 268.645790][ T5712] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.655407][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 268.666454][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 268.678687][ T5712] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.689041][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.697249][ T5712] usb 1-1: Product: syz [ 268.701507][ T5712] usb 1-1: Manufacturer: syz [ 268.709097][ T5712] cdc_wdm 1-1:1.0: skipping garbage [ 268.714486][ T5712] cdc_wdm 1-1:1.0: skipping garbage [ 268.720538][ T5712] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 268.726503][ T5712] cdc_wdm 1-1:1.0: Unknown control protocol [ 268.869732][ T5703] usb 4-1: USB disconnect, device number 55 [ 269.076942][ T8742] tipc: Enabled bearer , priority 0 [ 269.087734][ T8742] syzkaller0: entered promiscuous mode [ 269.093919][ T8742] syzkaller0: entered allmulticast mode [ 269.155845][ T8743] tipc: Resetting bearer [ 269.323681][ T5703] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 269.473739][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 269.482005][ T5703] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 269.491578][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.500339][ T5703] usb 4-1: Product: syz [ 269.504928][ T5703] usb 4-1: Manufacturer: syz [ 269.509558][ T5703] usb 4-1: SerialNumber: syz [ 269.667874][ T42] usb 1-1: USB disconnect, device number 33 [ 269.721980][ T5703] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 269.732398][ T5703] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 269.744948][ T5703] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 269.754285][ T5703] usb 4-1: media controller created [ 269.763352][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.777126][ T5703] zl10353_read_register: readreg error (reg=127, ret==-71) [ 269.795009][ T5703] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 269.806966][ T5703] usb 4-1: USB disconnect, device number 56 [ 269.905440][ T8741] tipc: Resetting bearer [ 269.927661][ T8741] tipc: Disabling bearer [ 270.271729][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.298667][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.324344][ T5712] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 270.350725][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 270.393811][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 270.485805][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.494689][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.505756][ T5712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 270.515973][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 270.527095][ T5712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 270.539751][ T5712] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 270.549277][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.557614][ T5712] usb 5-1: Product: syz [ 270.562020][ T5712] usb 5-1: Manufacturer: syz [ 270.567214][ T5712] usb 5-1: SerialNumber: syz [ 270.574194][ T5712] usb 5-1: config 0 descriptor?? [ 270.579857][ T8761] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 270.589241][ C0] usb 5-1: NFC: Urb failure (status -71) [ 270.595373][ T5712] usb 5-1: NFC: Unable to get FW version [ 270.601392][ T5712] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 270.798371][ T5712] usb 5-1: USB disconnect, device number 42 [ 270.882177][ T8778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.913672][ T5703] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 270.960291][ T8778] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 271.083716][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 271.091338][ T5703] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 271.102108][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.116262][ T5703] usb 1-1: config 0 descriptor?? [ 271.135968][ T5703] as10x_usb: device has been detected [ 271.142707][ T5703] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 271.180676][ T5703] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 271.202642][ T5703] as10x_usb: error during firmware upload part1 [ 271.221552][ T5703] Registered device nBox DVB-T Dongle [ 271.351899][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.404350][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.426417][ T5712] usb 1-1: USB disconnect, device number 34 [ 271.447686][ T5712] Unregistered device nBox DVB-T Dongle [ 271.449688][ T5712] as10x_usb: device has been disconnected [ 271.538449][ T8791] syzkaller0: entered promiscuous mode [ 271.544761][ T8791] syzkaller0: entered allmulticast mode [ 271.567135][ T8794] tipc: Enabled bearer , priority 0 [ 271.606747][ T8792] tipc: Resetting bearer [ 271.621720][ T8796] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 271.755302][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.764256][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.254438][ T8789] tipc: Resetting bearer [ 272.261005][ T8789] tipc: Disabling bearer [ 272.423795][ T42] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 272.462872][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.476198][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.599361][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 272.608744][ T42] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 272.618271][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.633702][ T42] usb 1-1: Product: syz [ 272.642808][ T42] usb 1-1: Manufacturer: syz [ 272.653658][ T42] usb 1-1: SerialNumber: syz [ 272.796733][ T8767] Set syz1 is full, maxelem 65536 reached [ 272.880101][ T42] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 272.892841][ T42] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 272.907489][ T42] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 272.921027][ T42] usb 1-1: media controller created [ 272.951662][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.964101][ T5712] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 272.987075][ T42] zl10353_read_register: readreg error (reg=127, ret==-71) [ 273.023522][ T42] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 273.052126][ T42] usb 1-1: USB disconnect, device number 35 [ 273.106386][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.124112][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 273.127512][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.146847][ T5712] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 273.157902][ T5712] usb 4-1: config 0 has no interface number 0 [ 273.175226][ T5712] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.203091][ T5712] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.223710][ T5712] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.245203][ T5712] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 273.262587][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.278230][ T5712] usb 4-1: config 0 descriptor?? [ 273.509441][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 273.692302][ T5712] hid_parser_main: 28 callbacks suppressed [ 273.692319][ T5712] logitech-djreceiver 0003:046D:C537.0015: unknown main item tag 0x0 [ 273.721918][ T5712] logitech-djreceiver 0003:046D:C537.0015: unknown main item tag 0x0 [ 273.732522][ T5712] logitech-djreceiver 0003:046D:C537.0015: unknown main item tag 0x0 [ 273.741662][ T5712] logitech-djreceiver 0003:046D:C537.0015: unknown main item tag 0x0 [ 273.750967][ T5712] logitech-djreceiver 0003:046D:C537.0015: unknown main item tag 0x0 [ 273.781663][ T5712] logitech-djreceiver 0003:046D:C537.0015: unknown main item tag 0x0 [ 273.808465][ T5712] logitech-djreceiver 0003:046D:C537.0015: unknown main item tag 0x0 [ 273.836767][ T5712] logitech-djreceiver 0003:046D:C537.0015: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input4 [ 273.912463][ T5683] usb 4-1: USB disconnect, device number 57 [ 273.956736][ T8850] fido_id[8850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 274.119185][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.161696][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.244786][ T5683] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 274.434249][ T5683] usb 4-1: Using ep0 maxpacket: 16 [ 274.473979][ T5683] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.493186][ T5683] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.511901][ T5683] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.522830][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.538404][ T5683] usb 4-1: Product: syz [ 274.546489][ T5683] usb 4-1: Manufacturer: syz [ 274.555008][ T5683] usb 4-1: SerialNumber: syz [ 274.570249][ T5683] usb 4-1: 0:2 : does not exist [ 274.756890][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.772319][ T5683] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 274.782051][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.829403][ T5683] usb 4-1: USB disconnect, device number 58 [ 274.861849][ T8231] udevd[8231]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.884080][ T5987] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 275.060337][ T5987] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 275.111647][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.180985][ T5987] usb 5-1: config 0 descriptor?? [ 275.263724][ T42] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 275.401841][ T8897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.410809][ T8897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.420497][ T42] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 275.435415][ T42] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 275.446720][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.455438][ T42] usb 1-1: Product: syz [ 275.463867][ T42] usb 1-1: Manufacturer: syz [ 275.473880][ T42] usb 1-1: SerialNumber: syz [ 275.595919][ T3217] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 275.636508][ T5987] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 275.741225][ T42] usb 1-1: found format II with max.bitrate = 9, frame size=2 [ 275.754014][ T3217] usb 3-1: Using ep0 maxpacket: 32 [ 275.754696][ T42] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 275.771693][ T42] usb 1-1: found format II with max.bitrate = 9, frame size=2 [ 275.779316][ T42] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 275.781357][ T3217] usb 3-1: unable to get BOS descriptor or descriptor too short [ 275.804293][ T3217] usb 3-1: config 5 has an invalid interface number: 75 but max is 1 [ 275.812699][ T3217] usb 3-1: config 5 has an invalid interface number: 56 but max is 1 [ 275.821476][ T3217] usb 3-1: config 5 has no interface number 0 [ 275.822082][ T42] usb 1-1: unit 4 not found! [ 275.833776][ T3217] usb 3-1: config 5 has no interface number 1 [ 275.841618][ T3217] usb 3-1: config 5 interface 56 has no altsetting 0 [ 275.849626][ T5987] [drm:udl_init] *ERROR* Selecting channel failed [ 275.866292][ T3217] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=a7.2a [ 275.878425][ T5987] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 275.889383][ T3217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.898385][ T5987] [drm] Initialized udl on minor 2 [ 275.904243][ T3217] usb 3-1: Product: syz [ 275.911219][ T3217] usb 3-1: Manufacturer: syz [ 275.916551][ T5987] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.925202][ T5987] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 275.932192][ T5712] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.941454][ T3217] usb 3-1: SerialNumber: syz [ 275.951385][ T5712] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.961186][ T5987] usb 5-1: USB disconnect, device number 43 [ 275.969899][ T5712] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 276.027823][ T42] usb 1-1: USB disconnect, device number 36 [ 276.176069][ T3217] qmi_wwan 3-1:5.75: probe with driver qmi_wwan failed with error -22 [ 276.210358][ T3217] usb 3-1: USB disconnect, device number 48 [ 276.540393][ T8923] FAULT_INJECTION: forcing a failure. [ 276.540393][ T8923] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 276.555968][ T8923] CPU: 0 UID: 0 PID: 8923 Comm: syz.0.892 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.555997][ T8923] Tainted: [L]=SOFTLOCKUP [ 276.556003][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.556018][ T8923] Call Trace: [ 276.556025][ T8923] [ 276.556032][ T8923] dump_stack_lvl+0xe8/0x150 [ 276.556056][ T8923] should_fail_ex+0x40c/0x560 [ 276.556077][ T8923] _copy_from_user+0x2d/0xb0 [ 276.556103][ T8923] ___sys_recvmsg+0x173/0x5a0 [ 276.556125][ T8923] ? __pfx____sys_recvmsg+0x10/0x10 [ 276.556145][ T8923] ? __fget_files+0x2a/0x420 [ 276.556168][ T8923] ? rcu_is_watching+0x15/0xb0 [ 276.556192][ T8923] ? __fget_files+0x3a2/0x420 [ 276.556218][ T8923] do_recvmmsg+0x31a/0x7f0 [ 276.556239][ T8923] ? __pfx_do_recvmmsg+0x10/0x10 [ 276.556261][ T8923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.556279][ T8923] ? __fget_files+0x3a2/0x420 [ 276.556305][ T8923] __x64_sys_recvmmsg+0x198/0x250 [ 276.556324][ T8923] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 276.556345][ T8923] ? rcu_is_watching+0x15/0xb0 [ 276.556363][ T8923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.556381][ T8923] do_syscall_64+0x174/0x580 [ 276.556396][ T8923] ? trace_irq_disable+0x3b/0x140 [ 276.556419][ T8923] ? clear_bhb_loop+0x40/0x90 [ 276.556438][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.556454][ T8923] RIP: 0033:0x7fc4d479ce59 [ 276.556476][ T8923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.556490][ T8923] RSP: 002b:00007fc4d56be028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 276.556509][ T8923] RAX: ffffffffffffffda RBX: 00007fc4d4a15fa0 RCX: 00007fc4d479ce59 [ 276.556522][ T8923] RDX: 0000000000000005 RSI: 0000200000009100 RDI: 0000000000000003 [ 276.556533][ T8923] RBP: 00007fc4d56be090 R08: 0000000000000000 R09: 0000000000000000 [ 276.556544][ T8923] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 276.556555][ T8923] R13: 00007fc4d4a16038 R14: 00007fc4d4a15fa0 R15: 00007fc4d4b3fa48 [ 276.556574][ T8923] [ 276.561080][ T8924] syzkaller0: entered promiscuous mode [ 276.786875][ T8924] syzkaller0: entered allmulticast mode [ 276.798344][ T8929] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 277.063773][ T3217] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 277.121646][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 277.214130][ T5683] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 277.230404][ T8949] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 277.246579][ T3217] usb 3-1: Using ep0 maxpacket: 8 [ 277.254156][ T8949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 277.269584][ T3217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.289332][ T8949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.297899][ T3217] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.333550][ T3217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.357098][ T3217] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 277.378180][ T3217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.415442][ T3217] usb 3-1: config 0 descriptor?? [ 277.444520][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.444907][ T5683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.476939][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.488262][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.506242][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.523239][ T5683] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 277.533689][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.549363][ T5683] usb 5-1: config 0 descriptor?? [ 277.851226][ T8931] macvlan2: entered promiscuous mode [ 277.870617][ T8931] macvlan2: entered allmulticast mode [ 277.883265][ T8931] team0: Device macvlan2 is already an upper device of the team interface [ 277.901252][ T3217] hid (null): unknown global tag 0xa3 [ 277.910994][ T3217] hid (null): unknown global tag 0xc [ 277.916689][ T3217] hid (null): unknown global tag 0xd [ 277.928128][ T3217] hid-corsair-void 0003:1B1C:0A1D.0016: unexpected long global item [ 277.945149][ T3217] hid-corsair-void 0003:1B1C:0A1D.0016: parse failed (reason: -22) [ 277.958325][ T3217] hid-corsair-void 0003:1B1C:0A1D.0016: probe with driver hid-corsair-void failed with error -22 [ 277.971402][ T5683] hid (null): invalid report_size 29797 [ 277.980737][ T5683] hid (null): bogus close delimiter [ 277.996698][ T5683] hid (null): bogus close delimiter [ 278.008879][ T5683] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 278.022531][ T5683] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 278.048398][ T5683] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 278.067553][ T5683] magicmouse 0003:05AC:0324.0017: invalid report_size 29797 [ 278.085300][ T5683] magicmouse 0003:05AC:0324.0017: item 0 2 1 7 parsing failed [ 278.106674][ T3217] usb 3-1: USB disconnect, device number 49 [ 278.112915][ T5683] magicmouse 0003:05AC:0324.0017: magicmouse hid parse failed [ 278.132055][ T5683] magicmouse 0003:05AC:0324.0017: probe with driver magicmouse failed with error -22 [ 278.176170][ T5683] usb 5-1: USB disconnect, device number 44 [ 278.285930][ T8965] kvm: apic: phys broadcast and lowest prio [ 278.302474][ T8965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.314497][ T8965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.597344][ T8984] loop2: detected capacity change from 0 to 7 [ 278.605815][ T8984] Dev loop2: unable to read RDB block 7 [ 278.612840][ T8984] loop2: unable to read partition table [ 278.618910][ T8984] loop2: partition table beyond EOD, truncated [ 278.632015][ T8984] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.796884][ T8999] tipc: Enabled bearer , priority 0 [ 278.805884][ T8999] syzkaller0: entered promiscuous mode [ 278.811498][ T8999] syzkaller0: entered allmulticast mode [ 278.825226][ T8999] tipc: Resetting bearer [ 278.833687][ T5712] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 278.842279][ T8998] tipc: Resetting bearer [ 278.860162][ T8998] tipc: Disabling bearer [ 278.928348][ T9002] netlink: 'syz.1.919': attribute type 4 has an invalid length. [ 278.951835][ T9002] netlink: 17 bytes leftover after parsing attributes in process `syz.1.919'. [ 278.984923][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.998009][ T5712] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.007758][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.030983][ T5712] usb 4-1: config 0 descriptor?? [ 279.088280][ T9010] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 279.224223][ T9019] FAULT_INJECTION: forcing a failure. [ 279.224223][ T9019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.249455][ T9019] CPU: 0 UID: 0 PID: 9019 Comm: syz.0.923 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.249482][ T9019] Tainted: [L]=SOFTLOCKUP [ 279.249498][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.249508][ T9019] Call Trace: [ 279.249514][ T9019] [ 279.249522][ T9019] dump_stack_lvl+0xe8/0x150 [ 279.249544][ T9019] should_fail_ex+0x40c/0x560 [ 279.249564][ T9019] _copy_from_user+0x2d/0xb0 [ 279.249587][ T9019] ___sys_sendmsg+0x1c6/0x360 [ 279.249603][ T9019] ? rcu_is_watching+0x15/0xb0 [ 279.249620][ T9019] ? get_pid_task+0x20/0x1f0 [ 279.249637][ T9019] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.249653][ T9019] ? rcu_is_watching+0x15/0xb0 [ 279.249677][ T9019] ? __fget_files+0x2a/0x420 [ 279.249699][ T9019] ? __fget_files+0x3a2/0x420 [ 279.249723][ T9019] __x64_sys_sendmsg+0x1b1/0x290 [ 279.249741][ T9019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.249763][ T9019] ? rcu_is_watching+0x15/0xb0 [ 279.249781][ T9019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.249799][ T9019] do_syscall_64+0x174/0x580 [ 279.249815][ T9019] ? trace_irq_disable+0x3b/0x140 [ 279.249838][ T9019] ? clear_bhb_loop+0x40/0x90 [ 279.249857][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.249874][ T9019] RIP: 0033:0x7fc4d479ce59 [ 279.249890][ T9019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.249906][ T9019] RSP: 002b:00007fc4d56be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.249925][ T9019] RAX: ffffffffffffffda RBX: 00007fc4d4a15fa0 RCX: 00007fc4d479ce59 [ 279.249938][ T9019] RDX: 0000000000004040 RSI: 0000200000000c80 RDI: 0000000000000003 [ 279.249949][ T9019] RBP: 00007fc4d56be090 R08: 0000000000000000 R09: 0000000000000000 [ 279.249960][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.249971][ T9019] R13: 00007fc4d4a16038 R14: 00007fc4d4a15fa0 R15: 00007fc4d4b3fa48 [ 279.249989][ T9019] [ 279.255680][ T9020] syzkaller1: entered promiscuous mode [ 279.450511][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.455835][ T9020] syzkaller1: entered allmulticast mode [ 279.466376][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.541406][ T9025] syzkaller1: left promiscuous mode [ 279.547044][ T5683] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 279.560317][ T8996] binder: 8994:8996 ioctl c0306201 200000000480 returned -14 [ 279.718584][ T5683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 279.763700][ T5683] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 279.791263][ T5683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 279.815427][ T5683] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 279.825640][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.843835][ T5683] usb 1-1: Product: syz [ 279.852467][ T5683] usb 1-1: Manufacturer: syz [ 279.863906][ T5683] usb 1-1: SerialNumber: syz [ 279.880290][ T5683] usb 1-1: config 0 descriptor?? [ 279.892037][ T9023] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 279.908162][ T9023] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 279.918874][ T5683] usb 1-1: ucan: probing device on interface #0 [ 279.994941][ T807] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 280.095023][ T5712] usbhid 4-1:0.0: can't add hid device: -71 [ 280.107423][ T5712] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.125691][ T5712] usb 4-1: USB disconnect, device number 59 [ 280.135309][ T9058] syzkaller0: entered promiscuous mode [ 280.149050][ T807] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 280.164246][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.164459][ T9058] syzkaller0: entered allmulticast mode [ 280.175358][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.199532][ T9059] binder: 9056:9059 ioctl c038563c 200000000180 returned -22 [ 280.208800][ T807] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 280.223842][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.230585][ T807] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 280.240050][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.250895][ T807] usb 5-1: config 0 descriptor?? [ 280.322876][ T5683] usb 1-1: ucan: failed to retrieve device info [ 280.337051][ T5683] usb 1-1: ucan: probe failed; try to update the device firmware [ 280.457150][ T9065] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 280.654534][ T9069] FAULT_INJECTION: forcing a failure. [ 280.654534][ T9069] name failslab, interval 1, probability 0, space 0, times 0 [ 280.671547][ T9069] CPU: 0 UID: 0 PID: 9069 Comm: syz.3.936 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.671575][ T9069] Tainted: [L]=SOFTLOCKUP [ 280.671582][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.671591][ T9069] Call Trace: [ 280.671597][ T9069] [ 280.671604][ T9069] dump_stack_lvl+0xe8/0x150 [ 280.671627][ T9069] should_fail_ex+0x40c/0x560 [ 280.671650][ T9069] should_failslab+0xa8/0x100 [ 280.671669][ T9069] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 280.671693][ T9069] ? rcu_is_watching+0x15/0xb0 [ 280.671722][ T9069] ? __alloc_skb+0x1d7/0x7a0 [ 280.671737][ T9069] ? trace_irq_enable+0x3b/0x140 [ 280.671761][ T9069] __alloc_skb+0x1d7/0x7a0 [ 280.671778][ T9069] netlink_sendmsg+0x5d4/0xb40 [ 280.671800][ T9069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.671818][ T9069] ? rcu_is_watching+0x15/0xb0 [ 280.671834][ T9069] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 280.671855][ T9069] ? lock_release+0x4b/0x3c0 [ 280.671871][ T9069] ? arch_stack_walk+0xfb/0x150 [ 280.671890][ T9069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.671906][ T9069] sock_sendmsg_nosec+0x13a/0x180 [ 280.671929][ T9069] ____sys_sendmsg+0x54e/0x850 [ 280.671948][ T9069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.671965][ T9069] ? lock_release+0x4b/0x3c0 [ 280.671981][ T9069] ? import_iovec+0x73/0xa0 [ 280.672005][ T9069] ___sys_sendmsg+0x2a5/0x360 [ 280.672021][ T9069] ? rcu_is_watching+0x15/0xb0 [ 280.672037][ T9069] ? get_pid_task+0x20/0x1f0 [ 280.672054][ T9069] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.672072][ T9069] ? rcu_is_watching+0x15/0xb0 [ 280.672097][ T9069] ? __fget_files+0x2a/0x420 [ 280.672120][ T9069] ? __fget_files+0x3a2/0x420 [ 280.672147][ T9069] __x64_sys_sendmsg+0x1b1/0x290 [ 280.672166][ T9069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.672189][ T9069] ? rcu_is_watching+0x15/0xb0 [ 280.672207][ T9069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.672222][ T9069] do_syscall_64+0x174/0x580 [ 280.672307][ T9069] ? trace_irq_disable+0x3b/0x140 [ 280.672331][ T9069] ? clear_bhb_loop+0x40/0x90 [ 280.672349][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.672365][ T9069] RIP: 0033:0x7f7d3779ce59 [ 280.672379][ T9069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.672394][ T9069] RSP: 002b:00007f7d385b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.672412][ T9069] RAX: ffffffffffffffda RBX: 00007f7d37a15fa0 RCX: 00007f7d3779ce59 [ 280.672424][ T9069] RDX: 0000000000004040 RSI: 0000200000000c80 RDI: 0000000000000003 [ 280.672435][ T9069] RBP: 00007f7d385b2090 R08: 0000000000000000 R09: 0000000000000000 [ 280.672446][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.672456][ T9069] R13: 00007f7d37a16038 R14: 00007f7d37a15fa0 R15: 00007f7d37b3fa48 [ 280.672473][ T9069] [ 280.956385][ T807] ryos 0003:1E7D:3138.0018: ignoring exceeding usage max [ 280.972028][ T807] ryos 0003:1E7D:3138.0018: unbalanced delimiter at end of report description [ 280.981562][ T807] ryos 0003:1E7D:3138.0018: parse failed [ 280.987329][ T807] ryos 0003:1E7D:3138.0018: probe with driver ryos failed with error -22 [ 281.013769][ T5703] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 281.159677][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.171479][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.187705][ T5703] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 281.198828][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 150, changing to 11 [ 281.225439][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32989, setting to 1024 [ 281.244087][ T5683] usb 5-1: USB disconnect, device number 45 [ 281.262101][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.299319][ T9082] netlink: 'syz.1.941': attribute type 11 has an invalid length. [ 281.302700][ T5703] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.334229][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.348064][ T5703] usb 3-1: config 0 descriptor?? [ 281.523750][ T5712] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 281.673763][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 281.680362][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.692501][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.702735][ T5712] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 281.711933][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.721842][ T5712] usb 4-1: config 0 descriptor?? [ 281.760265][ T5703] hid_parser_main: 20 callbacks suppressed [ 281.760289][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.780513][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.790595][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.798681][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.808251][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.816104][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.824618][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.832728][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.854453][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.861983][ T5703] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 281.876596][ T5703] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 282.123936][ T5683] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 282.138843][ T5712] wacom 0003:056A:0084.001A: unbalanced collection at end of report description [ 282.148293][ T5712] wacom 0003:056A:0084.001A: parse failed [ 282.154346][ T5712] wacom 0003:056A:0084.001A: probe with driver wacom failed with error -22 [ 282.203874][ T9092] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 282.253985][ T5683] usb 5-1: device descriptor read/64, error -71 [ 282.300732][ T5712] usb 1-1: USB disconnect, device number 37 [ 282.356289][ T5987] usb 4-1: USB disconnect, device number 60 [ 282.493928][ T5683] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 282.541739][ T5987] usb 3-1: USB disconnect, device number 50 [ 282.588940][ T9101] FAULT_INJECTION: forcing a failure. [ 282.588940][ T9101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.615687][ T9101] CPU: 1 UID: 0 PID: 9101 Comm: syz.2.948 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.615717][ T9101] Tainted: [L]=SOFTLOCKUP [ 282.615724][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.615735][ T9101] Call Trace: [ 282.615742][ T9101] [ 282.615751][ T9101] dump_stack_lvl+0xe8/0x150 [ 282.615774][ T9101] should_fail_ex+0x40c/0x560 [ 282.615794][ T9101] _copy_from_iter+0x1d3/0x1660 [ 282.615811][ T9101] ? rcu_is_watching+0x15/0xb0 [ 282.615823][ T9101] ? __pfx__copy_from_iter+0x10/0x10 [ 282.615835][ T9101] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 282.615850][ T9101] ? netlink_sendmsg+0x650/0xb40 [ 282.615861][ T9101] ? skb_put+0x112/0x210 [ 282.615873][ T9101] netlink_sendmsg+0x6c0/0xb40 [ 282.615890][ T9101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.615900][ T9101] ? rcu_is_watching+0x15/0xb0 [ 282.615910][ T9101] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 282.615922][ T9101] ? lock_release+0x4b/0x3c0 [ 282.615930][ T9101] ? arch_stack_walk+0xfb/0x150 [ 282.615942][ T9101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.615952][ T9101] sock_sendmsg_nosec+0x13a/0x180 [ 282.615965][ T9101] ____sys_sendmsg+0x54e/0x850 [ 282.615976][ T9101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.615986][ T9101] ? lock_release+0x4b/0x3c0 [ 282.616002][ T9101] ? import_iovec+0x73/0xa0 [ 282.616015][ T9101] ___sys_sendmsg+0x2a5/0x360 [ 282.616025][ T9101] ? rcu_is_watching+0x15/0xb0 [ 282.616034][ T9101] ? get_pid_task+0x20/0x1f0 [ 282.616044][ T9101] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.616054][ T9101] ? rcu_is_watching+0x15/0xb0 [ 282.616069][ T9101] ? __fget_files+0x2a/0x420 [ 282.616082][ T9101] ? __fget_files+0x3a2/0x420 [ 282.616096][ T9101] __x64_sys_sendmsg+0x1b1/0x290 [ 282.616107][ T9101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.616119][ T9101] ? rcu_is_watching+0x15/0xb0 [ 282.616129][ T9101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.616138][ T9101] do_syscall_64+0x174/0x580 [ 282.616147][ T9101] ? trace_irq_disable+0x3b/0x140 [ 282.616161][ T9101] ? clear_bhb_loop+0x40/0x90 [ 282.616171][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.616180][ T9101] RIP: 0033:0x7f6f5499ce59 [ 282.616190][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.616199][ T9101] RSP: 002b:00007f6f557c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.616210][ T9101] RAX: ffffffffffffffda RBX: 00007f6f54c15fa0 RCX: 00007f6f5499ce59 [ 282.616217][ T9101] RDX: 0000000000004040 RSI: 0000200000000c80 RDI: 0000000000000003 [ 282.616224][ T9101] RBP: 00007f6f557c3090 R08: 0000000000000000 R09: 0000000000000000 [ 282.616230][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.616236][ T9101] R13: 00007f6f54c16038 R14: 00007f6f54c15fa0 R15: 00007f6f54d3fa48 [ 282.616245][ T9101] [ 282.674059][ T5712] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 282.916735][ T5683] usb 5-1: device descriptor read/64, error -71 [ 282.925527][ T9103] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 283.023837][ T5683] usb usb5-port1: attempt power cycle [ 283.075965][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 283.084909][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.100448][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.115897][ T5712] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 283.125917][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.139731][ T5712] usb 1-1: config 0 descriptor?? [ 283.223736][ T807] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 283.373889][ T5683] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 283.384238][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 283.395407][ T5683] usb 5-1: device descriptor read/8, error -71 [ 283.395423][ T807] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 283.421236][ T807] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 283.438560][ T807] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 283.449525][ T807] usb 4-1: config 0 has no interface number 0 [ 283.457142][ T807] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 14129, setting to 64 [ 283.472754][ T807] usb 4-1: config 0 interface 104 has no altsetting 1 [ 283.484344][ T807] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 283.494179][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.502261][ T807] usb 4-1: Product: syz [ 283.507064][ T807] usb 4-1: Manufacturer: syz [ 283.513237][ T807] usb 4-1: SerialNumber: syz [ 283.527675][ T807] usb 4-1: config 0 descriptor?? [ 283.537416][ T807] asix 4-1:0.104: probe with driver asix failed with error -22 [ 283.560669][ T5712] cmedia_hs100b 0003:0D8C:0014.001B: hidraw0: USB HID v0.0a Device [HID 0d8c:0014] on usb-dummy_hcd.0-1/input0 [ 283.653665][ T5683] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 283.683696][ T6017] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 283.692705][ T5683] usb 5-1: device descriptor read/8, error -71 [ 283.743181][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.753148][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.765924][ T807] usb 1-1: USB disconnect, device number 38 [ 283.788758][ T5714] usb 4-1: USB disconnect, device number 61 [ 283.808125][ T5683] usb usb5-port1: unable to enumerate USB device [ 283.834861][ T6017] usb 3-1: Using ep0 maxpacket: 16 [ 283.843201][ T6017] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 283.853508][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.861805][ T6017] usb 3-1: Product: syz [ 283.867013][ T6017] usb 3-1: Manufacturer: syz [ 283.871666][ T6017] usb 3-1: SerialNumber: syz [ 283.885187][ T6017] r8152-cfgselector 3-1: Unknown version 0x0000 [ 283.891714][ T6017] r8152-cfgselector 3-1: config 0 descriptor?? [ 283.928752][ T9123] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 284.235906][ T6017] r8152-cfgselector 3-1: Unknown version 0x0000 [ 284.242893][ T6017] r8152-cfgselector 3-1: No union descriptors [ 284.253227][ T6017] r8152-cfgselector 3-1: USB disconnect, device number 51 [ 284.555511][ T5714] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 284.716762][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 284.728625][ T5714] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 284.738951][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.747642][ T5714] usb 1-1: Product: syz [ 284.751856][ T5714] usb 1-1: Manufacturer: syz [ 284.763437][ T5714] usb 1-1: SerialNumber: syz [ 284.885369][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.896891][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.914154][ T9151] tipc: Enabling of bearer rejected, failed to enable media [ 284.995507][ T5714] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 285.023970][ T5714] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 285.047065][ T5714] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 285.200100][ T6017] usb 1-1: USB disconnect, device number 39 [ 285.208430][ T6017] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 285.233319][ T6017] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 285.250352][ T6017] visor 1-1:1.0: device disconnected [ 285.260431][ T5683] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 285.273670][ T5703] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 285.435017][ T5683] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.445523][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.454092][ T5683] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 285.462178][ T5703] usb 4-1: not running at top speed; connect to a high speed hub [ 285.476045][ T5683] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.485797][ T5683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 285.497128][ T5683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 285.510394][ T5703] usb 4-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 285.511961][ T5683] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.530328][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.532924][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.548942][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.557575][ T5703] usb 4-1: New USB device found, idVendor=041e, idProduct=3030, bcdDevice= 0.40 [ 285.557762][ T5683] usb 5-1: Product: syz [ 285.567039][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.572087][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.587816][ T5683] usb 5-1: Manufacturer: syz [ 285.595309][ T5703] usb 4-1: Product: syz [ 285.604205][ T5683] cdc_wdm 5-1:1.0: skipping garbage [ 285.609820][ T5683] cdc_wdm 5-1:1.0: skipping garbage [ 285.616238][ T5683] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 285.623132][ T5683] cdc_wdm 5-1:1.0: Unknown control protocol [ 285.623189][ T5703] usb 4-1: Manufacturer: syz [ 285.648023][ T5703] usb 4-1: SerialNumber: syz [ 285.795470][ C1] wdm_int_callback: 8 callbacks suppressed [ 285.795492][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 285.795553][ T5683] usb 5-1: USB disconnect, device number 50 [ 285.801340][ C1] wdm_int_callback: 8 callbacks suppressed [ 285.801361][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 285.826118][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 285.860351][ T9163] fuse: Unknown parameter 'default_permissionskòó“¨��¸E' [ 285.937401][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.969'. [ 286.313685][ T5683] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 286.385086][ T9189] trusted_key: encrypted_key: master key parameter 'de’aul:' is invalid [ 286.447503][ T5703] usb 4-1: USB disconnect, device number 62 [ 286.474036][ T5683] usb 5-1: device descriptor read/64, error -71 [ 286.474754][ T8231] udevd[8231]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.633927][ T5714] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 286.763679][ T5683] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 286.763731][ T5714] usb 3-1: device descriptor read/64, error -71 [ 286.843926][ T6017] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 286.876281][ T9199] netlink: 264 bytes leftover after parsing attributes in process `syz.1.979'. [ 286.885503][ T9199] netlink: 264 bytes leftover after parsing attributes in process `syz.1.979'. [ 286.894691][ T5683] usb 5-1: device descriptor read/64, error -71 [ 286.923803][ T5703] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 287.003901][ T5683] usb usb5-port1: attempt power cycle [ 287.013730][ T5714] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 287.021333][ T6017] usb 1-1: Using ep0 maxpacket: 32 [ 287.027995][ T6017] usb 1-1: unable to get BOS descriptor or descriptor too short [ 287.036742][ T6017] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 287.056328][ T6017] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 287.076123][ T9203] syzkaller1: left promiscuous mode [ 287.076313][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.081578][ T9203] syzkaller1: left allmulticast mode [ 287.092073][ T6017] usb 1-1: Product: syz [ 287.097602][ T5703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 287.101189][ T6017] usb 1-1: Manufacturer: syz [ 287.110545][ T6017] usb 1-1: SerialNumber: syz [ 287.112443][ T5703] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 287.125419][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.144109][ T9203] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 287.144572][ T5703] usb 4-1: config 0 descriptor?? [ 287.153786][ T5714] usb 3-1: device descriptor read/64, error -71 [ 287.167707][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.180583][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.273898][ T5714] usb usb3-port1: attempt power cycle [ 287.327858][ T6017] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 287.335457][ T6017] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 287.344369][ T5683] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 287.352224][ T6017] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 287.376247][ T5683] usb 5-1: device descriptor read/8, error -71 [ 287.399261][ T6017] usb 1-1: USB disconnect, device number 40 [ 287.613797][ T5714] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 287.633686][ T5683] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 287.634253][ T5714] usb 3-1: device descriptor read/8, error -71 [ 287.654412][ T5683] usb 5-1: device descriptor read/8, error -71 [ 287.758143][ T5703] video4linux radio48: keene_cmd_set failed (-71) [ 287.766206][ T5703] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 287.774985][ T5703] usb 4-1: USB disconnect, device number 63 [ 287.776155][ T5683] usb usb5-port1: unable to enumerate USB device [ 287.883830][ T5714] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 287.914650][ T5714] usb 3-1: device descriptor read/8, error -71 [ 288.024172][ T5714] usb usb3-port1: unable to enumerate USB device [ 288.203968][ T5683] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 288.302077][ T9217] bridge0: port 3(geneve0) entered blocking state [ 288.308839][ T9217] bridge0: port 3(geneve0) entered disabled state [ 288.317153][ T9217] geneve0: entered allmulticast mode [ 288.323260][ T9217] geneve0: entered promiscuous mode [ 288.329135][ T9217] bridge0: port 3(geneve0) entered blocking state [ 288.335660][ T9217] bridge0: port 3(geneve0) entered forwarding state [ 288.365041][ T5683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.377687][ T5683] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.390363][ T5683] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 288.401029][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.409101][ T5683] usb 1-1: SerialNumber: syz [ 288.615130][ T42] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 288.632349][ T5683] usb 1-1: 0:2 : does not exist [ 288.665959][ T5683] usb 1-1: USB disconnect, device number 41 [ 288.691513][ T8231] udevd[8231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.765034][ T42] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 288.774578][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.784479][ T42] usb 4-1: config 0 descriptor?? [ 288.795951][ T42] pwc: Samsung MPC-C10 USB webcam detected. [ 288.879239][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 289.010927][ T42] pwc: send_video_command error -71 [ 289.024683][ T42] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 289.050373][ T42] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 289.078474][ T42] usb 4-1: USB disconnect, device number 64 [ 289.307168][ T9236] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 289.309842][ T9235] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 289.454908][ T29] audit: type=1326 audit(1781973409.521:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.543892][ T42] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 289.568033][ T29] audit: type=1326 audit(1781973409.531:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.678237][ T29] audit: type=1326 audit(1781973409.531:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.734447][ T29] audit: type=1326 audit(1781973409.531:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.760819][ T29] audit: type=1326 audit(1781973409.531:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.786152][ T29] audit: type=1326 audit(1781973409.531:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.788778][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 289.810678][ T29] audit: type=1326 audit(1781973409.531:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.842154][ T29] audit: type=1326 audit(1781973409.531:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.842191][ T29] audit: type=1326 audit(1781973409.531:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.842221][ T29] audit: type=1326 audit(1781973409.551:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5499ce59 code=0x7ffc0000 [ 289.901308][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 289.902117][ T42] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 289.902142][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.902879][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.903087][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.906101][ T42] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 289.906118][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.906129][ T42] usb 4-1: Product: syz [ 289.906136][ T42] usb 4-1: Manufacturer: syz [ 289.906144][ T42] usb 4-1: SerialNumber: syz [ 290.111191][ T42] usb 4-1: unit 4 not found! [ 290.119222][ T42] usb 4-1: unit 0 not found! [ 290.193509][ T9254] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 290.263022][ T9257] tipc: Enabled bearer , priority 0 [ 290.278072][ T9257] syzkaller0: entered promiscuous mode [ 290.284815][ T9257] syzkaller0: entered allmulticast mode [ 290.301060][ T9257] tipc: Resetting bearer [ 290.302641][ T9256] tipc: Resetting bearer [ 290.304245][ T9256] tipc: Disabling bearer [ 290.469287][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'. [ 290.499898][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.500116][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.546772][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.574834][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.583510][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.583915][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.603032][ T6017] usb 4-1: USB disconnect, device number 65 [ 290.633881][ T5683] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 290.667438][ T9274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.667656][ T9274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.693667][ T42] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 290.784098][ T5683] usb 1-1: Using ep0 maxpacket: 16 [ 290.791727][ T5683] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 290.791757][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.793181][ T5683] usb 1-1: config 0 descriptor?? [ 290.825602][ T5683] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 290.845515][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.845546][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.845578][ T42] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 290.845599][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.847013][ T42] usb 3-1: config 0 descriptor?? [ 290.895530][ T5714] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 291.060814][ T5714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.060845][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.060864][ T5714] usb 5-1: Product: syz [ 291.060878][ T5714] usb 5-1: Manufacturer: syz [ 291.060909][ T5714] usb 5-1: SerialNumber: syz [ 291.116078][ T9277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 291.206199][ T9280] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 291.248537][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.248766][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.253216][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.278953][ T42] hid_parser_main: 43 callbacks suppressed [ 291.278995][ T42] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 291.279024][ T42] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 291.279050][ T42] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 291.279075][ T42] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 291.279098][ T42] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 291.279143][ T42] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 291.279168][ T42] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 291.284205][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.284936][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.285170][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.286128][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.286376][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.287000][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.287254][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.287615][ T42] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 291.288635][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.288901][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.303816][ T5714] cdc_ncm 5-1:1.0: bind() failure [ 291.307204][ T5714] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 291.307239][ T5714] cdc_ncm 5-1:1.1: bind() failure [ 291.327593][ T5714] usb 5-1: USB disconnect, device number 55 [ 291.392228][ T9285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1004'. [ 291.924195][ T24] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 291.957365][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.957630][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.078948][ T24] usb 4-1: config 0 has an invalid interface number: 210 but max is 0 [ 292.078976][ T24] usb 4-1: config 0 has no interface number 0 [ 292.079007][ T24] usb 4-1: config 0 interface 210 altsetting 0 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 292.079039][ T24] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a37, bcdDevice=47.f6 [ 292.079055][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.080580][ T24] usb 4-1: config 0 descriptor?? [ 292.283707][ T6017] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 292.296017][ T5712] usb 4-1: USB disconnect, device number 66 [ 292.319113][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'. [ 292.434033][ T6017] usb 5-1: Using ep0 maxpacket: 16 [ 292.436450][ T6017] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 292.458071][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.460583][ T6017] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.479739][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.488483][ T6017] usb 5-1: Product: syz [ 292.488505][ T6017] usb 5-1: Manufacturer: syz [ 292.488520][ T6017] usb 5-1: SerialNumber: syz [ 292.490363][ T6017] usb 5-1: config 0 descriptor?? [ 292.530519][ T6017] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.530561][ T6017] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 292.755094][ T5712] IPVS: starting estimator thread 0... [ 292.762425][ T9304] loop5: detected capacity change from 0 to 7 [ 292.769484][ C1] blk_print_req_error: 15 callbacks suppressed [ 292.769499][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.769573][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.775996][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.776071][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.785399][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.785471][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.786381][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.813813][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 292.819966][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.828655][ T9306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'. [ 292.853848][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.872407][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.881541][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.881617][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.881902][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.908121][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.917636][ T9304] ldm_validate_partition_table(): Disk read failed. [ 292.917812][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.917876][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.918395][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.918459][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.918621][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.918661][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.918891][ T9304] Dev loop5: unable to read RDB block 0 [ 292.919734][ T9304] loop5: unable to read partition table [ 292.919899][ T9304] loop5: partition table beyond EOD, truncated [ 292.919924][ T9304] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 292.957126][ T9308] sg_write: data in/out 622556/136 bytes for SCSI command 0x0-- guessing data in; [ 292.957126][ T9308] program syz.3.1012 not setting count and/or reply_len properly [ 293.003866][ T9305] IPVS: using max 51 ests per chain, 122400 per kthread [ 293.071013][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.081511][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.096307][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 293.133871][ T6017] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 293.134341][ T6017] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 293.151065][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.151348][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.160857][ T9311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1013'. [ 293.303973][ T5712] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 293.433987][ T5712] usb 4-1: device descriptor read/64, error -71 [ 293.553086][ T42] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 293.560617][ T42] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 293.570869][ T42] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71 [ 293.586838][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.586996][ T42] usb 3-1: USB disconnect, device number 56 [ 293.615532][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.651320][ T9315] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 293.664229][ T5683] gspca_sonixj: reg_w1 err -71 [ 293.675221][ T9315] tipc: Enabling of bearer rejected, failed to enable media [ 293.685404][ T5683] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 293.693226][ T5712] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 293.706393][ T5683] usb 1-1: USB disconnect, device number 42 [ 293.737232][ T6017] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 293.749559][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.780089][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.843928][ T5712] usb 4-1: device descriptor read/64, error -71 [ 293.954249][ T5712] usb usb4-port1: attempt power cycle [ 294.023720][ T42] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 294.149458][ T6017] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 294.158692][ T6017] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 294.165841][ T6017] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 294.172578][ T6017] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 294.174972][ T42] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.188426][ T42] usb 3-1: config 0 has no interface number 0 [ 294.189578][ T6017] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 294.195151][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 294.210838][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.215238][ T6017] usb 5-1: USB disconnect, device number 56 [ 294.247112][ T42] usb 3-1: config 0 descriptor?? [ 294.261809][ T42] usb 3-1: selecting invalid altsetting 1 [ 294.271911][ T42] dvb_ttusb_budget: ttusb_init_controller: error [ 294.278403][ T42] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 294.294037][ T5712] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 294.334486][ T5712] usb 4-1: device descriptor read/8, error -71 [ 294.341153][ T42] DVB: Unable to find symbol cx22700_attach() [ 294.356041][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.370051][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.378419][ T42] DVB: Unable to find symbol tda10046_attach() [ 294.385399][ T42] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 294.473092][ T6017] usb 3-1: USB disconnect, device number 57 [ 294.489136][ T9331] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1018'. [ 294.498273][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 294.542249][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 294.573898][ T5712] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 294.585468][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 294.585483][ T29] audit: type=1400 audit(1781973414.661:450): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9334 comm="syz.1.1020" [ 294.615358][ T5712] usb 4-1: device descriptor read/8, error -71 [ 294.653977][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 294.660296][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.671213][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.687355][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.697976][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.725336][ T5712] usb usb4-port1: unable to enumerate USB device [ 294.726500][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.741112][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.766300][ T9346] macsec1: entered promiscuous mode [ 294.771651][ T9346] macsec1: entered allmulticast mode [ 294.780938][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 294.870323][ T9351] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 294.955321][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.966662][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.980233][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 294.991112][ T24] usbtmc 1-1:16.0: can't read capabilities [ 295.184072][ T24] usb 1-1: USB disconnect, device number 43 [ 295.514889][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 295.604309][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 295.745602][ T24] usb 3-1: device descriptor read/64, error -71 [ 295.763283][ T9381] fuse: Bad value for 'rootmode' [ 295.993712][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 296.023694][ T5714] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 296.133775][ T24] usb 3-1: device descriptor read/64, error -71 [ 296.183699][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 296.193168][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.204970][ T5714] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.222825][ T5714] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.240342][ T5714] usb 1-1: config 1 interface 1 has no altsetting 0 [ 296.254189][ T24] usb usb3-port1: attempt power cycle [ 296.269248][ T5714] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 296.283372][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.311519][ T5714] usb 1-1: Product: syz [ 296.323432][ T5714] usb 1-1: Manufacturer: syz [ 296.335203][ T5714] usb 1-1: SerialNumber: syz [ 296.396409][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 296.549204][ T9381] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 296.623851][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 296.637167][ T9381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.644244][ T24] usb 3-1: device descriptor read/8, error -71 [ 296.684100][ T5714] usb 1-1: selecting invalid altsetting 0 [ 296.717404][ T5714] usb 1-1: USB disconnect, device number 44 [ 296.776556][ T8210] udevd[8210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.883731][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 296.914858][ T24] usb 3-1: device descriptor read/8, error -71 [ 297.034026][ T24] usb usb3-port1: unable to enumerate USB device [ 297.046250][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.078726][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.902862][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.933437][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.981089][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.018506][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.137737][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.152525][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.302889][ T9440] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 298.353774][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 298.415374][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 298.503680][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 298.520965][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 298.534816][ T24] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 298.546303][ T24] usb 5-1: config 1 has no interface number 0 [ 298.555821][ T9446] UHID_CREATE from different security context by process 593 (syz.3.1052), this is not allowed. [ 298.566330][ T24] usb 5-1: config 1 interface 151 has no altsetting 0 [ 298.576336][ T24] usb 5-1: string descriptor 0 read error: -22 [ 298.583031][ T24] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 298.595416][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.626108][ T24] gspca_main: pac7311-2.14.0 probing 093a:260e [ 298.755605][ T5712] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 298.858759][ T29] audit: type=1326 audit(1781973418.931:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 298.884004][ T29] audit: type=1326 audit(1781973418.931:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 298.911092][ T29] audit: type=1326 audit(1781973418.961:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 298.936582][ T29] audit: type=1326 audit(1781973418.961:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 298.961047][ T29] audit: type=1326 audit(1781973418.961:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 298.986448][ T29] audit: type=1326 audit(1781973418.961:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 299.011403][ T5987] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 299.019618][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.030494][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 299.041523][ T29] audit: type=1326 audit(1781973418.961:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 299.066220][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.079226][ T5712] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 299.088360][ T29] audit: type=1326 audit(1781973418.981:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 299.113446][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.123367][ T5712] usb 3-1: config 0 descriptor?? [ 299.152546][ T29] audit: type=1326 audit(1781973418.981:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3779ce59 code=0x7ffc0000 [ 299.186954][ T9461] syzkaller1: entered promiscuous mode [ 299.192492][ T9461] syzkaller1: entered allmulticast mode [ 299.204316][ T5987] usb 1-1: Using ep0 maxpacket: 8 [ 299.210844][ T5987] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 299.222417][ T5987] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 299.231958][ T5987] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 299.240712][ T5987] usb 1-1: Product: syz [ 299.245729][ T5987] usb 1-1: Manufacturer: syz [ 299.250363][ T5987] usb 1-1: SerialNumber: syz [ 299.333937][ T24] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 299.342154][ T24] pac7311 5-1:1.151: probe with driver pac7311 failed with error -110 [ 299.463711][ T5987] usb 1-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 299.472020][ T5987] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 299.480240][ T5987] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 299.524822][ T5712] usb 3-1: USB disconnect, device number 62 [ 299.594539][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 299.594555][ T29] audit: type=1326 audit(1781973419.671:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.627799][ T29] audit: type=1326 audit(1781973419.671:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.653383][ T29] audit: type=1326 audit(1781973419.671:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.678784][ T29] audit: type=1326 audit(1781973419.671:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.704466][ T29] audit: type=1326 audit(1781973419.671:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.730106][ T29] audit: type=1326 audit(1781973419.671:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.757347][ T29] audit: type=1326 audit(1781973419.671:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.782164][ T29] audit: type=1326 audit(1781973419.671:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.806997][ T29] audit: type=1326 audit(1781973419.671:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.834692][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.843994][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.853404][ T29] audit: type=1326 audit(1781973419.671:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.3.1057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d3775d68e code=0x7ffc0000 [ 299.853447][ T5987] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 299.902141][ T5987] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 299.925276][ T5987] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 299.940122][ T5987] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 299.966085][ T5987] usb 1-1: USB disconnect, device number 45 [ 300.002936][ T5987] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 300.036988][ T5987] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 300.073024][ T5987] visor 1-1:1.0: device disconnected [ 300.418960][ T9476] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 300.562986][ T9478] kvm: user requested TSC rate below hardware speed [ 300.811238][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 300.844148][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'. [ 301.146708][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.207664][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1066'. [ 301.239971][ T5714] usb 5-1: USB disconnect, device number 57 [ 301.265563][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.284918][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1066'. [ 301.429462][ T9504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.488344][ T9504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.559534][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'. [ 301.576379][ T9509] fuse: Bad value for 'fd' [ 301.816211][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.339764][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 302.413806][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 302.478327][ T9536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.585033][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.603081][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.614407][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.628735][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.638474][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.656670][ T24] usb 4-1: config 0 descriptor?? [ 302.713922][ T5712] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 302.876273][ T5712] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.887188][ T5712] usb 1-1: config 0 has no interface number 0 [ 302.894020][ T5712] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 302.905685][ T5712] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 302.916523][ T5712] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.925985][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.936983][ T5712] usb 1-1: config 0 descriptor?? [ 302.942679][ T9537] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 302.956178][ T5712] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 302.993783][ T5714] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 303.105671][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.118359][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.149471][ T5714] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 303.159156][ T5714] usb 5-1: can't read configurations, error -71 [ 303.159862][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 303.178667][ T5712] usb 1-1: USB disconnect, device number 46 [ 303.778614][ T9555] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 303.805386][ T9555] bond1 (unregistering): Released all slaves [ 303.869373][ T9558] syzkaller0: entered promiscuous mode [ 303.887807][ T9558] syzkaller0: entered allmulticast mode [ 303.910483][ T9560] pimreg: entered allmulticast mode [ 304.141932][ T9571] xt_hashlimit: size too large, truncated to 1048576 [ 304.173452][ T9570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.431946][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.444659][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.513686][ T5714] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 304.643813][ T5714] usb 5-1: device descriptor read/64, error -71 [ 304.803759][ T807] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 304.883728][ T5714] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 304.933707][ T807] usb 1-1: device descriptor read/64, error -71 [ 305.014204][ T5714] usb 5-1: device descriptor read/64, error -71 [ 305.046192][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.057350][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.089974][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.106410][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.124040][ T5714] usb usb5-port1: attempt power cycle [ 305.135759][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.147423][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.175073][ T807] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 305.207841][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 305.223218][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 305.246123][ T24] usb 4-1: USB disconnect, device number 71 [ 305.314078][ T807] usb 1-1: device descriptor read/64, error -71 [ 305.424381][ T807] usb usb1-port1: attempt power cycle [ 305.483771][ T5714] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 305.504128][ T5714] usb 5-1: device descriptor read/8, error -71 [ 305.583729][ T42] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 305.623728][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 305.735071][ T42] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 305.743793][ T5714] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 305.751575][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.763316][ T42] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 305.772849][ T807] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 305.780722][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 305.786826][ T5714] usb 5-1: device descriptor read/8, error -71 [ 305.793031][ T42] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 305.802298][ T42] usb 3-1: Manufacturer: syz [ 305.802739][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 305.816874][ T807] usb 1-1: device descriptor read/8, error -71 [ 305.823114][ T42] usb 3-1: config 0 descriptor?? [ 305.828263][ T24] usb 4-1: config 0 has no interface number 0 [ 305.835768][ T42] igorplugusb 3-1:0.0: incorrect number of endpoints [ 305.846785][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 305.856615][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.864846][ T24] usb 4-1: Product: syz [ 305.869067][ T24] usb 4-1: Manufacturer: syz [ 305.873885][ T24] usb 4-1: SerialNumber: syz [ 305.891084][ T24] usb 4-1: config 0 descriptor?? [ 305.904552][ T5714] usb usb5-port1: unable to enumerate USB device [ 306.053129][ T9605] netlink: 'syz.2.1101': attribute type 4 has an invalid length. [ 306.065704][ T5712] usb 3-1: USB disconnect, device number 63 [ 306.067045][ T807] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 306.106739][ T807] usb 1-1: device descriptor read/8, error -71 [ 306.214156][ T807] usb usb1-port1: unable to enumerate USB device [ 306.306776][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 306.317707][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.853838][ T807] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 307.006477][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 307.014632][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.026632][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.036792][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 307.050140][ T807] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 307.059810][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.079799][ T807] usb 3-1: config 0 descriptor?? [ 307.192875][ T9624] geneve0: entered allmulticast mode [ 307.220719][ T9628] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 307.227346][ T9628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 307.237518][ T9628] vhci_hcd vhci_hcd.0: Device attached [ 307.319849][ T9632] loop5: detected capacity change from 0 to 7 [ 307.328651][ T9632] Dev loop5: unable to read RDB block 7 [ 307.335253][ T9632] loop5: AHDI p2 [ 307.339017][ T9632] loop5: partition table partially beyond EOD, truncated [ 307.457562][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1111'. [ 307.493715][ T5712] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 307.518857][ T807] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001D/input/input16 [ 307.538049][ T9639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1111'. [ 307.551296][ T5714] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 307.579223][ T807] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001D/input/input17 [ 307.605180][ T9639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.646483][ T807] kye 0003:0458:5011.001D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 307.714466][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 307.724324][ T5714] usb 5-1: config 0 has no interfaces? [ 307.731605][ T5714] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.741436][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.753172][ T807] usb 3-1: USB disconnect, device number 64 [ 307.760157][ T5714] usb 5-1: Product: syz [ 307.765787][ T5714] usb 5-1: Manufacturer: syz [ 307.771131][ T5714] usb 5-1: SerialNumber: syz [ 307.777798][ T5714] usb 5-1: config 0 descriptor?? [ 307.923757][ T5987] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 307.941658][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 307.955087][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 307.989726][ T5683] usb 5-1: USB disconnect, device number 64 [ 307.997126][ T9629] vhci_hcd: connection reset by peer [ 308.010560][ T6809] vhci_hcd vhci_hcd.4: stop threads [ 308.018168][ T6809] vhci_hcd vhci_hcd.4: release socket [ 308.024425][ T6809] vhci_hcd vhci_hcd.4: disconnect device [ 308.075247][ T5987] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 308.083562][ T5987] usb 1-1: config 0 has no interface number 0 [ 308.089781][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.100960][ T5987] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 308.113093][ T6017] usb 4-1: USB disconnect, device number 72 [ 308.120499][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 308.132966][ T5987] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 308.145130][ T5987] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 308.157917][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.171758][ T5987] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 308.181082][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.191213][ T5987] usb 1-1: config 0 descriptor?? [ 308.196960][ T9640] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 308.204269][ T9640] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 308.215506][ T5987] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 308.301269][ T9644] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 308.360789][ T9648] netlink: 'syz.2.1114': attribute type 11 has an invalid length. [ 308.454489][ T6017] usb 1-1: USB disconnect, device number 51 [ 308.466101][ T6017] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 308.529373][ T9654] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 308.535921][ T9654] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 308.545282][ T9654] vhci_hcd vhci_hcd.0: Device attached [ 308.551492][ T9655] vhci_hcd: connection closed [ 308.551758][ T62] vhci_hcd vhci_hcd.2: stop threads [ 308.570819][ T62] vhci_hcd vhci_hcd.2: release socket [ 308.576674][ T62] vhci_hcd vhci_hcd.2: disconnect device [ 308.760489][ T9665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1119'. [ 308.924349][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 308.968409][ T9671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.977612][ T9671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.063855][ T24] usb 5-1: device descriptor read/64, error -71 [ 309.243756][ T807] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 309.313830][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 309.405983][ T807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.418790][ T807] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 309.430438][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 309.445214][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 309.455045][ T24] usb 5-1: device descriptor read/64, error -71 [ 309.461431][ T807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 309.478084][ T807] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 309.490902][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 309.501117][ T807] usb 1-1: Product: syz [ 309.508018][ T807] usb 1-1: Manufacturer: syz [ 309.513772][ T807] usb 1-1: SerialNumber: syz [ 309.521085][ T807] usb 1-1: config 0 descriptor?? [ 309.553907][ T6017] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 309.585190][ T24] usb usb5-port1: attempt power cycle [ 309.713652][ T6017] usb 3-1: Using ep0 maxpacket: 8 [ 309.722817][ T6017] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 309.732165][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.734017][ T807] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 309.740710][ T6017] usb 3-1: Product: syz [ 309.748101][ T807] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 309.752362][ T6017] usb 3-1: Manufacturer: syz [ 309.769228][ T6017] usb 3-1: SerialNumber: syz [ 309.775717][ T6017] usb 3-1: config 0 descriptor?? [ 309.784902][ T6017] gspca_main: se401-2.14.0 probing 047d:5003 [ 309.923792][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 309.934895][ T807] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 309.942723][ T807] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 309.956165][ T807] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 309.969504][ T24] usb 5-1: device descriptor read/8, error -71 [ 310.135471][ T807] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 310.186342][ T9681] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 310.195281][ T6017] gspca_se401: ExtraFeatures: 116 [ 310.200394][ T6017] gspca_se401: Too many frame sizes [ 310.214627][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 310.234170][ T24] usb 5-1: device descriptor read/8, error -71 [ 310.343833][ T24] usb usb5-port1: unable to enumerate USB device [ 310.374010][ T5987] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 310.408114][ T24] usb 3-1: USB disconnect, device number 65 [ 310.458560][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.469060][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.523919][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 310.530357][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 310.542078][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.555770][ T5987] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.565542][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.573682][ T5987] usb 4-1: Product: syz [ 310.577863][ T5987] usb 4-1: Manufacturer: syz [ 310.582479][ T5987] usb 4-1: SerialNumber: syz [ 310.588640][ T5987] usb 4-1: config 0 descriptor?? [ 310.597503][ T5987] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 310.606966][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 310.606991][ T5987] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 310.606986][ T29] audit: type=1400 audit(1781973430.681:870): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C68502F7F549FA66F30E7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE16559268A265EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04 [ 310.843797][ T807] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 310.945837][ T807] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 310.999116][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.010000][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.109989][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.119440][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.219786][ T5987] em28xx 4-1:0.0: chip ID is em2874 [ 311.243726][ T6017] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 311.403951][ T6017] usb 3-1: Using ep0 maxpacket: 16 [ 311.412288][ T6017] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 311.421567][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.429644][ T6017] usb 3-1: Product: syz [ 311.433243][ T807] usb 4-1: USB disconnect, device number 73 [ 311.434196][ T6017] usb 3-1: Manufacturer: syz [ 311.441677][ T807] em28xx 4-1:0.0: Disconnecting em28xx [ 311.449235][ T6017] usb 3-1: SerialNumber: syz [ 311.452128][ T807] em28xx 4-1:0.0: Freeing device [ 311.465696][ T6017] usb 3-1: config 0 descriptor?? [ 311.472615][ T6017] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 311.762481][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 311.773380][ T9703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1135'. [ 311.830018][ T9705] tipc: Can't bind to reserved service type 2 [ 312.052579][ T5987] usb 1-1: USB disconnect, device number 52 [ 312.056549][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.065687][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.079648][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.134694][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.185562][ T6017] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 312.192585][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1141'. [ 312.247119][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.281394][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.309333][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.334151][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.338959][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.365403][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.409402][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.432441][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.503664][ T5987] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 312.603665][ T5712] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 312.665479][ T5987] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.674881][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.697049][ T5987] usb 1-1: config 0 descriptor?? [ 312.727002][ T5987] cp210x 1-1:0.0: cp210x converter detected [ 313.125747][ T5987] usb 1-1: cp210x converter now attached to ttyUSB0 [ 313.162413][ T9731] fuse: Unknown parameter '000000000000000000000030x0000000000000006' [ 313.326134][ T5675] usb 1-1: USB disconnect, device number 53 [ 313.333133][ T5675] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.347669][ T5675] cp210x 1-1:0.0: device disconnected [ 313.555416][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.564093][ T9745] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.599850][ T9745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.616554][ T9745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.617725][ T9750] FAULT_INJECTION: forcing a failure. [ 313.617725][ T9750] name failslab, interval 1, probability 0, space 0, times 0 [ 313.631517][ T9745] veth1_vlan: left promiscuous mode [ 313.646670][ T807] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 313.647324][ T9745] veth0_vlan: left promiscuous mode [ 313.661570][ T9745] veth0_vlan: entered promiscuous mode [ 313.667720][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.3.1150 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.667748][ T9750] Tainted: [L]=SOFTLOCKUP [ 313.667754][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.667768][ T9750] Call Trace: [ 313.667778][ T9750] [ 313.667784][ T9750] dump_stack_lvl+0xe8/0x150 [ 313.667810][ T9750] should_fail_ex+0x40c/0x560 [ 313.667831][ T9750] should_failslab+0xa8/0x100 [ 313.667850][ T9750] __kmalloc_noprof+0xe8/0x750 [ 313.667874][ T9750] ? get_pid_task+0x20/0x1f0 [ 313.667891][ T9750] ? tomoyo_realpath_from_path+0xef/0x640 [ 313.667912][ T9750] tomoyo_realpath_from_path+0xef/0x640 [ 313.667930][ T9750] ? lock_release+0x4b/0x3c0 [ 313.667949][ T9750] ? tomoyo_path_number_perm+0x219/0x5f0 [ 313.667973][ T9750] tomoyo_path_number_perm+0x246/0x5f0 [ 313.667996][ T9750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.668020][ T9750] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.668044][ T9750] ? preempt_count_add+0x91/0x190 [ 313.668068][ T9750] ? rcu_is_watching+0x15/0xb0 [ 313.668089][ T9750] ? hook_file_ioctl+0x1f0/0x5f0 [ 313.668110][ T9750] ? lock_release+0x4b/0x3c0 [ 313.668127][ T9750] ? __fget_files+0x2a/0x420 [ 313.668149][ T9750] ? __fget_files+0x3a2/0x420 [ 313.668172][ T9750] ? __fget_files+0x2a/0x420 [ 313.668195][ T9750] security_file_ioctl+0xc3/0x2a0 [ 313.668219][ T9750] __se_sys_ioctl+0x47/0x170 [ 313.668238][ T9750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.668254][ T9750] do_syscall_64+0x174/0x580 [ 313.668270][ T9750] ? trace_irq_disable+0x3b/0x140 [ 313.668293][ T9750] ? clear_bhb_loop+0x40/0x90 [ 313.668311][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.668328][ T9750] RIP: 0033:0x7f7d3779ce59 [ 313.668344][ T9750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.668359][ T9750] RSP: 002b:00007f7d385b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.668379][ T9750] RAX: ffffffffffffffda RBX: 00007f7d37a15fa0 RCX: 00007f7d3779ce59 [ 313.668391][ T9750] RDX: 00002000000023c0 RSI: 0000000000008982 RDI: 0000000000000003 [ 313.668410][ T9750] RBP: 00007f7d385b2090 R08: 0000000000000000 R09: 0000000000000000 [ 313.668421][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.668431][ T9750] R13: 00007f7d37a16038 R14: 00007f7d37a15fa0 R15: 00007f7d37b3fa48 [ 313.668449][ T9750] [ 313.668457][ T9750] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.729444][ T9745] veth1_vlan: entered promiscuous mode [ 313.923918][ T9745] veth1_vlan: entered allmulticast mode [ 313.933021][ T9745] veth1_macvtap: left promiscuous mode [ 313.940762][ T9745] veth0_macvtap: left promiscuous mode [ 313.947266][ T9745] veth0_macvtap: entered promiscuous mode [ 313.954024][ T9745] veth1_macvtap: entered promiscuous mode [ 313.962754][ T9745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.993848][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 313.996836][ T5683] usb 3-1: USB disconnect, device number 66 [ 314.000502][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.019256][ T807] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 314.028931][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.056755][ T807] usb 5-1: config 0 descriptor?? [ 314.333730][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 314.469330][ T807] hid (null): nested delimiters [ 314.474488][ T807] hid (null): nested delimiters [ 314.479522][ T807] hid (null): nested delimiters [ 314.485329][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 314.490504][ T807] hid (null): report_id 24797 is invalid [ 314.499531][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 314.512498][ T807] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.001E/input/input18 [ 314.524379][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.532779][ T24] usb 1-1: Product: syz [ 314.537625][ T24] usb 1-1: Manufacturer: syz [ 314.542461][ T24] usb 1-1: SerialNumber: syz [ 314.549798][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 314.558544][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 314.597900][ T807] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.001E/input/input19 [ 314.642383][ T807] uclogic 0003:5543:0042.001E: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 314.709311][ T807] usb 5-1: USB disconnect, device number 69 [ 317.445941][ T9784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1158'. [ 329.163520][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.176153][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.184742][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.202851][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.212659][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.253341][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 329.260744][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.268033][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.275984][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.283423][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.349920][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 329.357409][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 329.365211][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 329.372982][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 329.380603][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 329.396291][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 329.405279][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 329.412727][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 329.420487][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 329.428169][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 331.253744][ T50] Bluetooth: hci5: command tx timeout [ 331.333817][ T50] Bluetooth: hci6: command tx timeout [ 331.413809][ T50] Bluetooth: hci7: command tx timeout [ 331.493810][ T50] Bluetooth: hci8: command tx timeout [ 332.607605][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 332.615824][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 332.623119][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 332.633071][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 332.640866][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 333.333761][ T5624] Bluetooth: hci5: command tx timeout [ 333.413779][ T5624] Bluetooth: hci6: command tx timeout [ 333.493920][ T5624] Bluetooth: hci7: command tx timeout [ 333.573793][ T5624] Bluetooth: hci8: command tx timeout [ 334.693844][ T5624] Bluetooth: hci9: command tx timeout [ 335.413742][ T5624] Bluetooth: hci5: command tx timeout [ 335.493751][ T5624] Bluetooth: hci6: command tx timeout [ 335.573782][ T5624] Bluetooth: hci7: command tx timeout [ 335.653729][ T5624] Bluetooth: hci8: command tx timeout [ 336.773804][ T5624] Bluetooth: hci9: command tx timeout [ 337.493823][ T5624] Bluetooth: hci5: command tx timeout [ 337.573847][ T5624] Bluetooth: hci6: command tx timeout [ 337.654567][ T5624] Bluetooth: hci7: command tx timeout [ 337.733818][ T5624] Bluetooth: hci8: command tx timeout [ 338.853854][ T5624] Bluetooth: hci9: command tx timeout [ 340.933850][ T5624] Bluetooth: hci9: command tx timeout [ 373.495175][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.501755][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.684008][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 389.693302][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 389.701040][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 389.708968][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 389.719267][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 389.735917][ T5632] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 389.751911][ T5632] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 389.762414][ T5632] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 389.774296][ T5632] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 389.781866][ T5632] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 389.836190][ T5632] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 389.843677][ T5632] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 389.851101][ T5632] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 389.860120][ T5632] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 389.867890][ T5632] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 389.897586][ T5632] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 389.904996][ T5632] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 389.912315][ T5632] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 389.921438][ T5632] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 389.929146][ T5632] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 391.733766][ T50] Bluetooth: hci10: command tx timeout [ 391.813765][ T50] Bluetooth: hci11: command tx timeout [ 391.893960][ T50] Bluetooth: hci12: command tx timeout [ 391.973744][ T50] Bluetooth: hci13: command tx timeout [ 393.128136][ T5632] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 393.137038][ T5632] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 393.144415][ T5632] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 393.152279][ T5632] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 393.160553][ T5632] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 393.814165][ T50] Bluetooth: hci10: command tx timeout [ 393.894064][ T50] Bluetooth: hci11: command tx timeout [ 393.974660][ T50] Bluetooth: hci12: command tx timeout [ 394.054141][ T50] Bluetooth: hci13: command tx timeout [ 395.173741][ T50] Bluetooth: hci14: command tx timeout [ 395.893947][ T50] Bluetooth: hci10: command tx timeout [ 395.973919][ T50] Bluetooth: hci11: command tx timeout [ 396.054045][ T50] Bluetooth: hci12: command tx timeout [ 396.134006][ T50] Bluetooth: hci13: command tx timeout [ 397.253793][ T50] Bluetooth: hci14: command tx timeout [ 397.974562][ T50] Bluetooth: hci10: command tx timeout [ 398.053853][ T50] Bluetooth: hci11: command tx timeout [ 398.133855][ T50] Bluetooth: hci12: command tx timeout [ 398.213753][ T50] Bluetooth: hci13: command tx timeout [ 399.333765][ T50] Bluetooth: hci14: command tx timeout [ 401.413767][ T50] Bluetooth: hci14: command tx timeout [ 434.934852][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.941205][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.762705][ T5632] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 449.770173][ T5632] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 449.777751][ T5632] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 449.788643][ T5632] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 449.797910][ T5632] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 449.808771][ T50] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 449.817530][ T50] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 449.826247][ T50] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 449.834222][ T50] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 449.842207][ T50] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 449.886469][ T50] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 449.893963][ T50] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 449.901703][ T50] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 449.909839][ T50] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 449.917664][ T50] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 450.756158][ T4942] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 450.764275][ T4942] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 450.771827][ T4942] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 450.779787][ T4942] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 450.787374][ T4942] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 451.813736][ T5632] Bluetooth: hci15: command tx timeout [ 451.893760][ T5632] Bluetooth: hci16: command tx timeout [ 451.973945][ T5632] Bluetooth: hci17: command tx timeout [ 452.374068][ T5632] Bluetooth: hci8: command 0x0406 tx timeout [ 452.374094][ T4942] Bluetooth: hci7: command 0x0406 tx timeout [ 452.380570][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 452.386996][ T4942] Bluetooth: hci6: command 0x0406 tx timeout [ 452.853815][ T9854] Bluetooth: hci18: command tx timeout [ 453.196702][ T5621] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 453.204792][ T5621] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 453.212134][ T5621] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 453.220076][ T5621] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 453.227726][ T5621] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 453.893801][ T9854] Bluetooth: hci15: command tx timeout [ 453.983942][ T9854] Bluetooth: hci16: command tx timeout [ 454.053768][ T9854] Bluetooth: hci17: command tx timeout [ 454.943796][ T9854] Bluetooth: hci18: command tx timeout [ 455.264611][ T9854] Bluetooth: hci19: command tx timeout [ 455.973695][ T5621] Bluetooth: hci15: command tx timeout [ 456.053867][ T5621] Bluetooth: hci16: command tx timeout [ 456.133732][ T5621] Bluetooth: hci17: command tx timeout [ 457.013734][ T5621] Bluetooth: hci18: command tx timeout [ 457.333788][ T5621] Bluetooth: hci19: command tx timeout [ 457.493779][ T5621] Bluetooth: hci9: command 0x0406 tx timeout [ 458.053780][ T9854] Bluetooth: hci15: command tx timeout [ 458.133755][ T9854] Bluetooth: hci16: command tx timeout [ 458.213774][ T9854] Bluetooth: hci17: command tx timeout [ 459.093761][ T9854] Bluetooth: hci18: command tx timeout [ 459.413739][ T9854] Bluetooth: hci19: command tx timeout [ 461.493727][ T9854] Bluetooth: hci19: command tx timeout [ 466.294197][ T30] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 466.302150][ T30] Tainted: G L syzkaller #0 [ 466.309143][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.318413][ T30] task:kworker/u8:1 state:D stack:24088 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 466.330647][ T30] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 466.338448][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 466.341843][ T30] [ 466.344874][ T30] __schedule+0x17d9/0x56c0 [ 466.349547][ T30] ? arch_stack_walk+0x11b/0x150 [ 466.355142][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 466.360138][ T30] ? __pfx___schedule+0x10/0x10 [ 466.365391][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.384010][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.408690][ T30] ? lock_release+0x4b/0x3c0 [ 466.414808][ T30] ? wq_worker_sleeping+0x66/0x250 [ 466.420006][ T30] schedule+0x164/0x360 [ 466.424210][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.429716][ T30] __mutex_lock+0x7bf/0x1550 [ 466.434556][ T30] ? __mutex_lock+0x5d4/0x1550 [ 466.439317][ T30] ? udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 466.445657][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.450805][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.455907][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.461291][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.466321][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 466.472064][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.476872][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 466.482601][ T30] udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 466.488773][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.493620][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 466.499400][ T30] process_scheduled_works+0xa8e/0x14e0 [ 466.505241][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.511238][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.516763][ T30] ? assign_work+0x3cf/0x5d0 [ 466.521376][ T30] worker_thread+0xa47/0xfb0 [ 466.526071][ T30] kthread+0x388/0x470 [ 466.530166][ T30] ? __pfx_worker_thread+0x10/0x10 [ 466.535560][ T30] ? __pfx_kthread+0x10/0x10 [ 466.540160][ T30] ret_from_fork+0x514/0xb70 [ 466.544780][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 466.549902][ T30] ? __switch_to+0xc89/0x1420 [ 466.554618][ T30] ? __pfx_kthread+0x10/0x10 [ 466.559213][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.564306][ T30] [ 466.567533][ T30] INFO: task kworker/0:5:5987 blocked for more than 143 seconds. [ 466.575286][ T30] Tainted: G L syzkaller #0 [ 466.581776][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.590487][ T30] task:kworker/0:5 state:D stack:21640 pid:5987 tgid:5987 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 466.602681][ T30] Workqueue: events netdev_rx_mode_work [ 466.608457][ T30] Call Trace: [ 466.611761][ T30] [ 466.614917][ T30] __schedule+0x17d9/0x56c0 [ 466.619801][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.625153][ T30] ? __pfx___schedule+0x10/0x10 [ 466.630017][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.634817][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.639621][ T30] ? lock_release+0x4b/0x3c0 [ 466.644292][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.649087][ T30] ? schedule+0x90/0x360 [ 466.653318][ T30] ? trace_irq_enable+0x3b/0x140 [ 466.658592][ T30] schedule+0x164/0x360 [ 466.662753][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.668266][ T30] __mutex_lock+0x7bf/0x1550 [ 466.672903][ T30] ? __mutex_lock+0x5d4/0x1550 [ 466.677735][ T30] ? netdev_rx_mode_work+0x18/0x3c0 [ 466.682947][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.688205][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.693731][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 466.699462][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.704248][ T30] ? lock_acquire+0x5f/0x350 [ 466.708929][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 466.714896][ T30] netdev_rx_mode_work+0x18/0x3c0 [ 466.719924][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 466.726176][ T30] process_scheduled_works+0xa8e/0x14e0 [ 466.731754][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.737771][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.742804][ T30] ? assign_work+0x3cf/0x5d0 [ 466.747641][ T30] worker_thread+0xa47/0xfb0 [ 466.752236][ T30] ? __kthread_parkme+0x71/0x1f0 [ 466.757220][ T30] kthread+0x388/0x470 [ 466.761293][ T30] ? __pfx_worker_thread+0x10/0x10 [ 466.766458][ T30] ? __pfx_kthread+0x10/0x10 [ 466.771046][ T30] ret_from_fork+0x514/0xb70 [ 466.775998][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 466.781261][ T30] ? __switch_to+0xc89/0x1420 [ 466.785963][ T30] ? __pfx_kthread+0x10/0x10 [ 466.790560][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.795533][ T30] [ 466.798580][ T30] INFO: task kworker/u8:19:6809 blocked for more than 143 seconds. [ 466.806780][ T30] Tainted: G L syzkaller #0 [ 466.813343][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.822241][ T30] task:kworker/u8:19 state:D stack:22648 pid:6809 tgid:6809 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 466.834825][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 466.840935][ T30] Call Trace: [ 466.844242][ T30] [ 466.847171][ T30] __schedule+0x17d9/0x56c0 [ 466.851682][ T30] ? __pfx___schedule+0x10/0x10 [ 466.856767][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.861558][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.866597][ T30] ? lock_release+0x4b/0x3c0 [ 466.871189][ T30] ? wq_worker_sleeping+0x66/0x250 [ 466.876345][ T30] schedule+0x164/0x360 [ 466.880515][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.886041][ T30] __mutex_lock+0x7bf/0x1550 [ 466.890636][ T30] ? __mutex_lock+0x5d4/0x1550 [ 466.895651][ T30] ? addrconf_dad_work+0x116/0x15c0 [ 466.900845][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.905906][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.911027][ T30] addrconf_dad_work+0x116/0x15c0 [ 466.916094][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 466.921566][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.927006][ T30] ? lock_acquire+0x5f/0x350 [ 466.931642][ T30] ? rcu_is_watching+0x15/0xb0 [ 466.936575][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 466.942338][ T30] process_scheduled_works+0xa8e/0x14e0 [ 466.947978][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.954250][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.959288][ T30] ? assign_work+0x3cf/0x5d0 [ 466.963911][ T30] worker_thread+0xa47/0xfb0 [ 466.968519][ T30] kthread+0x388/0x470 [ 466.972739][ T30] ? __pfx_worker_thread+0x10/0x10 [ 466.977904][ T30] ? __pfx_kthread+0x10/0x10 [ 466.982502][ T30] ret_from_fork+0x514/0xb70 [ 466.987347][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 466.992457][ T30] ? __switch_to+0xc89/0x1420 [ 466.997170][ T30] ? __pfx_kthread+0x10/0x10 [ 467.001769][ T30] ret_from_fork_asm+0x1a/0x30 [ 467.006828][ T30] [ 467.009858][ T30] INFO: task kworker/u8:21:6811 blocked for more than 144 seconds. [ 467.020457][ T30] Tainted: G L syzkaller #0 [ 467.027017][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.036120][ T30] task:kworker/u8:21 state:D stack:21656 pid:6811 tgid:6811 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 467.048525][ T30] Workqueue: events_unbound linkwatch_event [ 467.054547][ T30] Call Trace: [ 467.057828][ T30] [ 467.060745][ T30] __schedule+0x17d9/0x56c0 [ 467.065321][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.070359][ T30] ? debug_object_activate+0xb7/0x410 [ 467.076145][ T30] ? __pfx___schedule+0x10/0x10 [ 467.081012][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.085812][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.090586][ T30] ? lock_release+0x4b/0x3c0 [ 467.096609][ T30] ? wq_worker_sleeping+0x66/0x250 [ 467.101758][ T30] schedule+0x164/0x360 [ 467.106170][ T30] schedule_preempt_disabled+0x13/0x30 [ 467.111654][ T30] __mutex_lock+0x7bf/0x1550 [ 467.116286][ T30] ? __mutex_lock+0x5d4/0x1550 [ 467.121057][ T30] ? linkwatch_event+0xe/0x60 [ 467.125777][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 467.131170][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 467.137192][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.141984][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.146787][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 467.152517][ T30] linkwatch_event+0xe/0x60 [ 467.157069][ T30] process_scheduled_works+0xa8e/0x14e0 [ 467.162633][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.168871][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.174072][ T30] ? assign_work+0x3cf/0x5d0 [ 467.178700][ T30] worker_thread+0xa47/0xfb0 [ 467.183291][ T30] kthread+0x388/0x470 [ 467.187414][ T30] ? __pfx_worker_thread+0x10/0x10 [ 467.192551][ T30] ? __pfx_kthread+0x10/0x10 [ 467.197476][ T30] ret_from_fork+0x514/0xb70 [ 467.202247][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 467.207446][ T30] ? __switch_to+0xc89/0x1420 [ 467.212134][ T30] ? __pfx_kthread+0x10/0x10 [ 467.216766][ T30] ret_from_fork_asm+0x1a/0x30 [ 467.221542][ T30] [ 467.224817][ T30] INFO: task syz.1.1149:9745 blocked for more than 144 seconds. [ 467.232906][ T30] Tainted: G L syzkaller #0 [ 467.239634][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.248402][ T30] task:syz.1.1149 state:D stack:21352 pid:9745 tgid:9744 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 467.260708][ T30] Call Trace: [ 467.264087][ T30] [ 467.267042][ T30] __schedule+0x17d9/0x56c0 [ 467.271548][ T30] ? __pfx___schedule+0x10/0x10 [ 467.276439][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.281218][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.286241][ T30] ? lock_release+0x4b/0x3c0 [ 467.290840][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.295722][ T30] schedule+0x164/0x360 [ 467.299896][ T30] schedule_preempt_disabled+0x13/0x30 [ 467.305426][ T30] __mutex_lock+0x7bf/0x1550 [ 467.310076][ T30] ? __mutex_lock+0x5d4/0x1550 [ 467.315147][ T30] ? __ethtool_get_link_ksettings+0x109/0x250 [ 467.321435][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 467.326502][ T30] ? igmp_group_added+0x238/0x910 [ 467.331599][ T30] ? igmpv3_del_delrec+0x204/0x710 [ 467.337208][ T30] __ethtool_get_link_ksettings+0x109/0x250 [ 467.343139][ T30] bond_netdev_event+0x643/0xf80 [ 467.348442][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 467.353962][ T30] ? __pfx_inetdev_event+0x10/0x10 [ 467.359174][ T30] ? ipmr_device_event+0x1f6/0x220 [ 467.364396][ T30] notifier_call_chain+0x1a5/0x3d0 [ 467.369517][ T30] __dev_notify_flags+0x1aa/0x310 [ 467.374868][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 467.380424][ T30] ? __dev_change_flags+0x5f1/0x820 [ 467.385681][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 467.391243][ T30] ? __kmalloc_cache_noprof+0x318/0x660 [ 467.396880][ T30] netif_change_flags+0xde/0x1b0 [ 467.401859][ T30] dev_change_flags+0x128/0x260 [ 467.406960][ T30] vlan_device_event+0x1b4e/0x1f00 [ 467.412162][ T30] ? packet_notifier+0xf1b/0xf70 [ 467.417245][ T30] ? br_device_event+0x282/0x9c0 [ 467.422193][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 467.427978][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 467.433448][ T30] ? bcm_notifier+0xa9/0x890 [ 467.438930][ T30] ? raw_notifier+0x9d/0x7d0 [ 467.443670][ T30] ? cgw_notifier+0x314/0x380 [ 467.448363][ T30] notifier_call_chain+0x1a5/0x3d0 [ 467.453511][ T30] __dev_notify_flags+0x1aa/0x310 [ 467.458577][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 467.464425][ T30] ? __dev_change_flags+0x5f1/0x820 [ 467.469649][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 467.475244][ T30] ? do_setlink+0x3c9f/0x4670 [ 467.479928][ T30] netif_change_flags+0xde/0x1b0 [ 467.484906][ T30] do_setlink+0xdd6/0x4670 [ 467.489333][ T30] ? __pfx_do_setlink+0x10/0x10 [ 467.494424][ T30] ? stack_trace_save+0xa9/0x100 [ 467.499389][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 467.504809][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 467.510367][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 467.516296][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.521068][ T30] ? trace_contention_end+0x3d/0x140 [ 467.526604][ T30] ? __mutex_lock+0x30d/0x1550 [ 467.531367][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 467.536183][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 467.541617][ T30] ? ns_capable+0x89/0xe0 [ 467.546163][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 467.551894][ T30] rtnl_newlink+0x148e/0x1bd0 [ 467.556861][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.561907][ T30] ? unwind_next_frame+0x8f/0x2550 [ 467.567110][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.571889][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 467.577144][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.581919][ T30] ? unwind_next_frame+0x8f/0x2550 [ 467.587291][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.592059][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 467.597317][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.602120][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.606940][ T30] ? lock_release+0x4b/0x3c0 [ 467.611534][ T30] ? lock_release+0x4b/0x3c0 [ 467.616459][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 467.621744][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 467.626967][ T30] ? kernel_text_address+0xa5/0xe0 [ 467.632085][ T30] ? __kernel_text_address+0xd/0x30 [ 467.637428][ T30] ? unwind_get_return_address+0x4d/0x90 [ 467.643452][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 467.649932][ T30] ? arch_stack_walk+0xfb/0x150 [ 467.654833][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 467.659938][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.664739][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.669771][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.674841][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.679960][ T30] ? lock_release+0x4b/0x3c0 [ 467.684642][ T30] ? bpf_lsm_capable+0x9/0x20 [ 467.689398][ T30] ? security_capable+0x7e/0x2c0 [ 467.694470][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.699509][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 467.704695][ T30] ? kasan_save_track+0x3e/0x80 [ 467.709585][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 467.714730][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.720216][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 467.725265][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.730040][ T30] netlink_rcv_skb+0x226/0x4a0 [ 467.735079][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.740537][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.746356][ T30] ? net_generic+0x1e/0x240 [ 467.750886][ T30] ? net_generic+0x1e/0x240 [ 467.755433][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.760642][ T30] netlink_unicast+0x7bb/0x940 [ 467.765809][ T30] netlink_sendmsg+0x813/0xb40 [ 467.770621][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.775947][ T30] ? futex_unqueue+0x22/0x240 [ 467.780667][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 467.787230][ T30] ? lock_release+0x4b/0x3c0 [ 467.791875][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.797493][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 467.802658][ T30] ____sys_sendmsg+0x54e/0x850 [ 467.807475][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.812761][ T30] ? lock_release+0x4b/0x3c0 [ 467.817502][ T30] ? import_iovec+0x73/0xa0 [ 467.822216][ T30] ___sys_sendmsg+0x2a5/0x360 [ 467.827188][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.832392][ T30] ? futex_wait+0x2a2/0x390 [ 467.836938][ T30] ? __fget_files+0x2a/0x420 [ 467.841571][ T30] ? __fget_files+0x3a2/0x420 [ 467.846271][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 467.851604][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.857331][ T30] ? rcu_is_watching+0x15/0xb0 [ 467.862124][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.868275][ T30] do_syscall_64+0x174/0x580 [ 467.872941][ T30] ? trace_irq_disable+0x3b/0x140 [ 467.878009][ T30] ? clear_bhb_loop+0x40/0x90 [ 467.882697][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.888838][ T30] RIP: 0033:0x7f1ad119ce59 [ 467.893297][ T30] RSP: 002b:00007f1ad2032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.901895][ T30] RAX: ffffffffffffffda RBX: 00007f1ad1415fa0 RCX: 00007f1ad119ce59 [ 467.909944][ T30] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 467.918204][ T30] RBP: 00007f1ad1232e6f R08: 0000000000000000 R09: 0000000000000000 [ 467.926231][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.934271][ T30] R13: 00007f1ad1416038 R14: 00007f1ad1415fa0 R15: 00007f1ad153fa48 [ 467.942269][ T30] [ 467.945553][ T30] INFO: task syz.3.1150:9750 blocked for more than 145 seconds. [ 467.953556][ T30] Tainted: G L syzkaller #0 [ 467.960509][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.969209][ T30] task:syz.3.1150 state:D stack:27464 pid:9750 tgid:9749 ppid:5635 task_flags:0x400040 flags:0x00080002 [ 467.981364][ T30] Call Trace: [ 467.984688][ T30] [ 467.987622][ T30] __schedule+0x17d9/0x56c0 [ 467.992148][ T30] ? __pfx___schedule+0x10/0x10 [ 467.997036][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.001800][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.006803][ T30] ? lock_release+0x4b/0x3c0 [ 468.011388][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.016173][ T30] schedule+0x164/0x360 [ 468.020336][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.025874][ T30] __mutex_lock+0x7bf/0x1550 [ 468.030476][ T30] ? __mutex_lock+0x5d4/0x1550 [ 468.035589][ T30] ? vlan_ioctl_handler+0xf0/0x630 [ 468.040784][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.045853][ T30] ? lock_release+0x4b/0x3c0 [ 468.050631][ T30] ? __might_fault+0xaf/0x130 [ 468.055971][ T30] ? __might_fault+0xcb/0x130 [ 468.060693][ T30] vlan_ioctl_handler+0xf0/0x630 [ 468.065881][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.070920][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 468.076491][ T30] ? hook_file_ioctl+0x1f0/0x5f0 [ 468.081531][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 468.087122][ T30] sock_ioctl+0x612/0x7e0 [ 468.091456][ T30] ? lock_release+0x4b/0x3c0 [ 468.096303][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 468.101155][ T30] ? __fget_files+0x2a/0x420 [ 468.105771][ T30] ? __fget_files+0x3a2/0x420 [ 468.110470][ T30] ? __fget_files+0x2a/0x420 [ 468.115099][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 468.120037][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 468.125139][ T30] __se_sys_ioctl+0xfc/0x170 [ 468.129746][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.137210][ T30] do_syscall_64+0x174/0x580 [ 468.141826][ T30] ? trace_irq_disable+0x3b/0x140 [ 468.146899][ T30] ? clear_bhb_loop+0x40/0x90 [ 468.151598][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.158119][ T30] RIP: 0033:0x7f7d3779ce59 [ 468.162544][ T30] RSP: 002b:00007f7d385b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.171001][ T30] RAX: ffffffffffffffda RBX: 00007f7d37a15fa0 RCX: 00007f7d3779ce59 [ 468.179045][ T30] RDX: 00002000000023c0 RSI: 0000000000008982 RDI: 0000000000000003 [ 468.187286][ T30] RBP: 00007f7d385b2090 R08: 0000000000000000 R09: 0000000000000000 [ 468.195357][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.203383][ T30] R13: 00007f7d37a16038 R14: 00007f7d37a15fa0 R15: 00007f7d37b3fa48 [ 468.211400][ T30] [ 468.214637][ T30] INFO: task syz.0.1151:9752 blocked for more than 145 seconds. [ 468.222290][ T30] Tainted: G L syzkaller #0 [ 468.229207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.238008][ T30] task:syz.0.1151 state:D stack:26936 pid:9752 tgid:9751 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 468.250184][ T30] Call Trace: [ 468.253475][ T30] [ 468.256968][ T30] __schedule+0x17d9/0x56c0 [ 468.261541][ T30] ? __pfx___schedule+0x10/0x10 [ 468.266536][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.271311][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.276340][ T30] ? lock_release+0x4b/0x3c0 [ 468.281198][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.286023][ T30] schedule+0x164/0x360 [ 468.290188][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.295697][ T30] __mutex_lock+0x7bf/0x1550 [ 468.300293][ T30] ? __mutex_lock+0x5d4/0x1550 [ 468.305333][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 468.310116][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.315182][ T30] ? ns_capable+0x89/0xe0 [ 468.319530][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 468.325299][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 468.329899][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 468.335433][ T30] ? netlink_unicast+0x77f/0x940 [ 468.340365][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 468.345425][ T30] ? do_syscall_64+0x174/0x580 [ 468.350187][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.356296][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.361441][ T30] ? trace_irq_enable+0x3b/0x140 [ 468.366649][ T30] ? nlmon_xmit+0xb0/0x100 [ 468.371192][ T30] ? kmem_cache_free+0x182/0x650 [ 468.376189][ T30] ? dev_hard_start_xmit+0x7c7/0x830 [ 468.381585][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 468.386740][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 468.391854][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.396904][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 468.402029][ T30] ? trace_irq_enable+0x3b/0x140 [ 468.407043][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 468.412169][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 468.417332][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 468.422628][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 468.428023][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 468.433060][ T30] ? lock_release+0x4b/0x3c0 [ 468.437724][ T30] ? bpf_lsm_capable+0x9/0x20 [ 468.442401][ T30] ? security_capable+0x7e/0x2c0 [ 468.447368][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 468.452396][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 468.457614][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 468.463242][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 468.468762][ T30] ? ref_tracker_free+0x689/0x830 [ 468.473975][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 468.479357][ T30] ? __asan_memcpy+0x40/0x70 [ 468.484303][ T30] ? __skb_clone+0x5c/0x6c0 [ 468.489129][ T30] netlink_rcv_skb+0x226/0x4a0 [ 468.493927][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 468.499387][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.504709][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.509908][ T30] netlink_unicast+0x7bb/0x940 [ 468.514921][ T30] netlink_sendmsg+0x813/0xb40 [ 468.519681][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.525002][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 468.531425][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.536754][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 468.541790][ T30] ____sys_sendmsg+0x54e/0x850 [ 468.546835][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.552133][ T30] ? lock_release+0x4b/0x3c0 [ 468.556787][ T30] ? import_iovec+0x73/0xa0 [ 468.561304][ T30] ___sys_sendmsg+0x2a5/0x360 [ 468.566500][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.571714][ T30] ? futex_wake+0x51b/0x5f0 [ 468.576480][ T30] ? __fget_files+0x2a/0x420 [ 468.581100][ T30] ? __fget_files+0x3a2/0x420 [ 468.585814][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 468.590771][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.596269][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.601045][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.607368][ T30] do_syscall_64+0x174/0x580 [ 468.611954][ T30] ? trace_irq_disable+0x3b/0x140 [ 468.617019][ T30] ? clear_bhb_loop+0x40/0x90 [ 468.621704][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.627627][ T30] RIP: 0033:0x7fc4d479ce59 [ 468.632047][ T30] RSP: 002b:00007fc4d56be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.640747][ T30] RAX: ffffffffffffffda RBX: 00007fc4d4a15fa0 RCX: 00007fc4d479ce59 [ 468.648766][ T30] RDX: 0000000020004000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 468.656807][ T30] RBP: 00007fc4d4832e6f R08: 0000000000000000 R09: 0000000000000000 [ 468.665235][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.673821][ T30] R13: 00007fc4d4a16038 R14: 00007fc4d4a15fa0 R15: 00007fc4d4b3fa48 [ 468.681841][ T30] [ 468.684907][ T30] INFO: task syz.2.1152:9755 blocked for more than 145 seconds. [ 468.692538][ T30] Tainted: G L syzkaller #0 [ 468.699592][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.708353][ T30] task:syz.2.1152 state:D stack:28792 pid:9755 tgid:9754 ppid:5638 task_flags:0x400040 flags:0x00080002 [ 468.720318][ T30] Call Trace: [ 468.723616][ T30] [ 468.726545][ T30] __schedule+0x17d9/0x56c0 [ 468.731044][ T30] ? __pfx___schedule+0x10/0x10 [ 468.736150][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.740926][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.745727][ T30] ? lock_release+0x4b/0x3c0 [ 468.750318][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.755122][ T30] schedule+0x164/0x360 [ 468.759293][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.765100][ T30] __mutex_lock+0x7bf/0x1550 [ 468.770046][ T30] ? __mutex_lock+0x5d4/0x1550 [ 468.774915][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 468.780065][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.785133][ T30] ? lock_release+0x4b/0x3c0 [ 468.789739][ T30] ? __might_fault+0xaf/0x130 [ 468.794706][ T30] ? __might_fault+0xcb/0x130 [ 468.799401][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 468.804329][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 468.809624][ T30] ? __fget_files+0x2a/0x420 [ 468.814250][ T30] ? __fget_files+0x3a2/0x420 [ 468.818934][ T30] ? __fget_files+0x2a/0x420 [ 468.823513][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 468.828709][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 468.833870][ T30] __se_sys_ioctl+0xfc/0x170 [ 468.838453][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.844554][ T30] do_syscall_64+0x174/0x580 [ 468.849153][ T30] ? trace_irq_disable+0x3b/0x140 [ 468.854807][ T30] ? clear_bhb_loop+0x40/0x90 [ 468.859607][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.865752][ T30] RIP: 0033:0x7f6f5499ce59 [ 468.870185][ T30] RSP: 002b:00007f6f557c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.879193][ T30] RAX: ffffffffffffffda RBX: 00007f6f54c15fa0 RCX: 00007f6f5499ce59 [ 468.887475][ T30] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 468.895501][ T30] RBP: 00007f6f54a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 468.903483][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.911493][ T30] R13: 00007f6f54c16038 R14: 00007f6f54c15fa0 R15: 00007f6f54d3fa48 [ 468.919735][ T30] [ 468.922770][ T30] INFO: task syz.2.1152:9756 blocked for more than 145 seconds. [ 468.930480][ T30] Tainted: G L syzkaller #0 [ 468.937221][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.946179][ T30] task:syz.2.1152 state:D stack:26928 pid:9756 tgid:9754 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 468.958138][ T30] Call Trace: [ 468.961482][ T30] [ 468.964454][ T30] __schedule+0x17d9/0x56c0 [ 468.968973][ T30] ? trace_irq_enable+0x3b/0x140 [ 468.974697][ T30] ? __pfx___schedule+0x10/0x10 [ 468.979668][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.984474][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.989248][ T30] ? lock_release+0x4b/0x3c0 [ 468.993877][ T30] ? rcu_is_watching+0x15/0xb0 [ 468.998662][ T30] schedule+0x164/0x360 [ 469.002809][ T30] schedule_preempt_disabled+0x13/0x30 [ 469.008527][ T30] __mutex_lock+0x7bf/0x1550 [ 469.013125][ T30] ? __mutex_lock+0x5d4/0x1550 [ 469.017951][ T30] ? rtnetlink_rcv_msg+0x767/0xc00 [ 469.023072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 469.028171][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 469.033293][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.038242][ T30] ? lock_release+0x4b/0x3c0 [ 469.042825][ T30] ? bpf_lsm_capable+0x9/0x20 [ 469.047533][ T30] ? security_capable+0x7e/0x2c0 [ 469.052615][ T30] rtnetlink_rcv_msg+0x767/0xc00 [ 469.057603][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 469.062718][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.068438][ T30] ? ref_tracker_free+0x689/0x830 [ 469.073466][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.079407][ T30] ? __asan_memcpy+0x40/0x70 [ 469.084076][ T30] ? __skb_clone+0x5c/0x6c0 [ 469.088601][ T30] netlink_rcv_skb+0x226/0x4a0 [ 469.093361][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.099092][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.104434][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.109629][ T30] netlink_unicast+0x7bb/0x940 [ 469.114476][ T30] netlink_sendmsg+0x813/0xb40 [ 469.119259][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.124794][ T30] ? futex_unqueue+0x22/0x240 [ 469.129469][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 469.135936][ T30] ? lock_release+0x4b/0x3c0 [ 469.140535][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.145854][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 469.150900][ T30] ____sys_sendmsg+0x54e/0x850 [ 469.155949][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.161232][ T30] ? lock_release+0x4b/0x3c0 [ 469.165845][ T30] ? import_iovec+0x73/0xa0 [ 469.170377][ T30] ___sys_sendmsg+0x2a5/0x360 [ 469.176523][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.182223][ T30] ? futex_wait+0x2a2/0x390 [ 469.187043][ T30] ? __fget_files+0x2a/0x420 [ 469.191652][ T30] ? __fget_files+0x3a2/0x420 [ 469.196388][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 469.201335][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.206910][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.211681][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.218009][ T30] do_syscall_64+0x174/0x580 [ 469.222604][ T30] ? trace_irq_disable+0x3b/0x140 [ 469.227672][ T30] ? clear_bhb_loop+0x40/0x90 [ 469.232360][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.238331][ T30] RIP: 0033:0x7f6f5499ce59 [ 469.242870][ T30] RSP: 002b:00007f6f557a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.251551][ T30] RAX: ffffffffffffffda RBX: 00007f6f54c16090 RCX: 00007f6f5499ce59 [ 469.259576][ T30] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 469.267615][ T30] RBP: 00007f6f54a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 469.275848][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.284401][ T30] R13: 00007f6f54c16128 R14: 00007f6f54c16090 R15: 00007f6f54d3fa48 [ 469.292411][ T30] [ 469.295504][ T30] INFO: task syz.2.1152:9757 blocked for more than 146 seconds. [ 469.303138][ T30] Tainted: G L syzkaller #0 [ 469.309933][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.318642][ T30] task:syz.2.1152 state:D stack:29144 pid:9757 tgid:9754 ppid:5638 task_flags:0x400040 flags:0x00080002 [ 469.330615][ T30] Call Trace: [ 469.334305][ T30] [ 469.337487][ T30] __schedule+0x17d9/0x56c0 [ 469.342046][ T30] ? page_table_check_set+0x4b3/0x510 [ 469.347500][ T30] ? __pfx___schedule+0x10/0x10 [ 469.352368][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.357196][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.361968][ T30] ? lock_release+0x4b/0x3c0 [ 469.366840][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.371627][ T30] schedule+0x164/0x360 [ 469.375841][ T30] schedule_preempt_disabled+0x13/0x30 [ 469.381401][ T30] __mutex_lock+0x7bf/0x1550 [ 469.386499][ T30] ? __mutex_lock+0x5d4/0x1550 [ 469.391339][ T30] ? tun_chr_close+0x3e/0x1c0 [ 469.396325][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 469.401390][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 469.406581][ T30] tun_chr_close+0x3e/0x1c0 [ 469.411100][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 469.416370][ T30] __fput+0x418/0xa50 [ 469.420375][ T30] fput_close_sync+0x11f/0x240 [ 469.425382][ T30] ? __pfx_fput_close_sync+0x10/0x10 [ 469.430669][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.436767][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.442845][ T30] __x64_sys_close+0x7e/0x110 [ 469.447580][ T30] do_syscall_64+0x174/0x580 [ 469.452169][ T30] ? trace_irq_disable+0x3b/0x140 [ 469.457465][ T30] ? clear_bhb_loop+0x40/0x90 [ 469.462152][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.468106][ T30] RIP: 0033:0x7f6f5499ce59 [ 469.472540][ T30] RSP: 002b:00007f6f55781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 469.481041][ T30] RAX: ffffffffffffffda RBX: 00007f6f54c16180 RCX: 00007f6f5499ce59 [ 469.489666][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 469.497854][ T30] RBP: 00007f6f54a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 469.505961][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.514241][ T30] R13: 00007f6f54c16218 R14: 00007f6f54c16180 R15: 00007f6f54d3fa48 [ 469.522240][ T30] [ 469.525318][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 469.534483][ T30] INFO: task syz.4.1158:9784 blocked for more than 146 seconds. [ 469.542121][ T30] Tainted: G L syzkaller #0 [ 469.548914][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.557634][ T30] task:syz.4.1158 state:D stack:25480 pid:9784 tgid:9781 ppid:5633 task_flags:0x400140 flags:0x00080006 [ 469.569635][ T30] Call Trace: [ 469.572930][ T30] [ 469.576112][ T30] __schedule+0x17d9/0x56c0 [ 469.580632][ T30] ? __pfx___schedule+0x10/0x10 [ 469.585510][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.590761][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.595700][ T30] ? lock_release+0x4b/0x3c0 [ 469.600290][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.605321][ T30] schedule+0x164/0x360 [ 469.609483][ T30] schedule_preempt_disabled+0x13/0x30 [ 469.614985][ T30] __mutex_lock+0x7bf/0x1550 [ 469.619584][ T30] ? __mutex_lock+0x5d4/0x1550 [ 469.624394][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 469.629158][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 469.634447][ T30] ? ns_capable+0x89/0xe0 [ 469.638773][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 469.644532][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 469.649138][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 469.654497][ T30] ? netlink_unicast+0x77f/0x940 [ 469.659477][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.664789][ T30] ? do_syscall_64+0x174/0x580 [ 469.669579][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.675708][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.680769][ T30] ? trace_irq_enable+0x3b/0x140 [ 469.685777][ T30] ? nlmon_xmit+0xb0/0x100 [ 469.690678][ T30] ? kmem_cache_free+0x182/0x650 [ 469.696077][ T30] ? dev_hard_start_xmit+0x7c7/0x830 [ 469.701454][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 469.706701][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 469.711828][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.716643][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 469.721764][ T30] ? trace_irq_enable+0x3b/0x140 [ 469.726960][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 469.732084][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 469.737239][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 469.742539][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 469.747696][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 469.753247][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.758263][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.763284][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.768101][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.773136][ T30] ? lock_release+0x4b/0x3c0 [ 469.777853][ T30] ? bpf_lsm_capable+0x9/0x20 [ 469.782541][ T30] ? security_capable+0x7e/0x2c0 [ 469.787736][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.793298][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 469.798315][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 469.803434][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.808961][ T30] ? ref_tracker_free+0x689/0x830 [ 469.814160][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.819530][ T30] ? __asan_memcpy+0x40/0x70 [ 469.824157][ T30] ? __skb_clone+0x5c/0x6c0 [ 469.828669][ T30] netlink_rcv_skb+0x226/0x4a0 [ 469.833449][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.838973][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.844434][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.849632][ T30] netlink_unicast+0x7bb/0x940 [ 469.854467][ T30] netlink_sendmsg+0x813/0xb40 [ 469.859251][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.864568][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 469.870990][ T30] ? security_socket_sendmsg+0x22b/0x280 [ 469.876966][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.882245][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 469.887332][ T30] ____sys_sendmsg+0x54e/0x850 [ 469.892122][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.898084][ T30] ? lock_release+0x4b/0x3c0 [ 469.902779][ T30] ? import_iovec+0x73/0xa0 [ 469.907571][ T30] ___sys_sendmsg+0x2a5/0x360 [ 469.912286][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.917529][ T30] ? futex_wake+0x51b/0x5f0 [ 469.922096][ T30] ? __fget_files+0x2a/0x420 [ 469.926728][ T30] ? __fget_files+0x3a2/0x420 [ 469.931416][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 469.936598][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.942064][ T30] ? rcu_is_watching+0x15/0xb0 [ 469.946854][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.952930][ T30] do_syscall_64+0x174/0x580 [ 469.957567][ T30] ? trace_irq_disable+0x3b/0x140 [ 469.962616][ T30] ? clear_bhb_loop+0x40/0x90 [ 469.967548][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.973439][ T30] RIP: 0033:0x7f48fbb9ce59 [ 469.977999][ T30] RSP: 002b:00007f48fc9af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.986481][ T30] RAX: ffffffffffffffda RBX: 00007f48fbe16180 RCX: 00007f48fbb9ce59 [ 469.994697][ T30] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 470.003132][ T30] RBP: 00007f48fbc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 470.011185][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.019234][ T30] R13: 00007f48fbe16218 R14: 00007f48fbe16180 R15: 00007f48fbf3fa48 [ 470.027511][ T30] [ 470.030541][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 470.039659][ T30] INFO: lockdep is turned off. [ 470.044772][ T30] NMI backtrace for cpu 0 [ 470.044787][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 470.044809][ T30] Tainted: [L]=SOFTLOCKUP [ 470.044815][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.044824][ T30] Call Trace: [ 470.044830][ T30] [ 470.044838][ T30] dump_stack_lvl+0xe8/0x150 [ 470.044862][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 470.044967][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 470.044979][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 470.044991][ T30] sys_info+0x135/0x170 [ 470.045001][ T30] watchdog+0xfd7/0x1030 [ 470.045015][ T30] ? watchdog+0x1c7/0x1030 [ 470.045029][ T30] kthread+0x388/0x470 [ 470.045038][ T30] ? __pfx_watchdog+0x10/0x10 [ 470.045057][ T30] ? __pfx_kthread+0x10/0x10 [ 470.045069][ T30] ret_from_fork+0x514/0xb70 [ 470.045085][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 470.045101][ T30] ? __switch_to+0xc89/0x1420 [ 470.045120][ T30] ? __pfx_kthread+0x10/0x10 [ 470.045129][ T30] ret_from_fork_asm+0x1a/0x30 [ 470.045142][ T30] [ 470.045147][ T30] Sending NMI from CPU 0 to CPUs 1: [ 470.161603][ C1] NMI backtrace for cpu 1 [ 470.161623][ C1] CPU: 1 UID: 0 PID: 6704 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.161645][ C1] Tainted: [L]=SOFTLOCKUP [ 470.161651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.161661][ C1] Workqueue: events_unbound toggle_allocation_gate [ 470.161684][ C1] RIP: 0010:bcmp+0x18e/0x230 [ 470.161703][ C1] Code: 48 89 ef 48 8b 34 24 4c 89 ea e9 0d ff ff ff 48 85 d2 0f 84 95 00 00 00 31 db 48 8d 04 1f 48 89 c1 48 c1 e9 03 42 0f b6 0c 39 <84> c9 75 2b 0f b6 04 1f 48 8d 0c 1e 49 89 c8 49 c1 e8 03 47 0f b6 [ 470.161738][ C1] RSP: 0018:ffffc9000507f740 EFLAGS: 00000806 [ 470.161750][ C1] RAX: ffffffff82284602 RBX: 0000000000000000 RCX: 0000000000000000 [ 470.161762][ C1] RDX: 0000000000000001 RSI: ffffc9000507f970 RDI: ffffffff82284602 [ 470.161772][ C1] RBP: ffffc9000507f890 R08: dffffc0000000000 R09: 0000000000056744 [ 470.161784][ C1] R10: dffffc0000000000 R11: ffffed1027fcf2c6 R12: dffffc0000000000 [ 470.161796][ C1] R13: ffff88801ae80558 R14: 00002aaaaaaac000 R15: dffffc0000000000 [ 470.161807][ C1] FS: 0000000000000000(0000) GS:ffff888125353000(0000) knlGS:0000000000000000 [ 470.161820][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.161831][ C1] CR2: 000055eb504d3ee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 470.161844][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.161853][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 470.161863][ C1] Call Trace: [ 470.161871][ C1] [ 470.161879][ C1] ? __kvmalloc_node_noprof+0x182/0x890 [ 470.161895][ C1] __text_poke+0x752/0x9b0 [ 470.161917][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 470.161937][ C1] ? __kvmalloc_node_noprof+0x182/0x890 [ 470.161952][ C1] ? __pfx___text_poke+0x10/0x10 [ 470.161970][ C1] ? on_each_cpu_cond_mask+0x75/0x80 [ 470.161987][ C1] smp_text_poke_batch_finish+0xd0e/0x1110 [ 470.162008][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.162025][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 470.162048][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 470.162071][ C1] ? __jump_label_update+0x347/0x370 [ 470.162097][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 470.162112][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 470.162128][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 470.162147][ C1] static_key_enable+0x1a/0x20 [ 470.162161][ C1] toggle_allocation_gate+0xab/0x290 [ 470.162176][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 470.162191][ C1] ? rcu_is_watching+0x15/0xb0 [ 470.162208][ C1] ? lock_acquire+0x5f/0x350 [ 470.162224][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 470.162244][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 470.162262][ C1] process_scheduled_works+0xa8e/0x14e0 [ 470.162290][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.162308][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 470.162328][ C1] ? assign_work+0x3cf/0x5d0 [ 470.162348][ C1] worker_thread+0xa47/0xfb0 [ 470.162376][ C1] kthread+0x388/0x470 [ 470.162390][ C1] ? __pfx_worker_thread+0x10/0x10 [ 470.162408][ C1] ? __pfx_kthread+0x10/0x10 [ 470.162423][ C1] ret_from_fork+0x514/0xb70 [ 470.162439][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 470.162454][ C1] ? __switch_to+0xc89/0x1420 [ 470.162476][ C1] ? __pfx_kthread+0x10/0x10 [ 470.162490][ C1] ret_from_fork_asm+0x1a/0x30 [ 470.162521][ C1] [ 470.501235][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 470.508089][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 470.518755][ T30] Tainted: [L]=SOFTLOCKUP [ 470.523075][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.533124][ T30] Call Trace: [ 470.536395][ T30] [ 470.539315][ T30] vpanic+0x56c/0xa60 [ 470.543319][ T30] ? __pfx___schedule+0x10/0x10 [ 470.548178][ T30] ? __pfx_vpanic+0x10/0x10 [ 470.552676][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 470.558823][ T30] panic+0xc5/0xd0 [ 470.562546][ T30] ? __pfx_panic+0x10/0x10 [ 470.566954][ T30] ? preempt_schedule_common+0x82/0xd0 [ 470.572415][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 470.577785][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 470.583938][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 470.590101][ T30] watchdog+0x1030/0x1030 [ 470.594433][ T30] ? watchdog+0x1c7/0x1030 [ 470.598847][ T30] kthread+0x388/0x470 [ 470.602910][ T30] ? __pfx_watchdog+0x10/0x10 [ 470.607592][ T30] ? __pfx_kthread+0x10/0x10 [ 470.612178][ T30] ret_from_fork+0x514/0xb70 [ 470.616764][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 470.621867][ T30] ? __switch_to+0xc89/0x1420 [ 470.626543][ T30] ? __pfx_kthread+0x10/0x10 [ 470.631125][ T30] ret_from_fork_asm+0x1a/0x30 [ 470.635919][ T30] [ 470.639206][ T30] Kernel Offset: disabled [ 470.643510][ T30] Rebooting in 86400 seconds..