last executing test programs: 7m32.068469988s ago: executing program 1 (id=1255): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x88}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x30}, 0x48001) sendmsg$inet(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000a80)="afb4ff7f91abccac4414e9baa4aef2b552886df0746feebdc8fdbd7f19bdeed3d40e152df1ce2ff14877723c330896cc24cfe6c1572e661d7a875431e2fe6df7078476bed3bf00b867bdf3ba1c80dd6efb46886e19d6c39435d9d1e52730ae2813626b49158aba22b85d7cdf282eac39c61717494458f680d55f9dc869c48443dfe24faf39a0a111913306f6024c", 0x8e}, {&(0x7f0000000b40)="c3e57f2f474e96b53e36a39bb918b0b10b07cff14ea9a2359e4fcaceebc9a06cb11bad70a2cda2a60698977d7d352e476f0655738e55b89e03810ff728f0b0366a6ec472ed4a4fc9d1be6239a9c4275bdaa0c294850d2c4de7a1039ec363e3eab8142201c494a1cf53c8d43dc15cd2418e29d270dcabb17a43eb2b2dea562808f5c000ab90717d2a9e8d3bb41b853e1ca68baac3cc85d1fd94d5c7c4d2ad1397c9789173e3c9082278dec3daf8db08c3d737584aff79debbec25ab6c364673d39d51c7b0", 0xc4}, {&(0x7f0000000c40)="a99ea720d72428a9fe1c7a6452d1f5aacccc718cf7f8a3676eb96c2a6069c89f87c2bc8862d190366cd98054ee", 0x2d}, {&(0x7f0000000c80)="ed9c1e38aeb3016238e04dd17fcc2d2825aba00d7f24b301b8788341e6c63cbdec1d0790b0c6eab180a7dd0fc39fa7d7d78bb2c0a73c9834775dcd4ea714849fe037a8a706bc74872ec27f5aa38d125d6496b56f36bcb5ddfc8068785e45771e8bf0e8eff149b4f996be18b225a44a48e3f6bae36e51f28b4d986ce6395dfae0af13e9244bdf4d7f6a6a2ad49954368999b670224dde2096770dabc1c3ed0878055e6ef9f5af0bf6169ec4978574140042f347d94cbbf5efda3477f84588746d73c6179e2a76e2e27df79c210c33f23a78fd7ed4606cb5d71fa04a96db99d1bcdc9b54faa844149d18edda43620f510f67ba9f459a0c259536", 0xf9}, {&(0x7f0000000d80)="a1d3a5fba81e8fe1574992e765d3f7fbdb42f0c7f85b9326bd2471d4223999b48f73874aa9031a9c530792cdd77c0db91ab7ab63ed9b451bf31c10003c3bca956d3f7ecf0683c479d8bf85dc8d6ddda3ae45dced63657b888a566bad28d0d4108daa8315a9d006511007af7aa1e1ff97bfaddc2d5cc19484a80afa66059e8e0a00ce467fe733c188cf37f25e3c6845dd8906ffa0e647aa67a1800e94ef70c09d63ee0dd58d1ac5684a3e8f5601e5d11eaf0d3cd1", 0xb4}, {&(0x7f0000000e40)="a8a3b9d666d1b760591c92a062e7e4f6e69daf9fe0a7ee5778bcda2943c13b9a556086492471a7c90dfdb8e46d7d6428acbfb794becce0a1f6264d17fb5a69d609152d833043a4979d10e8e14ea43d8263174820bd5eae2f1e986bdbc77387e169d9335156bf9c2c42fa5421acb31e07005c03984571740049cba6a130e95023f1c07cb191e952e15f8b1062782f5e273c1397837eb9a9662bfe35df0592c20c274a68f5f1b60ec1cb62943fca8a829d293b8cb9a48e75a254dcbbd3a9c14ade", 0xc0}, {&(0x7f0000000f40)="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", 0x1a9}], 0x7}, 0x0) 7m31.911879719s ago: executing program 1 (id=1259): syz_open_dev$admmidi(&(0x7f00000000c0), 0x8, 0x119500) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) dup2(0xffffffffffffffff, r2) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x7, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010028bd07000000000000000000", @ANYRES32=0x0, @ANYBLOB="211000000226000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 7m31.372396242s ago: executing program 1 (id=1260): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x40300, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) landlock_create_ruleset(&(0x7f00000002c0)={0x1, 0x2, 0x1}, 0x18, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005"], 0x64}}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x8000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x8000203d}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m31.117319747s ago: executing program 1 (id=1261): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x12f, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xf9, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, [{0x1f, 0x1d, "e16d3b88748b9cc0df0c747053d6b6d1af4bc808e01db95f781f643430db712c6740f9ff8923ef4bf893d9aac6c122ba41c1ab1dd0ca8bc6b0d1469b6155d99cb82d7910f5e3269b602d773ce92f4ac19ec60f4340f4eefd657a995dba2e0c9448dffa1956f717edf059df80a81e41be96353742b470aea8dfd40a3aac36ad9a2e783655cc4cc646de4e3a2166957b4b0e2b0f7bef1f156dd6d9d768e8d0bc7c7948e7391cf1fef1b68ea861a1d99c532a9bfffb4e5f97cfabe34124f97696ea2499f816ddd4a6b579490e83cc4876cab210ad06658cfc7c44632e454012839d2095ac01af748d"}]}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000006010040"]) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x9348}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @remote, 0xfffffffc}}}, 0x3a) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) syz_emit_ethernet(0x141a, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES64=r10], 0x0) 7m30.842275447s ago: executing program 1 (id=1264): r0 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "ee0f6ef6"}, &(0x7f0000000080)=0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x3, 0x9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x8e, 0x9, 0x0, 0x9, 0x9, 0x7}, {0x0, 0x2, 0x5, 0x81, 0xd, 0x5, 0x80, 0x7f, 0x0, 0x2, 0x7, 0x2, 0x1}, {0x781, 0x1, 0x9, 0x7, 0x6, 0x5, 0x2, 0x0, 0x3, 0xff, 0x1, 0x3, 0x3}], 0x7ff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000040)={0x2, 0x2b}) pread64(r3, &(0x7f00000012c0)=""/96, 0x60, 0x40a) dup2(r0, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, 0xffffffffffffffff}) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r7, &(0x7f0000001a40)={0xa, 0x4e23, 0x5, @mcast2, 0x8080000}, 0x1c) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000440)={0x3, 0x0, 0x10001}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r5, @ANYBLOB="0517"], 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x38}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 7m30.172404782s ago: executing program 1 (id=1266): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGSID(r0, 0x800248a0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000023c0)=@fd={0x3, 0x1, 0x4, 0x0, 0x5, {}, {0x4, 0x9, 0x0, 0x81, 0x1c, 0x2, "3601cb6b"}, 0x3, 0x4, {}, 0xda}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7fff, 0x65, 0x1, {0x22, 0x955}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfd, 0x49, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x3, 0x1, 0xd, 0xff, 0xff}, 0x107, &(0x7f0000000380)={0x5, 0xf, 0x107, 0x4, [@generic={0xde, 0x10, 0x2, "f2edd40891a3c15ede0d06c73afb4a5b2c8fabbba00d9210f92003b99e128db946da312d8e731d73d9d25631563494b9ea408f6ab6467cf0796aebf531c2812fc3362ebed9c24e5038e2980f23191ba49105580e76ed8aba1f0dff9c951523f27b141290c65de94b30d15ed72c337fd67c6b6d52fc31a0f43896af78cd801e82d17764937fe224b1490463d5411f2294718899f5c355b4f9c7c61eea373aabad948d9e0c1670f02687c4038c92b2ef1a88e6d15bb6fb2904161e517c89c0c634831e4a20b4cf062150c967b0975206631bf196775d703a58be9741"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x2, 0x9}, @generic={0x17, 0x10, 0xb, "ebee9547f4573a10fc2088813315b756aa510823"}, @ptm_cap={0x3}]}, 0x4, [{0x9a, &(0x7f00000004c0)=@string={0x9a, 0x3, "b27fd3991784a59164b043bdddd822528526365e5b774224b104ab22cd681e1efd9fce38a3aab296f90cfc6ed69a5d7b2c6bec902917b0bd346571122c73d61c07c51a7116f43b1e93c3cfdf16c494f3588e555869ff185c099d018ea2adca62e6d1d955c946c18c3007c082f740adb5a2d3c97bff408ef879b329d9f9956d80e0391e3dfab46b5e0aa59845f0340cda3af81487d60ded15"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xc9, &(0x7f00000005c0)=@string={0xc9, 0x3, "a68ec40ac21e0336adddfe7258955b8137e71d5d8e603b4cd9f516f2ddf7b3c9c31bc9f1216c0d24eebbf7387e6026ece3f846ca4a0e81e3e48fd1a21f7060fe262f1fef444e9d4c6a6155410b509faf7f19b2cdc5bf7da4945532ca3ca0e63d35459f0300416462338b9327917b6d03e690fe6cbfeea81827d01dd639bdcbb30e1a9689dccc68666b30875ca26203317ab29c654eec02dbcb02432d93828a77a83784f5e8e3fd7059051948deaeaa86795023fb03598f0e2b0ba5705094662066518a02d2fb1b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1401}}]}) getdents64(r1, &(0x7f0000000000)=""/95, 0x5f) getdents(r1, 0x0, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = userfaultfd(0x1) read$FUSE(r1, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x1, 0x3, 0x9, 0x8, 'syz0\x00', 0x40}, 0x0, 0x20000000, 0x7f, r4, 0x3, 0x7, 'syz1\x00', &(0x7f0000000100)=['task\x00', '-&\x00', '!\x00'], 0xa}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 7m14.673665592s ago: executing program 32 (id=1266): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGSID(r0, 0x800248a0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000023c0)=@fd={0x3, 0x1, 0x4, 0x0, 0x5, {}, {0x4, 0x9, 0x0, 0x81, 0x1c, 0x2, "3601cb6b"}, 0x3, 0x4, {}, 0xda}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7fff, 0x65, 0x1, {0x22, 0x955}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfd, 0x49, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x3, 0x1, 0xd, 0xff, 0xff}, 0x107, &(0x7f0000000380)={0x5, 0xf, 0x107, 0x4, [@generic={0xde, 0x10, 0x2, "f2edd40891a3c15ede0d06c73afb4a5b2c8fabbba00d9210f92003b99e128db946da312d8e731d73d9d25631563494b9ea408f6ab6467cf0796aebf531c2812fc3362ebed9c24e5038e2980f23191ba49105580e76ed8aba1f0dff9c951523f27b141290c65de94b30d15ed72c337fd67c6b6d52fc31a0f43896af78cd801e82d17764937fe224b1490463d5411f2294718899f5c355b4f9c7c61eea373aabad948d9e0c1670f02687c4038c92b2ef1a88e6d15bb6fb2904161e517c89c0c634831e4a20b4cf062150c967b0975206631bf196775d703a58be9741"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x2, 0x9}, @generic={0x17, 0x10, 0xb, "ebee9547f4573a10fc2088813315b756aa510823"}, @ptm_cap={0x3}]}, 0x4, [{0x9a, &(0x7f00000004c0)=@string={0x9a, 0x3, "b27fd3991784a59164b043bdddd822528526365e5b774224b104ab22cd681e1efd9fce38a3aab296f90cfc6ed69a5d7b2c6bec902917b0bd346571122c73d61c07c51a7116f43b1e93c3cfdf16c494f3588e555869ff185c099d018ea2adca62e6d1d955c946c18c3007c082f740adb5a2d3c97bff408ef879b329d9f9956d80e0391e3dfab46b5e0aa59845f0340cda3af81487d60ded15"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0xc9, &(0x7f00000005c0)=@string={0xc9, 0x3, "a68ec40ac21e0336adddfe7258955b8137e71d5d8e603b4cd9f516f2ddf7b3c9c31bc9f1216c0d24eebbf7387e6026ece3f846ca4a0e81e3e48fd1a21f7060fe262f1fef444e9d4c6a6155410b509faf7f19b2cdc5bf7da4945532ca3ca0e63d35459f0300416462338b9327917b6d03e690fe6cbfeea81827d01dd639bdcbb30e1a9689dccc68666b30875ca26203317ab29c654eec02dbcb02432d93828a77a83784f5e8e3fd7059051948deaeaa86795023fb03598f0e2b0ba5705094662066518a02d2fb1b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1401}}]}) getdents64(r1, &(0x7f0000000000)=""/95, 0x5f) getdents(r1, 0x0, 0x3b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = userfaultfd(0x1) read$FUSE(r1, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x1, 0x3, 0x9, 0x8, 'syz0\x00', 0x40}, 0x0, 0x20000000, 0x7f, r4, 0x3, 0x7, 'syz1\x00', &(0x7f0000000100)=['task\x00', '-&\x00', '!\x00'], 0xa}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 16.851076427s ago: executing program 4 (id=2867): syz_open_dev$loop(&(0x7f00000005c0), 0x101, 0x109041) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000701) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x8000, 0x0) 16.093078974s ago: executing program 4 (id=2868): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0x10, 0x6, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0x10, 0x6, 0x2) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f65627009040108"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) socket$netlink(0x10, 0x3, 0x12) 13.221460852s ago: executing program 4 (id=2882): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff, 'ipvlan0\x00', 'vlan0\x00', {0xff}, {}, 0x2, 0x2, 0x4831f196ca729da3}, 0x6, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0x0, 'pimreg1\x00', 'wg0\x00', {}, {0xff}, 0x2, 0x3, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x1, 0x9, [0x2a, 0x7, 0x0, 0x2c, 0x29, 0x9, 0x26, 0x27, 0x29, 0xe, 0x12, 0x2d, 0x25, 0x3, 0x2c, 0x28], 0x1, 0x2e30, 0x1fa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) (fail_nth: 3) 12.820464678s ago: executing program 4 (id=2884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = gettid() ptrace$getregset(0x4204, r2, 0x201, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r7, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r7, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 10.541484087s ago: executing program 3 (id=2890): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904000000020600"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r9 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4881) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r10, r10, r10}, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={'xcbc(aes)\x00'}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) 10.468974395s ago: executing program 2 (id=2891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000001c0)=""/153, 0x99}], 0x2}, 0x0) 10.265233649s ago: executing program 4 (id=2892): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000004, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x400, 0x0, 0xfffffe0000000001, 0xfa11, 0xc}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 10.172473633s ago: executing program 2 (id=2893): r0 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "ee0f6ef6"}, &(0x7f0000000080)=0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x3, 0x9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x8e, 0x9, 0x0, 0x9, 0x9, 0x7}, {0x0, 0x2, 0x5, 0x81, 0xd, 0x5, 0x80, 0x7f, 0x0, 0x2, 0x7, 0x2, 0x1}, {0x781, 0x1, 0x9, 0x7, 0x6, 0x5, 0x2, 0x0, 0x3, 0xff, 0x1, 0x3, 0x3}], 0x7ff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000040)={0x2, 0x2b}) pread64(r3, &(0x7f00000012c0)=""/96, 0x60, 0x40a) dup2(r0, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, 0xffffffffffffffff}) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r7, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000440)={0x3, 0x0, 0x10001}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r5, @ANYBLOB="0517"], 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x38}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 10.051781427s ago: executing program 5 (id=2894): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x68, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x64, 0xc4caa68c37dab0d5, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xcb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x1, 0x3, {0x7, 0x25, 0x1, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb, 0x5, 0x5, {0x7, 0x25, 0x1, 0x0, 0x56, 0xc6}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) 8.77746059s ago: executing program 4 (id=2896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x136) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r1, 0x9a974000) mremap(&(0x7f000074e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000eb000/0x2000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7075f60000000100466b2ed7a4090000180001801400800d576f7464657673696d30fa0cde45d98f52e8d96c9cdd5dcef961870acf674f194d32a403967a996889e567513b2cd54671e9d2f781dc70efd2ae426145dd001d"], 0x2c}}, 0x0) 7.747335623s ago: executing program 5 (id=2901): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x62a, 0xffffffff, 0x0, 0xa, "5abeac8a0000e000"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x408040, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)={&(0x7f0000002300)=@updsa={0xf0, 0x1a, 0x1, 0x70bd27, 0x25dfdbfd, {{@in6=@loopback, @in=@empty, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0x20, 0xa0, 0x5c}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x4d2, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {0x0, 0xac4d, 0x81, 0x6, 0x7a22, 0x9, 0x8, 0x5}, {0x7, 0x1, 0xfffffffffffffffd, 0xf86}, {0x6, 0x9, 0x8}, 0x70bd2b, 0x3505, 0xa, 0x0, 0x0, 0x3}}, 0xf0}, 0x1, 0x0, 0x0, 0xc890}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) 7.648266167s ago: executing program 3 (id=2902): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000080)=""/143, 0x8f}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000002240)=""/9, 0x9}], 0x8, &(0x7f0000002300)=""/5, 0x5}, 0x80000000}, {{&(0x7f0000003380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000004400)=[{&(0x7f0000003400)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x10001, &(0x7f00000044c0)) 7.64007824s ago: executing program 5 (id=2903): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x401064d1, &(0x7f0000000000)={0x3, 0x2}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400)={0x98, 0x20, 0x6, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4, 0x3}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)={0x0, 0x6}, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 7.221757378s ago: executing program 0 (id=2904): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0x10, 0x6, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0x10, 0x6, 0x2) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) socket$netlink(0x10, 0x3, 0x12) 7.108840709s ago: executing program 2 (id=2905): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x82112a54d200f295, 0x0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) unshare(0x2000600) r3 = fsopen(&(0x7f0000000140)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0xac, @buffer={0x0, 0x1000, &(0x7f00000004c0)=""/4096}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0}) 6.636266915s ago: executing program 3 (id=2906): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x141000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r3}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000240), 0x4) syz_pidfd_open(0x0, 0x0) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000040), 0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) pipe2(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e500090400000001010000", @ANYRES16], 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000140)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) pipe2(&(0x7f0000000340), 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1e, 0x80000000, 0x4, 0x80000000, 0x40014, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) 5.758848909s ago: executing program 0 (id=2907): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff", 0xb3}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x34}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x53, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x4c, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000001100)={0x84, &(0x7f00000001c0)={0x0, 0x1, 0x6, "00005c1ce21e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x62, 0x7}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)={0xc8, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008041}, 0x406c001) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 4.96173298s ago: executing program 2 (id=2908): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2092) (async) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000022c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, 0x0, 0x4, 0x8}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) fanotify_mark(0xffffffffffffffff, 0x10, 0x40000000, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x800}) (async) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004e80)="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", 0x2000, &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004800)={0x78, 0x0, 0x6, {0x6, 0x1, 0x0, {0x3, 0xffffffff00000001, 0x5, 0x3, 0xfff, 0xd, 0x7, 0x3, 0x6, 0x2000, 0xfffffffb, r2, 0x0, 0x1, 0x3}}}, 0x0, &(0x7f0000004940)={0x10, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x0, 0x0}) 4.620554885s ago: executing program 5 (id=2909): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.500165707s ago: executing program 5 (id=2910): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x40, 0x4, 0x4, 0x3, 0x200}, {0x6, 0x3ff, 0x2, 0x9, 0x646, 0x7}], ['\x00']}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, &(0x7f0000000440)="37ea86043a10d7a4c5c289e5373ab8254a040000000000000031f7729f1cb28acf27162fed84ab000000000000000000", 0x0}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000180)=0x80000000) 3.863953622s ago: executing program 2 (id=2911): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x68, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x64, 0xc4caa68c37dab0d5, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xcb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x1, 0x3, {0x7, 0x25, 0x1, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb, 0x5, 0x5, {0x7, 0x25, 0x1, 0x0, 0x56, 0xc6}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) 3.478763039s ago: executing program 3 (id=2912): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904000000020600"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r9 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4881) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r10, r10, r10}, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={'xcbc(aes)\x00'}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) 2.936522145s ago: executing program 0 (id=2913): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e00440002800600020001000000080006"], 0x84}}, 0x20008040) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e00440002800600020001000000080006"], 0x84}}, 0x20008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a40)=ANY=[@ANYBLOB="d01000003f0007012dbd7000fbdbdf25047c00000400fc8013000180060006"], 0x10d0}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x7ff, 0x8, 0x800006, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c63, 0x7, 0x6, 0x8, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x200, 0x2c8, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x3fa}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x180}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x200, 0x2c8, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x3fa}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x180}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4010250000002503d3b64653c784c92c099e201c076cfdaac1d923e15e56d8314296480234d9abd4e7"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.055813548s ago: executing program 2 (id=2914): r0 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "ee0f6ef6"}, &(0x7f0000000080)=0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x3, 0x9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x8e, 0x9, 0x0, 0x9, 0x9, 0x7}, {0x0, 0x2, 0x5, 0x81, 0xd, 0x5, 0x80, 0x7f, 0x0, 0x2, 0x7, 0x2, 0x1}, {0x781, 0x1, 0x9, 0x7, 0x6, 0x5, 0x2, 0x0, 0x3, 0xff, 0x1, 0x3, 0x3}], 0x7ff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000040)={0x2, 0x2b}) pread64(r3, &(0x7f00000012c0)=""/96, 0x60, 0x40a) dup2(r0, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, 0xffffffffffffffff}) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r7, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000440)={0x3, 0x0, 0x10001}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r5, @ANYBLOB="0517"], 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x38}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.174211466s ago: executing program 0 (id=2915): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000002000000b703000d00000000000000001b000009000000000000000095000000000000000a1906901144f6facf2129a249b6d98394a875f9937842dd1606b04a2aa67fd7515eaaea3ff917df05d658f1a5d88fcf4b393bea234c55733f69bd741bb283543e57d513"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) 1.048487793s ago: executing program 0 (id=2916): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x2, &(0x7f0000000100)=""/12, &(0x7f0000000340)=0xc) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000540)='./cgroup\x00', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x28}}, 0x0) r4 = signalfd(r0, &(0x7f0000000080), 0x8) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000140)={0x80000, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11370600318c04002800128008000100736974001c00028008000100", @ANYRES32, @ANYBLOB="08000c00fdffff000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 902.962153ms ago: executing program 0 (id=2917): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x82112a54d200f295, 0x0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) unshare(0x2000600) r3 = fsopen(&(0x7f0000000140)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0xac, @buffer={0x0, 0x1000, &(0x7f00000004c0)=""/4096}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0}) 791.754852ms ago: executing program 5 (id=2918): r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000100001080000000000000000000000000d418fb31be18a5272b72aa8c772d28dc4ab97e963daa1fb8e0127a1de", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/2, 0x2, 0x0, 0x0, 0x0) r4 = gettid() r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x4, 0x2000000, 0x0, 0x2004cb, 0x0, 0x10a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x4}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 206.255464ms ago: executing program 3 (id=2919): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=2920): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="dcd1c9721e129bf8b83f70554b8998e8de9a4f1425443c32f9586cf194957bf78330f751904ac8af4c6536e4bcce7d699339b91c58fdba85276337da098e47130699f48a", 0x44}, {&(0x7f0000000a80)="014e2da8a031c76d8b17a85ca1686b0a724b6a0f0665f9ab9361b9f40af10f8b3a92425151a3e9965ab7d9f209b41538fee798e858a3c4771d4ce359b6a9f2182c90ea4de93f4ca62e1ca9d704cef67c1c7cfbf0dade8635901a4e31628316a77eda2f8f5c6c03a7cb2c3dc62276266c3c057243575fd487f9b500a35cda8d472f500da4ec76b162edc5ac410bc024f83d0f8a10923b1eafe37eba368aee7e74e83d709b87b34da6cf9ad9e650da45196471f27794fc416755f033ec1369365136ed23a1ae626a5e2030b1b323ad63372649f466c4bb4c9bb9b2d937fe5907416a13682ba1d9091324d65f6e4a5025c4874d", 0xf2}, {&(0x7f00000009c0)="68e9c74d0ca62c19d8a915a3855db8b2986b8cf1affda525a845fd84c800563057acd865b3c32bbc2036e7ceb25b94dbfa57fb38a44edde08718c6edc9f398c6e052c425deed80700c412cf08c613e2dd229cb59aa19", 0x56}], 0x3, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xb8, 0x40000}}, {{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000010c0)="4d086fa83274208d1ab641366dc3d9ce60c8c86add7c537c6307484b471409b3aa3024b7c95f51369df143d339f351521bad650fb99c727f2695e7c276a01b05e7890378ec1eb0b7f3136e714745bdfc649cf41694fd950fdb53b089328c0cebbb956b1cf524a969854ea03223e8b41f46ce50a17c1f3bbf8f83649d7f4a5014988341f2472d0f957b30efd4f84137a20abf491eece343211655f19eaeea552d84c2f469de1a57cbc338a7d30e1b1fa1437764957dcef9e3d6f1c53720", 0xbd}, {&(0x7f0000001180)="677786d97839eebafcad5d3be59c0782f7e726de7dc049c76eb338109678d4e233095784feab0a8e23d5330685e8daecbe97f5456975e6a43d78408a5a88457b3a63a7d59fe94b38e2f1c421c9eb49eef87b276092d7f006e303d60d42e7c22a78e1f028b9ec1c4e236bb79d873be04fecaf9b527169bbbce59722ef9dfcd3a354c1b5b8a7cca651ef04f7e48b618a38e1caebfbf26d2274d3e3b7a4a8b9376e3d19206b2ea8fa34676db365808f89f971f06c001fcbf157beee", 0xba}, {&(0x7f0000001280)="a4f6a9f719b1734368979bbeb335a20c4b5fbc8f20b0a8bb04c0597c2837f5be296254128a0ab7562cbaa231b83de9602900e49d4a30bbbb15ab109ea1f3d499495540a0d3fe81229e237e72cc08f0d8fbb6c08f8729681bb1d077ff28e9d7386df66f59a0564309f29eb8c7180e17502523ee75ba9cbd27f446ec864a5614b0e5fab1a42d4342d2e8aca90c41178f173482e6361bcc903d4c5179f60ed4870a173dcd983d0b0bc06aeedc0eb5dcea0a62ff782007c25dd82c224d7b59dc40b22c", 0xc1}, {&(0x7f0000001380)="37ee4bd62f2afa0129c4a076bcf9299c53d88f64aa5ea23867298bc8bb1ed84151721d6f13fb3d2b14192568828797360683fde781245e3bafb9fb7a8a42332995a8356071018f4901c24f1613f711565c286b10b6e7be31a575ac422751474592989dc76bbcb36dea9a7e3a7c25c7f007a19eb4ec3b", 0x76}, {&(0x7f0000001400)="4170766c14bc79096726e0647e315e3ed416bc4e699c0ef0757aa05e5db202d669883a29104e44d07970962a464ca8eefde2187010012fa3be43274c13b50eb9b6bc01a552a8b16a247bd87ec00a242d1d642fd0873d2809c2c110cccc829bd2783891d3eeea5dbcf545ca2b074e275449b924119a35b5bf1c88cc0a325d9046c67363df443381788bc009e2ba4522af6062288d19d6b46b7d57c1bcd3687242b31f29bc37338c43287878b0e24094fd89f37712aa165369b105f46019df4001225b0c2aac0079262e3dea03cf47caf24d41365ada2fe3c5e8199e1b2de6266cf060", 0xe2}, {&(0x7f00000015c0)}, {&(0x7f0000001680)="aab2c44dbede2b746fcaf72bc1dbe3bb9e25e12b32079241a03109f1ad0f5e1e383141b62a2ed70f01aa77e427afbc1a83fbbe04fa5a0806430fb5ec9d802ebe0517221e1887a12b43bde64d14b82cfd7a4496d84feaf7bb3b3de74cf574f243f3381cb097954f2a728f20d0b42d5b60bbeb2e7f2312990f", 0x78}, {&(0x7f0000001700)="f36eaedef2e0cf6066c8c6b9be1c0cef01b321c2629f4295002a449e9e92cd19512d9822a9a5a5eb950270e8417ca241cd6e5a90500c023f254593fc8ee9245273fa01085b8c87262bbce329d27a1c328871c30a362453789f97", 0x5a}, {&(0x7f0000001780)="295dd7ee3dc9df2b646742f90a358a445eb7e5", 0x13}], 0x9, &(0x7f0000001940)=[@rights={{0x10}}], 0x10, 0x80}}, {{&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a00)="3b519690229522c79cfe1ebe224d7a8e6f72bc19ea82", 0x16}, {&(0x7f0000001a40)="e1f9d8004d", 0x5}, {&(0x7f0000001a80)="16ea71fc79d8de7c4084643cda4c848d2f009760e305cdc8206c11c0005c2cd930febeb95ba9e9f1aabf0c62d48e1c5844426346db216049f12a93bfd3060b71658c78f1f6728d53ab19f3674b3ea67672f6aa33c007864f55953935d49061591b4ac42798c1a1069663ac3f9cb76ccd7028d6dbbb2d437b46b2deb965e2ecbe12507ecb462a236a336940e0fddb12438f5ee2c7c1c7f96b2debdd53362656c25deae143aa96597fa7fa279bdf7986faf3ca63c53fc7becc9f0b05ad6c547e82a06c2b9378d9e868c2b7839c55ea747f975f5375b59d45f44d28f985b8e1a6079d9a1c2ea0dc78acbe31a2548d6552613216569943ff87d5f54f8acc7fa0", 0xfe}, {&(0x7f0000001b80)="bfff4c7a9ebf0570d9ed3a068bb82377c19d364937b609f1b04f5b689b286748cd25798b150c5f0ac19e1bb1ad6b8bf768", 0x31}, {&(0x7f0000001bc0)="86d7c101ac6a8346fc3dd972c83e224ad67c694f353a48ac70863a2f6aa49a0f0ff92f7fefd7d9b45ff7d274ed3a400c0ff27e0a90d32182ca05549c0f83e1d72f56f13009f3cc1050e4c82e2c13055adf3fdd8b772738add490cab1f31fde320ef1dc2950762fe2b0fdd5a62fa078", 0x6f}], 0x5, 0x0, 0x0, 0x60000}}, {{&(0x7f0000003280)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000003c80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0, 0x42}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003d80)="f34b9e6dd8df5a42b25c65c4302f862e5d0683f9c455ab05646b42b9981299ff7a583d952ab129988c2288c21535d6aa10868e6f81dd14e26a70c496ead82407abc8cd4c7a947c89335a4f8b9a1d132634cfe04812fb2c4996f0f2d65b3827d126ea17629d85510aaa40efef89ae66f11a4e509283aed17d11b84f036a25942986db649913381502e906543fe82f868afc8b805b13a607d21bb0a5ddf7147de6a48272f9bdf0bd1ef93cb61ed139c6bfe442983ae81c4427b5571336ff50ca4edd70632c4994d165f4c33fcc2603938b4819a946af9596a531901d2cfcc17925fccd7dd3e97dd115fadcc2f3b400cb5ce7891b87", 0xf4}, {&(0x7f0000003e80)="cfa4805d03049869a1e0ee17dc35a43e68b230f3fee97f7627a13fb0733e47936c5d0d8989f76c9b0699689edc94c69573385f44c33564879d26d034448ac418b32edbe02913c19c3a3a75c31f5e7bdc7deefe98ad36d6efcbf56aac224ba4985bf8", 0x62}, {&(0x7f0000003f00)="f3a2e19d6f252aef46c26c7c3c6562c2b4c00cf07af8a476d0601103428ca25a372c9609960dcdc016d24e8eae44a264a4673a754dc1b8a00e879b7bdb8909e37510bb088ffe7c15c7a9785cad2677bb3102926a58978988ce473cb7be2853a9554cdfc92f645fb30935fdf1fbd1c64bd2d755f661f24ec1f1b1dcbc049cee540703b2787d5728dd81ccd3", 0x8b}, {&(0x7f0000003fc0)="7045fb7ce7df9a334bb7993ee0665f79de486ed31da6140c2a4596bad671b11970a920864abc33e90f033b1dfe5fb812d96f7a13f2d160688c4761b80ce142f20e966cd6c00afe9ca9fe12317a7d9b6f7e9dc90539abcec17a484f88adea1d20a5c218e6af1fd36b9773c1c13ac08dafa52f79b7cbe21794d78501a5e64bb75e4786ba79d03fa4f21fee45f1c8d0e77e1efbd44dc08649b78ecf27f9f99e25cb4eb88f0ed7a790247c4e9e2bb5b9ff73da8c3cc96fe5", 0xb6}, {&(0x7f0000004080)="32348b10cfd62b14a3018936efd7", 0xe}], 0x5, &(0x7f0000004140), 0x0, 0x1}}], 0x5, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r6 = gettid() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r7, 0x4}, 0x38) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x4000) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) kernel console output (not intermixed with test programs): ntry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.496551][T16602] RIP: 0033:0x7f8f03f8eec9 [ 821.496569][T16602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.496586][T16602] RSP: 002b:00007f8f04dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.496607][T16602] RAX: ffffffffffffffda RBX: 00007f8f041e5fa0 RCX: 00007f8f03f8eec9 [ 821.496622][T16602] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 821.496635][T16602] RBP: 00007f8f04dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 821.496648][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.496660][T16602] R13: 00007f8f041e6038 R14: 00007f8f041e5fa0 R15: 00007f8f0430fa28 [ 821.496695][T16602] [ 821.499421][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 821.499497][T16602] syz.5.2677: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 821.556000][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 821.703399][T16606] CPU: 0 UID: 0 PID: 16606 Comm: syz.3.2678 Not tainted syzkaller #0 PREEMPT(full) [ 821.703429][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 821.703443][T16606] Call Trace: [ 821.703456][T16606] [ 821.703466][T16606] dump_stack_lvl+0x189/0x250 [ 821.703493][T16606] ? __pfx____ratelimit+0x10/0x10 [ 821.703517][T16606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.703538][T16606] ? __pfx__printk+0x10/0x10 [ 821.703561][T16606] ? __pfx___might_resched+0x10/0x10 [ 821.703583][T16606] ? fs_reclaim_acquire+0x7d/0x100 [ 821.703639][T16606] should_fail_ex+0x414/0x560 [ 821.703668][T16606] should_failslab+0xa8/0x100 [ 821.703690][T16606] kmem_cache_alloc_noprof+0x74/0x6e0 [ 821.703716][T16606] ? skb_clone+0x212/0x3a0 [ 821.703746][T16606] skb_clone+0x212/0x3a0 [ 821.703768][T16606] ? nfnetlink_rcv+0x4ba/0x2590 [ 821.703800][T16606] nfnetlink_rcv+0x4ec/0x2590 [ 821.703831][T16606] ? __dev_queue_xmit+0x27b/0x3b50 [ 821.703857][T16606] ? __dev_queue_xmit+0x1d79/0x3b50 [ 821.703880][T16606] ? kasan_save_track+0x3e/0x80 [ 821.703906][T16606] ? __kasan_slab_alloc+0x6c/0x80 [ 821.703942][T16606] ? __dev_queue_xmit+0x27b/0x3b50 [ 821.703979][T16606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 821.704023][T16606] ? ref_tracker_free+0x63a/0x7d0 [ 821.704050][T16606] ? __asan_memcpy+0x40/0x70 [ 821.704081][T16606] ? __pfx_ref_tracker_free+0x10/0x10 [ 821.704105][T16606] ? __skb_clone+0x63/0x7a0 [ 821.704131][T16606] ? __skb_clone+0x483/0x7a0 [ 821.704161][T16606] ? skb_clone+0x246/0x3a0 [ 821.704188][T16606] ? __netlink_deliver_tap+0x807/0x850 [ 821.704208][T16606] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.704245][T16606] netlink_unicast+0x82c/0x9e0 [ 821.704284][T16606] ? __pfx_netlink_unicast+0x10/0x10 [ 821.704315][T16606] ? netlink_sendmsg+0x642/0xb30 [ 821.704334][T16606] ? skb_put+0x11b/0x210 [ 821.704358][T16606] netlink_sendmsg+0x805/0xb30 [ 821.704388][T16606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.704413][T16606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 821.704441][T16606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 821.704460][T16606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.704482][T16606] __sock_sendmsg+0x21c/0x270 [ 821.704514][T16606] ____sys_sendmsg+0x505/0x830 [ 821.704543][T16606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.704575][T16606] ? import_iovec+0x74/0xa0 [ 821.704597][T16606] ___sys_sendmsg+0x21f/0x2a0 [ 821.704623][T16606] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.704680][T16606] ? __fget_files+0x2a/0x420 [ 821.704697][T16606] ? __fget_files+0x3a0/0x420 [ 821.704725][T16606] __x64_sys_sendmsg+0x19b/0x260 [ 821.704751][T16606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.704784][T16606] ? __pfx_ksys_write+0x10/0x10 [ 821.704814][T16606] ? do_syscall_64+0xbe/0xfa0 [ 821.704841][T16606] do_syscall_64+0xfa/0xfa0 [ 821.704863][T16606] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.704886][T16606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.704906][T16606] ? clear_bhb_loop+0x60/0xb0 [ 821.704930][T16606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.704950][T16606] RIP: 0033:0x7fe0fe38eec9 [ 821.704969][T16606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.704986][T16606] RSP: 002b:00007fe0ff15b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.705008][T16606] RAX: ffffffffffffffda RBX: 00007fe0fe5e5fa0 RCX: 00007fe0fe38eec9 [ 821.705024][T16606] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 821.705037][T16606] RBP: 00007fe0ff15b090 R08: 0000000000000000 R09: 0000000000000000 [ 821.705050][T16606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.705062][T16606] R13: 00007fe0fe5e6038 R14: 00007fe0fe5e5fa0 R15: 00007fe0fe70fa28 [ 821.705099][T16606] [ 821.892764][T16602] ,cpuset= [ 822.331242][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.0.2676 Not tainted syzkaller #0 PREEMPT(full) [ 822.331260][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 822.331268][T16605] Call Trace: [ 822.331274][T16605] [ 822.331279][T16605] dump_stack_lvl+0x189/0x250 [ 822.331296][T16605] ? __pfx____ratelimit+0x10/0x10 [ 822.331310][T16605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.331321][T16605] ? __pfx__printk+0x10/0x10 [ 822.331333][T16605] ? __might_fault+0xb0/0x130 [ 822.331353][T16605] should_fail_ex+0x414/0x560 [ 822.331370][T16605] _copy_from_user+0x2d/0xb0 [ 822.331382][T16605] ____sys_sendmsg+0x2fe/0x830 [ 822.331398][T16605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.331416][T16605] ? import_iovec+0x74/0xa0 [ 822.331427][T16605] ___sys_sendmsg+0x21f/0x2a0 [ 822.331441][T16605] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.331473][T16605] ? __fget_files+0x2a/0x420 [ 822.331483][T16605] ? __fget_files+0x3a0/0x420 [ 822.331499][T16605] __x64_sys_sendmsg+0x19b/0x260 [ 822.331513][T16605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.331530][T16605] ? __pfx_ksys_write+0x10/0x10 [ 822.331548][T16605] ? do_syscall_64+0xbe/0xfa0 [ 822.331563][T16605] do_syscall_64+0xfa/0xfa0 [ 822.331575][T16605] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.331587][T16605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.331598][T16605] ? clear_bhb_loop+0x60/0xb0 [ 822.331611][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.331622][T16605] RIP: 0033:0x7f9d0b98eec9 [ 822.331633][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.331643][T16605] RSP: 002b:00007f9d0c77a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.331656][T16605] RAX: ffffffffffffffda RBX: 00007f9d0bbe5fa0 RCX: 00007f9d0b98eec9 [ 822.331674][T16605] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 822.331681][T16605] RBP: 00007f9d0c77a090 R08: 0000000000000000 R09: 0000000000000000 [ 822.331688][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.331695][T16605] R13: 00007f9d0bbe6038 R14: 00007f9d0bbe5fa0 R15: 00007f9d0bd0fa28 [ 822.331712][T16605] [ 822.558865][T16602] /,mems_allowed=0-1 [ 822.563100][T16602] CPU: 1 UID: 0 PID: 16602 Comm: syz.5.2677 Not tainted syzkaller #0 PREEMPT(full) [ 822.563128][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 822.563140][T16602] Call Trace: [ 822.563149][T16602] [ 822.563160][T16602] dump_stack_lvl+0x189/0x250 [ 822.563187][T16602] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 822.563220][T16602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.563241][T16602] ? __pfx__printk+0x10/0x10 [ 822.563262][T16602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 822.563290][T16602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 822.563326][T16602] warn_alloc+0x214/0x310 [ 822.563356][T16602] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.563384][T16602] ? __pfx_warn_alloc+0x10/0x10 [ 822.563420][T16602] ? copy_process+0x54b/0x3c00 [ 822.563444][T16602] ? __get_vm_area_node+0x211/0x300 [ 822.563478][T16602] __vmalloc_node_range_noprof+0x331/0x12d0 [ 822.563535][T16602] ? percpu_ref_get_many+0x19/0x140 [ 822.563565][T16602] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 822.563597][T16602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 822.563628][T16602] ? memcpy_and_pad+0x48/0x80 [ 822.563655][T16602] __vmalloc_node_noprof+0xc2/0x110 [ 822.563683][T16602] ? copy_process+0x54b/0x3c00 [ 822.563701][T16602] ? copy_process+0x54b/0x3c00 [ 822.563725][T16602] dup_task_struct+0x3d4/0x830 [ 822.563746][T16602] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.563771][T16602] copy_process+0x54b/0x3c00 [ 822.563823][T16602] ? __pfx_copy_process+0x10/0x10 [ 822.563858][T16602] vhost_task_create+0x1ce/0x320 [ 822.563885][T16602] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 822.563919][T16602] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 822.563946][T16602] ? __pfx_vhost_task_create+0x10/0x10 [ 822.563981][T16602] ? __pfx_vhost_task_fn+0x10/0x10 [ 822.564027][T16602] kvm_mmu_post_init_vm+0x14c/0x300 [ 822.564060][T16602] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 822.564091][T16602] ? __mutex_trylock_common+0x153/0x260 [ 822.564119][T16602] ? __pfx___mutex_trylock_common+0x10/0x10 [ 822.564145][T16602] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 822.564171][T16602] ? rcu_is_watching+0x15/0xb0 [ 822.564194][T16602] ? trace_contention_end+0x39/0x120 [ 822.564218][T16602] ? look_up_lock_class+0x74/0x170 [ 822.564245][T16602] ? register_lock_class+0x51/0x320 [ 822.564272][T16602] ? __lock_acquire+0xab9/0xd20 [ 822.564322][T16602] kvm_vcpu_ioctl+0x95c/0xe90 [ 822.564352][T16602] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 822.564399][T16602] ? __fget_files+0x2a/0x420 [ 822.564421][T16602] ? __fget_files+0x3a0/0x420 [ 822.564437][T16602] ? __fget_files+0x2a/0x420 [ 822.564459][T16602] ? bpf_lsm_file_ioctl+0x9/0x20 [ 822.564481][T16602] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 822.564502][T16602] __se_sys_ioctl+0xf9/0x170 [ 822.564528][T16602] do_syscall_64+0xfa/0xfa0 [ 822.564550][T16602] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.564574][T16602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.564594][T16602] ? clear_bhb_loop+0x60/0xb0 [ 822.564617][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.564636][T16602] RIP: 0033:0x7f8f03f8eec9 [ 822.564656][T16602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.564673][T16602] RSP: 002b:00007f8f04dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 822.564694][T16602] RAX: ffffffffffffffda RBX: 00007f8f041e5fa0 RCX: 00007f8f03f8eec9 [ 822.564710][T16602] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 822.564723][T16602] RBP: 00007f8f04dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 822.564736][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.564749][T16602] R13: 00007f8f041e6038 R14: 00007f8f041e5fa0 R15: 00007f8f0430fa28 [ 822.564784][T16602] [ 822.564804][T16602] Mem-Info: [ 822.947383][ T89] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 822.947524][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 822.968931][T16602] active_anon:8707 inactive_anon:0 isolated_anon:0 [ 822.968931][T16602] active_file:17578 inactive_file:40220 isolated_file:0 [ 822.968931][T16602] unevictable:768 dirty:297 writeback:0 [ 822.968931][T16602] slab_reclaimable:8985 slab_unreclaimable:165917 [ 822.968931][T16602] mapped:31407 shmem:3412 pagetables:1561 [ 822.968931][T16602] sec_pagetables:0 bounce:0 [ 822.968931][T16602] kernel_misc_reclaimable:0 [ 822.968931][T16602] free:1239641 free_pcp:13014 free_cma:0 [ 822.969304][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 823.016214][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 823.051095][T16602] Node 0 active_anon:34828kB inactive_anon:0kB active_file:70312kB inactive_file:160672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125628kB dirty:1188kB writeback:0kB shmem:12112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13168kB pagetables:6104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 823.083346][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 823.083374][ T58] usb 5-1: Product: syz [ 823.083390][ T58] usb 5-1: Manufacturer: syz [ 823.106286][T16602] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 823.108114][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 823.138571][T16602] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 823.144339][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 823.172400][T16602] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 823.185872][ T58] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 823.192815][ T10] usb 4-1: device descriptor read/64, error -71 [ 823.200522][T16602] Node 0 [ 823.200545][ T89] usb 1-1: Using ep0 maxpacket: 16 [ 823.200540][T16602] DMA32 free:1043148kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34928kB inactive_anon:0kB active_file:70312kB inactive_file:160672kB unevictable:1536kB writepending:1188kB zspages:0kB present:3129332kB managed:2561664kB mlocked:0kB bounce:0kB free_pcp:39252kB local_pcp:20252kB free_cma:0kB [ 823.222796][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.243031][T16602] lowmem_reserve[]: 0 0 1 1 1 [ 823.258060][T16602] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 823.260114][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.325576][ T89] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 823.331097][T16602] lowmem_reserve[]: 0 0 0 0 0 [ 823.339665][ T89] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 823.349799][T16602] Node 1 Normal free:3900056kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13504kB local_pcp:2048kB free_cma:0kB [ 823.353110][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.386736][T16602] lowmem_reserve[]: 0 0 0 0 0 [ 823.398939][T16602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 823.409522][ T89] usb 1-1: config 0 descriptor?? [ 823.417328][T16602] Node 0 DMA32: 1551*4kB (UME) 450*8kB (UME) 530*16kB (UME) 482*32kB (UM) 751*64kB (UM) 323*128kB (UME) 127*256kB (UME) 79*512kB (UME) 19*1024kB (UM) 8*2048kB (UME) 198*4096kB (UM) = 1042924kB [ 823.444814][T16602] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 823.456843][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 823.466135][T16602] Node 1 Normal: 202*4kB (UM) 48*8kB (UME) 33*16kB (UME) 231*32kB (UME) 82*64kB (UME) 19*128kB (UME) 5*256kB (UME) 4*512kB (ME) 3*1024kB (ME) 1*2048kB (U) 946*4096kB (M) = 3900056kB [ 823.485344][T16602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 823.501259][T16602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 823.522724][T16602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 823.541579][T16602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 823.551153][T16602] 61206 total pagecache pages [ 823.556798][T16602] 0 pages in swap cache [ 823.560959][T16602] Free swap = 124996kB [ 823.565508][T16602] Total swap = 124996kB [ 823.569695][T16602] 2097051 pages RAM [ 823.574248][T16602] 0 pages HighMem/MovableOnly [ 823.579124][T16602] 424545 pages reserved [ 823.583624][T16602] 0 pages cma reserved [ 823.592797][ T10] usb 4-1: device descriptor read/64, error -71 [ 823.750045][ T10] usb usb4-port1: attempt power cycle [ 823.765364][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.916727][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.953403][T16608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2680'. [ 824.172455][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.179964][ T89] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 824.283705][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.292848][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.300128][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.310301][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.317681][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.325357][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 824.353281][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.366412][ T89] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 824.374068][ T89] microsoft 0003:045E:07DA.0018: unsupported Resolution Multiplier 0 [ 824.385893][ T10] usb 4-1: device descriptor read/8, error -71 [ 824.393068][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.405890][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.413873][ T24] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 824.445866][ T89] microsoft 0003:045E:07DA.0018: unsupported Resolution Multiplier 0 [ 824.455567][ T89] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 824.470245][ T89] microsoft 0003:045E:07DA.0018: no inputs found [ 824.476931][ T89] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 824.593170][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 824.611796][ T24] usb 6-1: config 1 interface 0 altsetting 178 bulk endpoint 0x82 has invalid maxpacket 16 [ 824.622959][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 824.623758][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 824.654228][ T10] usb 4-1: device descriptor read/8, error -71 [ 824.688134][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 824.732854][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.740902][ T24] usb 6-1: Product: à°‰ [ 824.755725][ T24] usb 6-1: SerialNumber: syz [ 824.779877][T16623] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 824.783375][ T10] usb usb4-port1: unable to enumerate USB device [ 824.840334][ T58] usb 1-1: USB disconnect, device number 55 [ 825.014664][ T5921] usb 5-1: USB disconnect, device number 60 [ 825.554136][T16642] FAULT_INJECTION: forcing a failure. [ 825.554136][T16642] name failslab, interval 1, probability 0, space 0, times 0 [ 825.591175][T16642] CPU: 1 UID: 0 PID: 16642 Comm: syz.0.2689 Not tainted syzkaller #0 PREEMPT(full) [ 825.591217][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 825.591229][T16642] Call Trace: [ 825.591238][T16642] [ 825.591248][T16642] dump_stack_lvl+0x189/0x250 [ 825.591279][T16642] ? __pfx____ratelimit+0x10/0x10 [ 825.591300][T16642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 825.591318][T16642] ? __pfx__printk+0x10/0x10 [ 825.591343][T16642] ? __pfx___might_resched+0x10/0x10 [ 825.591371][T16642] should_fail_ex+0x414/0x560 [ 825.591399][T16642] should_failslab+0xa8/0x100 [ 825.591421][T16642] __kvmalloc_node_noprof+0x158/0x910 [ 825.591450][T16642] ? rcu_is_watching+0x15/0xb0 [ 825.591474][T16642] ? traverse+0xde/0x580 [ 825.591507][T16642] traverse+0xde/0x580 [ 825.591531][T16642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 825.591563][T16642] seq_read_iter+0xd08/0xe20 [ 825.591587][T16642] ? set_page_refcounted+0x76/0x160 [ 825.591626][T16642] ? __asan_memset+0x22/0x50 [ 825.591663][T16642] copy_splice_read+0x5d4/0xa50 [ 825.591703][T16642] ? __pfx_copy_splice_read+0x10/0x10 [ 825.591729][T16642] ? look_up_lock_class+0x74/0x170 [ 825.591756][T16642] ? register_lock_class+0x51/0x320 [ 825.591788][T16642] ? alloc_pipe_info+0x374/0x4d0 [ 825.591817][T16642] ? __pfx_copy_splice_read+0x10/0x10 [ 825.591841][T16642] splice_direct_to_actor+0x4a9/0xcc0 [ 825.591887][T16642] ? __pfx_direct_splice_actor+0x10/0x10 [ 825.591914][T16642] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 825.591953][T16642] do_splice_direct+0x181/0x270 [ 825.591984][T16642] ? __pfx_do_splice_direct+0x10/0x10 [ 825.592013][T16642] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 825.592037][T16642] ? rw_verify_area+0x255/0x4d0 [ 825.592067][T16642] do_sendfile+0x4da/0x7e0 [ 825.592095][T16642] ? __pfx_do_sendfile+0x10/0x10 [ 825.592126][T16642] __se_sys_sendfile64+0xd9/0x190 [ 825.592146][T16642] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 825.592169][T16642] ? do_syscall_64+0xbe/0xfa0 [ 825.592194][T16642] do_syscall_64+0xfa/0xfa0 [ 825.592215][T16642] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.592236][T16642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.592254][T16642] ? clear_bhb_loop+0x60/0xb0 [ 825.592278][T16642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.592296][T16642] RIP: 0033:0x7f9d0b98eec9 [ 825.592314][T16642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.592330][T16642] RSP: 002b:00007f9d0c77a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 825.592351][T16642] RAX: ffffffffffffffda RBX: 00007f9d0bbe5fa0 RCX: 00007f9d0b98eec9 [ 825.592366][T16642] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 825.592378][T16642] RBP: 00007f9d0c77a090 R08: 0000000000000000 R09: 0000000000000000 [ 825.592390][T16642] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 825.592401][T16642] R13: 00007f9d0bbe6038 R14: 00007f9d0bbe5fa0 R15: 00007f9d0bd0fa28 [ 825.592436][T16642] [ 826.732811][ T5921] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 826.897251][ T5921] usb 1-1: config 0 interface 0 altsetting 244 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.916640][ T5921] usb 1-1: config 0 interface 0 altsetting 244 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 826.958922][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 826.976291][ T5921] usb 1-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 826.987679][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.990964][T16659] netlink: 'syz.2.2693': attribute type 2 has an invalid length. [ 827.123447][ T5921] usb 1-1: config 0 descriptor?? [ 827.204236][ T24] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 178 proto 2 vid 0x0525 pid 0xA4A8 [ 827.230323][ T24] usb 6-1: USB disconnect, device number 119 [ 827.288875][ T24] usblp0: removed [ 827.420127][T16665] netlink: 'syz.5.2694': attribute type 1 has an invalid length. [ 827.574001][ T5921] usb 1-1: string descriptor 0 read error: -32 [ 827.606838][ T5921] usbhid 1-1:0.0: can't add hid device: -71 [ 827.629271][ T5921] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 827.830950][T16672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2698'. [ 827.919596][ T5921] usb 1-1: USB disconnect, device number 56 [ 827.953233][ T10] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 828.112823][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 828.121273][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 828.159292][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 828.188289][ T10] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 828.212996][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.222986][ T10] usb 6-1: Product: syz [ 828.227325][ T10] usb 6-1: Manufacturer: syz [ 828.231965][ T10] usb 6-1: SerialNumber: syz [ 828.255713][ T10] usb 6-1: config 0 descriptor?? [ 828.286111][ T10] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 828.346428][ T10] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 828.602883][ T5921] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 828.752813][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 828.766757][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.777373][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 828.786962][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 828.788194][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 828.805193][ T5921] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 828.813386][ T5921] usb 1-1: Manufacturer: syz [ 828.823210][ T5921] usb 1-1: config 0 descriptor?? [ 828.943759][ T10] usb 5-1: device descriptor read/64, error -71 [ 829.037275][T16679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.054424][T16679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.085240][ T5921] usb 1-1: USB disconnect, device number 57 [ 829.182533][T16691] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2703'. [ 829.191731][ T30] audit: type=1326 audit(1759948937.579:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.212770][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 829.219792][T16691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2703'. [ 829.231677][ T30] audit: type=1326 audit(1759948937.579:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.263909][ T30] audit: type=1326 audit(1759948937.579:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.292782][ T30] audit: type=1326 audit(1759948937.579:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.317820][ T30] audit: type=1326 audit(1759948937.579:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.419034][ T30] audit: type=1326 audit(1759948937.579:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.451517][ T30] audit: type=1326 audit(1759948937.579:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.475122][ T30] audit: type=1326 audit(1759948937.579:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.498593][ T30] audit: type=1326 audit(1759948937.579:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.521732][ T30] audit: type=1326 audit(1759948937.579:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.2.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe178d8eec9 code=0x7ffc0000 [ 829.583668][ T10] usb 5-1: device descriptor read/64, error -71 [ 829.693144][ T10] usb usb5-port1: attempt power cycle [ 830.043289][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 830.143928][ T10] usb 5-1: device descriptor read/8, error -71 [ 830.321265][ T5921] usb 6-1: USB disconnect, device number 120 [ 830.363453][ T5921] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 830.373979][ T5921] kobil_sct 6-1:0.0: device disconnected [ 830.383574][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 830.424084][T16715] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2709'. [ 830.453011][ T10] usb 5-1: device descriptor read/8, error -71 [ 830.587174][ T10] usb usb5-port1: unable to enumerate USB device [ 830.622848][T16718] netlink: 'syz.0.2712': attribute type 1 has an invalid length. [ 830.647012][T16718] loop2: detected capacity change from 0 to 7 [ 830.656340][ T9074] Dev loop2: unable to read RDB block 7 [ 830.661922][ T9074] loop2: unable to read partition table [ 830.667855][ T9074] loop2: partition table beyond EOD, truncated [ 830.690173][T16718] Dev loop2: unable to read RDB block 7 [ 830.700240][T16718] loop2: unable to read partition table [ 830.706917][T16718] loop2: partition table beyond EOD, truncated [ 830.715697][T16718] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 830.742732][ T5921] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 830.906526][ T5921] usb 6-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 830.917206][ T5921] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 162, using maximum allowed: 30 [ 830.933079][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 162 [ 830.967885][ T5921] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 830.985332][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.000919][ T5921] usb 6-1: config 0 descriptor?? [ 831.148852][T16727] bond0 (unregistering): Released all slaves [ 831.451899][ T5906] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 831.604926][ T5906] usb 4-1: device descriptor read/64, error -71 [ 831.634001][ T5921] usb 6-1: string descriptor 0 read error: -71 [ 831.672590][ T5921] usb 6-1: USB disconnect, device number 121 [ 831.714622][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 831.846109][ T5906] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 831.852820][ T10] usb 3-1: device descriptor read/64, error -71 [ 832.002752][ T5906] usb 4-1: device descriptor read/64, error -71 [ 832.092795][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 832.113022][ T5906] usb usb4-port1: attempt power cycle [ 832.232856][ T10] usb 3-1: device descriptor read/64, error -71 [ 832.343904][ T10] usb usb3-port1: attempt power cycle [ 832.452883][ T5906] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 832.644167][ T5906] usb 4-1: device descriptor read/8, error -71 [ 832.697719][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 832.723398][ T10] usb 3-1: device descriptor read/8, error -71 [ 832.894391][ T5906] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 832.923428][ T5906] usb 4-1: device descriptor read/8, error -71 [ 833.002766][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 833.026074][ T10] usb 3-1: device descriptor read/8, error -71 [ 833.043238][ T5906] usb usb4-port1: unable to enumerate USB device [ 833.087006][T16761] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 833.094149][T16761] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 833.135568][ T10] usb usb3-port1: unable to enumerate USB device [ 833.218627][T16764] syzkaller1: entered promiscuous mode [ 833.224209][T16764] syzkaller1: entered allmulticast mode [ 833.237601][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 833.535284][T16772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2729'. [ 833.592746][ T5906] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 833.732753][ T5906] usb 6-1: device descriptor read/64, error -71 [ 833.997459][ T5906] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 834.065038][T16775] netlink: 14220 bytes leftover after parsing attributes in process `syz.0.2730'. [ 834.203158][ T5906] usb 6-1: device descriptor read/64, error -71 [ 834.317300][ T5906] usb usb6-port1: attempt power cycle [ 834.509276][T16791] FAULT_INJECTION: forcing a failure. [ 834.509276][T16791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 834.528094][T16791] CPU: 0 UID: 0 PID: 16791 Comm: syz.0.2737 Not tainted syzkaller #0 PREEMPT(full) [ 834.528120][T16791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 834.528132][T16791] Call Trace: [ 834.528140][T16791] [ 834.528149][T16791] dump_stack_lvl+0x189/0x250 [ 834.528175][T16791] ? __pfx____ratelimit+0x10/0x10 [ 834.528196][T16791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.528216][T16791] ? __pfx__printk+0x10/0x10 [ 834.528235][T16791] ? fs_reclaim_acquire+0x7d/0x100 [ 834.528277][T16791] should_fail_ex+0x414/0x560 [ 834.528305][T16791] prepare_alloc_pages+0x213/0x610 [ 834.528344][T16791] __alloc_frozen_pages_noprof+0x123/0x370 [ 834.528367][T16791] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 834.528398][T16791] ? policy_nodemask+0x27c/0x720 [ 834.528433][T16791] alloc_pages_mpol+0x232/0x4a0 [ 834.528468][T16791] alloc_pages_noprof+0xa9/0x190 [ 834.528489][T16791] pte_alloc_one+0x23/0x310 [ 834.528509][T16791] ? __pte_alloc+0x1d/0x1a0 [ 834.528528][T16791] __pte_alloc+0x25/0x1a0 [ 834.528543][T16791] ? mm_alloc_pmd+0x246/0x410 [ 834.528575][T16791] move_pages+0xd7c/0x14f0 [ 834.528621][T16791] userfaultfd_ioctl+0x2e91/0x4c80 [ 834.528654][T16791] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 834.528674][T16791] ? security_file_ioctl+0xcb/0x2d0 [ 834.528701][T16791] ? __se_sys_ioctl+0x47/0x170 [ 834.528721][T16791] ? do_syscall_64+0xfa/0xfa0 [ 834.528743][T16791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.528771][T16791] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 834.528839][T16791] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.528872][T16791] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 834.528898][T16791] ? do_vfs_ioctl+0xbe8/0x1430 [ 834.528920][T16791] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 834.528941][T16791] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 834.528973][T16791] ? vfs_write+0x956/0xb30 [ 834.529031][T16791] ? ksys_write+0x1e1/0x250 [ 834.529059][T16791] ? bpf_lsm_file_ioctl+0x9/0x20 [ 834.529081][T16791] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 834.529107][T16791] __se_sys_ioctl+0xf9/0x170 [ 834.529132][T16791] do_syscall_64+0xfa/0xfa0 [ 834.529154][T16791] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.529175][T16791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.529194][T16791] ? clear_bhb_loop+0x60/0xb0 [ 834.529218][T16791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.529237][T16791] RIP: 0033:0x7f9d0b98eec9 [ 834.529255][T16791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.529273][T16791] RSP: 002b:00007f9d0c77a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.529295][T16791] RAX: ffffffffffffffda RBX: 00007f9d0bbe5fa0 RCX: 00007f9d0b98eec9 [ 834.529310][T16791] RDX: 0000200000000180 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 834.529324][T16791] RBP: 00007f9d0c77a090 R08: 0000000000000000 R09: 0000000000000000 [ 834.529336][T16791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.529348][T16791] R13: 00007f9d0bbe6038 R14: 00007f9d0bbe5fa0 R15: 00007f9d0bd0fa28 [ 834.529378][T16791] [ 834.548015][T16793] netlink: 'syz.3.2736': attribute type 2 has an invalid length. [ 834.620815][T16796] netlink: 'syz.0.2739': attribute type 1 has an invalid length. [ 834.682781][ T58] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 834.741475][T16799] loop2: detected capacity change from 0 to 7 [ 834.745042][ T5906] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 834.753432][T16799] Dev loop2: unable to read RDB block 7 [ 834.891531][T16799] loop2: unable to read partition table [ 834.900985][ T5906] usb 6-1: device descriptor read/8, error -71 [ 834.906545][T16799] loop2: partition table beyond EOD, truncated [ 834.915130][T16799] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 835.039456][T16803] bond0 (unregistering): Released all slaves [ 835.042779][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 835.054497][ T58] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 835.065888][ T58] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 835.074691][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.085520][ T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.085711][T16806] netlink: 'syz.0.2740': attribute type 13 has an invalid length. [ 835.102763][ T58] usb 5-1: config 0 has no interface number 0 [ 835.108896][ T58] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 835.120966][T16806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.124838][ T58] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 835.146353][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 835.154230][ T58] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 835.164380][ T58] usb 5-1: config 0 interface 125 has no altsetting 0 [ 835.172782][ T5906] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 835.187024][ T58] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 835.196405][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.206291][ T5906] usb 6-1: device descriptor read/8, error -71 [ 835.212488][ T58] usb 5-1: Product: syz [ 835.216731][ T58] usb 5-1: Manufacturer: syz [ 835.221340][ T58] usb 5-1: SerialNumber: syz [ 835.228440][ T58] usb 5-1: config 0 descriptor?? [ 835.314136][ T5906] usb usb6-port1: unable to enumerate USB device [ 835.324865][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.336687][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 835.348147][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 835.358779][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.368911][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.386432][T16800] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 835.403069][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.461962][ T10] usb 5-1: USB disconnect, device number 65 [ 835.618438][T16800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.622784][ T89] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 835.629531][T16800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.772920][ T89] usb 4-1: device descriptor read/64, error -71 [ 835.952763][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 836.012851][ T89] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 836.102905][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 836.110829][ T10] usb 1-1: config 162 has an invalid interface number: 253 but max is 0 [ 836.119335][ T10] usb 1-1: config 162 has no interface number 0 [ 836.129071][ T10] usb 1-1: config 162 interface 253 has no altsetting 0 [ 836.138443][ T10] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 836.147898][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.156179][ T10] usb 1-1: Product: syz [ 836.160374][ T89] usb 4-1: device descriptor read/64, error -71 [ 836.166819][ T10] usb 1-1: Manufacturer: syz [ 836.171547][ T10] usb 1-1: SerialNumber: syz [ 836.245885][T16819] sctp: [Deprecated]: syz.4.2745 (pid 16819) Use of int in maxseg socket option. [ 836.245885][T16819] Use struct sctp_assoc_value instead [ 836.273064][ T89] usb usb4-port1: attempt power cycle [ 836.418167][ T10] go7007 1-1:162.253: probe with driver go7007 failed with error -12 [ 836.434880][ T10] usb 1-1: USB disconnect, device number 58 [ 836.732837][ T89] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 836.753675][ T89] usb 4-1: device descriptor read/8, error -71 [ 836.998051][ T89] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 837.043740][ T89] usb 4-1: device descriptor read/8, error -71 [ 837.163468][ T89] usb usb4-port1: unable to enumerate USB device [ 837.418637][T16834] dvmrp0: entered allmulticast mode [ 837.729175][ T5906] usb 3-1: USB disconnect, device number 65 [ 837.812846][T16839] FAULT_INJECTION: forcing a failure. [ 837.812846][T16839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.830245][T16839] CPU: 0 UID: 0 PID: 16839 Comm: syz.5.2752 Not tainted syzkaller #0 PREEMPT(full) [ 837.830277][T16839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 837.830289][T16839] Call Trace: [ 837.830298][T16839] [ 837.830308][T16839] dump_stack_lvl+0x189/0x250 [ 837.830338][T16839] ? __pfx____ratelimit+0x10/0x10 [ 837.830363][T16839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.830383][T16839] ? __pfx__printk+0x10/0x10 [ 837.830404][T16839] ? __might_fault+0xb0/0x130 [ 837.830441][T16839] should_fail_ex+0x414/0x560 [ 837.830472][T16839] _copy_from_user+0x2d/0xb0 [ 837.830493][T16839] ___sys_sendmsg+0x158/0x2a0 [ 837.830520][T16839] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.830576][T16839] ? __fget_files+0x2a/0x420 [ 837.830601][T16839] ? __fget_files+0x3a0/0x420 [ 837.830630][T16839] __x64_sys_sendmsg+0x19b/0x260 [ 837.830656][T16839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 837.830689][T16839] ? __pfx_ksys_write+0x10/0x10 [ 837.830720][T16839] ? do_syscall_64+0xbe/0xfa0 [ 837.830746][T16839] do_syscall_64+0xfa/0xfa0 [ 837.830767][T16839] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.830791][T16839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.830809][T16839] ? clear_bhb_loop+0x60/0xb0 [ 837.830832][T16839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.830851][T16839] RIP: 0033:0x7f8f03f8eec9 [ 837.830870][T16839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.830889][T16839] RSP: 002b:00007f8f04dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.830911][T16839] RAX: ffffffffffffffda RBX: 00007f8f041e5fa0 RCX: 00007f8f03f8eec9 [ 837.830927][T16839] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 837.830940][T16839] RBP: 00007f8f04dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 837.830953][T16839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.830965][T16839] R13: 00007f8f041e6038 R14: 00007f8f041e5fa0 R15: 00007f8f0430fa28 [ 837.830996][T16839] [ 838.752803][ T89] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 838.806377][T16852] netlink: 'syz.4.2757': attribute type 30 has an invalid length. [ 838.912738][ T89] usb 6-1: device descriptor read/64, error -71 [ 839.163632][ T89] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 839.229083][T16858] veth1_to_batadv: entered promiscuous mode [ 839.448136][ T89] usb 6-1: device descriptor read/64, error -71 [ 839.632192][ T89] usb usb6-port1: attempt power cycle [ 839.992739][ T89] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 840.033799][ T89] usb 6-1: device descriptor read/8, error -71 [ 840.273193][ T89] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 840.293583][ T89] usb 6-1: device descriptor read/8, error -71 [ 840.403291][ T89] usb usb6-port1: unable to enumerate USB device [ 840.462733][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 840.482798][ T58] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 840.612759][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 840.619681][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.630704][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.640922][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 840.650755][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.662691][ T10] usb 1-1: config 0 descriptor?? [ 840.662784][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 840.691462][ T58] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 840.712791][ T58] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.737755][ T58] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.751666][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.768930][ T58] usb 4-1: Product: syz [ 840.778621][ T58] usb 4-1: Manufacturer: syz [ 840.789787][ T58] usb 4-1: SerialNumber: syz [ 840.823588][T16875] FAULT_INJECTION: forcing a failure. [ 840.823588][T16875] name failslab, interval 1, probability 0, space 0, times 0 [ 840.838145][T16875] CPU: 0 UID: 0 PID: 16875 Comm: syz.2.2765 Not tainted syzkaller #0 PREEMPT(full) [ 840.838194][T16875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 840.838218][T16875] Call Trace: [ 840.838242][T16875] [ 840.838255][T16875] dump_stack_lvl+0x189/0x250 [ 840.838285][T16875] ? __pfx____ratelimit+0x10/0x10 [ 840.838311][T16875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.838332][T16875] ? __pfx__printk+0x10/0x10 [ 840.838359][T16875] ? __pfx___might_resched+0x10/0x10 [ 840.838386][T16875] should_fail_ex+0x414/0x560 [ 840.838417][T16875] should_failslab+0xa8/0x100 [ 840.838439][T16875] __kmalloc_cache_noprof+0x6f/0x6f0 [ 840.838468][T16875] ? xfrm_policy_alloc+0x78/0x2b0 [ 840.838495][T16875] xfrm_policy_alloc+0x78/0x2b0 [ 840.838517][T16875] xfrm_policy_construct+0x39/0x6b0 [ 840.838555][T16875] xfrm_add_policy+0x267/0x800 [ 840.838585][T16875] ? __pfx_xfrm_add_policy+0x10/0x10 [ 840.838606][T16875] ? apparmor_capable+0x137/0x1b0 [ 840.838632][T16875] ? __nla_parse+0x40/0x60 [ 840.838662][T16875] xfrm_user_rcv_msg+0x7a3/0xab0 [ 840.838692][T16875] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 840.838753][T16875] ? __pfx___mutex_trylock_common+0x10/0x10 [ 840.838783][T16875] ? rcu_is_watching+0x15/0xb0 [ 840.838806][T16875] ? trace_contention_end+0x39/0x120 [ 840.838831][T16875] ? __mutex_lock+0x335/0x1350 [ 840.838863][T16875] netlink_rcv_skb+0x208/0x470 [ 840.838885][T16875] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 840.838911][T16875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.838946][T16875] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.838966][T16875] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.838989][T16875] xfrm_netlink_rcv+0x79/0x90 [ 840.839013][T16875] netlink_unicast+0x82c/0x9e0 [ 840.839067][T16875] ? __pfx_netlink_unicast+0x10/0x10 [ 840.839098][T16875] ? netlink_sendmsg+0x642/0xb30 [ 840.839118][T16875] ? skb_put+0x11b/0x210 [ 840.839144][T16875] netlink_sendmsg+0x805/0xb30 [ 840.839177][T16875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.839203][T16875] ? aa_sock_msg_perm+0xf1/0x1d0 [ 840.839231][T16875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 840.839257][T16875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.839280][T16875] __sock_sendmsg+0x21c/0x270 [ 840.839313][T16875] ____sys_sendmsg+0x505/0x830 [ 840.839344][T16875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.839377][T16875] ? import_iovec+0x74/0xa0 [ 840.839402][T16875] ___sys_sendmsg+0x21f/0x2a0 [ 840.839429][T16875] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.839492][T16875] ? __fget_files+0x2a/0x420 [ 840.839510][T16875] ? __fget_files+0x3a0/0x420 [ 840.839540][T16875] __x64_sys_sendmsg+0x19b/0x260 [ 840.839567][T16875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.839602][T16875] ? __pfx_ksys_write+0x10/0x10 [ 840.839635][T16875] ? do_syscall_64+0xbe/0xfa0 [ 840.839665][T16875] do_syscall_64+0xfa/0xfa0 [ 840.839687][T16875] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.839711][T16875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.839732][T16875] ? clear_bhb_loop+0x60/0xb0 [ 840.839757][T16875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.839778][T16875] RIP: 0033:0x7fe178d8eec9 [ 840.839797][T16875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.839815][T16875] RSP: 002b:00007fe179b6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.839837][T16875] RAX: ffffffffffffffda RBX: 00007fe178fe5fa0 RCX: 00007fe178d8eec9 [ 840.839853][T16875] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 840.839867][T16875] RBP: 00007fe179b6a090 R08: 0000000000000000 R09: 0000000000000000 [ 840.839879][T16875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.839892][T16875] R13: 00007fe178fe6038 R14: 00007fe178fe5fa0 R15: 00007fe17910fa28 [ 840.839927][T16875] [ 841.277847][T16873] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 841.398107][ T58] usb 4-1: USB disconnect, device number 68 [ 841.442187][ T10] logitech 0003:046D:C286.0019: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 841.453685][ T10] logitech 0003:046D:C286.0019: no inputs found [ 841.667506][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2768'. [ 841.698463][T16872] netlink: 'syz.0.2764': attribute type 4 has an invalid length. [ 841.719257][T16872] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2764'. [ 841.791279][T16882] netlink: 'syz.5.2768': attribute type 2 has an invalid length. [ 841.830194][ T10] usb 1-1: USB disconnect, device number 59 [ 842.218574][T16897] trusted_key: encrypted_key: master key parameter 'sbiWlC•þÒ 0b¾BaÞ±»T“gw•HêèX}\÷h¼üúpïØzcšæ+ì›t aãšÅöèŽÍG˜qv¿bÊ@ªN%¤í%§ay³Ô' is invalid [ 842.360978][T16898] hub 9-0:1.0: USB hub found [ 842.374088][T16898] hub 9-0:1.0: 1 port detected [ 842.554401][T16903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.562231][T16903] IPv6: NLM_F_CREATE should be set when creating new route [ 842.952770][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 843.113004][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 843.130843][ T10] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 843.143332][ T10] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.231156][ T10] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.262717][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 843.302754][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 843.363095][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.493488][ T10] usb 1-1: config 0 descriptor?? [ 843.702804][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 844.262690][ T58] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 844.353361][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 844.360388][ T24] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 844.378825][ T24] usb 4-1: config 0 has no interface number 0 [ 844.389062][ T24] usb 4-1: config 0 interface 12 has no altsetting 0 [ 844.412853][ T58] usb 3-1: device descriptor read/64, error -71 [ 844.420632][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 844.429771][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.448214][ T24] usb 4-1: Product: syz [ 844.452424][ T24] usb 4-1: Manufacturer: syz [ 844.470265][ T24] usb 4-1: SerialNumber: syz [ 844.504147][ T24] usb 4-1: config 0 descriptor?? [ 844.512474][ T10] usb 1-1: string descriptor 0 read error: -71 [ 844.521930][ T24] f81534 4-1:0.12: required endpoints missing [ 844.570384][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input63 [ 844.645748][T16924] netlink: 'syz.4.2780': attribute type 30 has an invalid length. [ 844.668712][ T58] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 844.680633][ T5185] bcm5974 1-1:0.0: could not read from device [ 844.773067][ T5185] bcm5974 1-1:0.0: could not read from device [ 844.800693][ T5185] bcm5974 1-1:0.0: could not read from device [ 844.807293][ T10] usb 1-1: USB disconnect, device number 60 [ 844.818089][ T9074] bcm5974 1-1:0.0: could not read from device [ 844.825683][ T58] usb 3-1: device descriptor read/64, error -71 [ 844.833154][ T5185] bcm5974 1-1:0.0: could not read from device [ 844.863371][ T5185] bcm5974 1-1:0.0: could not read from device [ 844.875186][ T5185] bcm5974 1-1:0.0: could not read from device [ 844.887413][ T9074] udevd[9074]: Error opening device "/dev/input/event4": No such device [ 844.897475][ T9074] udevd[9074]: Unable to EVIOCGABS device "/dev/input/event4" [ 844.907089][ T9074] udevd[9074]: Unable to EVIOCGABS device "/dev/input/event4" [ 844.915172][ T9074] udevd[9074]: Unable to EVIOCGABS device "/dev/input/event4" [ 844.930477][ T9074] udevd[9074]: Unable to EVIOCGABS device "/dev/input/event4" [ 844.938887][ T58] usb usb3-port1: attempt power cycle [ 845.303084][ T58] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 845.346974][ T58] usb 3-1: device descriptor read/8, error -71 [ 845.408039][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2784'. [ 845.650890][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.681224][ T58] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 845.705563][ T58] usb 3-1: device descriptor read/8, error -71 [ 845.827870][ T58] usb usb3-port1: unable to enumerate USB device [ 845.874224][ T58] usb 4-1: USB disconnect, device number 69 [ 845.937813][T16944] support for the xor transformation has been removed. [ 846.023185][T16947] netlink: 'syz.5.2786': attribute type 1 has an invalid length. [ 846.382911][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 846.512753][ T89] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 846.543666][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 846.560092][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 846.575322][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 846.595415][ T10] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 846.605011][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.616099][ T10] usb 6-1: Product: syz [ 846.620445][ T10] usb 6-1: Manufacturer: syz [ 846.626725][ T10] usb 6-1: SerialNumber: syz [ 846.638515][ T10] usb 6-1: config 0 descriptor?? [ 846.650076][ T10] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 846.667091][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.678403][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.690929][ T10] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 846.704741][ T89] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 846.724968][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.746049][ T89] usb 4-1: config 0 descriptor?? [ 846.772757][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 846.902799][ T9] usb 3-1: device descriptor read/64, error -71 [ 847.152773][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 847.188855][ T89] petalynx 0003:18B1:0037.001A: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 847.302759][ T9] usb 3-1: device descriptor read/64, error -71 [ 847.413268][ T9] usb usb3-port1: attempt power cycle [ 847.441612][T16958] binder: 16949:16958 ioctl 400c620e 200000000380 returned -22 [ 847.742749][ T89] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 847.762978][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 847.793334][ T9] usb 3-1: device descriptor read/8, error -71 [ 847.892728][ T89] usb 1-1: Using ep0 maxpacket: 16 [ 847.901483][ T89] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 847.910837][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.919675][ T89] usb 1-1: Product: syz [ 847.923948][ T89] usb 1-1: Manufacturer: syz [ 847.928580][ T89] usb 1-1: SerialNumber: syz [ 847.938523][ T89] r8152-cfgselector 1-1: Unknown version 0x0000 [ 847.944963][ T89] r8152-cfgselector 1-1: config 0 descriptor?? [ 848.042976][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 848.063537][ T9] usb 3-1: device descriptor read/8, error -71 [ 848.173055][ T9] usb usb3-port1: unable to enumerate USB device [ 848.732797][ T9] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 848.887725][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 848.896999][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.906073][ T9] usb 5-1: Product: syz [ 848.910477][ T9] usb 5-1: Manufacturer: syz [ 848.915222][ T9] usb 5-1: SerialNumber: syz [ 848.923556][ T9] usb 5-1: config 0 descriptor?? [ 848.951684][ T6107] usb 6-1: USB disconnect, device number 4 [ 848.961964][ T6107] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 848.976400][ T6107] kobil_sct 6-1:0.0: device disconnected [ 849.133991][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 849.235610][ T58] usb 4-1: USB disconnect, device number 70 [ 849.432780][ T6107] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 849.563021][ T6107] usb 6-1: device descriptor read/64, error -71 [ 849.588895][ T58] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 849.656168][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 849.758589][ T58] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 849.771802][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.780751][ T58] usb 4-1: Product: syz [ 849.785878][ T58] usb 4-1: Manufacturer: syz [ 849.790593][ T58] usb 4-1: SerialNumber: syz [ 849.797861][ T58] usb 4-1: config 0 descriptor?? [ 849.812879][ T6107] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 849.943105][ T6107] usb 6-1: device descriptor read/64, error -71 [ 850.003010][ T89] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 850.010727][ T58] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 850.054239][ T6107] usb usb6-port1: attempt power cycle [ 850.163330][ T89] usb 3-1: Using ep0 maxpacket: 16 [ 850.171501][ T89] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.182778][ T89] usb 3-1: config 0 interface 0 has no altsetting 0 [ 850.192300][ T89] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 850.201562][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.209665][ T89] usb 3-1: Product: syz [ 850.214014][ T89] usb 3-1: Manufacturer: syz [ 850.218648][ T89] usb 3-1: SerialNumber: syz [ 850.226505][ T89] usb 3-1: config 0 descriptor?? [ 850.392868][ T6107] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 850.414009][ T6107] usb 6-1: device descriptor read/8, error -71 [ 850.443608][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 850.453204][ T89] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input64 [ 850.472802][ T89] imon:send_packet: packet tx failed (-71) [ 850.493028][ T89] imon 3-1:0.0: panel buttons/knobs setup failed [ 850.501111][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 850.501128][ T30] audit: type=1326 audit(1759948958.899:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16959 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0b98eec9 code=0x7fc00000 [ 850.562827][ T89] rc_core: IR keymap rc-imon-pad not found [ 850.568791][ T89] Registered IR keymap rc-empty [ 850.574039][ T89] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 850.584248][ T89] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 850.596697][ T89] imon:send_packet: packet tx failed (-71) [ 850.622821][ T89] imon 3-1:0.0: remote input dev register failed [ 850.629375][ T89] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 850.654858][ T24] r8152-cfgselector 1-1: USB disconnect, device number 61 [ 850.664546][ T6107] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 850.695339][ T89] imon 3-1:0.0: unable to initialize intf0, err 0 [ 850.701866][ T89] imon:imon_probe: failed to initialize context! [ 850.716086][ T6107] usb 6-1: device descriptor read/8, error -71 [ 850.729637][ T89] imon 3-1:0.0: unable to register, err -19 [ 850.746322][ T89] usb 3-1: USB disconnect, device number 74 [ 850.828742][ T6107] usb usb6-port1: unable to enumerate USB device [ 850.966112][T16982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2798'. [ 851.062786][ T89] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 851.252713][ T89] usb 3-1: Using ep0 maxpacket: 16 [ 851.270908][ T89] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 851.285118][ T89] usb 3-1: config 0 interface 0 has no altsetting 0 [ 851.296245][ T89] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 851.305724][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.314322][ T89] usb 3-1: Product: syz [ 851.318844][ T89] usb 3-1: Manufacturer: syz [ 851.324219][ T89] usb 3-1: SerialNumber: syz [ 851.332303][ T89] usb 3-1: config 0 descriptor?? [ 851.359505][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 851.558677][ T89] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input66 [ 851.595263][ T9] usb 5-1: USB disconnect, device number 66 [ 851.872851][ T89] rc_core: IR keymap rc-imon-pad not found [ 851.878956][ T89] Registered IR keymap rc-empty [ 851.885086][ T89] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 851.895396][ T89] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 851.974258][ T89] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 851.988426][ T89] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input67 [ 852.001178][ T89] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:75> initialized [ 852.093328][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 852.181865][ C0] imon 3-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 0, intf0) [ 852.228987][ T58] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 852.240041][T16987] program syz.5.2800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.263240][ T9] usb 1-1: device descriptor read/64, error -71 [ 852.265945][ T58] usb 4-1: USB disconnect, device number 71 [ 852.401230][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 852.410203][ T89] usb 3-1: USB disconnect, device number 75 [ 852.502748][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 852.566215][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 852.656031][ T9] usb 1-1: device descriptor read/64, error -71 [ 852.725468][ T24] usb 6-1: too many configurations: 234, using maximum allowed: 8 [ 852.735345][ T24] usb 6-1: config index 0 descriptor too short (expected 65470, got 45) [ 852.745592][ T24] usb 6-1: config index 1 descriptor too short (expected 65470, got 45) [ 852.755518][ T24] usb 6-1: config index 2 descriptor too short (expected 65470, got 45) [ 852.765503][ T24] usb 6-1: config index 3 descriptor too short (expected 65470, got 45) [ 852.773275][ T9] usb usb1-port1: attempt power cycle [ 852.777649][ T24] usb 6-1: config index 4 descriptor too short (expected 65470, got 45) [ 852.789929][ T24] usb 6-1: config index 5 descriptor too short (expected 65470, got 45) [ 852.800155][ T24] usb 6-1: config index 6 descriptor too short (expected 65470, got 45) [ 852.810282][ T24] usb 6-1: config index 7 descriptor too short (expected 65470, got 45) [ 852.821479][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 852.831134][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.840966][ T24] usb 6-1: Product: syz [ 852.845462][ T24] usb 6-1: Manufacturer: syz [ 852.850126][ T24] usb 6-1: SerialNumber: syz [ 853.067999][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 853.091566][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 853.102331][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 853.133393][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 853.196609][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 853.203492][ T9] usb 1-1: device descriptor read/8, error -71 [ 853.236584][ T24] usb 6-1: USB disconnect, device number 9 [ 853.511399][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 853.537773][ T9] usb 1-1: device descriptor read/8, error -71 [ 853.653189][ T9] usb usb1-port1: unable to enumerate USB device [ 854.398120][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'. [ 854.732866][ T89] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 854.895520][ T89] usb 6-1: not running at top speed; connect to a high speed hub [ 854.914641][ T89] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 854.980005][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.006388][ T89] usb 6-1: Product: syz [ 855.018049][ T89] usb 6-1: Manufacturer: syz [ 855.029659][ T89] usb 6-1: SerialNumber: syz [ 855.043572][ T9] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 855.211728][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 855.244296][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.263290][T17044] FAULT_INJECTION: forcing a failure. [ 855.263290][T17044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.284755][ T9] usb 4-1: Product: syz [ 855.294987][ T89] usb 6-1: USB disconnect, device number 10 [ 855.301414][ T9] usb 4-1: Manufacturer: syz [ 855.305831][T17044] CPU: 1 UID: 0 PID: 17044 Comm: syz.4.2815 Not tainted syzkaller #0 PREEMPT(full) [ 855.305861][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 855.305874][T17044] Call Trace: [ 855.305883][T17044] [ 855.305892][T17044] dump_stack_lvl+0x189/0x250 [ 855.305922][T17044] ? __pfx____ratelimit+0x10/0x10 [ 855.305952][T17044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.305973][T17044] ? __pfx__printk+0x10/0x10 [ 855.305993][T17044] ? __might_fault+0xb0/0x130 [ 855.306032][T17044] should_fail_ex+0x414/0x560 [ 855.306061][T17044] _copy_from_user+0x2d/0xb0 [ 855.306082][T17044] kstrtouint_from_user+0xc4/0x170 [ 855.306110][T17044] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 855.306145][T17044] proc_fail_nth_write+0x88/0x200 [ 855.306169][T17044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 855.306196][T17044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 855.306217][T17044] vfs_write+0x27e/0xb30 [ 855.306251][T17044] ? __pfx_vfs_write+0x10/0x10 [ 855.306275][T17044] ? __fget_files+0x2a/0x420 [ 855.306298][T17044] ? __fget_files+0x3a0/0x420 [ 855.306314][T17044] ? __fget_files+0x2a/0x420 [ 855.306342][T17044] ksys_write+0x145/0x250 [ 855.306368][T17044] ? __pfx_ksys_write+0x10/0x10 [ 855.306395][T17044] ? do_syscall_64+0xbe/0xfa0 [ 855.306422][T17044] do_syscall_64+0xfa/0xfa0 [ 855.306444][T17044] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.306466][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.306486][T17044] ? clear_bhb_loop+0x60/0xb0 [ 855.306510][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.306529][T17044] RIP: 0033:0x7ff3a058d97f [ 855.306549][T17044] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 855.306567][T17044] RSP: 002b:00007ff3a14e8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 855.306589][T17044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff3a058d97f [ 855.306604][T17044] RDX: 0000000000000001 RSI: 00007ff3a14e80a0 RDI: 0000000000000005 [ 855.306617][T17044] RBP: 00007ff3a14e8090 R08: 0000000000000000 R09: 0000000000000000 [ 855.306630][T17044] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 855.306642][T17044] R13: 00007ff3a07e6038 R14: 00007ff3a07e5fa0 R15: 00007ff3a090fa28 [ 855.306676][T17044] [ 855.576669][T17047] FAULT_INJECTION: forcing a failure. [ 855.576669][T17047] name failslab, interval 1, probability 0, space 0, times 0 [ 855.590049][T17047] CPU: 1 UID: 0 PID: 17047 Comm: syz.0.2817 Not tainted syzkaller #0 PREEMPT(full) [ 855.590077][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 855.590087][T17047] Call Trace: [ 855.590093][T17047] [ 855.590100][T17047] dump_stack_lvl+0x189/0x250 [ 855.590119][T17047] ? __pfx____ratelimit+0x10/0x10 [ 855.590135][T17047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.590146][T17047] ? __pfx__printk+0x10/0x10 [ 855.590156][T17047] ? __local_bh_enable_ip+0x12d/0x1c0 [ 855.590175][T17047] should_fail_ex+0x414/0x560 [ 855.590193][T17047] should_failslab+0xa8/0x100 [ 855.590205][T17047] __kmalloc_cache_noprof+0x6f/0x6f0 [ 855.590220][T17047] ? sctp_add_bind_addr+0x8c/0x370 [ 855.590233][T17047] ? __pfx_sctp_get_port_local+0x10/0x10 [ 855.590251][T17047] sctp_add_bind_addr+0x8c/0x370 [ 855.590262][T17047] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 855.590280][T17047] sctp_do_bind+0x5ab/0x940 [ 855.590302][T17047] sctp_connect_new_asoc+0x25c/0x690 [ 855.590319][T17047] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 855.590333][T17047] ? __local_bh_enable_ip+0x12d/0x1c0 [ 855.590348][T17047] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 855.590360][T17047] ? security_sctp_bind_connect+0x7e/0x2e0 [ 855.590373][T17047] sctp_sendmsg+0x155c/0x2810 [ 855.590395][T17047] ? __pfx_sctp_sendmsg+0x10/0x10 [ 855.590412][T17047] ? aa_sk_perm+0x81e/0x950 [ 855.590428][T17047] ? __pfx_aa_sk_perm+0x10/0x10 [ 855.590443][T17047] ? sock_rps_record_flow+0x19/0x410 [ 855.590455][T17047] ? inet_sendmsg+0x2f4/0x370 [ 855.590467][T17047] __sock_sendmsg+0x19c/0x270 [ 855.590485][T17047] __sys_sendto+0x3bd/0x520 [ 855.590498][T17047] ? __pfx___sys_sendto+0x10/0x10 [ 855.590515][T17047] ? do_sys_openat2+0x154/0x1c0 [ 855.590534][T17047] ? ksys_write+0x1e1/0x250 [ 855.590550][T17047] ? __pfx_ksys_write+0x10/0x10 [ 855.590566][T17047] __x64_sys_sendto+0xde/0x100 [ 855.590579][T17047] do_syscall_64+0xfa/0xfa0 [ 855.590592][T17047] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.590605][T17047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.590616][T17047] ? clear_bhb_loop+0x60/0xb0 [ 855.590630][T17047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.590641][T17047] RIP: 0033:0x7f9d0b98eec9 [ 855.590651][T17047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.590661][T17047] RSP: 002b:00007f9d0c77a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 855.590674][T17047] RAX: ffffffffffffffda RBX: 00007f9d0bbe5fa0 RCX: 00007f9d0b98eec9 [ 855.590683][T17047] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 855.590689][T17047] RBP: 00007f9d0c77a090 R08: 0000200000000080 R09: 000000000000001c [ 855.590697][T17047] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 855.590703][T17047] R13: 00007f9d0bbe6038 R14: 00007f9d0bbe5fa0 R15: 00007f9d0bd0fa28 [ 855.590720][T17047] [ 855.874997][ T9] usb 4-1: SerialNumber: syz [ 855.911744][T17048] binder: BINDER_SET_CONTEXT_MGR already set [ 855.918827][ T9] usb 4-1: config 0 descriptor?? [ 855.929325][T17048] binder: 17046:17048 ioctl 4018620d 200000000040 returned -16 [ 856.128582][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 856.625303][T17058] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2821'. [ 857.082747][ T89] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 857.113443][ T6107] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 857.232767][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 857.247231][ T89] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 857.260642][ T89] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 857.275138][ T6107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.287847][ T89] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 857.549984][ T6107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.560117][ T89] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 857.570863][ T6107] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 857.580870][ T89] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 857.596692][ T6107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 857.617570][ T89] usb 5-1: config 0 has no interface number 0 [ 857.624111][ T6107] usb 6-1: SerialNumber: syz [ 857.643023][ T89] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 857.691386][ T89] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 857.730687][ T89] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 857.742774][ T89] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 857.756675][ T89] usb 5-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 857.768692][ T89] usb 5-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 857.791577][ T89] usb 5-1: config 0 interface 125 has no altsetting 0 [ 857.800030][ T89] usb 5-1: config 0 interface 125 has no altsetting 2 [ 857.814142][ T89] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 857.824109][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.832300][ T89] usb 5-1: Product: syz [ 857.838022][ T89] usb 5-1: Manufacturer: syz [ 857.842953][ T89] usb 5-1: SerialNumber: syz [ 857.850769][ T89] usb 5-1: config 0 descriptor?? [ 857.862007][ T89] usb 5-1: selecting invalid altsetting 2 [ 857.908732][ T6107] usb 6-1: 0:2 : does not exist [ 857.916657][T17074] xt_SECMARK: invalid mode: 2 [ 858.040227][ T6107] usb 6-1: USB disconnect, device number 11 [ 858.155295][ T9075] udevd[9075]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.343489][ C0] usb 5-1: async_complete: urb error -71 [ 858.349316][ C0] usb 5-1: async_complete: urb error -71 [ 858.355085][ C0] usb 5-1: async_complete: urb error -71 [ 858.360936][ C0] usb 5-1: async_complete: urb error -71 [ 858.367352][ T89] get_1284_register: usb error -71 [ 858.375087][ T89] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 858.389286][ T89] usb 5-1: USB disconnect, device number 67 [ 858.603855][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 858.820813][ T9] usb 4-1: USB disconnect, device number 72 [ 858.992755][ T5921] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 859.083138][T17090] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2831'. [ 859.164923][ T5921] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 859.178044][ T5921] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 859.198393][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 859.217563][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.247319][ T5921] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 859.261970][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 859.278919][ T5921] usb 3-1: Product: syz [ 859.288011][ T5921] usb 3-1: Manufacturer: syz [ 859.292826][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 859.313380][ T5921] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 859.467792][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 859.501958][ T9] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 859.521657][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.540202][ T9] usb 6-1: Product: syz [ 859.545027][ T9] usb 6-1: Manufacturer: syz [ 859.549661][ T9] usb 6-1: SerialNumber: syz [ 859.807551][ T9] usb 6-1: selecting invalid altsetting 1 [ 860.013385][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 860.013519][ T9] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 860.040731][ T9] usb 6-1: USB disconnect, device number 12 [ 860.814803][T17113] netlink: 'syz.5.2838': attribute type 2 has an invalid length. [ 861.063064][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 861.212826][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 861.219798][ T9] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 861.232281][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 861.322049][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 861.330675][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 861.382723][ T58] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 861.513977][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 861.528573][ T9] usb 5-1: config 0 has no interface number 0 [ 861.536934][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 861.567849][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 861.588100][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 861.610656][ T9] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.634754][ T9] usb 5-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 861.644818][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.662920][ T58] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 861.665636][ T9] usb 5-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 861.672270][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.730402][ T58] usb 1-1: config 0 descriptor?? [ 861.737902][ T9] usb 5-1: config 0 interface 125 has no altsetting 0 [ 861.759317][ T5921] usb 3-1: USB disconnect, device number 76 [ 861.802993][ T9] usb 5-1: config 0 interface 125 has no altsetting 2 [ 861.812401][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 861.825526][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.846313][ T9] usb 5-1: Product: syz [ 861.928506][T17128] sctp: [Deprecated]: syz.5.2843 (pid 17128) Use of int in maxseg socket option. [ 861.928506][T17128] Use struct sctp_assoc_value instead [ 862.013231][ T9] usb 5-1: Manufacturer: syz [ 862.041884][ T9] usb 5-1: SerialNumber: syz [ 862.094738][ T9] usb 5-1: config 0 descriptor?? [ 862.135822][ T9] usb 5-1: selecting invalid altsetting 2 [ 862.424098][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 862.499251][ C0] usb 5-1: async_complete: urb error -71 [ 862.505027][ C0] usb 5-1: async_complete: urb error -71 [ 862.510779][ C0] usb 5-1: async_complete: urb error -71 [ 862.516600][ C0] usb 5-1: async_complete: urb error -71 [ 862.549040][ T9] get_1284_register: usb error -71 [ 862.559315][ T9] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 862.622984][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 862.636630][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 862.647840][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.666328][ T9] usb 5-1: USB disconnect, device number 68 [ 862.685124][ T10] usb 3-1: config 0 has no interfaces? [ 862.710677][ T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 862.740455][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.791556][ T10] usb 3-1: Product: syz [ 862.801551][ T10] usb 3-1: Manufacturer: syz [ 862.806603][ T89] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 862.822164][ T10] usb 3-1: SerialNumber: syz [ 862.840685][ T10] usb 3-1: config 0 descriptor?? [ 862.964487][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 862.972348][ T89] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 862.982180][ T89] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 863.017215][ T89] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 863.035718][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.100318][T17133] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2844'. [ 863.121200][ T89] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 863.142912][ T5921] usb 3-1: USB disconnect, device number 77 [ 863.172598][ T89] usb 4-1: config 0 has no interface number 0 [ 863.190033][ T89] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 863.221325][ T89] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 863.276076][ T89] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 863.287889][ T89] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.342867][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 863.422756][ T89] usb 4-1: config 0 interface 125 has no altsetting 0 [ 863.443866][ T89] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 863.472701][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.492844][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 863.502091][ T89] usb 4-1: Product: syz [ 863.504154][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 863.515847][ T24] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 863.526452][ T24] usb 5-1: Product: syz [ 863.535100][ T89] usb 4-1: Manufacturer: syz [ 863.540693][ T24] usb 5-1: Manufacturer: syz [ 863.550049][ T89] usb 4-1: SerialNumber: syz [ 863.563218][ T24] usb 5-1: SerialNumber: syz [ 863.587319][ T24] usb 5-1: config 0 descriptor?? [ 863.596094][ T89] usb 4-1: config 0 descriptor?? [ 863.688114][T17156] netlink: 'syz.5.2847': attribute type 1 has an invalid length. [ 863.813514][T17156] loop2: detected capacity change from 0 to 7 [ 863.832545][ T89] usb 4-1: USB disconnect, device number 73 [ 863.858199][T17156] Dev loop2: unable to read RDB block 7 [ 863.875154][T17156] loop2: unable to read partition table [ 863.949962][T17156] loop2: partition table beyond EOD, truncated [ 864.054819][T17156] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 864.098505][ T58] usbhid 1-1:0.0: can't add hid device: -71 [ 864.124069][ T58] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 864.233629][ T58] usb 1-1: USB disconnect, device number 66 [ 864.526095][T17185] netlink: 'syz.2.2849': attribute type 30 has an invalid length. [ 864.737971][ T58] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 864.897201][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 864.919206][ T58] usb 1-1: config 10 has an invalid interface number: 193 but max is 0 [ 864.966880][ T58] usb 1-1: config 10 has no interface number 0 [ 865.059832][ T58] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 865.086907][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.115052][ T58] usb 1-1: Product: syz [ 865.125256][ T58] usb 1-1: Manufacturer: syz [ 865.140836][ T58] usb 1-1: SerialNumber: syz [ 865.342713][ T9] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 865.524116][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 865.533529][ T9] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 865.541747][ T9] usb 4-1: config 95 has no interface number 0 [ 865.548614][ T9] usb 4-1: config 95 interface 1 has no altsetting 0 [ 865.623024][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 865.632587][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.644103][ T9] usb 4-1: Product: syz [ 865.654361][ T9] usb 4-1: Manufacturer: syz [ 865.664621][ T9] usb 4-1: SerialNumber: syz [ 865.734049][T17182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.743246][T17182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.800543][ T58] rtsx_usb 1-1:10.193: probe with driver rtsx_usb failed with error -22 [ 865.874442][ T58] usb 1-1: USB disconnect, device number 67 [ 865.891168][ T9] usb 4-1: USB disconnect, device number 74 [ 866.140062][ T58] usb 5-1: USB disconnect, device number 69 [ 866.683297][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 866.835293][ T9] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 866.845507][ T9] usb 5-1: config 0 has no interface number 0 [ 866.879657][ T9] usb 5-1: too many endpoints for config 0 interface 172 altsetting 3: 156, using maximum allowed: 30 [ 866.903016][ T9] usb 5-1: config 0 interface 172 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 156 [ 866.917723][ T9] usb 5-1: config 0 interface 172 has no altsetting 0 [ 866.928865][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 866.941510][ T9] usb 5-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 867.001364][ T9] usb 5-1: Product: syz [ 867.006157][ T9] usb 5-1: Manufacturer: syz [ 867.037409][ T9] usb 5-1: SerialNumber: syz [ 867.090704][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2859'. [ 867.157862][T17223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2859'. [ 867.169267][T17223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2859'. [ 867.271892][ T9] usb 5-1: config 0 descriptor?? [ 867.676200][T17231] netlink: 'syz.2.2861': attribute type 1 has an invalid length. [ 867.678175][ T9] ch341 5-1:0.172: ch341-uart converter detected [ 867.700582][ T9] usb 5-1: failed to receive control message: -71 [ 867.708930][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 867.728276][T17231] loop2: detected capacity change from 0 to 7 [ 867.741898][ T9] usb 5-1: USB disconnect, device number 70 [ 867.778122][ T9] ch341 5-1:0.172: device disconnected [ 867.786605][T17231] Dev loop2: unable to read RDB block 7 [ 867.817921][T17231] loop2: unable to read partition table [ 867.827261][T17231] loop2: partition table beyond EOD, truncated [ 867.835773][T17231] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 867.913793][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 867.950689][T17237] program syz.3.2863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.962395][T17237] FAULT_INJECTION: forcing a failure. [ 867.962395][T17237] name failslab, interval 1, probability 0, space 0, times 0 [ 867.993219][T17237] CPU: 0 UID: 0 PID: 17237 Comm: syz.3.2863 Not tainted syzkaller #0 PREEMPT(full) [ 867.993248][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 867.993260][T17237] Call Trace: [ 867.993269][T17237] [ 867.993279][T17237] dump_stack_lvl+0x189/0x250 [ 867.993305][T17237] ? __pfx____ratelimit+0x10/0x10 [ 867.993328][T17237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.993348][T17237] ? __pfx__printk+0x10/0x10 [ 867.993373][T17237] ? __pfx___might_resched+0x10/0x10 [ 867.993399][T17237] should_fail_ex+0x414/0x560 [ 867.993427][T17237] should_failslab+0xa8/0x100 [ 867.993446][T17237] __kmalloc_noprof+0xcb/0x7f0 [ 867.993471][T17237] ? blk_rq_map_kern+0x2a7/0x650 [ 867.993492][T17237] ? cap_capable+0x11f/0x460 [ 867.993513][T17237] blk_rq_map_kern+0x2a7/0x650 [ 867.993544][T17237] ? capable+0x82/0xe0 [ 867.993568][T17237] scsi_ioctl+0x1992/0x1fb0 [ 867.993596][T17237] ? __pfx_scsi_ioctl+0x10/0x10 [ 867.993649][T17237] ? kasan_quarantine_put+0xdd/0x220 [ 867.993675][T17237] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.993713][T17237] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 867.993739][T17237] ? do_vfs_ioctl+0xbe8/0x1430 [ 867.993762][T17237] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 867.993785][T17237] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 867.993829][T17237] sg_ioctl+0x158e/0x2230 [ 867.993867][T17237] ? __pfx_sg_ioctl+0x10/0x10 [ 867.993896][T17237] ? __fget_files+0x2a/0x420 [ 867.993919][T17237] ? __fget_files+0x3a0/0x420 [ 867.993935][T17237] ? __fget_files+0x2a/0x420 [ 867.993956][T17237] ? bpf_lsm_file_ioctl+0x9/0x20 [ 867.993978][T17237] ? __pfx_sg_ioctl+0x10/0x10 [ 867.994005][T17237] __se_sys_ioctl+0xf9/0x170 [ 867.994031][T17237] do_syscall_64+0xfa/0xfa0 [ 867.994054][T17237] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.994076][T17237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.994096][T17237] ? clear_bhb_loop+0x60/0xb0 [ 867.994120][T17237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.994140][T17237] RIP: 0033:0x7fe0fe38eec9 [ 867.994158][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.994181][T17237] RSP: 002b:00007fe0ff15b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.994204][T17237] RAX: ffffffffffffffda RBX: 00007fe0fe5e5fa0 RCX: 00007fe0fe38eec9 [ 867.994220][T17237] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 867.994233][T17237] RBP: 00007fe0ff15b090 R08: 0000000000000000 R09: 0000000000000000 [ 867.994247][T17237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.994260][T17237] R13: 00007fe0fe5e6038 R14: 00007fe0fe5e5fa0 R15: 00007fe0fe70fa28 [ 867.994293][T17237] [ 868.323335][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 868.772497][ T10] usb 1-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 868.892750][ T58] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 869.216085][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 869.233011][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.249993][ T10] usb 1-1: Product: syz [ 869.257329][ T10] usb 1-1: Manufacturer: syz [ 869.265994][ T10] usb 1-1: SerialNumber: syz [ 869.323550][ T10] usb 1-1: config 0 descriptor?? [ 869.382896][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 869.421684][ T58] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 869.439894][ T58] usb 4-1: config 0 has no interface number 0 [ 869.457214][ T58] usb 4-1: config 0 interface 12 has no altsetting 0 [ 869.484209][ T10] usb 1-1: bad CDC descriptors [ 869.537593][ T58] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 869.537943][ T10] usb 1-1: unsupported MDLM descriptors [ 869.547556][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.584552][ T58] usb 4-1: Product: syz [ 869.593245][ T58] usb 4-1: Manufacturer: syz [ 869.609816][ T58] usb 4-1: SerialNumber: syz [ 869.639744][ T58] usb 4-1: config 0 descriptor?? [ 869.673651][ T58] f81534 4-1:0.12: required endpoints missing [ 869.912760][ T10] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 870.049464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.059786][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.468238][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 870.485393][ T10] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 870.496846][ T10] usb 5-1: config 95 has no interface number 0 [ 870.524850][ T10] usb 5-1: config 95 interface 1 has no altsetting 0 [ 870.840874][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 870.850212][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.872163][ T10] usb 5-1: Product: syz [ 870.878327][ T10] usb 5-1: Manufacturer: syz [ 870.922516][ T10] usb 5-1: SerialNumber: syz [ 871.293186][ T10] usb 5-1: USB disconnect, device number 71 [ 871.358856][ T58] usb 4-1: USB disconnect, device number 75 [ 871.779530][T17289] FAULT_INJECTION: forcing a failure. [ 871.779530][T17289] name failslab, interval 1, probability 0, space 0, times 0 [ 871.794194][T17289] CPU: 1 UID: 0 PID: 17289 Comm: syz.2.2878 Not tainted syzkaller #0 PREEMPT(full) [ 871.794211][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 871.794218][T17289] Call Trace: [ 871.794223][T17289] [ 871.794228][T17289] dump_stack_lvl+0x189/0x250 [ 871.794244][T17289] ? __pfx____ratelimit+0x10/0x10 [ 871.794257][T17289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.794268][T17289] ? __pfx__printk+0x10/0x10 [ 871.794282][T17289] ? __pfx___might_resched+0x10/0x10 [ 871.794293][T17289] ? fs_reclaim_acquire+0x7d/0x100 [ 871.794312][T17289] should_fail_ex+0x414/0x560 [ 871.794328][T17289] should_failslab+0xa8/0x100 [ 871.794339][T17289] __kmalloc_noprof+0xcb/0x7f0 [ 871.794353][T17289] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 871.794369][T17289] ? __local_bh_enable_ip+0x12d/0x1c0 [ 871.794383][T17289] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 871.794401][T17289] genl_family_rcv_msg_doit+0xb8/0x300 [ 871.794419][T17289] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 871.794437][T17289] ? apparmor_capable+0x137/0x1b0 [ 871.794449][T17289] ? bpf_lsm_capable+0x9/0x20 [ 871.794462][T17289] ? security_capable+0x7e/0x2e0 [ 871.794479][T17289] genl_rcv_msg+0x60e/0x790 [ 871.794496][T17289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.794508][T17289] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 871.794518][T17289] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 871.794531][T17289] ? __pfx_nl80211_post_doit+0x10/0x10 [ 871.794541][T17289] ? __asan_memcpy+0x40/0x70 [ 871.794554][T17289] ? __pfx_ref_tracker_free+0x10/0x10 [ 871.794572][T17289] netlink_rcv_skb+0x208/0x470 [ 871.794581][T17289] ? __lock_acquire+0xab9/0xd20 [ 871.794592][T17289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.794606][T17289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.794627][T17289] ? down_read+0x1ad/0x2e0 [ 871.794649][T17289] genl_rcv+0x28/0x40 [ 871.794661][T17289] netlink_unicast+0x82c/0x9e0 [ 871.794682][T17289] ? __pfx_netlink_unicast+0x10/0x10 [ 871.794698][T17289] ? netlink_sendmsg+0x642/0xb30 [ 871.794708][T17289] ? skb_put+0x11b/0x210 [ 871.794722][T17289] netlink_sendmsg+0x805/0xb30 [ 871.794738][T17289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.794751][T17289] ? aa_sock_msg_perm+0xf1/0x1d0 [ 871.794766][T17289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.794776][T17289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.794788][T17289] __sock_sendmsg+0x21c/0x270 [ 871.794804][T17289] ____sys_sendmsg+0x505/0x830 [ 871.794820][T17289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.794837][T17289] ? import_iovec+0x74/0xa0 [ 871.794849][T17289] ___sys_sendmsg+0x21f/0x2a0 [ 871.794863][T17289] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.794895][T17289] ? __fget_files+0x2a/0x420 [ 871.794904][T17289] ? __fget_files+0x3a0/0x420 [ 871.794919][T17289] __x64_sys_sendmsg+0x19b/0x260 [ 871.794933][T17289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 871.794950][T17289] ? __pfx_ksys_write+0x10/0x10 [ 871.794967][T17289] ? do_syscall_64+0xbe/0xfa0 [ 871.794981][T17289] do_syscall_64+0xfa/0xfa0 [ 871.794993][T17289] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.795005][T17289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.795016][T17289] ? clear_bhb_loop+0x60/0xb0 [ 871.795029][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.795039][T17289] RIP: 0033:0x7fe178d8eec9 [ 871.795050][T17289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.795059][T17289] RSP: 002b:00007fe179b6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.795071][T17289] RAX: ffffffffffffffda RBX: 00007fe178fe5fa0 RCX: 00007fe178d8eec9 [ 871.795079][T17289] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 871.795086][T17289] RBP: 00007fe179b6a090 R08: 0000000000000000 R09: 0000000000000000 [ 871.795093][T17289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.795099][T17289] R13: 00007fe178fe6038 R14: 00007fe178fe5fa0 R15: 00007fe17910fa28 [ 871.795116][T17289] [ 872.184105][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 872.241730][ T58] usb 1-1: USB disconnect, device number 68 [ 872.440657][T17299] FAULT_INJECTION: forcing a failure. [ 872.440657][T17299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.455703][T17299] CPU: 1 UID: 0 PID: 17299 Comm: syz.4.2882 Not tainted syzkaller #0 PREEMPT(full) [ 872.455731][T17299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 872.455745][T17299] Call Trace: [ 872.455753][T17299] [ 872.455762][T17299] dump_stack_lvl+0x189/0x250 [ 872.455788][T17299] ? __pfx____ratelimit+0x10/0x10 [ 872.455812][T17299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.455833][T17299] ? __pfx__printk+0x10/0x10 [ 872.455873][T17299] should_fail_ex+0x414/0x560 [ 872.455902][T17299] _copy_from_user+0x2d/0xb0 [ 872.455924][T17299] copy_from_sockptr_offset+0x66/0xa0 [ 872.455952][T17299] do_ipt_set_ctl+0x8ae/0xcd0 [ 872.455979][T17299] ? rcu_is_watching+0x15/0xb0 [ 872.456003][T17299] ? trace_contention_end+0x39/0x120 [ 872.456027][T17299] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 872.456075][T17299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 872.456105][T17299] ? __pfx___mutex_lock+0x10/0x10 [ 872.456142][T17299] nf_setsockopt+0x26c/0x290 [ 872.456170][T17299] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 872.456203][T17299] smc_setsockopt+0x232/0xab0 [ 872.456235][T17299] ? __pfx_smc_setsockopt+0x10/0x10 [ 872.456259][T17299] ? aa_sock_opt_perm+0xff/0x1b0 [ 872.456290][T17299] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 872.456309][T17299] ? __pfx_smc_setsockopt+0x10/0x10 [ 872.456335][T17299] do_sock_setsockopt+0x179/0x1b0 [ 872.456363][T17299] __x64_sys_setsockopt+0x13f/0x1b0 [ 872.456391][T17299] do_syscall_64+0xfa/0xfa0 [ 872.456414][T17299] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.456437][T17299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.456457][T17299] ? clear_bhb_loop+0x60/0xb0 [ 872.456482][T17299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.456502][T17299] RIP: 0033:0x7ff3a058eec9 [ 872.456519][T17299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.456537][T17299] RSP: 002b:00007ff3a14e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 872.456560][T17299] RAX: ffffffffffffffda RBX: 00007ff3a07e5fa0 RCX: 00007ff3a058eec9 [ 872.456575][T17299] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 872.456588][T17299] RBP: 00007ff3a14e8090 R08: 0000000000000258 R09: 0000000000000000 [ 872.456602][T17299] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 872.456614][T17299] R13: 00007ff3a07e6038 R14: 00007ff3a07e5fa0 R15: 00007ff3a090fa28 [ 872.456649][T17299] [ 872.700189][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 872.770979][ T9] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 872.788257][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 872.797127][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 872.806815][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 872.815271][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 872.825460][ T9] usb 4-1: config 0 has no interface number 0 [ 872.857256][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 872.868773][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 872.879033][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 872.921796][ T9] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.935467][ T9] usb 4-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 872.986753][ T58] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 873.002069][ T9] usb 4-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 873.023582][ T9] usb 4-1: config 0 interface 125 has no altsetting 0 [ 873.030753][ T9] usb 4-1: config 0 interface 125 has no altsetting 2 [ 873.077236][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 873.086529][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.094706][ T9] usb 4-1: Product: syz [ 873.099118][ T9] usb 4-1: Manufacturer: syz [ 873.103965][ T9] usb 4-1: SerialNumber: syz [ 873.116682][ T9] usb 4-1: config 0 descriptor?? [ 873.124229][ T9] usb 4-1: selecting invalid altsetting 2 [ 873.303294][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 873.322310][ T58] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 873.461975][ T58] usb 1-1: config 0 has no interface number 0 [ 873.555802][ T58] usb 1-1: config 0 interface 12 has no altsetting 0 [ 873.567747][ C0] usb 4-1: async_complete: urb error -71 [ 873.573489][ C0] usb 4-1: async_complete: urb error -71 [ 873.579168][ C0] usb 4-1: async_complete: urb error -71 [ 873.584826][ C0] usb 4-1: async_complete: urb error -71 [ 873.591762][ T58] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 873.596467][ T9] get_1284_register: usb error -71 [ 873.619986][ T9] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 873.620457][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.643021][ T9] usb 4-1: USB disconnect, device number 76 [ 873.654386][ T58] usb 1-1: Product: syz [ 873.662218][ T58] usb 1-1: Manufacturer: syz [ 873.957914][ T58] usb 1-1: SerialNumber: syz [ 874.521070][ T58] usb 1-1: config 0 descriptor?? [ 874.534488][ T58] f81534 1-1:0.12: required endpoints missing [ 875.492717][ T58] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 875.764811][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 875.813110][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 875.933414][ T58] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 876.134873][ T24] usb 3-1: device descriptor read/64, error -71 [ 876.147586][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.255812][ T5921] usb 1-1: USB disconnect, device number 69 [ 876.295453][ T58] usb 4-1: Product: syz [ 876.299654][ T58] usb 4-1: Manufacturer: syz [ 876.399324][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 876.434815][ T58] usb 4-1: SerialNumber: syz [ 876.448840][ T58] r8152-cfgselector 4-1: Unknown version 0x0000 [ 876.455413][ T58] r8152-cfgselector 4-1: config 0 descriptor?? [ 876.573386][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 876.626973][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 876.652233][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.671654][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 876.701689][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 876.723559][ T24] usb 3-1: device descriptor read/64, error -71 [ 876.731759][ T9] usb 6-1: Manufacturer: syz [ 876.787813][ T9] usb 6-1: config 0 descriptor?? [ 876.842410][ T24] usb usb3-port1: attempt power cycle [ 877.213323][T17348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.232705][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 877.262961][T17348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.279767][ T10] usb 6-1: USB disconnect, device number 13 [ 877.338605][ T5921] r8152-cfgselector 4-1: USB disconnect, device number 77 [ 877.351285][ T24] usb 3-1: device descriptor read/8, error -71 [ 877.494593][T17358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2896'. [ 877.612701][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 877.643408][ T24] usb 3-1: device descriptor read/8, error -71 [ 877.753783][ T24] usb usb3-port1: unable to enumerate USB device [ 877.807894][ T30] audit: type=1326 audit(1759948986.209:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe38eec9 code=0x7fc00000 [ 878.178066][T13475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 878.190866][T13475] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 878.200109][T13475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 878.209486][T13475] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 878.220003][T13475] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 878.242719][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 878.250239][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 878.259130][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 878.269855][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 878.293910][ T89] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 878.298902][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 878.505347][ T89] usb 6-1: Using ep0 maxpacket: 16 [ 878.520871][ T89] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 878.524503][T17175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.536647][ T89] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 878.557544][ T89] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 878.566970][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.577226][ T89] usb 6-1: Product: syz [ 878.581450][ T89] usb 6-1: Manufacturer: syz [ 878.586310][ T89] usb 6-1: SerialNumber: syz [ 878.598174][ T89] usb 6-1: config 0 descriptor?? [ 878.611479][ T89] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 878.632854][ T9] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 878.640452][ T89] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 878.660645][T17175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.712122][T17376] chnl_net:caif_netlink_parms(): no params data found [ 878.756006][T17175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.798540][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 878.812210][ T9] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 878.820949][ T9] usb 1-1: config 95 has no interface number 0 [ 878.827315][ T9] usb 1-1: config 95 interface 1 has no altsetting 0 [ 878.838068][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 878.847599][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.850619][T17175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.855648][ T9] usb 1-1: Product: syz [ 878.855665][ T9] usb 1-1: Manufacturer: syz [ 878.855681][ T9] usb 1-1: SerialNumber: syz [ 878.862740][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 878.924758][T17376] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.932066][T17376] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.940722][T17376] bridge_slave_0: entered allmulticast mode [ 878.953077][T17376] bridge_slave_0: entered promiscuous mode [ 878.962171][T17376] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.970479][T17376] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.978347][T17376] bridge_slave_1: entered allmulticast mode [ 878.986239][T17376] bridge_slave_1: entered promiscuous mode [ 879.031159][T17376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.032707][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 879.050166][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 879.051214][T17376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.072581][ T9] usb 1-1: USB disconnect, device number 70 [ 879.083235][ T10] usb 3-1: config 0 has no interface number 0 [ 879.093974][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 879.107510][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 879.123815][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.135532][ T10] usb 3-1: Product: syz [ 879.145259][ T10] usb 3-1: Manufacturer: syz [ 879.158660][ T10] usb 3-1: SerialNumber: syz [ 879.184499][ T10] usb 3-1: config 0 descriptor?? [ 879.211002][ T10] f81534 3-1:0.12: required endpoints missing [ 879.228051][ T89] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 879.235434][ T89] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 879.301792][T17376] team0: Port device team_slave_0 added [ 879.373859][T17376] team0: Port device team_slave_1 added [ 879.432915][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 879.552181][T17376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.560314][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.586765][T17376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.599548][T17376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.607557][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.610698][ T24] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 879.633949][T17376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.656922][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.669395][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 879.679308][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 879.688468][ T24] usb 4-1: SerialNumber: syz [ 879.702402][T17175] bridge_slave_1: left allmulticast mode [ 879.708452][T17175] bridge_slave_1: left promiscuous mode [ 879.716152][T17175] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.726736][T17175] bridge_slave_0: left allmulticast mode [ 879.732409][T17175] bridge_slave_0: left promiscuous mode [ 879.738604][T17175] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.863341][ T89] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 879.870963][ T89] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 879.891554][ T89] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 879.900619][ T89] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 879.913576][ T89] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 880.222792][ T6107] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 880.322974][T13475] Bluetooth: hci4: command tx timeout [ 880.372771][ T89] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 880.437141][ T6107] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 880.450524][ T89] usb 6-1: USB disconnect, device number 14 [ 880.483174][ T6107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.516562][ T6107] usb 1-1: config 0 descriptor?? [ 880.637554][ T10] usb 3-1: USB disconnect, device number 82 [ 880.758882][T17175] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 881.006276][T17175] dvmrp0 (unregistering): left allmulticast mode [ 881.559619][T17175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.588012][T17175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.600368][T17175] bond0 (unregistering): Released all slaves [ 881.613007][ T5921] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 881.625291][T17175] bond1 (unregistering): Released all slaves [ 881.645668][T17175] bond2 (unregistering): Released all slaves [ 881.747881][ T6107] usb 1-1: Cannot set MAC address [ 881.760254][ T6107] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 881.806199][ T6107] usb 1-1: USB disconnect, device number 71 [ 881.895986][ T5921] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 881.930052][ T5921] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 881.995752][T17376] hsr_slave_0: entered promiscuous mode [ 882.007285][T17376] hsr_slave_1: entered promiscuous mode [ 882.012325][ T5921] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 882.058195][ T24] usb 4-1: cannot find UAC_HEADER [ 882.068734][ T5921] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 882.072192][T17376] debugfs: 'hsr0' already exists in 'hsr' [ 882.112751][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.120853][T17376] Cannot create hsr debugfs directory [ 882.145631][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 882.165156][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 882.215837][ T5921] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 882.292224][ T5921] usb 6-1: invalid MIDI out EP 0 [ 882.300169][ T24] usb 4-1: USB disconnect, device number 78 [ 882.364472][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 882.381517][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.394671][ T9074] udevd[9074]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.412047][T13475] Bluetooth: hci4: command tx timeout [ 882.444053][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 882.488346][ T5921] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 882.526729][T17409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.537374][T17409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.551487][T17409] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2910'. [ 882.574106][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 882.581205][ T9075] udevd[9075]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.617070][ T9] usb 3-1: Manufacturer: syz [ 882.650484][ T9] usb 3-1: config 0 descriptor?? [ 882.676284][T17419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2913'. [ 882.722965][T17420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2913'. [ 882.732061][T17419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2913'. [ 882.741241][T17409] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 882.743682][T17420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2913'. [ 882.752085][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 882.762087][T17419] netlink: 4260 bytes leftover after parsing attributes in process `syz.0.2913'. [ 882.781653][T17419] openvswitch: netlink: Message has 7 unknown bytes. [ 882.834914][T17175] hsr_slave_0: left promiscuous mode [ 882.848615][T17175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.863751][T17175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.880966][T17411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.890644][T17175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.898999][T17411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.911672][T17175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.923627][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 882.931132][ T89] usb 3-1: USB disconnect, device number 83 [ 882.944448][T17175] batman_adv: batadv0: Removing interface: ipvlan2 [ 882.951237][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 882.971001][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.990445][ T24] usb 4-1: Product: syz [ 883.029924][ T24] usb 4-1: Manufacturer: syz [ 883.035132][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 883.063026][ T24] usb 4-1: SerialNumber: syz [ 883.068437][T17175] veth1_macvtap: left promiscuous mode [ 883.094575][T17175] veth0_macvtap: left promiscuous mode [ 883.105223][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 883.116903][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 883.124425][T17175] veth1_vlan: left promiscuous mode [ 883.145571][T17175] veth0_vlan: left promiscuous mode [ 883.199495][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 883.214094][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.224304][ T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 883.288288][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 883.313754][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 883.352361][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.424193][ T9] usb 1-1: config 0 descriptor?? [ 883.494586][T17175] team0 (unregistering): Port device batadv1 removed [ 883.655951][T17175] pim6reg (unregistering): left allmulticast mode [ 883.807850][ T30] audit: type=1326 audit(1759948992.209:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe38eec9 code=0x7fc00000 [ 883.853986][ T6107] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 883.880642][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 883.887404][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 883.908232][ T9] usb 1-1: USB disconnect, device number 72 [ 883.992733][ T6107] usb 3-1: device descriptor read/64, error -71 [ 884.118013][T17175] team0 (unregistering): Port device team_slave_1 removed [ 884.152997][T17175] team0 (unregistering): Port device team_slave_0 removed [ 884.246293][ T6107] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 884.382830][ T6107] usb 3-1: device descriptor read/64, error -71 [ 884.439368][T17437] program syz.0.2915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 884.482999][T13475] Bluetooth: hci4: command tx timeout [ 884.493374][ T6107] usb usb3-port1: attempt power cycle [ 884.558094][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 884.781786][ T5906] usb 6-1: USB disconnect, device number 15 [ 884.854640][ T6107] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 884.892316][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2918'. [ 884.908888][ T6107] usb 3-1: device descriptor read/8, error -71 [ 884.974579][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 885.163139][ T6107] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 885.172798][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 885.182519][ T30] audit: type=1326 audit(1759948993.569:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0fe32af79 code=0x7fc00000 [ 885.213135][T17376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 885.223385][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 885.231478][ T9] usb 1-1: config 0 has no interface number 0 [ 885.243316][ T6107] usb 3-1: device descriptor read/8, error -71 [ 885.246566][T17376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 885.249539][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 885.277640][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 885.286071][T17376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 885.292677][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.301342][ T9] usb 1-1: Product: syz [ 885.314324][ T9] usb 1-1: Manufacturer: syz [ 885.318939][ T9] usb 1-1: SerialNumber: syz [ 885.328856][ T24] r8152-cfgselector 4-1: USB disconnect, device number 79 [ 885.342036][T17376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 885.348058][ T9] usb 1-1: config 0 descriptor?? [ 885.362215][ T6107] usb usb3-port1: unable to enumerate USB device [ 885.394249][ T9] f81534 1-1:0.12: required endpoints missing [ 885.606893][T17175] IPVS: stop unused estimator thread 0... [ 885.620036][T17376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.653298][T17175] ------------[ cut here ]------------ [ 885.659146][T17175] WARNING: CPU: 1 PID: 17175 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 885.669011][T17175] Modules linked in: [ 885.673376][T17175] CPU: 1 UID: 0 PID: 17175 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 885.683019][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 885.693143][T17175] Workqueue: netns cleanup_net [ 885.697928][T17175] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 885.703565][T17175] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 6b 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 69 5b 14 f8 e8 04 cd ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f6 cc ce f7 90 0f 0b 90 e9 60 fe ff ff [ 885.724285][T17175] RSP: 0018:ffffc9000bfef878 EFLAGS: 00010293 [ 885.730372][T17175] RAX: ffffffff89f0c6fc RBX: ffff888031bb8000 RCX: ffff8880324bbc80 [ 885.738671][T17175] RDX: 0000000000000000 RSI: ffffffff8d9d14a1 RDI: ffff8880324bbc80 [ 885.747093][T17175] RBP: ffffc9000bfef990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 885.753161][T17376] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.755701][T17175] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da5c0 [ 885.769720][T17175] R13: 1ffff920017fdf3c R14: ffff888031bb94c0 R15: dffffc0000000000 [ 885.777783][T17175] FS: 0000000000000000(0000) GS:ffff888125e12000(0000) knlGS:0000000000000000 [ 885.786776][T17175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.793456][T17175] CR2: 000000110c45e008 CR3: 0000000025ba2000 CR4: 00000000003526f0 [ 885.801439][T17175] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000080 [ 885.806179][T17170] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.809469][T17175] DR3: 000000000f000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 885.816611][T17170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.824538][T17175] Call Trace: [ 885.835052][T17175] [ 885.838002][T17175] xfrm_net_exit+0x2d/0x70 [ 885.842440][T17175] ops_undo_list+0x49a/0x990 [ 885.847168][T17175] ? __pfx_ops_undo_list+0x10/0x10 [ 885.852298][T17175] ? do_raw_spin_unlock+0x122/0x240 [ 885.857581][T17175] cleanup_net+0x4d8/0x820 [ 885.862016][T17175] ? __pfx_cleanup_net+0x10/0x10 [ 885.867072][T17175] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.875285][T17175] ? process_scheduled_works+0x9ef/0x17b0 [ 885.881036][T17175] ? process_scheduled_works+0x9ef/0x17b0 [ 885.886874][T17175] process_scheduled_works+0xae1/0x17b0 [ 885.892461][T17175] ? __pfx_process_scheduled_works+0x10/0x10 [ 885.898536][T17175] worker_thread+0x8a0/0xda0 [ 885.903190][T17175] kthread+0x711/0x8a0 [ 885.907276][T17175] ? __pfx_worker_thread+0x10/0x10 [ 885.912397][T17175] ? __pfx_kthread+0x10/0x10 [ 885.917034][T17175] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.922246][T17175] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.927971][T17175] ? __pfx_kthread+0x10/0x10 [ 885.932588][T17175] ret_from_fork+0x4bc/0x870 [ 885.937322][T17175] ? __pfx_ret_from_fork+0x10/0x10 [ 885.942448][T17175] ? __switch_to_asm+0x39/0x70 [ 885.947271][T17175] ? __switch_to_asm+0x33/0x70 [ 885.952043][T17175] ? __pfx_kthread+0x10/0x10 [ 885.956742][T17175] ret_from_fork_asm+0x1a/0x30 [ 885.961537][T17175] [ 885.964617][T17175] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 885.971900][T17175] CPU: 1 UID: 0 PID: 17175 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 885.981445][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 885.991504][T17175] Workqueue: netns cleanup_net [ 885.996277][T17175] Call Trace: [ 885.999555][T17175] [ 886.002492][T17175] dump_stack_lvl+0x99/0x250 [ 886.007092][T17175] ? __asan_memcpy+0x40/0x70 [ 886.011697][T17175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.016901][T17175] ? __pfx__printk+0x10/0x10 [ 886.021507][T17175] vpanic+0x237/0x6d0 [ 886.025490][T17175] ? __pfx_vpanic+0x10/0x10 [ 886.030000][T17175] panic+0xb9/0xc0 [ 886.033719][T17175] ? __pfx_panic+0x10/0x10 [ 886.038144][T17175] __warn+0x31b/0x4b0 [ 886.042119][T17175] ? xfrm_state_fini+0x26d/0x2f0 [ 886.047053][T17175] ? xfrm_state_fini+0x26d/0x2f0 [ 886.051982][T17175] report_bug+0x2be/0x4f0 [ 886.056302][T17175] ? xfrm_state_fini+0x26d/0x2f0 [ 886.061314][T17175] ? xfrm_state_fini+0x26d/0x2f0 [ 886.066261][T17175] ? xfrm_state_fini+0x26f/0x2f0 [ 886.071196][T17175] handle_bug+0x84/0x160 [ 886.075446][T17175] exc_invalid_op+0x1a/0x50 [ 886.079956][T17175] asm_exc_invalid_op+0x1a/0x20 [ 886.084797][T17175] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 886.090343][T17175] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 6b 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 69 5b 14 f8 e8 04 cd ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f6 cc ce f7 90 0f 0b 90 e9 60 fe ff ff [ 886.109943][T17175] RSP: 0018:ffffc9000bfef878 EFLAGS: 00010293 [ 886.116005][T17175] RAX: ffffffff89f0c6fc RBX: ffff888031bb8000 RCX: ffff8880324bbc80 [ 886.123972][T17175] RDX: 0000000000000000 RSI: ffffffff8d9d14a1 RDI: ffff8880324bbc80 [ 886.131933][T17175] RBP: ffffc9000bfef990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 886.139894][T17175] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da5c0 [ 886.147858][T17175] R13: 1ffff920017fdf3c R14: ffff888031bb94c0 R15: dffffc0000000000 [ 886.155827][T17175] ? xfrm_state_fini+0x26c/0x2f0 [ 886.160765][T17175] ? xfrm_state_fini+0x26c/0x2f0 [ 886.165698][T17175] xfrm_net_exit+0x2d/0x70 [ 886.170110][T17175] ops_undo_list+0x49a/0x990 [ 886.174697][T17175] ? __pfx_ops_undo_list+0x10/0x10 [ 886.179802][T17175] ? do_raw_spin_unlock+0x122/0x240 [ 886.184998][T17175] cleanup_net+0x4d8/0x820 [ 886.189405][T17175] ? __pfx_cleanup_net+0x10/0x10 [ 886.194340][T17175] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.199526][T17175] ? process_scheduled_works+0x9ef/0x17b0 [ 886.205237][T17175] ? process_scheduled_works+0x9ef/0x17b0 [ 886.210945][T17175] process_scheduled_works+0xae1/0x17b0 [ 886.216507][T17175] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.222495][T17175] worker_thread+0x8a0/0xda0 [ 886.227098][T17175] kthread+0x711/0x8a0 [ 886.231165][T17175] ? __pfx_worker_thread+0x10/0x10 [ 886.236268][T17175] ? __pfx_kthread+0x10/0x10 [ 886.240856][T17175] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.246045][T17175] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.251234][T17175] ? __pfx_kthread+0x10/0x10 [ 886.255821][T17175] ret_from_fork+0x4bc/0x870 [ 886.260405][T17175] ? __pfx_ret_from_fork+0x10/0x10 [ 886.265515][T17175] ? __switch_to_asm+0x39/0x70 [ 886.270269][T17175] ? __switch_to_asm+0x33/0x70 [ 886.275021][T17175] ? __pfx_kthread+0x10/0x10 [ 886.279607][T17175] ret_from_fork_asm+0x1a/0x30 [ 886.284381][T17175] [ 886.287647][T17175] Kernel Offset: disabled [ 886.291954][T17175] Rebooting in 86400 seconds..