last executing test programs: 24m44.947378048s ago: executing program 0 (id=2857): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f000020c000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (fail_nth: 1) 24m44.163146089s ago: executing program 0 (id=2859): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001e3030000000000040001000000000600000000002000020000000000000000"], 0x1c, 0x2) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x28) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @empty, 0x5}, 0x1c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480), &(0x7f00000004c0)=0x8) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x8cee000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) landlock_restrict_self(r4, 0xe) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r3, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002140)="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", 0x1000}], 0x1}}], 0x1, 0x8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000b1e000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 24m43.766245024s ago: executing program 0 (id=2865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000140)={&(0x7f00000000c0)="0ca9", 0x2}, 0x1, 0xfe00, 0x0, 0x4000084}, 0x20048015) 24m42.706061525s ago: executing program 0 (id=2872): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x19c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x453}, @TCA_TBF_PRATE64={0xc, 0x5, 0x4f8dfa2b2779772}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004864}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) sendto$inet6(r2, &(0x7f0000001680)="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", 0x1000, 0x800, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x40000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x62) 24m40.984396989s ago: executing program 0 (id=2874): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000540)="ab2d3e76ac797a4cd8b70919b61eb5d07a1890cf6ff523fd85841332495b6351d971a785d06b7a625f0b886b772fe361b30f68bdf17635f8b23a3fb8311c482a9f90be4520ae09b98c9ee1dc1ec35b16096879fab7c40b5deaf2030940041b9742de58591dc288503c5ef8d2334710953161728142b1e25aa4afa272cc5913be1ac6a3159e827422e3bd3ba2370f800091a2fab6c4ee038913c004391711097e6a7b57c458f20950b85b72a102f98b31a475135dd7439e5d51b2", 0xba}], 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xfffff800, 0x8001, 0xfffffef6, 0xca, 0x7, "5eb6f000040000007c00", 0x5f9, 0xfffffffd}) 24m40.300046516s ago: executing program 0 (id=2877): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) socket(0x1000000000000010, 0x80802, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf25020000000000000510000000050016002c000000d34513539afc0826d8d8b368e8ababbfe02dfa29a00418b9d01ef21c267e7226a0680367bc799790e642229a774dc397f54a9cfce77d30892988f0daf3bc77f295bc7ec73aa92439fa58f0c248535543f2e1a5aeda4177"], 0x24}}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002200)='statm\x00') 24m39.448294709s ago: executing program 32 (id=2877): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) socket(0x1000000000000010, 0x80802, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf25020000000000000510000000050016002c000000d34513539afc0826d8d8b368e8ababbfe02dfa29a00418b9d01ef21c267e7226a0680367bc799790e642229a774dc397f54a9cfce77d30892988f0daf3bc77f295bc7ec73aa92439fa58f0c248535543f2e1a5aeda4177"], 0x24}}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002200)='statm\x00') 21m18.368919012s ago: executing program 2 (id=3498): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x2000000) 21m18.118250431s ago: executing program 2 (id=3500): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x3d) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xb65, 0x0, 0x4}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x24002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x142440}) ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f0000000140)={0x9, 0x1, 0x0, 0x7, 0x5, 0xe36, 0x8, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea26000000010902120001000000000904"], 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000500)=[{0x1000, 0x1, 0x2, &(0x7f0000000100)="39d7"}], 0x1}) syz_usb_connect$cdc_ecm(0x4, 0x120, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x1, 0x1, 0x3, 0xc0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "e54150"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xc5, 0xffff, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x70, 0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x401}, @country_functional={0x12, 0x24, 0x7, 0x81, 0x401, [0x70de, 0x48, 0xd, 0x7ef, 0x4, 0x2]}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0x83, 0xa, 0x5}, @mdlm_detail={0x95, 0x24, 0x13, 0x2, "5a29d6feb6f0036539036cceaacc1810b2e0740d8d488051773f4324b7164a6860a5c31c343a1f0e2ad8abe7134cced2e9a19d2810f94110df5bace5bfb9c55db37359ce6ea79cc93cbdaf906d21167eda8cfce9ef573f7fe59b841548d5ce142f9a4e988c6fae40452929f84c4675b1f988c4123edbfeadfbde9f7864379817ee15a0f2349378e3db905e65c74a443a33"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x85}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x0, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xe, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x8, 0x10}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x9, 0x6, 0xe, 0x8, 0x10}, 0x48, &(0x7f0000000380)={0x5, 0xf, 0x48, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xab, 0x0, 0xd03b, 0x0, 0x1ff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7c, 0xfb, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1c0, 0x5, 0x4, 0xc313, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xd3, "e65f472a92fee2228248619e5d1e82f7"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x8, 0x3}]}, 0x2, [{0xe4, &(0x7f0000000400)=@string={0xe4, 0x3, "3ebcfa9c21d0728c1d0417b374970acf59cb954de6657c6b7aef4d4064b2fb5554cf64a40bb4add692d2e92ac349c341f8676f032ecad130f9b80312d5891e2e6ff64faf39d3d39cfb71fa65c86cac0ab4dacecf2c70b99e3ae6551e08a5e5b707bb5224681a5719502d11974d2f7bcf64937e311a0c1694ba5d3722e5f094adc7ab4753994c05465e3367e0690ac2ef555ac91bbdc8d121267cefb6c1a1d1b9f4728f39ff754f2f1f96d156e1946b07c76e9b0f3b856f336336a6964bdb32b6b42b2742a99cf86b8ec535c59daa21df462e6644e200"/226}}, {0xb2, &(0x7f0000000540)=@string={0xb2, 0x3, "9778fbedf6abf2a59257036734b6d25df5727e310ff43ff5d6d961989d631d8185ec6d3c61decc01a42dcf1b60636b15acc0b5e90543bb6bedd343db458552789f59b572d793028844263d23321299b18e85d03579d4de01a57ddb17678ece48882ad1fa7e60afb8fa20b52b7206495ed4ca38d0970ba5b7852c0911b2490edcacdda280290373c5c7a7d9e10fd48c6006438b571a966a8b6c63e6cddc2bc68f09406a40344095679260d46358bbcc44"}}]}) 21m16.892302808s ago: executing program 2 (id=3508): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="cb335197c844031c7b743b1dd360d7861c64e5f9de3f81db1b", 0x19}], 0x1, 0x8, 0x3) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x5, 0x7, 0x5, 0x3, 0x0, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x68a, 0x101, 0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 21m16.81717184s ago: executing program 2 (id=3509): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a32000000000500040000000000050005030000000000000000686173683a69702c706f72742c69700014000780080006000000000008001340fffffffc0500010007000000"], 0x60}}, 0x20000000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1010010, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c004491ed68326525e56c73516e1655aaca020065f4b1d944d1273646177fbdf8c34118100b05cdf4c8459942fdc33ecd940969e709e40422235a71bb0185217a8f5aa793bd30e1d706c55d1e731f976d6669020587ee4a061bd5253892e0089b1c770f105067aa3ba0b0bcf6cff82e4eef4b4dd8954e7accf06e017cecda868cf0324b9ca937c6381ae06bfbdef1ea64b027d8010079a357d322cb7dc841afec43dee79d697f4c30ae1e3fd69c2d569d7a3df04bdda165a851166788ee6bfdd7d99e2ad8393a45e3c98ea814e2b2c5cf08f93259f8dada239d147af454cb53c2458991a21f485f9c3337ee3170e5de684227d3a467be7b"]) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r4, 0x891a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x6, r1, 0x0}]) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21m16.574501954s ago: executing program 2 (id=3510): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x7, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000300)={r1, r2, r3, 0xc89f, 0x8, 0x7, 0x9, 0x101, 0x7fff, 0x1000, 0x6, 0x30000000}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 21m16.227370857s ago: executing program 2 (id=3513): socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) close(r1) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x1000000, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg(r2, &(0x7f0000001a40)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random="18046b1c71bd", 'syzkaller0\x00'}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000003c0)="d7cb076c1f752269aaf34716323456b31908a4b54bf881cb636dd9f93a0a7f7908d31fd050d1db894e631ed6437b5fabbb1d58d3c897c6c2c03e4e825b8a5cf08a062f7977b6b511e6354be78406fbe0f4a7db8d0971a7d172cb2ed71c450ecaa43bc88d3060302c0ff10c9891fa", 0x6e}, {&(0x7f0000000940)="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", 0x1000}], 0x2, &(0x7f0000001980)=[{0xa0, 0x3a, 0x1, "39f018882348d749e6072762ea1ed2b935fafee84ba913d515c4605ac4fe133f61ec0a12757883be8ababe2429e8c148b05e67b0565d29dbe3afffa75096e699453f2c7e821846880f1009bca86d961d32f8fdf0f41fa32e3535a4bd4feac790c50d67becb891af0430ab1cca3486635b1567fcd605ce585830074aba6477b181e01bc0c5c47fe0f01100caf2554bb8df94db5c0"}], 0xa0}, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) symlink(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='./cgroup/file0\x00') syz_emit_ethernet(0x52, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd604dc58c001c8b00fe800000000001000000002600"], 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x2, 0x651, 0x12c8000000000000, 0x8000009655, 0x225c17d03, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d09, 0x3, 0x9}) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088b1}, 0x440088c4) 21m15.767002366s ago: executing program 33 (id=3513): socket(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) close(r1) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x1000000, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg(r2, &(0x7f0000001a40)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random="18046b1c71bd", 'syzkaller0\x00'}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000003c0)="d7cb076c1f752269aaf34716323456b31908a4b54bf881cb636dd9f93a0a7f7908d31fd050d1db894e631ed6437b5fabbb1d58d3c897c6c2c03e4e825b8a5cf08a062f7977b6b511e6354be78406fbe0f4a7db8d0971a7d172cb2ed71c450ecaa43bc88d3060302c0ff10c9891fa", 0x6e}, {&(0x7f0000000940)="60a7b884675e3b36e75c01e28b5778d03d770a949711a363fb6f216c78d55289b46d9715f0cbd01f703a0cc38f67ca13e42fbfed23d4399bde77fa7154a7abb2cdb574b493bb55a32446baade7efaa250f226f7ad13b88ae55143ddb2175b25ce2f0a3b709a14757af968ad6026e02429e4c411d5aaa5da4b27ccd904238244aa96ff3b042c9904bb8fa81863523af8e2634bd701851aada659e4d2cfce70622f919980c3b207a1e265c91dc2b1b7cb487af21fd0cf8ff852e2b12249d6ace298d1a5c1eb4bbb3164ef579aeb3c016e5fe71fdd676d359ac8c3446c72ec2bf03a88a181533dbbb7906508098d852f312b2c7e0fdd15dabef2f59ae9370cf7eb54efec1ae4a1fceab9d9868ad78346f60e56931788f36eea160ecac452fe5c9f57a07629a1e22f08ca7c963ca611f705020a74947bf81128e582ac6eced9aa66ce0a962544fa72d259372e8849705a60d1e606230e31b8dbcdc2aa0f7303942aba24aabc4466b9a21fde36359b34982d9fc5299948ea90a2c04a158f195075099b7b330955db735908fe5184001be524ab2d0b3bf390665c775a09374ebfdc9fd5b7c6d846e1e729af64c3007de6da92d0efaf23b5fd1f0372ee19b8365f45eda8656431b3ce8941565bdce788c3615e17d3c5fede67fa27ce422b5aad505b8b475298a02419344160fec06ee0a9d998b0b14a98d389c85afc11c83b5ef8c6cfcb66713d87f9dc119c92893b913e9d852d51f4f9289d46d32ca74dbe40c23ef8db9b931c93f52f62cf0e34836a22070d025f37f1850300826d78e4e69c54113172baeb0bbee91f3debd2f460bfab73fe2356edac3847bb61f322b03e366e14006b4d6e4c98e1f517518dd0d2b4ea90a8022acdf42d6e9cf95901e50db2f06d2364794688a605ec87a661064e758601a34c976a1546a9753130889576ce8ac701fff2685467a8fa98a0d304e7a649623d920caf73ec0f7ccc8af3328527d90c98b1eb1b2fbdca629a0cdb8b89ef16737fc27c7749ec59a8d4692334d10b0b081bf5170eda1b776ca5b7765a9ebce8594dfe83299a253ec6eaab55d1903d610bf93a5a320e4adb2bbac0b53f8aed06c40f3acd86420d17e22ef44dc4d3023e113656c313e034e3debbb2743228fa52308edfeb68fa89c98ff826136aa77f96124185a3d09b2f40ba90f76582727bbb953c6df0bab82189a8123376bc3b7db796d8ee1f61c25e2532653b79ad97c17d5422570e64f74ff7dc1b161c4233d11179f84878447fd64c775775ff4e9b1fb9f56f3de91db270c72ec21a52cfc5282ffccfbde2bcbf0fb97bce685f00eee728eba8e8061576961084b85b5ad277fb4a641c523cb8f3daa5a19c9ab128ddb9bff6ac5ddb84540a5e6d22e4226a94ea54201eeb0575dd155fa2a1d2bab734ece02fb348f042f26a71c3d40fc0ad995e89783f05b55b608c0c68664f7e564f7707f3ecd8d97df7fb69eeae98da7d65ea32e46c649f0f3a008659488ac1354d96739c391a2cb1f2482f0bacfdeddedf8955dd87e1689b8d13be1ae0e6f6725b41492ec2f2d03ca424f7aba6b2bf90d17b428b60a2df2e42a1fdab34a4bca24d6a1b4cb42ad3089a6fa4f86f0c8937fe6a00663fbdea2af8ec7f6aab195a9fbc55d81e8c478079d972d6ded4d06ae5daff30eb782a18e4ccab8ff50a951ec38f609c1e10169b9ee506bb1b6ef1289d474d0b2956f65642be688b37d6463c2d87528be276472030d662779f0a9e8fbeebde16e36b2594542a59e6e61393ea70e02aec076ca6551abc768a90d32a683175bfb3e22fb5a154baab651a74a704a853d2b0c71a3bb539477ff8d8e36981f37e2883a0a5c7e3f92bc26df3fb7a24646c8c5da2a6d8ebe8eb83a96ab26bbfa23058ae8f814018f6dd69a4d4b313487c8bb7d293cc0b0b02b0bbda98c636c886afbc5d32591d34ee878f40b26c6be24a8dd83f41b62e39212b5a942c9f82699fb48b8b51a3874ec33d7e3e50bad34eb222409a9f462b26e4a4c26c6790be73f21f427819a420182b991a2d77c64a52dd6196847d5968e4c1165643922881514a31470764fc2f886ded1a492056d8aeb05eb4a13d80555b4d92b634965df288600e98dc742afe9b900722d9cf0509ed1ade95d38611443356d4e188b8f07653bf990027bbc55f63142a75e25909223b5718aeab6cda25db27eacb202d75cf897c939e46dd2956e4a913ed218573a4925fbd2e1f3ffe714c48038a3f90d81de4c94eb0ac7c8dac5eb8fe4b365b3d7d12f48f108861c881931b615f3d88e473c0e1db153011a981667b9ecd1440d8349d17fdb7a04a1b329b2ce9e17dff5b46d94824b0ccabb6552d6331b1a3dca760b7b7362817b46bc049310b6c79db5e98a21e3b782e1270beb6b40852dd5d5e8730df3358614b1c745ccc4090b5d42a85eb2458a411e5103887277303f18846e533aeb45c83bb8fdf3812cd9212a83cd0009d1a5f2ad0fb6a70442a1220dfbfa89234c5d6b758bbbb686502ddf1be9f6fffb81a0f814ba02a39000254e6935e1f39e320252e47d260ee581ae581514a21cf729423c802532078898075f30663a1fd10cf2f70cd144987bb1b8b8c3c2403637e2dc4118a5592c57691ea605324c28ec4f43ac81912e2c71b3f78dc0975a5ae98b44302a81779d64db6c669a22fe92c14c48bec5a4d5ebaadeb87a607aa5a381b3081585601ff3bc6ef47e569797fab35d482636384923e08f6eb1c56486702e80fe4b7990484b716aab0313cfea7153dd61e1bea2d7bb1677fe2eba394171dd08b909aca584162e45b914312401cc0790c87f5d8135959b2820730911ab084e82a3fae2742de926580fbe2cd8b7b8232ddb4ee60fc125f25068689b19e339aa1773df05b78d3e6f17f3055c7f8f24d614e9e7cdab494fb5f5655f71f14af697b2a279a2a775acedb626415e829e8d21e2745514857ae6e0b3fb51c5108ec11fbb9aba3abbbafd99edde55a9136011e3213f14a22de98f99a682a9350c9887217c51be68d6885f6f18121d1d53ba0fcc7476fafdccde291c118e6f3ef71b965cfa31b6905a12207de9b1d1d19ac3cb9e5395fb156c75e473f412ee8cd875e38f9f670fef11fd35b2c442d3659d35b5b92088846801aa7901875d83915a0bf98e053062fb57b83e740349423c3e8212f1b983bdaa5fcf37e4cc5c9809e692964e529c933bc2d30bc9b6435d3e7f1c277bb0031f419f78c0fadc20ad741662d99cdaafbc75f1fa2c66777e3e3d848cf02de09e8791cdfd5a027823514704de426961560839d034bcc6e6347de4e04485e1dc7bde32a09af7d8c6d850c42c83a75ec7d52264cb2d7e2982d6094cbf9ab20e7d260f46f571414ec7cdfa3fa0135c92831954cfa5d1798fbff5ebde17ff36b924cf353b8ee56de01e712731bf6fb2390eb0f61f30d366c22371bfd57816eca34ef23d88d4f38ed135a2749412d0fbad7a95ada16e99cd4d919a1720d8016132d24ce8a11d3e6fe8aa52036bc0f71f41fd51b305df9f0f556eeef8a690eccd45d7c3f507d043631d2d7ea9bde2e103c6f9ce081eca528ba6d94ab330a0e146f39678d3cb84e6b49b386709c1c4f04ba779fb7db089eaea2aa6e0337c5e87b6b6febc6e5f4dad11a364a638777ff569f8e6e94a2d15e32b9fbc8d557649d0e5d332e0b3896e66cfe4e7593e8f8fe8930785d75d525f8ac050e88504287ce4a7d53916bc3126f11fcf92ea71222ff944ca815d2cc6d333e15842cc297acec5e9707c6be70019f4866ff41f67dd290d97e95c9e72dcb03bd224075fcfaad04d9194ae64c57c9916b41abe7436cf643936a73d082cf843d28c7cb08a4b88f523b31ced8f37db8afe3374d03bd023b96023de8491b5be297cad87fbc76f5726d0c493b7f84f7fe409bb20e3dd2cefc22648c7778d535019f0c04ccffe504381ad80575bf4e37594aec680b8c7d68ca58470e65aa668e5c9ba9879de0ccda6f77aa96c30fd637e5a02ec71882a728e875716bbe761b7c6178c2215eca7e376fa92e7237ca494a9fd4dc7f7fc55963b08df1f386fc51c755d7a3085274497bdabb663430ba519fcca20849d7095f91b8b55818185f68cae2c5358974ed028f6ae1f26256809eef9c42e365a7b94142d58102f4bc785a4b735d5bb6da472034721aeef74643ad11276a81499fc5724fb2e78ab596ad0c991a9184036f0c7c1f66a1747b3ce4c4e226a84205349aac9ec9b51b63736425fdcad048df269bb1ae823ef1a47aeb9cc44a3975dcbf922f92fc6d809d344ad177f534bcbde92a3b3a406aeca97bab5152744a8c2f5ef439362137c5bfbec0996520e61fc581bcfe8ae8d07b743324347852438a343cbe1778e9d17bba7bde303431d69575b5f81d1027b559ded7edd6888097baa4f939664c558fd59e0f184c25ffc89f3a142b085371c4ed2b5b14391a05b121568ed30065cadf75edd3f8855a2e7b44b2b7da41258a2410c803df456da5b3ef7bc3e8748a8ec18180d0eb23703ddf0cdf3e7d10a5dfe3de3612c7a0f131e04baa2c6e2019330b4b5754bc18c309c37f8fc1f0180a0e0d54de56f2602f083c9e8d22162eaf0efaee1c910fa1322564bdc6320732498b185c233a21d4378d134738212d09843f5bad976e620967d7f76bc652bc8ccc97c586db7370a29b19608668a53c87318de3c5607a0e6ae58f9d02572803bcb8886c699498a24e5205041d5cc93ecf3a10fb0e53cd5e7027102d1c09e0b3b399e5e62aa729f0d63e74dd88a3b398b719329c41d147ad12e8279c9c8794ee4d9e672d855b4d5d5fa560dc209ab68183c2abc8d342d5c19295a5bf48bf474bbd6fed656638fdba307b0a5d325d455ef339aafb8fdf3e1f5ba6e667d53e46321fe423ad33b95b2a25b3450a5e7ca487d0c123c1d76532748ef6c8d4e8ae1e75e9fad4a94f8c11a65be575121d46992191c0cf66257d3dcfcd42e43db6136a34959991016d449d3fef4d8508ca658f734a17ca8e0d089b847d4784d8ca117f51618baf1e52e3db0b7320d259310b9bc4fc4fb4128b1d788019cd3cad63e575114bedd2f26ef2454ee0918dc1a246e1c492767d93dfecf8ce9009224de343f88aed4169129f893f5a12ca508609db9c0046bff776835ef1fb68cb63318b71cdeec307742f35bd7ca90f9722a3bbfb7bce146ec63ced342bd6b2708b80a1a257b50c7ca3274d16770a39e4d93fe3857d6eb49741592fe2173dee7251afd2f855526f1aeef4ca57bd0497dc3e910cde77ac8e6563f94b42d19740157be44462a7acdb528610fd32797b9e94b7fa3b67812eeba4da4a97138497007a50b9c4c510ea571bf4e02e295c732d6306c3b989fbdebf145b22823e2fb0b02d1c81e7f8d2902919fba8c42fc03c75af37d082f67faf6aa486fa75a7afe3de8cf441e902fba3df0a5d08f0d21fe8af11f9db2a85fb93c04ae8c11f0001f67115f64b97d44e241e1d9ed9b70a0eccf62d1c69860471021f1cad06a9fdfb48c1fab1cc5c5c8818dcde758e4206cfa496822be99a20be551050eb498fbfcbd78e8f2424fae3ff28869ccb3fc175e66a28c784a8ed7ae116ef2d67b17b0a64f7215a11f539c43930f8aa8d7c0059d2ed6c634fda4396810c7ba1b720c61204dfecbf68db1891bcb53af592f9548890214cb0f1ac7f0ae42b7f871b6963d2f40c11444400b982a33e9ec91a408394cdc5020ad793171a241413f21774bf6c38a81a03dadc01ffcc0bb2d2c19eebdd58557405377b0e8c80b3614cebc30e06a45f334e84108", 0x1000}], 0x2, &(0x7f0000001980)=[{0xa0, 0x3a, 0x1, "39f018882348d749e6072762ea1ed2b935fafee84ba913d515c4605ac4fe133f61ec0a12757883be8ababe2429e8c148b05e67b0565d29dbe3afffa75096e699453f2c7e821846880f1009bca86d961d32f8fdf0f41fa32e3535a4bd4feac790c50d67becb891af0430ab1cca3486635b1567fcd605ce585830074aba6477b181e01bc0c5c47fe0f01100caf2554bb8df94db5c0"}], 0xa0}, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) symlink(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='./cgroup/file0\x00') syz_emit_ethernet(0x52, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd604dc58c001c8b00fe800000000001000000002600"], 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x2, 0x651, 0x12c8000000000000, 0x8000009655, 0x225c17d03, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d09, 0x3, 0x9}) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088b1}, 0x440088c4) 1m10.669044577s ago: executing program 1 (id=8616): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0xfffd, 0x4) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x9}], 0x1, 0x22, 0x0) 1m9.738163789s ago: executing program 1 (id=8620): r0 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x29, "121211f22a0cf8618cdb69cd54d2d88d76e6fbf58e2480ecf4aa766faf758925", 0x5, 0x40, 0x8, 0x7, 0x8, 0x2, 0x2, 0xe}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x0, @value=0x8000000000000001}) 1m9.635371843s ago: executing program 1 (id=8622): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x6000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x26}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_connect$cdc_ecm(0x3, 0x7f, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x7, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, '9'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xff, 0x40, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0xfffc, 0x5, 0x3, 0x3, 0x0, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x80}, @mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x2, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x4, 0x1c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x92, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xbb, 0x5, 0x6, 0x10}, 0x52, &(0x7f00000001c0)={0x5, 0xf, 0x52, 0x2, [@generic={0x46, 0x10, 0x4, "74371a30906d298d7a687a4720189623d28601f97381623eceb4a97f2e785f76732003b546631509ff65107da27b47931ea812f887fa6d97306ae173a1c2aca316ec2e"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x80e}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xa5572ab95a79d48d}}, {0x81, &(0x7f0000000300)=@string={0x81, 0x3, "dd505663cd1baa564aa3c984e26431c1a45d88c234258a95efd53c4d1998f5d93b25a601208fb93510ce5c005febbb457a116ef14d8fdda2e4ca0e49313823d383f938c8c63dd736c08f2ccc14c279fb8f3a60947fb7b3a44863e8f4ebfaf6a3170c62dd42b59ada83bd9df558b799851d68e4e080283ebe927ab692708702"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44f}}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='-\x00', 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="9c", 0x1}) r4 = socket$igmp(0x2, 0x3, 0x2) capset(0x0, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) close(0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x80000000, 0x0) ptrace(0x10, r5) r6 = syz_pidfd_open(r5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0xa000000c, 0x0) ptrace$cont(0x7, r5, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000500)=[{0x405, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}], 0x6}) 1m8.407168114s ago: executing program 1 (id=8626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close(0x3) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 1m8.349904933s ago: executing program 1 (id=8627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, r1, 0x36, 0x4}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, 0x0, 0x0) unshare(0x22020600) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000580), 0x4) 1m8.214277668s ago: executing program 1 (id=8628): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.848062883s ago: executing program 3 (id=8641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = userfaultfd(0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x4000000000, 0x800, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x4000, 0x3}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) rt_sigtimedwait(&(0x7f0000000080)={[0x7ff, 0xa7]}, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x3938700}, 0x8) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="a0", 0x1}], 0x1}}], 0x1, 0x24004cd1) 1m4.642164537s ago: executing program 3 (id=8642): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5ab33000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$netlink(0x10, 0x3, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x8080000, 0x31000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300090c000000000000000000000802000100000000000000000200000000030005006c00000002000000e000000100000000000000000100140003000000010015004e1f000003000600e6000e0002000000e00000090000000000000000"], 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001180)="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", 0x2000, &(0x7f00000084c0)={&(0x7f0000003180)={0x50, 0xfffffffffffffffe, 0xe742, {0x7, 0x2d, 0x40, 0x808c000, 0x6, 0xc, 0x800, 0x2, 0x0, 0x0, 0x10, 0xe}}, &(0x7f0000003200)={0x18, 0xffffffffffffffda, 0x1, {0x8}}, &(0x7f0000003240)={0x18, 0x0, 0x4, {0xe}}, &(0x7f0000003280)={0x18, 0x0, 0x400, {0x9}}, &(0x7f00000032c0)={0x18, 0x0, 0x7fffffff, {0x800}}, &(0x7f0000003340)={0x28, 0x0, 0x5c92, {{0x9b7, 0x48}}}, &(0x7f0000003380)={0x60, 0x0, 0x6, {{0x0, 0x2, 0x8, 0x4, 0x4, 0x3, 0x6, 0x437}}}, &(0x7f0000003400)={0x18, 0x0, 0xf3, {0x80}}, &(0x7f0000003440)={0x1a, 0x0, 0x5, {'encrypted\x00'}}, &(0x7f0000003480)={0x20, 0x0, 0x6, {0x0, 0x6}}, &(0x7f0000003600)={0x78, 0xb, 0x0, {0x0, 0x0, 0x0, {0x5, 0x8, 0x0, 0x2, 0x4, 0x6c, 0x10001, 0x6, 0xb7, 0x1000, 0x7, 0x0, 0x0, 0x50, 0xd}}}, &(0x7f0000005840)={0x90, 0x0, 0x36b, {0x6, 0x2, 0xfffffffffffffffe, 0x2, 0xb88e, 0x4, {0x0, 0x2, 0x2, 0x1, 0x6, 0x7, 0xa, 0x9, 0x4, 0x4000, 0x1403, 0x0, 0x0, 0x6, 0x5}}}, &(0x7f0000005900)={0xe8, 0x0, 0x81, [{0x4, 0x66f4, 0x6, 0x1, 'wlan1\x00'}, {0x3, 0x1, 0x4, 0x1, '6^@^'}, {0x3, 0x0, 0x5, 0x9, 'T@!@{'}, {0x4, 0xcb, 0xd, 0xa, 'hash:ip,mark\x00'}, {0x3, 0x7, 0x9, 0x6, '/dev/kvm\x00'}, {0x6, 0x0, 0xa, 0x7f, 'encrypted\x00'}]}, &(0x7f0000005f00)={0x338, 0x0, 0x9, [{{0x6, 0x0, 0x80000, 0x80000001, 0x2, 0xfffffff7, {0x2, 0x7, 0x6, 0x200, 0x4, 0x8001, 0x1, 0x6, 0x7, 0x1000, 0x1, 0x0, 0x0, 0x2}}, {0x4, 0xaa2, 0x5, 0xfffffff8, 'syz1\x00'}}, {{0x6, 0x1, 0x69cdb5fc, 0x8, 0x7, 0x3, {0x0, 0xff, 0x6, 0x6e5, 0x6, 0x81, 0x88, 0xddb5, 0x9, 0xa000, 0x1, 0x0, 0x0, 0xfffffffc}}, {0x0, 0x4, 0x2, 0x6, '[\x8f'}}, {{0x6, 0x1, 0x129, 0x8, 0x3, 0x0, {0x4, 0x6, 0x5, 0xe4d, 0x93, 0x7, 0x0, 0x7d, 0x0, 0x1000, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x8, 0x9, 0xff, '/dev/kvm\x00'}}, {{0x5, 0x0, 0x5, 0x2, 0xd, 0x8, {0x5, 0x3, 0x100000001, 0x72, 0x2, 0x2, 0x5, 0x6, 0xa, 0xa000, 0x7, 0x0, 0x0, 0x1, 0x6}}, {0x1, 0xb59, 0x2, 0xfff, '!@'}}, {{0x3, 0x3, 0x9, 0xffffffffffff48ed, 0x81, 0x1, {0x2, 0x3, 0x8, 0x0, 0x6, 0x6, 0xffff8000, 0x7, 0x29, 0x2000, 0x5, 0x0, 0xffffffffffffffff, 0xffff, 0x26d540f1}}, {0x0, 0x230, 0x3, 0xffffd6d0, '.]$'}}]}, &(0x7f0000008280)={0xa0, 0xfffffffffffffff5, 0x1, {{0x3, 0x3, 0x6, 0x5, 0x6, 0x6, {0x0, 0x7, 0x8, 0x8, 0x80000000, 0x5, 0x0, 0x5, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x16, 0x10001}}}}, &(0x7f0000008340)={0x20, 0xffffffffffffffda, 0xfffffffffffffff8, {0x7, 0x4, 0x401, 0x4}}, &(0x7f0000008380)={0x130, 0xfffffffffffffffe, 0x100000000, {0x6, 0x0, 0x0, '\x00', {0x800, 0x5, 0x3, 0x6, 0x0, 0x0, 0xa000, '\x00', 0x3, 0x7fff, 0x7, 0x1, {0x2, 0xb}, {0x100000000}, {0xc3, 0x3}, {0x5, 0x2}, 0x7f, 0x0, 0x6, 0x9}}}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 02000 '], 0x2d, 0xfffffffffffffff9) 1m3.258614055s ago: executing program 3 (id=8646): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_flags=0x1000}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x2, 0x9}}, 0x20) 1m2.053489969s ago: executing program 3 (id=8648): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x20000000, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x7fffffff, 0x8, 0x5, 0xb4, 0x5, 0x5, 0x2, 0x7e, 0x4, 0x3, 0x6, 0x84, 0x87}, {0x2, 0x0, 0xb4, 0xff, 0x5, 0x9, 0x92, 0xfc, 0x5, 0xb, 0xc1, 0xb, 0x10000}, {0x9, 0x9, 0x4, 0x7, 0x6, 0xa, 0x2, 0x1, 0x9, 0x10, 0xd4, 0x7, 0x5}], 0x3}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) open_tree(r4, &(0x7f00000001c0)='\x00', 0x88900) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f00000002c0)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x800001c) syz_emit_ethernet(0x716, &(0x7f0000000940)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x6e0, 0x2c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@hopopts={0x5e, 0x50, '\x00', [@generic={0x8, 0x6e, "ca5c747c8b4b85a9bedcc453275d5cf1b71853da89852aad14105d55969fa630300719cb1fc7c556b43c241017c6afdd219c68b952a426ec8400a61d8b560b5683f7fb8a9c8f604a1df41ced31088537d2924a25dbbd534b83433876e51f3083c925a2c05dd5a85327a29d68a4fc"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x0, 0xe1, "c48d143d213ede21c506ba0378bb3decc380d186e227bba0acc36d7dedab9364b870e3c2dfbe422af4760f262308b1a4d27fb812050fecab5f6a93ace950934a92636c7185f5918a2341c4d0f54f57b75ab7ddd36328fd03f70a5a5fbd3f78bc51bd2799f92c26bb0270908e36db2280c8fcce822330cfac086c34af375d0a79767819bb766759412d03aca9fc9f9eba0a3dccab6cb230dde20e6fb86095defa54280b497cd759b2e2c1cabe8e9d7c170806f48974815327f116e01f1b33ba0f014ac9c4c4958f0ba28be4cdc906c8d3bc325d15dd09acb28a23feacfa0adbc7ab"}, @generic={0x3, 0xd2, "13236484494b85143af79dd673f25802ded84757b2b926a94136fafbee1565dccbec9a20289717975c3508ba30cf6af266dfd135cce30fd6d3d498f4438e4d591d79fc7e4412bcaa44e1bfcbb62afdbf154932d4b8dc7e2b9713009d3b52034e3e85ace77c4a25a42b685d02851ee0cc8ca71a46359c37c809db03379879c839f07c0ff27a8356ca8cfc3fe07e7fe00ba96ce8e069320f764943fc810e33206e84f77b2e3ad1ea470dfab4e466db49f2297e9eca9d3731453df7c6ef141ec8632c2709da2d53f0775690e97806aad61dd2d0"}, @pad1, @ra={0x5, 0x2, 0x80}, @pad1, @generic={0x7, 0x37, "10147bc609b72f1e29a5f3f8d614516ba52e87a774922f31afe86063b36a8e4e76250957fb92e0fe5206207ad115e37079fa24ef7bb61c"}, @ra={0x5, 0x2, 0xfffc}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x6, 0xa, [{0x2, 0x3, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, [@local, @remote, @private0, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}], [0x1c6dcf8c, 0x9, 0xa]}, {0x7, 0x7, 0x2, @mcast1, [@mcast1, @mcast1], [0x3, 0xb, 0xe, 0x6, 0xc, 0x0, 0xc99]}, {0x4, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @empty, @empty], [0x6, 0x9]}, {0x7, 0x2, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@remote, @mcast1, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x33}], [0x0, 0x5]}, {0x7, 0x2, 0x1, @remote, [@private0], [0x4, 0x6]}, {0x0, 0x4, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @remote, @remote, @empty], [0x5, 0xb8, 0x100, 0x800]}, {0x5, 0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}], [0x5, 0xddd]}, {0xa, 0x6, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, [@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x0, 0x40, 0x3, 0x1, 0x4, 0x80000000]}, {0x6, 0x2, 0x5, @loopback, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], [0x3bf0, 0x101]}, {0x1, 0x4, 0x9, @remote, [@ipv4={'\x00', '\xff\xff', @remote}, @loopback, @local, @rand_addr=' \x01\x00', @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}], [0x2, 0x9c, 0x9, 0xfffffffe]}]}}}}}}, 0x0) 1m1.276163268s ago: executing program 3 (id=8651): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x20, 0x80, 0x1, 0xbca, {{0x2d, 0x4, 0x1, 0x3, 0xb4, 0x64, 0x0, 0x2, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x5, [{@empty, 0x4}]}, @end, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x1, 0xd, "f7d7932bfad73592a6a24b"}, {0x6, 0x9, "f723b8a0ad9a5c"}, {0x7, 0xf, "868ae49f5873b76608e07f7e46"}, {0x7, 0x3, "b0"}, {0x7, 0x4, "6c1f"}, {0x5, 0x6, "f8900438"}]}, @ssrr={0x89, 0x7, 0x95, [@local]}, @timestamp_addr={0x44, 0x2c, 0x7f, 0x1, 0xb, [{@empty, 0x7fff}, {@local, 0x3}, {@multicast1, 0x1}, {@multicast2, 0x5}, {@loopback, 0xfffffffa}]}, @timestamp={0x44, 0x28, 0xb2, 0x0, 0x0, [0x0, 0x9, 0x81, 0x54e200, 0x0, 0xd, 0x7, 0x4, 0x0]}]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x4, 0x0, @vifc_lcl_ifindex=r1, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x5e3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) close(r5) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40080) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x81, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r7, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{0xc, 0x1, 0xfffffc01}], 0xc}, 0x20004084) recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02032003100000002cbd7000ffdbdf2502000900080000001c00000000000000040006003c0000000a004e2400000008ff0100000000000000000000000000010000000000000000020001000000000000040701000000c0051468ce529dae37c9111f001700000000000a004e2400000009000000000000000000000000000000000600000000000000"], 0x80}, 0x1, 0x7}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1m1.168655018s ago: executing program 3 (id=8652): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @private=0xa010102, @loopback}}}}) 53.132557668s ago: executing program 34 (id=8628): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 45.854718954s ago: executing program 35 (id=8652): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @private=0xa010102, @loopback}}}}) 4.25840611s ago: executing program 6 (id=8835): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x2000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x1, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x4}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.043353998s ago: executing program 6 (id=8836): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x0, 0xf1c) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 2.414078726s ago: executing program 6 (id=8839): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (fail_nth: 1) 2.079764758s ago: executing program 6 (id=8840): r0 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000500)={{r0, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20080, &(0x7f0000000140)={@_ha_fsid={[0x80000001, 0x7]}, {0x0, 0xfffe, 0xfffffff8, 0x9}}, 0x7, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x47b}, {[0x8, 0x200, 0x5, 0x6]}, 0xf36, 0x31, &(0x7f00000004c0)=""/49}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$full(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10db, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x402}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {r6, 0xee00}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x80) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0xf, 0x3c}, 0x2c) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000540)=0x6, 0x4) 1.93641946s ago: executing program 8 (id=8841): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x1ff, 0x0, 0xa}) 1.618608372s ago: executing program 6 (id=8846): syz_usb_connect(0x2, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x3c, 0x7d, 0x11, 0x20, 0x46d, 0xe068, 0xcef8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xb, 0x6, 0x40, 0x6, "", [{{0x9, 0x4, 0x48, 0xe, 0x2, 0xff, 0x5d, 0x81, 0x9, [], [{{0x9, 0x5, 0x1, 0x4, 0x8, 0x83, 0x7, 0x9}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0xf8, 0xff, 0x7}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000c00)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x20000800) 1.18821969s ago: executing program 7 (id=8853): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96b75d34091ea89de2b7fb0000e60080b8785d9600010000000000000600000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 943.999911ms ago: executing program 8 (id=8857): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xd) 892.253898ms ago: executing program 5 (id=8858): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 829.11099ms ago: executing program 4 (id=8859): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 819.932182ms ago: executing program 7 (id=8860): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x3c7) 797.313671ms ago: executing program 8 (id=8861): syz_clone3(&(0x7f0000000080)={0x110801800, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x1a0}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 702.51601ms ago: executing program 5 (id=8862): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7, {0x0, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24008818) 585.480843ms ago: executing program 4 (id=8863): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffd, 0xc01e}, 0xffffffff, 0x40000020, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) 543.253552ms ago: executing program 7 (id=8864): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0xc0c4) 521.956252ms ago: executing program 5 (id=8865): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 413.02595ms ago: executing program 8 (id=8866): syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) r1 = signalfd(r0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000200)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x16, 0x0, @void}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 412.274981ms ago: executing program 5 (id=8867): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x7) 405.637909ms ago: executing program 4 (id=8868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x2c, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c880}, 0x0) 356.620794ms ago: executing program 7 (id=8869): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x20, r1}, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 313.753147ms ago: executing program 4 (id=8870): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240)={0xa, {0x7, 0x81, 0x9}}, 0xa) 252.386379ms ago: executing program 5 (id=8871): openat$dir(0xffffffffffffff9c, 0x0, 0x8100, 0x2a9) setuid(0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x48010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 246.973729ms ago: executing program 8 (id=8872): unshare(0x24020400) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fcntl$lock(r1, 0x26, 0x0) 213.218622ms ago: executing program 7 (id=8873): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000140)={0xa, 0x4e21, 0x3, @empty, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0x2}], 0x1, 0x40032060, 0x0) 183.526079ms ago: executing program 4 (id=8874): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000004000/0x3000)=nil) 90.161648ms ago: executing program 8 (id=8875): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b00000027ff7f00c6f607c156a783fe00ab1c01007ba4"], 0x0}, 0x0) 74.523917ms ago: executing program 6 (id=8876): syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@routing={0x29, 0x2, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}, 0x0) 63.876368ms ago: executing program 5 (id=8877): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) r0 = socket(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) syz_open_procfs(0x0, 0x0) 46.789539ms ago: executing program 7 (id=8878): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x0, 0x9c37611dc13d0da6) 0s ago: executing program 4 (id=8879): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000081) kernel console output (not intermixed with test programs): rface descriptor's value: 6 [ 2200.529019][T10256] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2200.587641][T10256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.587651][T23101] usb 7-1: config 255 interface 26 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2200.587679][T23101] usb 7-1: config 255 interface 168 has no altsetting 0 [ 2200.602029][T10256] usb 2-1: config 0 descriptor?? [ 2200.670255][ T3882] netlink: 'syz.4.8400': attribute type 4 has an invalid length. [ 2200.686841][ T3874] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2200.713876][T23101] usb 7-1: config 255 interface 26 has no altsetting 0 [ 2200.724344][T10256] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2200.747560][ T3886] netlink: 'syz.4.8400': attribute type 4 has an invalid length. [ 2200.779077][T23101] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 2200.789139][T23101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.845809][T23101] usb 7-1: Product: ږ→Х뎐쨠Ꙓ鏩ᢤ鴔纈䷽쮉㇖㽳괤אַ玳䥭铡寨ޯ褐翁힝լ㐉鏾槈Ʌ㍭튁᩶⁶谐덷㜠僶迯銦庚ส뉉椁鰆᤺騥㟼ଶ͜멢㗏⌼㑌핸ᇸ퓯 [ 2200.937730][T10256] usb 2-1: USB disconnect, device number 2 [ 2200.945529][T30005] usb 2-1: Failed to submit usb control message: -71 [ 2200.971708][T23101] usb 7-1: Manufacturer: ƽɫ뤣៙坹컆ꁩ긅ꚨ⩽킐뚊툸ˋ棓䂤榖य़ﺴ腏孻爪냀愌쟎膂坿桕闻柖塈늊譏쫇㠟⚄쐷⳻驝﹡鉓牉뒺៥厣 [ 2201.010183][T30005] usb 2-1: unable to send the bmi data to the device: -71 [ 2201.021336][T23101] usb 7-1: SerialNumber: А [ 2201.050671][T30005] usb 2-1: unable to get target info from device [ 2201.070789][T30005] usb 2-1: could not get target info (-71) [ 2201.090117][T30005] usb 2-1: could not probe fw (-71) [ 2201.987235][T10256] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 2202.159551][ T3900] syz_tun: entered allmulticast mode [ 2202.172100][T10256] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2202.200937][T10256] usb 2-1: config 0 has no interface number 0 [ 2202.233451][T10256] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2202.267861][T10256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.289635][T10256] usb 2-1: Product: syz [ 2202.298552][T10256] usb 2-1: Manufacturer: syz [ 2202.311998][T10256] usb 2-1: SerialNumber: syz [ 2202.342183][T10256] usb 2-1: config 0 descriptor?? [ 2202.359363][T23101] usb-storage 7-1:255.168: USB Mass Storage device detected [ 2202.394315][T10256] usb 2-1: selecting invalid altsetting 1 [ 2202.396884][T23101] usb-storage 7-1:255.168: Quirks match for vid 054c pid 002e: 1 [ 2202.422222][T10256] dvb_ttusb_budget: ttusb_init_controller: error [ 2202.433419][T10256] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2202.496098][T18864] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2202.513668][T23101] usb-storage 7-1:255.26: USB Mass Storage device detected [ 2202.524624][T10256] DVB: Unable to find symbol stv0299_attach() [ 2202.541238][T23101] usb-storage 7-1:255.26: Quirks match for vid 054c pid 002e: 1 [ 2202.542116][ T3912] KVM: debugfs: duplicate directory 3912-8 [ 2202.662093][T23101] usb 7-1: USB disconnect, device number 123 [ 2202.682611][T18864] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2202.717964][T10256] DVB: Unable to find symbol tda8083_attach() [ 2202.752806][T10256] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2202.768121][T18864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2202.778270][T18864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2202.814639][T18864] usb 4-1: Product: syz [ 2202.841285][ T3918] vivid-003: ================= START STATUS ================= [ 2202.849138][ T3918] vivid-003: Radio HW Seek Mode: Bounded [ 2202.850803][T18864] usb 4-1: Manufacturer: syz [ 2202.863396][ T3918] vivid-003: Radio Programmable HW Seek: false [ 2202.873392][T18864] usb 4-1: SerialNumber: syz [ 2202.931391][ T3918] vivid-003: RDS Rx I/O Mode: Block I/O [ 2202.965363][ T3918] vivid-003: Generate RBDS Instead of RDS: false [ 2202.981620][ T3918] vivid-003: RDS Reception: true [ 2202.993193][ T3918] vivid-003: RDS Program Type: 0 inactive [ 2203.011067][ T3918] vivid-003: RDS PS Name: inactive [ 2203.097838][ T3918] vivid-003: RDS Radio Text: inactive [ 2203.126731][ T3918] vivid-003: RDS Traffic Announcement: false inactive [ 2203.136502][T18864] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2203.165961][ T3918] vivid-003: RDS Traffic Program: false inactive [ 2203.209786][ T3918] vivid-003: RDS Music: false inactive [ 2203.219735][ T3918] vivid-003: ================== END STATUS ================== [ 2203.416406][ T3928] input: syz0 as /devices/virtual/input/input488 [ 2203.741407][ T3935] syz_tun: left allmulticast mode [ 2204.447055][ T3939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8412'. [ 2204.837091][ C1] usblp0: nonzero write bulk status received: -71 [ 2204.844256][T18864] usb 4-1: USB disconnect, device number 100 [ 2204.909828][ T3900] usblp0: removed [ 2205.251440][T18864] hid_parser_main: 7 callbacks suppressed [ 2205.251462][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.271832][ T3951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8414'. [ 2205.291428][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.316679][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.330850][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.341539][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.354538][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.366867][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.380087][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.390576][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.401600][T18864] hid-generic 0002:0004:0009.00C0: unknown main item tag 0x0 [ 2205.418541][T18864] hid-generic 0002:0004:0009.00C0: hidraw0: HID v0.04 Device [syz0] on syz0 [ 2205.535235][T23101] usb 2-1: USB disconnect, device number 3 [ 2206.248513][ T3970] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2206.579777][ T3973] vivid-000: ================= START STATUS ================= [ 2206.621854][ T3973] vivid-000: Radio HW Seek Mode: Bounded [ 2206.642914][ T3973] vivid-000: Radio Programmable HW Seek: false [ 2206.698598][ T3973] vivid-000: RDS Rx I/O Mode: Block I/O [ 2206.737840][ T3973] vivid-000: Generate RBDS Instead of RDS: false [ 2206.815824][ T3973] vivid-000: RDS Reception: true [ 2206.836104][ T3973] vivid-000: RDS Program Type: 0 inactive [ 2206.878218][ T3973] vivid-000: RDS PS Name: inactive [ 2206.909379][ T3973] vivid-000: RDS Radio Text: inactive [ 2206.927766][ T3973] vivid-000: RDS Traffic Announcement: false inactive [ 2206.941255][ T3973] vivid-000: RDS Traffic Program: false inactive [ 2206.980663][ T3973] vivid-000: RDS Music: false inactive [ 2207.011271][ T3973] vivid-000: ================== END STATUS ================== [ 2207.460127][ T3986] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2208.071492][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8423'. [ 2208.338048][T10265] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2208.519147][T10265] usb 5-1: Using ep0 maxpacket: 8 [ 2208.528892][T23101] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2208.541765][T10265] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2208.567393][T10265] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2208.594738][T10265] usb 5-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.40 [ 2208.619074][T10265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.636912][T10265] usb 5-1: Product: ࡘ [ 2208.647876][T10265] usb 5-1: Manufacturer: Ќ [ 2208.658536][T10265] usb 5-1: SerialNumber: ခ [ 2208.693042][T23101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2208.725660][T23101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2208.736131][T23101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2208.766754][T23101] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2208.778761][T23101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.790774][T23101] usb 4-1: config 0 descriptor?? [ 2208.903915][ T3991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.937064][ T3991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2209.000632][T18864] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2209.208022][T18864] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2209.223331][T18864] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2209.259622][T18864] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2209.271111][T18864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.322430][ T4010] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2209.360035][T18864] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2209.595063][ T3991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2209.606382][ T3991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2209.669292][T10265] usbhid 5-1:1.0: can't add hid device: -71 [ 2209.680970][T10265] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 2209.739874][T10265] usb 5-1: USB disconnect, device number 28 [ 2209.906627][ T4010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2209.927785][ T4010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2209.962178][T18864] usb 2-1: USB disconnect, device number 4 [ 2210.111605][ T4023] vivid-002: ================= START STATUS ================= [ 2210.121462][ T4023] vivid-002: Radio HW Seek Mode: Bounded [ 2210.128123][ T4023] vivid-002: Radio Programmable HW Seek: false [ 2210.134564][ T4023] vivid-002: RDS Rx I/O Mode: Block I/O [ 2210.140805][ T4023] vivid-002: Generate RBDS Instead of RDS: false [ 2210.148403][ T4023] vivid-002: RDS Reception: true [ 2210.153489][ T4023] vivid-002: RDS Program Type: 0 inactive [ 2210.159728][ T4023] vivid-002: RDS PS Name: inactive [ 2210.168306][ T4023] vivid-002: RDS Radio Text: inactive [ 2210.176380][ T4023] vivid-002: RDS Traffic Announcement: false inactive [ 2210.183235][ T4023] vivid-002: RDS Traffic Program: false inactive [ 2210.190926][ T4023] vivid-002: RDS Music: false inactive [ 2210.198209][ T4023] vivid-002: ================== END STATUS ================== [ 2210.436229][ T4029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8438'. [ 2210.725780][ T5705] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2210.865890][ T5705] usb 7-1: device descriptor read/64, error -71 [ 2211.041583][ T4040] netlink: 'syz.4.8443': attribute type 152 has an invalid length. [ 2211.115755][ T5705] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2211.156893][ T4042] netlink: 'syz.1.8444': attribute type 2 has an invalid length. [ 2211.218194][T23101] usbhid 4-1:0.0: can't add hid device: -71 [ 2211.234411][T23101] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2211.269244][T23101] usb 4-1: USB disconnect, device number 101 [ 2211.283405][ T4042] : entered promiscuous mode [ 2211.285658][ T5705] usb 7-1: device descriptor read/64, error -71 [ 2211.416060][ T5705] usb usb7-port1: attempt power cycle [ 2211.428255][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8446'. [ 2211.565470][ T4053] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2211.765881][ T5705] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2211.828050][ T5705] usb 7-1: device descriptor read/8, error -71 [ 2211.921131][ T4057] vivid-002: ================= START STATUS ================= [ 2211.935385][ T4057] vivid-002: Radio HW Seek Mode: Bounded [ 2211.945341][ T4057] vivid-002: Radio Programmable HW Seek: false [ 2211.957438][ T4057] vivid-002: RDS Rx I/O Mode: Block I/O [ 2211.972140][ T4057] vivid-002: Generate RBDS Instead of RDS: false [ 2211.990583][ T4057] vivid-002: RDS Reception: true [ 2211.996649][ T4057] vivid-002: RDS Program Type: 0 inactive [ 2212.002945][ T4057] vivid-002: RDS PS Name: inactive [ 2212.008630][ T4057] vivid-002: RDS Radio Text: inactive [ 2212.014291][ T4057] vivid-002: RDS Traffic Announcement: false inactive [ 2212.025640][ T4057] vivid-002: RDS Traffic Program: false inactive [ 2212.032602][ T4057] vivid-002: RDS Music: false inactive [ 2212.038970][ T4057] vivid-002: ================== END STATUS ================== [ 2212.085737][ T5705] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 2212.126633][ T5705] usb 7-1: device descriptor read/8, error -71 [ 2212.177611][ T4064] vivid-001: ================= START STATUS ================= [ 2212.186324][ T4064] vivid-001: Radio HW Seek Mode: Bounded [ 2212.193143][ T4064] vivid-001: Radio Programmable HW Seek: false [ 2212.220096][ T4064] vivid-001: RDS Rx I/O Mode: Block I/O [ 2212.245082][ T4064] vivid-001: Generate RBDS Instead of RDS: [ 2212.245498][ T5705] usb usb7-port1: unable to enumerate USB device [ 2212.245814][ T4064] false [ 2212.260958][ T4064] vivid-001: RDS Reception: true [ 2212.266788][ T4064] vivid-001: RDS Program Type: 0 inactive [ 2212.272718][ T4064] vivid-001: RDS PS Name: inactive [ 2212.279189][ T4064] vivid-001: RDS Radio Text: inactive [ 2212.284855][ T4064] vivid-001: RDS Traffic Announcement: false inactive [ 2212.293566][ T4064] vivid-001: RDS Traffic Program: false inactive [ 2212.302013][ T4064] vivid-001: RDS Music: false inactive [ 2212.328078][ T4064] vivid-001: ================== END STATUS ================== [ 2212.585875][ T4072] vivid-002: ================= START STATUS ================= [ 2212.605644][ T4072] vivid-002: Radio HW Seek Mode: Bounded [ 2212.691865][ T4072] vivid-002: Radio Programmable HW Seek: false [ 2212.710871][ T4072] vivid-002: RDS Rx I/O Mode: Block I/O [ 2212.724231][ T4075] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2212.732643][ T4072] vivid-002: Generate RBDS Instead of RDS: false [ 2212.759157][ T4072] vivid-002: RDS Reception: true [ 2212.778293][ T4072] vivid-002: RDS Program Type: 0 [ 2212.784153][ T4075] batman_adv: batadv0: Adding interface: dummy0 [ 2212.798312][ T4072] inactive [ 2212.818119][ T4075] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2212.874282][ T4072] vivid-002: RDS PS Name: inactive [ 2212.884323][ T4072] vivid-002: RDS Radio Text: inactive [ 2212.903855][ T4072] vivid-002: RDS Traffic Announcement: false inactive [ 2212.936125][ T4072] vivid-002: RDS Traffic Program: false inactive [ 2212.947747][ T4072] vivid-002: RDS Music: false inactive [ 2213.031299][ T4075] batman_adv: batadv0: Interface activated: dummy0 [ 2213.051465][ T4072] vivid-002: ================== END STATUS ================== [ 2213.529082][ T4081] batadv0: mtu less than device minimum [ 2213.582190][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2213.596756][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2213.607882][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2213.619665][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2213.630739][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2213.641784][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2213.652859][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2213.663909][ T4081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2214.528219][ T4102] fuse: Unknown parameter '0x0000000000000007' [ 2215.115837][T23101] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2215.308714][T23101] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2215.350418][T23101] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2215.432867][T23101] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2215.460924][T23101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.496080][ T4111] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8459'. [ 2215.531334][T23101] usb 2-1: Product: syz [ 2215.576464][T23101] usb 2-1: Manufacturer: syz [ 2215.587653][T23101] usb 2-1: SerialNumber: syz [ 2215.610943][T23101] cdc_mbim 2-1:1.0: skipping garbage [ 2215.703607][ T30] audit: type=1800 audit(1783312756.219:3729): pid=4111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8459" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2215.822002][ T4105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2216.093312][ T4114] vivid-000: ================= START STATUS ================= [ 2216.129158][ T4114] vivid-000: Radio HW Seek Mode: Bounded [ 2216.146642][ T4114] vivid-000: Radio Programmable HW Seek: false [ 2216.176133][ T4114] vivid-000: RDS Rx I/O Mode: Block I/O [ 2216.198746][ T4114] vivid-000: Generate RBDS Instead of RDS: false [ 2216.239271][ T4114] vivid-000: RDS Reception: true [ 2216.275285][ T4114] vivid-000: RDS Program Type: 0 inactive [ 2216.322712][ T4114] vivid-000: RDS PS Name: inactive [ 2216.346421][ T4114] vivid-000: RDS Radio Text: inactive [ 2216.354214][ T4114] vivid-000: RDS Traffic Announcement: false inactive [ 2216.381042][ T4114] vivid-000: RDS Traffic Program: false inactive [ 2216.401926][ T4114] vivid-000: RDS Music: false inactive [ 2216.419548][ T4114] vivid-000: ================== END STATUS ================== [ 2216.472504][ T4105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2216.506289][T23101] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 2216.549356][T23101] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 2216.750243][ T4105] lo: left allmulticast mode [ 2216.865526][T23101] wwan wwan0: port wwan0mbim0 attached [ 2218.104601][ T4105] ip6gre1: left allmulticast mode [ 2218.117740][ T4105] hsr1: left promiscuous mode [ 2218.193552][ T4157] FAULT_INJECTION: forcing a failure. [ 2218.193552][ T4157] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.214885][T23101] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 12:17:4f:1a:23:a6 [ 2218.218878][ T4157] CPU: 1 UID: 0 PID: 4157 Comm: syz.3.8464 Tainted: G L syzkaller #0 PREEMPT(full) [ 2218.218908][ T4157] Tainted: [L]=SOFTLOCKUP [ 2218.218916][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2218.218926][ T4157] Call Trace: [ 2218.218935][ T4157] [ 2218.218945][ T4157] dump_stack_lvl+0xe8/0x150 [ 2218.218979][ T4157] should_fail_ex+0x40c/0x560 [ 2218.219007][ T4157] should_failslab+0xa8/0x100 [ 2218.219037][ T4157] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2218.219059][ T4157] ? local_lock_release+0x9c/0x160 [ 2218.219088][ T4157] ? __alloc_skb+0x1d7/0x7a0 [ 2218.219109][ T4157] ? __alloc_skb+0x1d7/0x7a0 [ 2218.219137][ T4157] __alloc_skb+0x1d7/0x7a0 [ 2218.219164][ T4157] netlink_ack+0x136/0xb30 [ 2218.219208][ T4157] netlink_rcv_skb+0x2a4/0x4a0 [ 2218.219236][ T4157] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2218.219264][ T4157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2218.219301][ T4157] ? bpf_lsm_capable+0x9/0x20 [ 2218.219324][ T4157] ? security_capable+0x7e/0x2c0 [ 2218.219357][ T4157] nfnetlink_rcv+0x2b9/0x28c0 [ 2218.219386][ T4157] ? __dev_queue_xmit+0x29b/0x37f0 [ 2218.219407][ T4157] ? __local_bh_enable_ip+0xd0/0x130 [ 2218.219429][ T4157] ? lockdep_hardirqs_on+0x7a/0x110 [ 2218.219454][ T4157] ? __dev_queue_xmit+0x29b/0x37f0 [ 2218.219471][ T4157] ? __local_bh_enable_ip+0xd0/0x130 [ 2218.219491][ T4157] ? __dev_queue_xmit+0x29b/0x37f0 [ 2218.219508][ T4157] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 2218.219524][ T4157] ? __do_fast_syscall_32+0x23e/0x6f0 [ 2218.219549][ T4157] ? do_fast_syscall_32+0x33/0x70 [ 2218.219583][ T4157] ? __dev_queue_xmit+0x29b/0x37f0 [ 2218.219605][ T4157] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2218.219636][ T4157] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2218.219660][ T4157] ? ref_tracker_free+0x689/0x830 [ 2218.219684][ T4157] ? __pfx_ref_tracker_free+0x10/0x10 [ 2218.219714][ T4157] ? __skb_clone+0x449/0x6c0 [ 2218.219745][ T4157] ? skb_clone+0x246/0x3a0 [ 2218.219764][ T4157] ? __netlink_deliver_tap+0x811/0x860 [ 2218.219791][ T4157] ? netlink_deliver_tap+0x2e/0x1b0 [ 2218.219824][ T4157] ? netlink_deliver_tap+0x2e/0x1b0 [ 2218.219850][ T4157] ? netlink_deliver_tap+0x2e/0x1b0 [ 2218.219888][ T4157] netlink_unicast+0x7bb/0x940 [ 2218.219922][ T4157] netlink_sendmsg+0x813/0xb40 [ 2218.219948][ T4157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2218.219969][ T4157] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2218.219992][ T4157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2218.220009][ T4157] sock_sendmsg_nosec+0x13a/0x180 [ 2218.220033][ T4157] ____sys_sendmsg+0x54e/0x850 [ 2218.220065][ T4157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2218.220105][ T4157] ___sys_sendmsg+0x2a5/0x360 [ 2218.220131][ T4157] ? __lock_acquire+0x683/0x2cf0 [ 2218.220160][ T4157] ? __pfx____sys_sendmsg+0x10/0x10 [ 2218.220185][ T4157] ? get_pid_task+0x20/0x1f0 [ 2218.220210][ T4157] ? get_pid_task+0x20/0x1f0 [ 2218.220232][ T4157] ? get_pid_task+0x20/0x1f0 [ 2218.220282][ T4157] ? __fget_files+0x2a/0x420 [ 2218.220305][ T4157] ? __fget_files+0x3a2/0x420 [ 2218.220338][ T4157] __sys_sendmsg+0x177/0x240 [ 2218.220365][ T4157] ? __pfx___sys_sendmsg+0x10/0x10 [ 2218.220408][ T4157] __do_fast_syscall_32+0x23e/0x6f0 [ 2218.220434][ T4157] ? do_fast_syscall_32+0x33/0x70 [ 2218.220458][ T4157] ? lockdep_hardirqs_on+0x7a/0x110 [ 2218.220480][ T4157] ? asm_int80_emulation+0x1a/0x20 [ 2218.220499][ T4157] ? do_int80_emulation+0x29f/0x550 [ 2218.220523][ T4157] ? trace_irq_disable+0x3b/0x140 [ 2218.220549][ T4157] do_fast_syscall_32+0x33/0x70 [ 2218.220574][ T4157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2218.220597][ T4157] RIP: 0023:0xf7fb70ec [ 2218.220615][ T4157] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2218.220631][ T4157] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2218.220651][ T4157] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 2218.220663][ T4157] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2218.220675][ T4157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2218.220685][ T4157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2218.220697][ T4157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2218.220723][ T4157] [ 2219.014784][T23101] usb 2-1: USB disconnect, device number 5 [ 2219.022369][T23101] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 2219.080135][T30005] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.142494][T30005] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.174019][ T122] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.188519][T23101] wwan wwan0: port wwan0mbim0 disconnected [ 2219.194165][ T122] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.457594][ T4168] syzkaller0: entered promiscuous mode [ 2219.471034][ T4171] KVM: debugfs: duplicate directory 4171-8 [ 2219.496296][ T4168] syzkaller0: entered allmulticast mode [ 2219.774452][ T4172] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2220.873279][ T4189] vivid-002: ================= START STATUS ================= [ 2220.882127][ T4189] vivid-002: Radio HW Seek Mode: Bounded [ 2220.888429][ T4189] vivid-002: Radio Programmable HW Seek: false [ 2220.899149][ T4189] vivid-002: RDS Rx I/O Mode: Block I/O [ 2220.904851][ T4189] vivid-002: Generate RBDS Instead of RDS: false [ 2220.912460][ T4189] vivid-002: RDS Reception: true [ 2220.947376][ T4189] vivid-002: RDS Program Type: 0 inactive [ 2220.953958][ T4189] vivid-002: RDS PS Name: inactive [ 2220.989073][ T4189] vivid-002: RDS Radio Text: inactive [ 2220.994640][ T4189] vivid-002: RDS Traffic Announcement: false inactive [ 2221.029056][ T4189] vivid-002: RDS Traffic Program: false inactive [ 2221.067300][ T4189] vivid-002: RDS Music: false inactive [ 2221.073444][ T4189] vivid-002: ================== END STATUS ================== [ 2222.000420][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.007006][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2228.595894][ T809] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2228.646775][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8484'. [ 2228.735829][ T809] usb 5-1: device descriptor read/64, error -71 [ 2228.883054][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8480'. [ 2228.938831][T23101] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2229.018673][ T809] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2229.105545][T23101] usb 2-1: Using ep0 maxpacket: 8 [ 2229.119139][T23101] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2229.142993][T23101] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2229.175277][ T809] usb 5-1: device descriptor read/64, error -71 [ 2229.219227][T23101] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2229.242575][T23101] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2229.274770][T23101] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2229.295202][T23101] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2229.302131][ T809] usb usb5-port1: attempt power cycle [ 2229.338883][T23101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.716229][ T809] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2229.758478][ T809] usb 5-1: device descriptor read/8, error -71 [ 2230.036266][ T809] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2230.082683][ T809] usb 5-1: device descriptor read/8, error -71 [ 2230.160356][ T4249] netlink: 'syz.1.8484': attribute type 33 has an invalid length. [ 2230.182258][ T4249] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8484'. [ 2230.206337][ T809] usb usb5-port1: unable to enumerate USB device [ 2230.225417][T23101] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 2230.376867][T23101] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 2230.398954][T23101] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2230.417896][T10265] usb 2-1: USB disconnect, device number 6 [ 2230.446514][T23101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2230.482238][T23101] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2230.521309][T23101] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2230.558850][T23101] usb 7-1: Product: syz [ 2230.579156][T23101] usb 7-1: Manufacturer: syz [ 2230.595060][T23101] usb 7-1: SerialNumber: syz [ 2230.642880][T23101] usb 7-1: config 0 descriptor?? [ 2230.686671][T23101] usb 7-1: selecting invalid altsetting 0 [ 2230.911477][ T4256] trusted_key: encrypted_key: insufficient parameters specified [ 2230.920029][ T4248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.953418][ T4248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.019962][ T809] usb 7-1: USB disconnect, device number 2 [ 2231.049802][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8490'. [ 2231.111734][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8490'. [ 2231.486323][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2231.544392][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2231.882241][ T4274] netlink: 'syz.4.8494': attribute type 29 has an invalid length. [ 2232.165269][T23101] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2232.215335][ T2367] pvrusb2: request_firmware fatal error with code=-110 [ 2232.226057][ T2367] pvrusb2: Failure uploading firmware1 [ 2232.232862][ T2367] pvrusb2: Device initialization was not successful. [ 2232.241169][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2232.256002][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2232.266180][T28244] pvrusb2: Device being rendered inoperable [ 2232.274239][ T2367] pvrusb2: Failed to submit write-control URB status=-19 [ 2232.284020][ T2367] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 2232.302088][ T2367] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 2232.340968][T23101] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2232.352643][T23101] usb 5-1: not running at top speed; connect to a high speed hub [ 2232.372450][T23101] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2232.393770][T23101] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 2232.406982][T23101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.428028][T23101] usb 5-1: Product: syz [ 2232.433784][T23101] usb 5-1: Manufacturer: syz [ 2232.444284][T23101] usb 5-1: SerialNumber: syz [ 2232.492749][ T4274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2232.720975][ T4274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.734008][ T4274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.781989][T23101] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2232.801552][T23101] usb 5-1: MIDIStreaming interface descriptor not found [ 2233.022545][ T4286] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8497'. [ 2233.036229][T23101] usb 5-1: USB disconnect, device number 33 [ 2233.299470][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8496'. [ 2233.525210][T10265] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2233.695209][T10265] usb 7-1: Using ep0 maxpacket: 8 [ 2233.706011][T10265] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2233.725253][T10265] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2233.736504][T10265] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2233.747973][T10265] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2233.764262][T10265] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2233.779871][T10265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.788538][T10265] usb 7-1: Product: syz [ 2233.794710][T10265] usb 7-1: Manufacturer: syz [ 2233.800549][T10265] usb 7-1: SerialNumber: syz [ 2233.810593][ T4289] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2233.855586][T10265] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 2233.871915][T10265] usbtest 7-1:1.0: Linux user mode ISO test driver [ 2233.900844][T10265] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2234.175057][ T4303] input: syz0 as /devices/virtual/input/input489 [ 2234.222926][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8498'. [ 2234.255364][ T4304] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8498'. [ 2234.325007][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8498'. [ 2235.186174][ T5705] usb 7-1: USB disconnect, device number 3 [ 2235.635508][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 2237.139982][ T4334] netlink: 'syz.1.8510': attribute type 13 has an invalid length. [ 2237.149138][ T4330] syzkaller0: entered promiscuous mode [ 2237.156260][ T4330] syzkaller0: entered allmulticast mode [ 2237.166514][ T4334] gretap0: refused to change device tx_queue_len [ 2237.177890][ T4334] net_ratelimit: 11 callbacks suppressed [ 2237.177907][ T4334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2237.598511][ T4351] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8515'. [ 2237.660152][ T4348] vivid-001: ================= START STATUS ================= [ 2237.675225][ T4348] vivid-001: Radio HW Seek Mode: Bounded [ 2237.696344][ T4348] vivid-001: Radio Programmable HW Seek: false [ 2237.783694][ T4346] batadv0: entered promiscuous mode [ 2237.845433][ T4348] vivid-001: RDS Rx I/O Mode: Block I/O [ 2237.851254][ T4346] vlan1: entered promiscuous mode [ 2237.888574][ T4348] vivid-001: Generate RBDS Instead of RDS: false [ 2237.907442][ T4348] vivid-001: RDS Reception: true [ 2237.932967][ T4348] vivid-001: RDS Program Type: 0 inactive [ 2237.947930][ T4348] vivid-001: RDS PS Name: inactive [ 2237.964141][ T4348] vivid-001: RDS Radio Text: inactive [ 2237.970055][ T4348] vivid-001: RDS Traffic Announcement: false inactive [ 2237.977642][ T4347] vlan1: entered promiscuous mode [ 2237.982900][ T4348] vivid-001: RDS Traffic Program: false inactive [ 2238.014624][ T4348] vivid-001: RDS Music: false inactive [ 2238.041724][ T4348] vivid-001: ================== END STATUS ================== [ 2238.096118][ T4359] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 2238.105473][ T4359] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 2238.429189][ T4370] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2239.370123][ T4391] vivid-002: ================= START STATUS ================= [ 2239.423184][ T4391] vivid-002: Radio HW Seek Mode: Bounded [ 2239.455071][ T4391] vivid-002: Radio Programmable HW Seek: false [ 2239.631575][ T4391] vivid-002: RDS Rx I/O Mode: Block I/O [ 2239.740166][ T4391] vivid-002: Generate RBDS Instead of RDS: false [ 2239.764110][ T4391] vivid-002: RDS Reception: true [ 2239.777243][ T4391] vivid-002: RDS Program Type: 0 inactive [ 2239.788838][ T4391] vivid-002: RDS PS Name: inactive [ 2239.807029][ T4391] vivid-002: RDS Radio Text: inactive [ 2239.818103][ T4391] vivid-002: RDS Traffic Announcement: false inactive [ 2239.843189][ T4405] input: syz0 as /devices/virtual/input/input490 [ 2239.869738][ T4391] vivid-002: RDS Traffic Program: false inactive [ 2239.876721][ T4391] vivid-002: RDS Music: false inactive [ 2239.889665][ T4391] vivid-002: ================== END STATUS ================== [ 2240.175294][ T4145] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2240.357276][ T4145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.413037][ T4145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.450288][ T4145] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2240.492981][ T4145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.531564][ T4145] usb 5-1: config 0 descriptor?? [ 2241.149588][ T30] audit: type=1326 audit(1783312781.669:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4423 comm="syz.5.8535" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fef0ec code=0x0 [ 2241.261794][ T4145] hid-led 0003:1D34:000A.00C1: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 2241.306834][ T4429] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8535'. [ 2241.317268][ T4145] hid-led 0003:1D34:000A.00C1: Dream Cheeky Webmail Notifier initialized [ 2241.335429][ T4429] ip6_vti0: entered allmulticast mode [ 2241.503964][ T4145] usb 5-1: USB disconnect, device number 34 [ 2242.326390][ T30] audit: type=1326 audit(1783312782.829:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.478589][ T30] audit: type=1326 audit(1783312782.839:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.547541][ T30] audit: type=1326 audit(1783312782.879:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.633976][ T30] audit: type=1326 audit(1783312782.879:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.697858][ T30] audit: type=1326 audit(1783312782.879:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.726399][ T5705] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2242.769057][ T30] audit: type=1326 audit(1783312782.889:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.874198][ T30] audit: type=1326 audit(1783312782.889:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.922527][ T30] audit: type=1326 audit(1783312782.889:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2242.969576][ T5705] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 2243.010446][ T30] audit: type=1326 audit(1783312782.899:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.4.8538" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe40ec code=0x7ffc0000 [ 2243.055044][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.105685][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.159984][ T5705] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2243.217152][ T5705] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2243.260507][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.334490][ T5705] usb 7-1: config 0 descriptor?? [ 2243.835661][ T5705] plantronics 0003:047F:FFFF.00C2: reserved main item tag 0xd [ 2243.894139][ T5705] plantronics 0003:047F:FFFF.00C2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2243.959415][ T4467] vivid-002: ================= START STATUS ================= [ 2243.999219][ T4467] vivid-002: Radio HW Seek Mode: Bounded [ 2244.149797][ T4467] vivid-002: Radio Programmable HW Seek: false [ 2244.163624][ T4467] vivid-002: RDS Rx I/O Mode: Block I/O [ 2244.170124][ T4467] vivid-002: Generate RBDS Instead of RDS: false [ 2244.182309][ T4467] vivid-002: RDS Reception: true [ 2244.199275][ T4467] vivid-002: RDS Program Type: 0 inactive [ 2244.304326][ T4467] vivid-002: RDS PS Name: inactive [ 2244.334444][ T4467] vivid-002: RDS Radio Text: inactive [ 2244.442256][ T4467] vivid-002: RDS Traffic Announcement: false inactive [ 2244.473899][ T4467] vivid-002: RDS Traffic Program: false inactive [ 2244.567090][ T4467] vivid-002: RDS Music: false inactive [ 2244.578207][ T4467] vivid-002: ================== END STATUS ================== [ 2244.985629][ T4149] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2245.148455][ T4149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2245.187172][ T4149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2245.219832][ T4149] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2245.283307][ T4149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.340770][ T4149] usb 5-1: config 0 descriptor?? [ 2245.886105][ T809] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 2246.018331][ T4149] hid-led 0003:1D34:000A.00C3: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 2246.112900][ T4149] hid-led 0003:1D34:000A.00C3: Dream Cheeky Webmail Notifier initialized [ 2246.202215][ T4149] usb 5-1: USB disconnect, device number 35 [ 2246.405555][ T4498] fido_id[4498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2246.983916][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.008071][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.035515][ T4524] binfmt_misc: register: failed to install interpreter file ./file0 [ 2247.198363][ T4529] fuse: Unknown parameter 'group_i00000000000000000000' [ 2247.216141][ T4138] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 2247.376525][ T5705] usb 7-1: USB disconnect, device number 4 [ 2247.386976][ T4138] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2247.428072][ T4138] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2247.462772][ T4138] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2247.473926][ T4533] vivid-000: ================= START STATUS ================= [ 2247.483855][ T4533] vivid-000: Radio HW Seek Mode: Bounded [ 2247.491894][ T4533] vivid-000: Radio Programmable HW Seek: false [ 2247.503995][ T4138] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2247.517451][ T4138] usb 2-1: config 1 has no interface number 0 [ 2247.527095][ T4138] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2247.546123][ T4138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.554243][ T4533] vivid-000: RDS Rx I/O Mode: Block I/O [ 2247.565983][ T4533] vivid-000: Generate RBDS Instead of RDS: false [ 2247.573221][ T4533] vivid-000: RDS Reception: true [ 2247.581073][ T4533] vivid-000: RDS Program Type: 0 inactive [ 2247.591597][ T4533] vivid-000: RDS PS Name: inactive [ 2247.605856][ T5705] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 2247.617632][ T4138] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2247.746139][ T4533] vivid-000: RDS Radio Text: inactive [ 2247.776176][ T4533] vivid-000: RDS Traffic Announcement: false inactive [ 2247.819009][ T4533] vivid-000: RDS Traffic Program: false inactive [ 2247.835287][ T5705] usb 7-1: Invalid ep0 maxpacket: 32 [ 2247.844332][ T4138] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 2247.859917][ T4138] snd_usb_pod 2-1:1.1: invalid control EP [ 2247.895021][ T4533] vivid-000: RDS Music: [ 2247.899625][ T4138] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 2247.929538][ T4533] false inactive [ 2247.965693][ T5705] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 2247.976354][ T4533] vivid-000: ================== END STATUS ================== [ 2247.986207][ T4138] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2248.103264][ T4138] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2248.155914][ T5705] usb 7-1: Invalid ep0 maxpacket: 32 [ 2248.163469][ T5705] usb usb7-port1: attempt power cycle [ 2248.371560][ T4545] loop6: detected capacity change from 0 to 8 [ 2248.428513][ T4542] syzkaller0: entered promiscuous mode [ 2248.451015][ T4542] syzkaller0: entered allmulticast mode [ 2248.460669][ C1] blk_print_req_error: 131 callbacks suppressed [ 2248.460682][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2248.482486][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.492240][ C0] buffer_io_error: 130 callbacks suppressed [ 2248.492257][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.502346][ T4545] loop6: detected capacity change from 8 to 7 [ 2248.538337][ T5705] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 2248.576032][ T5705] usb 7-1: Invalid ep0 maxpacket: 32 [ 2248.584908][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.594227][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.604170][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.613477][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.624129][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.633420][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.678297][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.687561][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.703700][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.713137][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.723528][ T5705] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 2248.727379][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.740206][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.748410][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.757647][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.777394][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2248.786768][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.787589][ T5705] usb 7-1: Invalid ep0 maxpacket: 32 [ 2248.796666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2248.807022][ T5705] usb usb7-port1: unable to enumerate USB device [ 2248.822000][ T4545] ldm_validate_partition_table(): Disk read failed. [ 2248.857701][ T4545] Dev loop6: unable to read RDB block 0 [ 2248.943585][ T4545] loop6: unable to read partition table [ 2248.962217][ T4545] loop6: partition table beyond EOD, truncated [ 2248.984052][ T4545] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 2248.984052][ T4545] 咁 [ 2258.984748][ T4697] dump_stack_lvl+0xe8/0x150 [ 2258.984770][ T4697] should_fail_ex+0x40c/0x560 [ 2258.984785][ T4697] should_failslab+0xa8/0x100 [ 2258.984812][ T4697] __kmalloc_cache_noprof+0xa8/0x660 [ 2258.984839][ T4697] ? alloc_fs_context+0x66/0xd00 [ 2258.984867][ T4697] ? alloc_fs_context+0x66/0xd00 [ 2258.984892][ T4697] ? __get_fs_type+0x21/0x280 [ 2258.984909][ T4697] alloc_fs_context+0x66/0xd00 [ 2258.984924][ T4697] ? __get_fs_type+0x267/0x280 [ 2258.984938][ T4697] ? __get_fs_type+0x21/0x280 [ 2258.984967][ T4697] do_new_mount+0x17f/0xdc0 [ 2258.984996][ T4697] ? __pfx_do_new_mount+0x10/0x10 [ 2258.985021][ T4697] ? ns_capable+0x89/0xe0 [ 2258.985039][ T4697] ? path_mount+0x647/0x1040 [ 2258.985053][ T4697] ? user_path_at+0xd4/0x160 [ 2258.985070][ T4697] __se_sys_mount+0x31d/0x420 [ 2258.985096][ T4697] ? __pfx___se_sys_mount+0x10/0x10 [ 2258.985121][ T4697] ? __ia32_sys_mount+0x20/0xc0 [ 2258.985146][ T4697] __do_fast_syscall_32+0x23e/0x6f0 [ 2258.985171][ T4697] ? do_fast_syscall_32+0x33/0x70 [ 2258.985195][ T4697] ? lockdep_hardirqs_on+0x7a/0x110 [ 2258.985218][ T4697] ? asm_int80_emulation+0x1a/0x20 [ 2258.985235][ T4697] ? do_int80_emulation+0x29f/0x550 [ 2258.985260][ T4697] ? trace_irq_disable+0x3b/0x140 [ 2258.985287][ T4697] do_fast_syscall_32+0x33/0x70 [ 2258.985314][ T4697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2258.985337][ T4697] RIP: 0023:0xf708f0ec [ 2258.985351][ T4697] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2258.985360][ T4697] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 2258.985372][ T4697] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 00000000800000c0 [ 2258.985379][ T4697] RDX: 0000000080000100 RSI: 0000000000010000 RDI: 00000000800002c0 [ 2258.985386][ T4697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2258.985393][ T4697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2258.985401][ T4697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2258.985428][ T4697] [ 2259.321758][ T4690] random: crng reseeded on system resumption [ 2259.560507][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8609'. [ 2259.581697][ T4700] fuse: Bad value for 'user_id' [ 2259.587206][ T4138] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 2259.594505][ T4700] fuse: Bad value for 'user_id' [ 2259.601326][ T4138] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2259.740307][ T4138] usb 5-1: USB disconnect, device number 38 [ 2260.495834][T10265] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 2260.666917][T10265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2260.680517][T10265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2260.692788][T10265] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2260.708230][T10265] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2260.719939][T10265] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2260.733818][T10265] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2260.745958][T10265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.756300][T10265] usb 4-1: Product: syz [ 2260.760621][T10265] usb 4-1: Manufacturer: syz [ 2260.766624][T10265] usb 4-1: SerialNumber: syz [ 2260.784736][ T4719] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2260.998667][ T4719] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2261.120727][ T4727] input: syz0 as /devices/virtual/input/input493 [ 2261.224716][ T4732] fuse: Bad value for 'user_id' [ 2261.230077][ T4732] fuse: Bad value for 'user_id' [ 2261.425364][ T4149] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2261.435771][ T4138] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2261.575322][ T4149] usb 2-1: Using ep0 maxpacket: 8 [ 2261.581829][ T4149] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2261.591456][ T4149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.597609][ T4138] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2261.607223][ T4149] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2261.617709][ T4138] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2261.617758][ T4138] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2261.617781][ T4138] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.629484][ T4719] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2261.643132][ T4149] pvrusb2: ********** [ 2261.657382][ T4149] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2261.671303][ T4138] usb 7-1: config 0 descriptor?? [ 2261.673600][ T4149] pvrusb2: Important functionality might not be entirely working. [ 2261.690208][ T4149] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2261.704597][ T4149] pvrusb2: ********** [ 2261.913105][T10265] cdc_ncm 4-1:1.0: bind() failure [ 2261.916293][ T4719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.926576][T10265] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2261.926618][T10265] cdc_ncm 4-1:1.1: bind() failure [ 2261.945063][ T5705] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2261.956299][ T4719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2262.017780][ T809] usb 4-1: USB disconnect, device number 104 [ 2262.028961][ T4729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2262.054937][ T4729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2262.097461][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 2262.110968][ T4739] openvswitch: netlink: IPv4 tun info is not correct [ 2262.120104][ T5705] usb 5-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 2262.120156][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2262.122504][ T5705] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2262.122532][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2262.122574][ T5705] usb 5-1: Product: syz [ 2262.122590][ T5705] usb 5-1: Manufacturer: syz [ 2262.122606][ T5705] usb 5-1: SerialNumber: syz [ 2262.138859][ T5705] usb 5-1: config 0 descriptor?? [ 2262.281944][ T4149] usb 2-1: USB disconnect, device number 14 [ 2262.299539][ T4149] pvrusb2: Device being rendered inoperable [ 2262.409256][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2262.409280][ T30] audit: type=1326 audit(1783312802.929:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.8624" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe40ec code=0x0 [ 2262.444241][ T4138] hid-led 0003:1D34:000A.00C4: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.6-1/input0 [ 2262.489355][ T4138] hid-led 0003:1D34:000A.00C4: Dream Cheeky Webmail Notifier initialized [ 2262.672497][ T4149] usb 7-1: USB disconnect, device number 11 [ 2264.448056][ T4770] netlink: 192 bytes leftover after parsing attributes in process `syz.6.8635'. [ 2264.483788][ T5705] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2264.510623][ T5705] usb 5-1: USB disconnect, device number 39 [ 2264.915804][ T5705] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2265.068034][ T5705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.079790][ T5705] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2265.092332][ T5705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2265.102185][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.110667][ T5705] usb 5-1: Product: syz [ 2265.114976][ T5705] usb 5-1: Manufacturer: syz [ 2265.120411][ T5705] usb 5-1: SerialNumber: syz [ 2265.133054][ T5705] cdc_mbim 5-1:1.0: skipping garbage [ 2265.216611][ T4778] KVM: debugfs: duplicate directory 4778-8 [ 2265.334624][ T4776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2265.353859][ T4776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2265.368846][ T4776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2265.653708][ T4783] syzkaller0: entered promiscuous mode [ 2265.666586][ T4783] syzkaller0: entered allmulticast mode [ 2265.841866][ T4782] usb usb8: usbfs: process 4782 (syz.5.8639) did not claim interface 0 before use [ 2265.983237][ T4776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2265.991715][ T5705] cdc_mbim 5-1:1.0: setting tx_max = 48 [ 2265.999575][ T5705] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 2266.016775][ T5705] wwan wwan0: port wwan0mbim0 attached [ 2266.053625][ T5705] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 32:70:a9:be:cd:19 [ 2266.294540][ T5705] hid_parser_main: 7 callbacks suppressed [ 2266.294562][ T5705] hid-generic 0000:0000:0000.00C5: unknown main item tag 0x0 [ 2266.354889][ T5705] hid-generic 0000:0000:0000.00C5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2266.972277][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2266.983842][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2266.995993][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8637'. [ 2267.007184][ T4809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8637'. [ 2267.524413][ T5287] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 2268.008289][ T4828] kAFS: unable to lookup cell '(,c' [ 2268.027173][ T4828] bond0: (slave gre0): Error: Device can not be enslaved while up [ 2268.254383][ T5705] usb 5-1: USB disconnect, device number 40 [ 2268.289743][ T5705] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 2268.338722][ T5705] cdc_mbim 5-1:1.0 wwan0: failed to kill vid 0081/0 [ 2268.618220][ T5705] wwan wwan0: port wwan0mbim0 disconnected [ 2268.899087][ T4842] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2269.147784][ T4849] KVM: debugfs: duplicate directory 4849-8 [ 2269.458382][ T4859] fuse: Bad value for 'fd' [ 2269.515671][ T4861] syz_tun: entered allmulticast mode [ 2269.910373][ T4879] FAULT_INJECTION: forcing a failure. [ 2269.910373][ T4879] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.930762][ T4879] CPU: 0 UID: 0 PID: 4879 Comm: syz.6.8656 Tainted: G L syzkaller #0 PREEMPT(full) [ 2269.930794][ T4879] Tainted: [L]=SOFTLOCKUP [ 2269.930801][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2269.930813][ T4879] Call Trace: [ 2269.930820][ T4879] [ 2269.930827][ T4879] dump_stack_lvl+0xe8/0x150 [ 2269.930860][ T4879] should_fail_ex+0x40c/0x560 [ 2269.930886][ T4879] should_failslab+0xa8/0x100 [ 2269.930914][ T4879] __kmalloc_cache_noprof+0xa8/0x660 [ 2269.930937][ T4879] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 2269.930963][ T4879] ? sctp_add_bind_addr+0x8c/0x370 [ 2269.930984][ T4879] ? sctp_add_bind_addr+0x8c/0x370 [ 2269.931010][ T4879] sctp_add_bind_addr+0x8c/0x370 [ 2269.931035][ T4879] sctp_copy_local_addr_list+0x31a/0x4e0 [ 2269.931060][ T4879] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 2269.931085][ T4879] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2269.931111][ T4879] ? sctp_v4_is_any+0x35/0x60 [ 2269.931133][ T4879] ? sctp_copy_one_addr+0x93/0x360 [ 2269.931158][ T4879] sctp_bind_addr_copy+0xb3/0x3c0 [ 2269.931182][ T4879] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2269.931207][ T4879] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2269.931237][ T4879] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2269.931263][ T4879] ? __local_bh_enable_ip+0xd0/0x130 [ 2269.931280][ T4879] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2269.931306][ T4879] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2269.931331][ T4879] sctp_sendmsg+0x159b/0x2d00 [ 2269.931363][ T4879] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2269.931389][ T4879] ? aa_sk_perm+0x6d5/0x900 [ 2269.931421][ T4879] ? sock_rps_record_flow+0x19/0x350 [ 2269.931444][ T4879] ? inet_sendmsg+0x298/0x320 [ 2269.931465][ T4879] ? __pfx_inet_sendmsg+0x10/0x10 [ 2269.931483][ T4879] sock_sendmsg_nosec+0x10e/0x180 [ 2269.931504][ T4879] ____sys_sendmsg+0x54e/0x850 [ 2269.931530][ T4879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2269.931564][ T4879] ___sys_sendmsg+0x2a5/0x360 [ 2269.931585][ T4879] ? __lock_acquire+0x683/0x2cf0 [ 2269.931608][ T4879] ? __pfx____sys_sendmsg+0x10/0x10 [ 2269.931635][ T4879] ? kstrtoull+0x12f/0x1d0 [ 2269.931674][ T4879] ? __fget_files+0x2a/0x420 [ 2269.931693][ T4879] ? __fget_files+0x3a2/0x420 [ 2269.931720][ T4879] __sys_sendmmsg+0x2de/0x4d0 [ 2269.931747][ T4879] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2269.931791][ T4879] ? fput+0xa0/0xd0 [ 2269.931810][ T4879] ? ksys_write+0x242/0x270 [ 2269.931838][ T4879] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2269.931858][ T4879] __do_fast_syscall_32+0x23e/0x6f0 [ 2269.931880][ T4879] ? do_fast_syscall_32+0x33/0x70 [ 2269.931899][ T4879] ? lockdep_hardirqs_on+0x7a/0x110 [ 2269.931918][ T4879] ? asm_int80_emulation+0x1a/0x20 [ 2269.931933][ T4879] ? do_int80_emulation+0x29f/0x550 [ 2269.931953][ T4879] ? trace_irq_disable+0x3b/0x140 [ 2269.931974][ T4879] do_fast_syscall_32+0x33/0x70 [ 2269.931995][ T4879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2269.932013][ T4879] RIP: 0023:0xf7f840ec [ 2269.932028][ T4879] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2269.932041][ T4879] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2269.932058][ T4879] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 2269.932069][ T4879] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2269.932078][ T4879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2269.932087][ T4879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2269.932096][ T4879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2269.932121][ T4879] [ 2269.936722][ T4138] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2270.383615][ T4886] netlink: 'syz.6.8657': attribute type 10 has an invalid length. [ 2270.398311][ T4886] syz_tun: entered promiscuous mode [ 2270.419189][ T4886] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2270.432834][ T4886] FAULT_INJECTION: forcing a failure. [ 2270.432834][ T4886] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.461057][ T4886] CPU: 1 UID: 0 PID: 4886 Comm: syz.6.8657 Tainted: G L syzkaller #0 PREEMPT(full) [ 2270.461087][ T4886] Tainted: [L]=SOFTLOCKUP [ 2270.461094][ T4886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2270.461106][ T4886] Call Trace: [ 2270.461115][ T4886] [ 2270.461123][ T4886] dump_stack_lvl+0xe8/0x150 [ 2270.461156][ T4886] should_fail_ex+0x40c/0x560 [ 2270.461178][ T4886] should_failslab+0xa8/0x100 [ 2270.461204][ T4886] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2270.461225][ T4886] ? local_lock_release+0x9c/0x160 [ 2270.461251][ T4886] ? __alloc_skb+0x1d7/0x7a0 [ 2270.461274][ T4886] ? __alloc_skb+0x1d7/0x7a0 [ 2270.461305][ T4886] __alloc_skb+0x1d7/0x7a0 [ 2270.461333][ T4886] netlink_sendmsg+0x5d4/0xb40 [ 2270.461362][ T4886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2270.461386][ T4886] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2270.461411][ T4886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2270.461425][ T4886] sock_sendmsg_nosec+0x13a/0x180 [ 2270.461448][ T4886] ____sys_sendmsg+0x54e/0x850 [ 2270.461480][ T4886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2270.461521][ T4886] ___sys_sendmsg+0x2a5/0x360 [ 2270.461548][ T4886] ? __lock_acquire+0x683/0x2cf0 [ 2270.461578][ T4886] ? __pfx____sys_sendmsg+0x10/0x10 [ 2270.461614][ T4886] ? get_pid_task+0x20/0x1f0 [ 2270.461640][ T4886] ? get_pid_task+0x20/0x1f0 [ 2270.461660][ T4886] ? get_pid_task+0x20/0x1f0 [ 2270.461714][ T4886] ? __fget_files+0x2a/0x420 [ 2270.461734][ T4886] ? __fget_files+0x3a2/0x420 [ 2270.461765][ T4886] __sys_sendmsg+0x177/0x240 [ 2270.461795][ T4886] ? __pfx___sys_sendmsg+0x10/0x10 [ 2270.461839][ T4886] __do_fast_syscall_32+0x23e/0x6f0 [ 2270.461867][ T4886] ? do_fast_syscall_32+0x33/0x70 [ 2270.461892][ T4886] ? lockdep_hardirqs_on+0x7a/0x110 [ 2270.461917][ T4886] ? asm_int80_emulation+0x1a/0x20 [ 2270.461935][ T4886] ? do_int80_emulation+0x29f/0x550 [ 2270.461960][ T4886] ? trace_irq_disable+0x3b/0x140 [ 2270.461986][ T4886] do_fast_syscall_32+0x33/0x70 [ 2270.462011][ T4886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2270.462032][ T4886] RIP: 0023:0xf7f840ec [ 2270.462049][ T4886] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2270.462066][ T4886] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2270.462083][ T4886] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800012c0 [ 2270.462095][ T4886] RDX: 0000000020008850 RSI: 0000000000000000 RDI: 0000000000000000 [ 2270.462106][ T4886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2270.462116][ T4886] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2270.462127][ T4886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2270.462151][ T4886] [ 2270.793353][ T4887] netlink: 'syz.5.8655': attribute type 4 has an invalid length. [ 2270.815882][ T4887] netlink: 'syz.5.8655': attribute type 4 has an invalid length. [ 2270.866323][ T4138] usb 4-1: Using ep0 maxpacket: 32 [ 2270.874565][ T4138] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2270.885503][ T4138] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2270.899973][ T4138] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2270.913953][ T4138] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2270.936468][ T4138] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2270.945852][ T4138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.953840][ T4138] usb 4-1: Product: syz [ 2270.958400][ T4138] usb 4-1: Manufacturer: syz [ 2270.962993][ T4138] usb 4-1: SerialNumber: syz [ 2270.978481][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2270.988681][ T4138] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input494 [ 2271.196196][ T4138] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2271.216604][ T4138] (id 0x00) [ 2271.317892][ T4138] rc_core: IR keymap rc-imon-pad not found [ 2271.344373][ T4138] Registered IR keymap rc-empty [ 2271.367174][ T4138] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2271.426406][ T4138] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2271.467453][ T4138] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 2271.492593][ T4138] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input495 [ 2271.573215][ T4138] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:105> initialized [ 2271.831587][ T4869] imon:send_packet: task interrupted [ 2271.871879][ T4869] imon:send_packet: packet tx failed (-512) [ 2271.922169][ T4869] imon:vfd_write: send packet #0 failed [ 2271.953358][ T4869] imon:send_packet: packet tx failed (-32) [ 2271.991973][ T4869] imon:vfd_write: send packet #0 failed [ 2272.818310][ T4922] KVM: debugfs: duplicate directory 4922-8 [ 2273.059215][ T4928] vivid-000: ================= START STATUS ================= [ 2273.068162][ T4928] vivid-000: Radio HW Seek Mode: Bounded [ 2273.081819][ T4928] vivid-000: Radio Programmable HW Seek: false [ 2273.107267][ T4928] vivid-000: RDS Rx I/O Mode: Block I/O [ 2273.120243][ T4928] vivid-000: Generate RBDS Instead of RDS: false [ 2273.141405][ T4928] vivid-000: RDS Reception: true [ 2273.166065][ T4928] vivid-000: RDS Program Type: 0 inactive [ 2273.186754][ T4928] vivid-000: RDS PS Name: inactive [ 2273.215043][ T4928] vivid-000: RDS Radio Text: inactive [ 2273.236124][ T4928] vivid-000: RDS Traffic Announcement: false inactive [ 2273.255723][ T4928] vivid-000: RDS Traffic Program: false inactive [ 2273.280544][ T4928] vivid-000: RDS Music: false inactive [ 2273.305826][ T4928] vivid-000: ================== END STATUS ================== [ 2273.380823][ T4942] bond3: up delay (7) is not a multiple of miimon (10), value rounded to 0 ms [ 2273.390446][ T4942] bond3: down delay (2) is not a multiple of miimon (10), value rounded to 0 ms [ 2273.400427][ T4942] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2273.420375][ T4942] bond3 (unregistering): Released all slaves [ 2274.185012][ T4960] syzkaller0: entered promiscuous mode [ 2274.190987][ T4960] syzkaller0: entered allmulticast mode [ 2274.533150][ T4969] fuse: Unknown parameter '0x0000000000000006' [ 2274.615301][T10265] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2274.765552][T10265] usb 5-1: Using ep0 maxpacket: 8 [ 2274.773555][T10265] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2274.783592][T10265] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 2274.797955][T10265] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 2274.807291][T10265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.816257][T10265] usb 5-1: Product: syz [ 2274.820436][T10265] usb 5-1: Manufacturer: syz [ 2274.825012][T10265] usb 5-1: SerialNumber: syz [ 2275.041193][ T4966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2275.050558][ T4966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2275.083869][T10265] snd-ua101 5-1:1.1: invalid format type [ 2275.089986][T10265] snd-ua101 5-1:1.0: invalid num_altsetting [ 2275.104445][T10265] usb 5-1: USB disconnect, device number 41 [ 2275.371977][ T4971] FAULT_INJECTION: forcing a failure. [ 2275.371977][ T4971] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.384884][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: syz.6.8671 Tainted: G L syzkaller #0 PREEMPT(full) [ 2275.384912][ T4971] Tainted: [L]=SOFTLOCKUP [ 2275.384919][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2275.384931][ T4971] Call Trace: [ 2275.384939][ T4971] [ 2275.384947][ T4971] dump_stack_lvl+0xe8/0x150 [ 2275.384986][ T4971] should_fail_ex+0x40c/0x560 [ 2275.385018][ T4971] should_failslab+0xa8/0x100 [ 2275.385047][ T4971] __kmalloc_cache_noprof+0xa8/0x660 [ 2275.385080][ T4971] ? io_ring_ctx_alloc+0x53/0xc40 [ 2275.385140][ T4971] ? io_ring_ctx_alloc+0x53/0xc40 [ 2275.385164][ T4971] io_ring_ctx_alloc+0x53/0xc40 [ 2275.385179][ T4971] ? io_prepare_config+0x8c8/0xc70 [ 2275.385291][ T4971] io_uring_create+0x50/0x990 [ 2275.385311][ T4971] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 2275.385331][ T4971] ? __fget_files+0x2a/0x420 [ 2275.385351][ T4971] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2275.385381][ T4971] ? ksys_write+0x242/0x270 [ 2275.385412][ T4971] __do_fast_syscall_32+0x23e/0x6f0 [ 2275.385435][ T4971] ? do_fast_syscall_32+0x33/0x70 [ 2275.385454][ T4971] ? lockdep_hardirqs_on+0x7a/0x110 [ 2275.385473][ T4971] ? asm_int80_emulation+0x1a/0x20 [ 2275.385488][ T4971] ? do_int80_emulation+0x29f/0x550 [ 2275.385508][ T4971] ? trace_irq_disable+0x3b/0x140 [ 2275.385530][ T4971] do_fast_syscall_32+0x33/0x70 [ 2275.385551][ T4971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2275.385570][ T4971] RIP: 0023:0xf7f840ec [ 2275.385584][ T4971] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2275.385599][ T4971] RSP: 002b:00000000f544643c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2275.385615][ T4971] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 2275.385626][ T4971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2275.385636][ T4971] RBP: 00000000f54464fc R08: 0000000000000000 R09: 0000000000000000 [ 2275.385647][ T4971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2275.385657][ T4971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2275.385682][ T4971] [ 2275.784260][ T4979] fuse: Unknown parameter '0x0000000000000006' [ 2275.914572][ T4985] fuse: Bad value for 'fd' [ 2276.714392][ T4999] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2276.762556][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8679'. [ 2276.777283][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.784739][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.792765][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.800450][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.808706][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.816366][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.823795][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.832828][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.843450][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.851354][ T4152] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 2276.861922][ T4152] hid-generic 0000:0000:0000.00C6: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2276.872902][T10265] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2276.931445][ T5001] fido_id[5001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2276.949453][ T5003] FAULT_INJECTION: forcing a failure. [ 2276.949453][ T5003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2276.963722][ T5003] CPU: 0 UID: 0 PID: 5003 Comm: syz.4.8680 Tainted: G L syzkaller #0 PREEMPT(full) [ 2276.963753][ T5003] Tainted: [L]=SOFTLOCKUP [ 2276.963761][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2276.963772][ T5003] Call Trace: [ 2276.963779][ T5003] [ 2276.963787][ T5003] dump_stack_lvl+0xe8/0x150 [ 2276.963819][ T5003] should_fail_ex+0x40c/0x560 [ 2276.963846][ T5003] _copy_from_user+0x2d/0xb0 [ 2276.963872][ T5003] kstrtouint_from_user+0xd6/0x180 [ 2276.963898][ T5003] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2276.963946][ T5003] proc_fail_nth_write+0x8e/0x210 [ 2276.963974][ T5003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2276.964007][ T5003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2276.964032][ T5003] vfs_write+0x296/0xba0 [ 2276.964070][ T5003] ? __pfx_vfs_write+0x10/0x10 [ 2276.964099][ T5003] ? __fget_files+0x2a/0x420 [ 2276.964128][ T5003] ? __fget_files+0x3a2/0x420 [ 2276.964150][ T5003] ? __fget_files+0x2a/0x420 [ 2276.964181][ T5003] ksys_write+0x150/0x270 [ 2276.964210][ T5003] ? __pfx_ksys_write+0x10/0x10 [ 2276.964243][ T5003] ? asm_int80_emulation+0x1a/0x20 [ 2276.964267][ T5003] do_int80_emulation+0x19a/0x550 [ 2276.964292][ T5003] ? trace_irq_disable+0x3b/0x140 [ 2276.964314][ T5003] ? asm_int80_emulation+0x1a/0x20 [ 2276.964331][ T5003] ? clear_bhb_loop+0x40/0x90 [ 2276.964350][ T5003] ? clear_bhb_loop+0x40/0x90 [ 2276.964374][ T5003] asm_int80_emulation+0x1a/0x20 [ 2276.964393][ T5003] RIP: 0023:0xf71e71eb [ 2276.964411][ T5003] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2276.964427][ T5003] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2276.964447][ T5003] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54a65d0 [ 2276.964461][ T5003] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2276.964472][ T5003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2276.964482][ T5003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2276.964493][ T5003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2276.964522][ T5003] [ 2277.215601][T10265] usb 7-1: Using ep0 maxpacket: 32 [ 2277.222883][T10265] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 2277.231336][T10265] usb 7-1: config 0 has no interface number 0 [ 2277.240797][T10265] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2277.250443][T10265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.260128][T10265] usb 7-1: Product: syz [ 2277.264797][T10265] usb 7-1: Manufacturer: syz [ 2277.269912][T10265] usb 7-1: SerialNumber: syz [ 2277.279130][T10265] usb 7-1: config 0 descriptor?? [ 2277.515809][T10265] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2277.534419][T10265] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2277.563511][T10265] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2277.605371][T10265] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 2277.660121][T10265] usb 7-1: USB disconnect, device number 12 [ 2278.007145][ T4296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2278.028872][ T4296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2278.039156][ T4296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2278.052666][ T4296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2278.061042][ T4296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2278.902910][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.931848][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.940549][ T5017] bridge_slave_0: entered allmulticast mode [ 2278.950148][ T5017] bridge_slave_0: entered promiscuous mode [ 2278.973124][ T5028] netlink: 'syz.4.8684': attribute type 10 has an invalid length. [ 2278.973222][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.989609][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.999108][ T5017] bridge_slave_1: entered allmulticast mode [ 2279.009123][ T5017] bridge_slave_1: entered promiscuous mode [ 2279.039906][ T5034] netlink: 'syz.4.8684': attribute type 10 has an invalid length. [ 2279.102791][ T5034] team0: Port device netdevsim1 removed [ 2279.154213][ T5028] ksmbd: Unknown IPC event: 3, ignore. [ 2279.250828][ T5034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2279.288601][ T5034] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 2279.342926][ T5017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2279.359764][ T5017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2279.422734][ T5017] team0: Port device team_slave_0 added [ 2279.436838][ T5017] team0: Port device team_slave_1 added [ 2279.474140][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2279.491878][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2279.530025][ T5017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2279.569778][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2279.598497][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2279.663450][ T5017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2279.823120][ T5017] hsr_slave_0: entered promiscuous mode [ 2279.852932][ T5017] hsr_slave_1: entered promiscuous mode [ 2280.116759][T22197] Bluetooth: hci1: command tx timeout [ 2280.878058][ T5017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2280.890697][ T5050] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2280.966791][ T5017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2280.996788][ T5017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2281.024319][ T5017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2281.047438][ T5017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2281.064461][ T5017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2281.121053][ T5017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2281.153502][ T5017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2281.405947][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8690'. [ 2281.486980][ T5017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2281.526433][ T5017] 8021q: adding VLAN 0 to HW filter on device team0 [ 2281.571591][T30005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.578813][T30005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2281.610984][T30005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.618217][T30005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2281.746196][ T5705] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2281.807776][ T5017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2281.906591][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 2281.914452][ T5017] veth0_vlan: entered promiscuous mode [ 2281.932722][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2281.943807][ T5017] veth1_vlan: entered promiscuous mode [ 2281.987165][ T5017] veth0_macvtap: entered promiscuous mode [ 2281.988984][ T5705] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2282.010583][ T5017] veth1_macvtap: entered promiscuous mode [ 2282.044487][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.055660][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2282.074206][ T5705] usb 5-1: Product: syz [ 2282.082035][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2282.085189][ T5705] usb 5-1: Manufacturer: syz [ 2282.098739][ T5705] usb 5-1: SerialNumber: syz [ 2282.102632][T30004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.114881][ T5705] usb 5-1: config 0 descriptor?? [ 2282.134545][T30004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.150101][ T5705] gs_usb 5-1:0.0: Required endpoints not found [ 2282.160999][T30004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.197688][T22197] Bluetooth: hci1: command tx timeout [ 2282.212320][ T3858] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.257058][T10265] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2282.425249][T10265] usb 7-1: Using ep0 maxpacket: 16 [ 2282.442607][ T5705] usb 5-1: USB disconnect, device number 42 [ 2282.457648][T10265] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.498698][T10265] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2282.536843][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2282.541721][T10265] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2282.550927][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2282.572497][T10265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.584569][T10265] usb 7-1: Product: syz [ 2282.595937][T10265] usb 7-1: Manufacturer: syz [ 2282.611989][T10265] usb 7-1: SerialNumber: syz [ 2282.657591][T10265] usb 7-1: 0:2 : does not exist [ 2282.688290][ T5076] input: syz1 as /devices/virtual/input/input496 [ 2282.821586][T30013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2282.842459][ T5078] KVM: debugfs: duplicate directory 5078-8 [ 2282.848347][T30013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2282.992495][T10265] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2283.205741][T10265] usb 7-1: USB disconnect, device number 13 [ 2283.326820][T28951] udevd[28951]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2283.400221][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.410109][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.704583][ T5101] FAULT_INJECTION: forcing a failure. [ 2283.704583][ T5101] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.708718][ T5103] FAULT_INJECTION: forcing a failure. [ 2283.708718][ T5103] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.745426][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz.5.8702 Tainted: G L syzkaller #0 PREEMPT(full) [ 2283.745458][ T5101] Tainted: [L]=SOFTLOCKUP [ 2283.745465][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2283.745476][ T5101] Call Trace: [ 2283.745484][ T5101] [ 2283.745493][ T5101] dump_stack_lvl+0xe8/0x150 [ 2283.745527][ T5101] should_fail_ex+0x40c/0x560 [ 2283.745555][ T5101] should_failslab+0xa8/0x100 [ 2283.745585][ T5101] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2283.745608][ T5101] ? skb_clone+0x212/0x3a0 [ 2283.745624][ T5101] ? skb_clone+0x212/0x3a0 [ 2283.745644][ T5101] skb_clone+0x212/0x3a0 [ 2283.745667][ T5101] __netlink_deliver_tap+0x413/0x860 [ 2283.745706][ T5101] ? netlink_deliver_tap+0x2e/0x1b0 [ 2283.745725][ T5101] netlink_deliver_tap+0x19c/0x1b0 [ 2283.745741][ T5101] netlink_unicast+0x77f/0x940 [ 2283.745762][ T5101] netlink_sendmsg+0x813/0xb40 [ 2283.745776][ T5101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2283.745788][ T5101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2283.745802][ T5101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2283.745811][ T5101] sock_sendmsg_nosec+0x13a/0x180 [ 2283.745825][ T5101] ____sys_sendmsg+0x54e/0x850 [ 2283.745844][ T5101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2283.745867][ T5101] ___sys_sendmsg+0x2a5/0x360 [ 2283.745889][ T5101] ? __lock_acquire+0x683/0x2cf0 [ 2283.745906][ T5101] ? __pfx____sys_sendmsg+0x10/0x10 [ 2283.745921][ T5101] ? get_pid_task+0x20/0x1f0 [ 2283.745936][ T5101] ? get_pid_task+0x20/0x1f0 [ 2283.745948][ T5101] ? get_pid_task+0x20/0x1f0 [ 2283.745977][ T5101] ? __fget_files+0x2a/0x420 [ 2283.745990][ T5101] ? __fget_files+0x3a2/0x420 [ 2283.746008][ T5101] __sys_sendmsg+0x177/0x240 [ 2283.746025][ T5101] ? __pfx___sys_sendmsg+0x10/0x10 [ 2283.746049][ T5101] __do_fast_syscall_32+0x23e/0x6f0 [ 2283.746066][ T5101] ? do_fast_syscall_32+0x33/0x70 [ 2283.746080][ T5101] ? lockdep_hardirqs_on+0x7a/0x110 [ 2283.746093][ T5101] ? asm_int80_emulation+0x1a/0x20 [ 2283.746103][ T5101] ? do_int80_emulation+0x29f/0x550 [ 2283.746117][ T5101] ? trace_irq_disable+0x3b/0x140 [ 2283.746132][ T5101] do_fast_syscall_32+0x33/0x70 [ 2283.746147][ T5101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2283.746160][ T5101] RIP: 0023:0xf6fef0ec [ 2283.746171][ T5101] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2283.746180][ T5101] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2283.746191][ T5101] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2283.746199][ T5101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2283.746205][ T5101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2283.746211][ T5101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2283.746217][ T5101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2283.746231][ T5101] [ 2284.230081][ T5103] CPU: 1 UID: 0 PID: 5103 Comm: syz.7.8703 Tainted: G L syzkaller #0 PREEMPT(full) [ 2284.230112][ T5103] Tainted: [L]=SOFTLOCKUP [ 2284.230120][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2284.230131][ T5103] Call Trace: [ 2284.230139][ T5103] [ 2284.230148][ T5103] dump_stack_lvl+0xe8/0x150 [ 2284.230181][ T5103] should_fail_ex+0x40c/0x560 [ 2284.230208][ T5103] should_failslab+0xa8/0x100 [ 2284.230237][ T5103] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2284.230262][ T5103] ? skb_clone+0x212/0x3a0 [ 2284.230278][ T5103] ? skb_clone+0x212/0x3a0 [ 2284.230300][ T5103] skb_clone+0x212/0x3a0 [ 2284.230319][ T5103] __netlink_deliver_tap+0x413/0x860 [ 2284.230359][ T5103] ? netlink_deliver_tap+0x2e/0x1b0 [ 2284.230388][ T5103] netlink_deliver_tap+0x19c/0x1b0 [ 2284.230416][ T5103] netlink_unicast+0x77f/0x940 [ 2284.230451][ T5103] netlink_sendmsg+0x813/0xb40 [ 2284.230478][ T5103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2284.230501][ T5103] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2284.230526][ T5103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2284.230543][ T5103] sock_sendmsg_nosec+0x13a/0x180 [ 2284.230568][ T5103] ____sys_sendmsg+0x54e/0x850 [ 2284.230601][ T5103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2284.230644][ T5103] ___sys_sendmsg+0x2a5/0x360 [ 2284.230670][ T5103] ? __lock_acquire+0x683/0x2cf0 [ 2284.230700][ T5103] ? __pfx____sys_sendmsg+0x10/0x10 [ 2284.230727][ T5103] ? get_pid_task+0x20/0x1f0 [ 2284.230760][ T5103] ? get_pid_task+0x20/0x1f0 [ 2284.230783][ T5103] ? get_pid_task+0x20/0x1f0 [ 2284.230836][ T5103] ? __fget_files+0x2a/0x420 [ 2284.230858][ T5103] ? __fget_files+0x3a2/0x420 [ 2284.230892][ T5103] __sys_sendmsg+0x177/0x240 [ 2284.230922][ T5103] ? __pfx___sys_sendmsg+0x10/0x10 [ 2284.230965][ T5103] __do_fast_syscall_32+0x23e/0x6f0 [ 2284.230992][ T5103] ? do_fast_syscall_32+0x33/0x70 [ 2284.231016][ T5103] ? lockdep_hardirqs_on+0x7a/0x110 [ 2284.231040][ T5103] ? asm_int80_emulation+0x1a/0x20 [ 2284.231059][ T5103] ? do_int80_emulation+0x29f/0x550 [ 2284.231084][ T5103] ? trace_irq_disable+0x3b/0x140 [ 2284.231110][ T5103] do_fast_syscall_32+0x33/0x70 [ 2284.231136][ T5103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2284.231159][ T5103] RIP: 0023:0xf707f0ec [ 2284.231176][ T5103] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2284.231193][ T5103] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2284.231213][ T5103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2284.231226][ T5103] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2284.231237][ T5103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2284.231248][ T5103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2284.231260][ T5103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2284.231287][ T5103] [ 2284.526001][T22197] Bluetooth: hci1: command tx timeout [ 2285.072603][ T5110] FAULT_INJECTION: forcing a failure. [ 2285.072603][ T5110] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.115389][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz.7.8707 Tainted: G L syzkaller #0 PREEMPT(full) [ 2285.115422][ T5110] Tainted: [L]=SOFTLOCKUP [ 2285.115429][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2285.115441][ T5110] Call Trace: [ 2285.115449][ T5110] [ 2285.115457][ T5110] dump_stack_lvl+0xe8/0x150 [ 2285.115492][ T5110] should_fail_ex+0x40c/0x560 [ 2285.115520][ T5110] should_failslab+0xa8/0x100 [ 2285.115550][ T5110] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2285.115574][ T5110] ? skb_clone+0x212/0x3a0 [ 2285.115590][ T5110] ? skb_clone+0x212/0x3a0 [ 2285.115614][ T5110] skb_clone+0x212/0x3a0 [ 2285.115637][ T5110] __netlink_deliver_tap+0x413/0x860 [ 2285.115676][ T5110] ? netlink_deliver_tap+0x2e/0x1b0 [ 2285.115707][ T5110] netlink_deliver_tap+0x19c/0x1b0 [ 2285.115737][ T5110] netlink_unicast+0x77f/0x940 [ 2285.115775][ T5110] netlink_sendmsg+0x813/0xb40 [ 2285.115803][ T5110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2285.115826][ T5110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2285.115851][ T5110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2285.115869][ T5110] sock_sendmsg_nosec+0x13a/0x180 [ 2285.115895][ T5110] ____sys_sendmsg+0x54e/0x850 [ 2285.115930][ T5110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2285.115974][ T5110] ___sys_sendmsg+0x2a5/0x360 [ 2285.116001][ T5110] ? __lock_acquire+0x683/0x2cf0 [ 2285.116032][ T5110] ? __pfx____sys_sendmsg+0x10/0x10 [ 2285.116059][ T5110] ? get_pid_task+0x20/0x1f0 [ 2285.116084][ T5110] ? get_pid_task+0x20/0x1f0 [ 2285.116108][ T5110] ? get_pid_task+0x20/0x1f0 [ 2285.116162][ T5110] ? __fget_files+0x2a/0x420 [ 2285.116199][ T5110] ? __fget_files+0x3a2/0x420 [ 2285.116233][ T5110] __sys_sendmsg+0x177/0x240 [ 2285.116263][ T5110] ? __pfx___sys_sendmsg+0x10/0x10 [ 2285.116310][ T5110] __do_fast_syscall_32+0x23e/0x6f0 [ 2285.116339][ T5110] ? do_fast_syscall_32+0x33/0x70 [ 2285.116363][ T5110] ? lockdep_hardirqs_on+0x7a/0x110 [ 2285.116388][ T5110] ? asm_int80_emulation+0x1a/0x20 [ 2285.116406][ T5110] ? do_int80_emulation+0x29f/0x550 [ 2285.116432][ T5110] ? trace_irq_disable+0x3b/0x140 [ 2285.116460][ T5110] do_fast_syscall_32+0x33/0x70 [ 2285.116487][ T5110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2285.116510][ T5110] RIP: 0023:0xf707f0ec [ 2285.116528][ T5110] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2285.116545][ T5110] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2285.116566][ T5110] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2285.116580][ T5110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2285.116592][ T5110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2285.116603][ T5110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2285.116616][ T5110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2285.116644][ T5110] [ 2285.601011][ T4296] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2285.621276][ T4296] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2285.647140][ T4296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2285.668031][ T4296] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2285.682480][ T4296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2285.835997][T23101] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 2285.922720][ T5123] KVM: debugfs: duplicate directory 5123-8 [ 2285.987341][T23101] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2286.000564][T23101] usb 7-1: config 0 has no interface number 0 [ 2286.028245][T23101] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2286.067356][T23101] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2286.108754][T23101] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2286.155044][T23101] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2286.224688][T23101] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2286.298061][T23101] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2286.373353][T23101] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2286.400143][ T5127] dummy0: entered allmulticast mode [ 2286.417298][T23101] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.428874][ T5127] dummy0: left allmulticast mode [ 2286.480560][T23101] usb 7-1: config 0 descriptor?? [ 2286.515016][ T5113] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2286.538479][ T5113] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2286.596043][ T4296] Bluetooth: hci1: command tx timeout [ 2286.618611][T23101] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2286.809913][ T5108] imon:display_open: display port is already open [ 2286.949482][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.958552][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.966742][ T5121] bridge_slave_0: entered allmulticast mode [ 2286.976358][ T5121] bridge_slave_0: entered promiscuous mode [ 2286.989781][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 2286.998314][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.006288][ T5121] bridge_slave_1: entered allmulticast mode [ 2287.014707][ T5121] bridge_slave_1: entered promiscuous mode [ 2287.167376][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2287.185058][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2287.245987][ T5121] team0: Port device team_slave_0 added [ 2287.257711][ T5121] team0: Port device team_slave_1 added [ 2287.298614][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2287.306010][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2287.375940][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2287.455450][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2287.465779][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2287.493887][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2287.651551][ T5145] vivid-003: ================= START STATUS ================= [ 2287.662326][ T5121] hsr_slave_0: entered promiscuous mode [ 2287.682626][ T5121] hsr_slave_1: entered promiscuous mode [ 2287.698154][ T5121] debugfs: 'hsr0' already exists in 'hsr' [ 2287.704358][ T5145] vivid-003: Radio HW Seek Mode: Bounded [ 2287.726018][ T5121] Cannot create hsr debugfs directory [ 2287.735487][ T5145] vivid-003: Radio Programmable HW Seek: false [ 2287.799975][ T4296] Bluetooth: hci6: command tx timeout [ 2287.930064][ T5145] vivid-003: RDS Rx I/O Mode: Block I/O [ 2287.983177][ T5145] vivid-003: Generate RBDS Instead of RDS: false [ 2287.998193][ T5145] vivid-003: RDS Reception: true [ 2288.012091][ T5145] vivid-003: RDS Program Type: 0 inactive [ 2288.055614][ T5145] vivid-003: RDS PS Name: inactive [ 2288.081514][ T5145] vivid-003: RDS Radio Text: inactive [ 2288.138998][ T5145] vivid-003: RDS Traffic Announcement: false inactive [ 2288.146267][ T5145] vivid-003: RDS Traffic Program: false inactive [ 2288.161547][ T5145] vivid-003: RDS Music: false inactive [ 2288.180858][ T5145] vivid-003: ================== END STATUS ================== [ 2288.432904][T23101] usb 7-1: USB disconnect, device number 14 [ 2288.472198][T23101] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 2288.660526][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8715'. [ 2288.703981][ T5121] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2288.750855][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2288.800475][ T5121] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2288.822200][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2288.852028][ T5121] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2288.879515][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2288.919247][ T5169] syzkaller0: entered promiscuous mode [ 2288.937224][ T5169] syzkaller0: entered allmulticast mode [ 2288.954018][ T5121] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2288.991935][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2289.350698][ T5183] input: syz0 as /devices/virtual/input/input497 [ 2289.446776][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2289.531108][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 2289.581248][T30007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.588538][T30007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2289.654426][T26293] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.661646][T26293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.853164][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2289.879952][ T4296] Bluetooth: hci6: command tx timeout [ 2290.082225][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2290.280177][ T5201] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8726'. [ 2290.298008][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 2290.305657][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.454597][ T5121] veth0_vlan: entered promiscuous mode [ 2290.474015][ T5121] veth1_vlan: entered promiscuous mode [ 2290.512342][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8727'. [ 2290.521004][ T5121] veth0_macvtap: entered promiscuous mode [ 2290.544032][ T5121] veth1_macvtap: entered promiscuous mode [ 2290.571140][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2290.592782][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2290.613515][ T3858] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.622768][ T3858] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.637552][ T3858] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.647094][ T3858] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.829007][T30013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2290.852057][T30013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2290.931102][T30003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2290.983821][T30003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2291.275802][ T5705] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2291.359421][ T30] audit: type=1326 audit(1783312831.879:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.386945][ T5217] fuse: Bad value for 'fd' [ 2291.411316][ T30] audit: type=1326 audit(1783312831.879:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.467046][ T30] audit: type=1326 audit(1783312831.909:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.513613][ T30] audit: type=1326 audit(1783312831.909:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.514052][ T5705] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2291.563875][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2291.571549][ T30] audit: type=1326 audit(1783312831.909:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.599233][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2291.599264][ T5705] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2291.639313][ T5705] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2291.639750][ T30] audit: type=1326 audit(1783312831.909:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.689201][ T5705] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2291.708018][ T5705] usb 7-1: Manufacturer: syz [ 2291.720225][ T30] audit: type=1326 audit(1783312831.919:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.751921][ T30] audit: type=1326 audit(1783312831.919:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.752905][ T5705] usb 7-1: config 0 descriptor?? [ 2291.793191][ T30] audit: type=1326 audit(1783312831.919:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.822733][ T30] audit: type=1326 audit(1783312831.919:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.7.8729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2291.960198][ T4296] Bluetooth: hci6: command tx timeout [ 2292.234336][ T5705] hid_parser_main: 73 callbacks suppressed [ 2292.234359][ T5705] appleir 0003:05AC:8243.00C7: unknown main item tag 0x0 [ 2292.322504][ T5705] appleir 0003:05AC:8243.00C7: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 2292.324088][ T5229] FAULT_INJECTION: forcing a failure. [ 2292.324088][ T5229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2292.359209][ T5229] CPU: 0 UID: 0 PID: 5229 Comm: syz.5.8733 Tainted: G L syzkaller #0 PREEMPT(full) [ 2292.359239][ T5229] Tainted: [L]=SOFTLOCKUP [ 2292.359245][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2292.359255][ T5229] Call Trace: [ 2292.359264][ T5229] [ 2292.359272][ T5229] dump_stack_lvl+0xe8/0x150 [ 2292.359305][ T5229] should_fail_ex+0x40c/0x560 [ 2292.359330][ T5229] _copy_to_user+0x31/0xb0 [ 2292.359360][ T5229] pagemap_read+0x4dc/0x7c0 [ 2292.359391][ T5229] ? __pfx_pagemap_read+0x10/0x10 [ 2292.359415][ T5229] ? iov_iter_iovec_advance+0x1e0/0x290 [ 2292.359445][ T5229] vfs_readv+0x57c/0x850 [ 2292.359469][ T5229] ? __pfx_pagemap_read+0x10/0x10 [ 2292.359504][ T5229] ? __pfx_vfs_readv+0x10/0x10 [ 2292.359536][ T5229] ? __fget_files+0x2a/0x420 [ 2292.359563][ T5229] ? __fget_files+0x3a2/0x420 [ 2292.359585][ T5229] ? __fget_files+0x2a/0x420 [ 2292.359615][ T5229] __ia32_compat_sys_preadv+0x1eb/0x300 [ 2292.359638][ T5229] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 2292.359665][ T5229] __do_fast_syscall_32+0x23e/0x6f0 [ 2292.359690][ T5229] ? do_fast_syscall_32+0x33/0x70 [ 2292.359711][ T5229] ? lockdep_hardirqs_on+0x7a/0x110 [ 2292.359734][ T5229] ? asm_int80_emulation+0x1a/0x20 [ 2292.359752][ T5229] ? do_int80_emulation+0x29f/0x550 [ 2292.359776][ T5229] ? trace_irq_disable+0x3b/0x140 [ 2292.359802][ T5229] do_fast_syscall_32+0x33/0x70 [ 2292.359827][ T5229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2292.359850][ T5229] RIP: 0023:0xf6fef0ec [ 2292.359869][ T5229] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2292.359884][ T5229] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 2292.359904][ T5229] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640 [ 2292.359917][ T5229] RDX: 0000000000000002 RSI: 0000000000300100 RDI: 0000000000000000 [ 2292.359930][ T5229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2292.359942][ T5229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2292.359953][ T5229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2292.359981][ T5229] [ 2292.851964][ T5234] netlink: 'syz.4.8734': attribute type 4 has an invalid length. [ 2292.872401][ T5234] netlink: 'syz.4.8734': attribute type 4 has an invalid length. [ 2293.064016][ T5240] input: syz0 as /devices/virtual/input/input499 [ 2293.228339][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 2293.382632][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 2293.422791][ T4149] IPVS: starting estimator thread 0... [ 2293.429150][ T5243] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2293.475008][ T5246] netlink: 'syz.4.8738': attribute type 4 has an invalid length. [ 2293.526204][ T5247] IPVS: using max 39 ests per chain, 93600 per kthread [ 2293.577168][ T5250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2293.681731][ T2367] pvrusb2: request_firmware fatal error with code=-110 [ 2293.691731][ T2367] pvrusb2: Failure uploading firmware1 [ 2293.729868][ T2367] pvrusb2: Device initialization was not successful. [ 2293.736715][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2293.747622][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2293.757241][T28244] pvrusb2: Device being rendered inoperable [ 2294.036461][ T4296] Bluetooth: hci6: command tx timeout [ 2294.055754][ T809] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2294.085574][T28244] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2294.239161][T28244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.255645][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 2294.255663][T28244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2294.271328][T28244] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2294.281972][T28244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.283241][ T809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 2294.298673][T28244] usb 6-1: config 0 descriptor?? [ 2294.411512][ T809] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 2294.433907][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.446461][ T809] usb 5-1: Product: syz [ 2294.450714][ T809] usb 5-1: Manufacturer: syz [ 2294.456656][ T809] usb 5-1: SerialNumber: syz [ 2294.512948][ T5251] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2294.992956][ T4149] usb 7-1: USB disconnect, device number 15 [ 2295.023436][T28244] hid-led 0003:1D34:000A.00C8: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 2295.098569][T28244] hid-led 0003:1D34:000A.00C8: Dream Cheeky Webmail Notifier initialized [ 2295.539903][T28244] usb 6-1: USB disconnect, device number 24 [ 2295.749810][ T5261] syzkaller0: entered promiscuous mode [ 2295.808829][ T5261] syzkaller0: entered allmulticast mode [ 2297.053439][ T809] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2297.099474][ T809] usb 5-1: MIDIStreaming interface descriptor not found [ 2297.177741][ T4139] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2297.334776][ T809] usb 5-1: USB disconnect, device number 43 [ 2297.357210][ T4139] usb 6-1: Using ep0 maxpacket: 8 [ 2297.381231][ T4139] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2297.405982][ T4139] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 2297.442308][ T4139] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2297.457338][ T4139] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2297.508227][ T4139] usb 6-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 2297.528849][ T4139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.542986][ T4139] usb 6-1: Product: syz [ 2297.552692][ T4139] usb 6-1: Manufacturer: syz [ 2297.557691][ T4139] usb 6-1: SerialNumber: syz [ 2297.608442][ T5290] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2297.851783][ T4139] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2297.880714][ T4139] usb 6-1: MIDIStreaming interface descriptor not found [ 2298.094526][ T4139] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 2298.106681][ T4139] usb 6-1: can't set first interface for hiFace device. [ 2298.125048][ T4139] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 2298.159036][ T4139] usb 6-1: USB disconnect, device number 25 [ 2298.190264][T28964] udevd[28964]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2298.606227][ T4139] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2298.625314][T28244] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2298.805880][ T4139] usb 6-1: Using ep0 maxpacket: 8 [ 2298.812805][T28244] usb 5-1: Using ep0 maxpacket: 8 [ 2298.823920][ T4139] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2298.833545][T28244] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2298.836456][ T4139] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 2298.856011][T28244] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2298.903595][T28244] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2298.903736][ T4139] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2298.910491][T28244] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 2298.910522][T28244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.913346][T28244] usb 5-1: config 0 descriptor?? [ 2298.954446][ T4139] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2298.976823][ T4139] usb 6-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 2298.988993][ T4139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.048092][ T4139] usb 6-1: Product: syz [ 2299.067520][ T4139] usb 6-1: Manufacturer: syz [ 2299.072196][ T4139] usb 6-1: SerialNumber: syz [ 2299.109295][ T5290] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2299.552391][ T4139] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2299.614600][ T4139] usb 6-1: MIDIStreaming interface descriptor not found [ 2299.809642][ T4139] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 2299.820853][ T5290] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2300.074096][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8745'. [ 2300.180918][ T4139] usb 6-1: USB disconnect, device number 26 [ 2300.462091][T28964] udevd[28964]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2300.500513][T30348] udevd[30348]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2301.308996][T28244] usb 5-1: string descriptor 0 read error: -71 [ 2301.320307][T28244] uclogic 0003:5543:0045.00C9: failed retrieving string descriptor #200: -71 [ 2301.330106][T28244] uclogic 0003:5543:0045.00C9: failed retrieving pen parameters: -71 [ 2301.346181][T28244] uclogic 0003:5543:0045.00C9: failed probing pen v2 parameters: -71 [ 2301.354589][T28244] uclogic 0003:5543:0045.00C9: failed probing parameters: -71 [ 2301.362845][T28244] uclogic 0003:5543:0045.00C9: probe with driver uclogic failed with error -71 [ 2301.438340][T28244] usb 5-1: USB disconnect, device number 44 [ 2305.695033][ T5272] tipc: Enabled bearer , priority 0 [ 2305.779846][ T5261] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8740'. [ 2305.900127][ T5259] tipc: Resetting bearer [ 2306.002729][ T5259] tipc: Disabling bearer [ 2306.068253][ T4866] syz_tun (unregistering): left allmulticast mode [ 2306.197805][ T4140] usb 4-1: USB disconnect, device number 105 [ 2306.797755][ T809] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2306.978186][ T809] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2307.020008][ T809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2307.059099][ T809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2307.096163][ T809] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2307.154481][ T809] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2307.172868][ T809] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2307.211728][ T809] usb 9-1: Manufacturer: syz [ 2307.244592][ T809] usb 9-1: config 0 descriptor?? [ 2307.297060][T30003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.674074][ T5362] input: syz0 as /devices/virtual/input/input501 [ 2307.689490][ T809] appleir 0003:05AC:8243.00CA: unknown main item tag 0x0 [ 2307.744805][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8764'. [ 2307.896301][ T809] appleir 0003:05AC:8243.00CA: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2307.947251][T30003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.326650][T30003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.382115][ T5331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2308.514757][T30003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.617316][ T809] usb 9-1: USB disconnect, device number 2 [ 2309.283565][T30003] bridge_slave_1: left allmulticast mode [ 2309.308447][T30003] bridge_slave_1: left promiscuous mode [ 2309.316477][T30003] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.332424][T30003] bridge_slave_0: left allmulticast mode [ 2309.345385][T30003] bridge_slave_0: left promiscuous mode [ 2309.359151][T30003] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.936101][ T4140] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 2309.957569][ T5400] vivid-001: ================= START STATUS ================= [ 2309.989816][ T5400] vivid-001: Radio HW Seek Mode: Bounded [ 2310.010607][ T5400] vivid-001: Radio Programmable HW Seek: false [ 2310.030158][ T5400] vivid-001: RDS Rx I/O Mode: Block I/O [ 2310.056625][ T5400] vivid-001: Generate RBDS Instead of RDS: false [ 2310.090256][ T5400] vivid-001: RDS Reception: true [ 2310.096809][ T5400] vivid-001: RDS Program Type: 0 inactive [ 2310.146680][ T4140] usb 7-1: config 0 has an invalid interface number: 33 but max is 0 [ 2310.156711][ T5400] vivid-001: RDS PS Name: inactive [ 2310.175408][ T5400] vivid-001: RDS Radio Text: inactive [ 2310.181103][ T5400] vivid-001: RDS Traffic Announcement: false inactive [ 2310.182847][ T4140] usb 7-1: config 0 has no interface number 0 [ 2310.190830][ T5400] vivid-001: RDS Traffic Program: false inactive [ 2310.200850][ T5400] vivid-001: RDS Music: false inactive [ 2310.225483][ T5400] vivid-001: ================== END STATUS ================== [ 2310.242658][ T4140] usb 7-1: string descriptor 0 read error: -22 [ 2310.259895][ T4140] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 2310.292861][ T4140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.320336][T30003] gretap0 (unregistering): left promiscuous mode [ 2310.331702][ T4140] usb 7-1: config 0 descriptor?? [ 2310.350842][ T4140] usbtest 7-1:0.33: FX2 device [ 2310.362359][ T4140] usbtest 7-1:0.33: low-speed {control intr-in intr-out} tests (+alt) [ 2310.501499][T30003] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2310.604285][T30003] team0: Port device bond0 removed [ 2310.614346][T30003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2310.629574][ T5413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.639315][T30003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2310.645500][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2310.659664][T30003] bond0 (unregistering): Released all slaves [ 2310.680044][T30003] bond1 (unregistering): Released all slaves [ 2310.694345][T30003] bond2 (unregistering): Released all slaves [ 2310.733829][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2310.762556][ T4149] usb 7-1: USB disconnect, device number 16 [ 2311.127118][T30003] tipc: Disabling bearer [ 2311.210546][T30003] tipc: Left network mode [ 2312.094683][ T5441] netlink: 'syz.5.8779': attribute type 5 has an invalid length. [ 2312.134630][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8779'. [ 2312.223385][ T5441] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8779'. [ 2312.397717][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 2312.397735][ T30] audit: type=1326 audit(1783312852.909:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2312.601370][ T30] audit: type=1326 audit(1783312852.909:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2312.707654][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8778'. [ 2312.746885][ T30] audit: type=1326 audit(1783312852.909:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2312.776368][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8777'. [ 2312.803496][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8778'. [ 2312.863579][ T5455] netlink: 'syz.8.8778': attribute type 4 has an invalid length. [ 2312.900266][ T30] audit: type=1326 audit(1783312852.919:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2312.926927][ T5455] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8778'. [ 2312.981966][ T5456] netlink: 125 bytes leftover after parsing attributes in process `syz.8.8778'. [ 2313.023737][ T30] audit: type=1326 audit(1783312852.919:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2313.101121][ T5456] netlink: 125 bytes leftover after parsing attributes in process `syz.8.8778'. [ 2313.156808][ T30] audit: type=1326 audit(1783312852.949:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2313.282030][ T30] audit: type=1326 audit(1783312852.949:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2313.398786][ T30] audit: type=1326 audit(1783312852.949:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2313.491232][ T30] audit: type=1326 audit(1783312852.949:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2313.613329][ T30] audit: type=1326 audit(1783312852.969:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.6.8781" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 2313.758275][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2313.881630][ T5468] input: syz0 as /devices/virtual/input/input502 [ 2313.938668][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8783'. [ 2314.105730][ T809] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2314.262821][ T4140] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2314.289140][ T809] usb 7-1: Using ep0 maxpacket: 32 [ 2314.311509][ T809] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.341985][ T809] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.374207][ T809] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2314.461024][ T809] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2314.470215][ T4140] usb 5-1: Using ep0 maxpacket: 16 [ 2314.484589][ T4140] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.499981][ T809] usb 7-1: Product: syz [ 2314.515186][ T4140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2314.526324][ T809] usb 7-1: Manufacturer: syz [ 2314.556562][ T4140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2314.574480][ T809] hub 7-1:4.0: USB hub found [ 2314.586740][ T5491] vivid-001: ================= START STATUS ================= [ 2314.597247][ T4140] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2314.607983][ T5491] vivid-001: Radio HW Seek Mode: Bounded [ 2314.613780][ T5491] vivid-001: Radio Programmable HW Seek: false [ 2314.620767][ T4140] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2314.635034][ T5491] vivid-001: RDS Rx I/O Mode: Block I/O [ 2314.641303][ T5491] vivid-001: Generate RBDS Instead of RDS: false [ 2314.705658][ T5491] vivid-001: RDS Reception: true [ 2314.729261][ T5491] vivid-001: RDS Program Type: 0 inactive [ 2314.743538][ T4140] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2314.748225][ T5491] vivid-001: RDS PS Name: inactive [ 2314.753614][ T4140] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2314.759630][ T5491] vivid-001: RDS Radio Text: inactive [ 2314.778042][ T5491] vivid-001: RDS Traffic Announcement: false inactive [ 2314.787283][ T5491] vivid-001: RDS Traffic Program: false inactive [ 2314.794215][ T809] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 2314.802434][ T5491] vivid-001: RDS Music: false inactive [ 2314.803000][ T5491] vivid-001: ================== END STATUS ================== [ 2314.835854][ T4140] usb 5-1: Manufacturer: syz [ 2314.862043][ T4140] usb 5-1: config 0 descriptor?? [ 2315.073213][ T5502] FAULT_INJECTION: forcing a failure. [ 2315.073213][ T5502] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.085958][ T5502] CPU: 0 UID: 0 PID: 5502 Comm: syz.8.8791 Tainted: G L syzkaller #0 PREEMPT(full) [ 2315.085987][ T5502] Tainted: [L]=SOFTLOCKUP [ 2315.085994][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2315.086005][ T5502] Call Trace: [ 2315.086013][ T5502] [ 2315.086020][ T5502] dump_stack_lvl+0xe8/0x150 [ 2315.086052][ T5502] should_fail_ex+0x40c/0x560 [ 2315.086077][ T5502] should_failslab+0xa8/0x100 [ 2315.086104][ T5502] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2315.086125][ T5502] ? skb_clone+0x212/0x3a0 [ 2315.086140][ T5502] ? skb_clone+0x212/0x3a0 [ 2315.086161][ T5502] skb_clone+0x212/0x3a0 [ 2315.086177][ T5502] ? ip_icmp_error+0x2b/0x920 [ 2315.086204][ T5502] ip_icmp_error+0x38/0x920 [ 2315.086236][ T5502] raw_icmp_error+0x7cd/0xca0 [ 2315.086263][ T5502] ? raw_icmp_error+0x150/0xca0 [ 2315.086286][ T5502] icmp_socket_deliver+0x10a/0x3f0 [ 2315.086308][ T5502] icmp_unreach+0x523/0x920 [ 2315.086330][ T5502] icmp_rcv+0xd33/0x1290 [ 2315.086360][ T5502] ? __pfx_icmp_rcv+0x10/0x10 [ 2315.086386][ T5502] ip_protocol_deliver_rcu+0x2dc/0x440 [ 2315.086406][ T5502] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 2315.086426][ T5502] ip_local_deliver_finish+0x3bb/0x6f0 [ 2315.086453][ T5502] NF_HOOK+0x336/0x3c0 [ 2315.086472][ T5502] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2315.086490][ T5502] ? NF_HOOK+0x9e/0x3c0 [ 2315.086508][ T5502] ? __pfx_NF_HOOK+0x10/0x10 [ 2315.086529][ T5502] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2315.086554][ T5502] ? ip_local_deliver+0x113/0x190 [ 2315.086574][ T5502] NF_HOOK+0x336/0x3c0 [ 2315.086594][ T5502] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2315.086613][ T5502] ? NF_HOOK+0x9e/0x3c0 [ 2315.086631][ T5502] ? __pfx_NF_HOOK+0x10/0x10 [ 2315.086652][ T5502] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2315.086675][ T5502] ? netif_receive_skb+0x102/0xbf0 [ 2315.086703][ T5502] ? __pfx_ip_rcv+0x10/0x10 [ 2315.086721][ T5502] netif_receive_skb+0x45b/0xbf0 [ 2315.086747][ T5502] ? __pfx_netif_receive_skb+0x10/0x10 [ 2315.086773][ T5502] ? rcu_is_watching+0x15/0xb0 [ 2315.086798][ T5502] ? tun_rx_batched+0x185/0x790 [ 2315.086827][ T5502] tun_rx_batched+0x1de/0x790 [ 2315.086856][ T5502] ? __pfx_tun_rx_batched+0x10/0x10 [ 2315.086880][ T5502] ? tun_get_user+0x2717/0x4370 [ 2315.086904][ T5502] ? tun_get_user+0x2717/0x4370 [ 2315.086929][ T5502] ? tun_get_user+0x23cb/0x4370 [ 2315.086953][ T5502] ? tun_get_user+0x23cb/0x4370 [ 2315.086974][ T5502] ? __local_bh_enable_ip+0xd0/0x130 [ 2315.086994][ T5502] ? tun_get_user+0x2717/0x4370 [ 2315.087018][ T5502] ? tun_get_user+0x2717/0x4370 [ 2315.087043][ T5502] tun_get_user+0x2b44/0x4370 [ 2315.087091][ T5502] ? aa_file_perm+0x4ed/0x15f0 [ 2315.087112][ T5502] ? __pfx_tun_get_user+0x10/0x10 [ 2315.087140][ T5502] ? __lock_acquire+0x683/0x2cf0 [ 2315.087181][ T5502] ? ref_tracker_alloc+0x341/0x4b0 [ 2315.087202][ T5502] ? get_pid_task+0x20/0x1f0 [ 2315.087230][ T5502] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2315.087255][ T5502] ? tun_get+0x1c/0x2f0 [ 2315.087281][ T5502] ? tun_get+0x1c/0x2f0 [ 2315.087312][ T5502] ? tun_get+0x1c/0x2f0 [ 2315.087335][ T5502] ? tun_get+0x1c/0x2f0 [ 2315.087365][ T5502] tun_chr_write_iter+0x113/0x200 [ 2315.087392][ T5502] vfs_write+0x612/0xba0 [ 2315.087434][ T5502] ? __pfx_vfs_write+0x10/0x10 [ 2315.087473][ T5502] ? __fget_files+0x2a/0x420 [ 2315.087507][ T5502] ksys_write+0x150/0x270 [ 2315.087539][ T5502] ? __pfx_ksys_write+0x10/0x10 [ 2315.087571][ T5502] ? asm_int80_emulation+0x1a/0x20 [ 2315.087597][ T5502] do_int80_emulation+0x19a/0x550 [ 2315.087625][ T5502] ? trace_irq_disable+0x3b/0x140 [ 2315.087648][ T5502] ? asm_int80_emulation+0x1a/0x20 [ 2315.087666][ T5502] ? clear_bhb_loop+0x40/0x90 [ 2315.087685][ T5502] ? clear_bhb_loop+0x40/0x90 [ 2315.087716][ T5502] asm_int80_emulation+0x1a/0x20 [ 2315.087735][ T5502] RIP: 0023:0xf71b71eb [ 2315.087753][ T5502] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2315.087770][ T5502] RSP: 002b:00000000f547644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2315.087790][ T5502] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 2315.087804][ T5502] RDX: 00000000000000c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 2315.087816][ T5502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2315.087828][ T5502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2315.087840][ T5502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2315.087870][ T5502] [ 2315.196343][ T4140] rc_core: IR keymap rc-hauppauge not found [ 2315.693813][T30003] veth1_to_team: left promiscuous mode [ 2315.787272][ T4140] Registered IR keymap rc-empty [ 2315.801065][T30003] hsr_slave_0: left promiscuous mode [ 2315.831878][T30003] hsr_slave_1: left promiscuous mode [ 2315.847315][T30003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2315.861526][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2315.890346][T30003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2315.919534][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2315.935961][T30003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2315.980950][ T4140] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2316.015799][T30003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2316.055426][ T4140] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input503 [ 2316.114442][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.164730][T30003] dummy0: left promiscuous mode [ 2316.171608][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.189356][T30003] veth1_macvtap: left promiscuous mode [ 2316.202781][T30003] veth0_macvtap: left promiscuous mode [ 2316.226000][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.258730][T30003] veth1_vlan: left promiscuous mode [ 2316.266196][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.279252][T30003] veth0_vlan: left promiscuous mode [ 2316.309882][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.366402][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.416372][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.449302][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.486417][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.517379][ T4140] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2316.561020][ T4140] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2316.584695][ T4140] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2316.606238][ T5521] input: syz0 as /devices/virtual/input/input504 [ 2317.045764][ T4139] usb 5-1: USB disconnect, device number 45 [ 2317.798130][T30003] team0 (unregistering): Port device team_slave_1 removed [ 2317.874218][T30003] team0 (unregistering): Port device team_slave_0 removed [ 2318.283832][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2318.897450][ T4149] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2319.116692][ T4149] usb 6-1: Using ep0 maxpacket: 8 [ 2319.175372][ T4149] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2319.193644][ T4149] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2319.214703][ T4149] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2319.276425][ T4149] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2319.290139][ T4149] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2319.307819][ T4149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.494922][ T5556] fuse: Bad value for 'fd' [ 2319.576905][ T4149] usb 6-1: GET_CAPABILITIES returned 0 [ 2319.582472][ T4149] usbtmc 6-1:16.0: can't read capabilities [ 2319.673227][T30003] IPVS: stop unused estimator thread 0... [ 2320.011441][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2320.200954][T23101] usb 7-1: USB disconnect, device number 17 [ 2320.295964][ T5567] vivid-004: ================= START STATUS ================= [ 2320.368194][ T5567] vivid-004: Radio HW Seek Mode: Bounded [ 2320.380368][ T4140] usb 6-1: USB disconnect, device number 27 [ 2320.388140][ T5567] vivid-004: Radio Programmable HW Seek: false [ 2320.416061][ T5567] vivid-004: RDS Rx I/O Mode: Block I/O [ 2320.448440][ T5567] vivid-004: Generate RBDS Instead of RDS: false [ 2320.493613][ T5570] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 2320.500254][ T5570] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2320.511301][ T5567] vivid-004: RDS Reception: true [ 2320.569277][ T5570] vhci_hcd vhci_hcd.0: Device attached [ 2320.570943][ T5567] vivid-004: RDS Program Type: [ 2320.578979][ T5574] vhci_hcd: connection closed [ 2320.591369][T26292] vhci_hcd vhci_hcd.6: stop threads [ 2320.623973][T26292] vhci_hcd vhci_hcd.6: release socket [ 2320.639029][T26292] vhci_hcd vhci_hcd.6: disconnect device [ 2320.667255][ T5567] 0 inactive [ 2320.681691][ T5567] vivid-004: RDS PS Name: inactive [ 2320.701864][ T5567] vivid-004: RDS Radio Text: inactive [ 2320.725820][ T5567] vivid-004: RDS Traffic Announcement: false inactive [ 2320.750307][ T5567] vivid-004: RDS Traffic Program: false inactive [ 2320.772783][ T5567] vivid-004: RDS Music: false inactive [ 2320.794615][ T5567] vivid-004: ================== END STATUS ================== [ 2321.007345][ T4140] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 2321.069799][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8802'. [ 2321.199235][ T4140] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 2321.223589][ T4140] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2321.273323][ T4140] usb 7-1: config 0 has no interface number 0 [ 2321.313214][ T4140] usb 7-1: config 0 interface 205 has no altsetting 0 [ 2321.362421][ T4140] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 2321.407650][ T4140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.454069][ T4140] usb 7-1: Product: syz [ 2321.470707][ T4140] usb 7-1: Manufacturer: syz [ 2321.490083][ T4140] usb 7-1: SerialNumber: syz [ 2321.531759][ T4140] usb 7-1: config 0 descriptor?? [ 2321.566841][ T4140] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 2321.604679][ T4140] dvb-usb: bulk message failed: -22 (3/0) [ 2321.638661][ T4140] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2321.664379][ T4140] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 2321.700003][ T4140] usb 7-1: media controller created [ 2321.730185][ T4140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2321.767685][ T4140] dvb-usb: bulk message failed: -22 (6/0) [ 2321.785024][ T4140] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 2321.826305][T10265] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2321.867700][ T4140] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input505 [ 2321.934410][ T4140] dvb-usb: schedule remote query interval to 150 msecs. [ 2321.969484][ T4140] dvb-usb: bulk message failed: -22 (3/0) [ 2321.995296][T10265] usb 5-1: Using ep0 maxpacket: 8 [ 2322.008539][T10265] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2322.015712][ T4140] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 2322.057404][T10265] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2322.083851][T10265] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2322.100644][T10265] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2322.114641][T10265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.125738][ T5705] dvb-usb: bulk message failed: -22 (1/0) [ 2322.131751][ T5705] dvb-usb: error while querying for an remote control event. [ 2322.150588][T10265] usb 5-1: Product: syz [ 2322.178766][T10265] usb 5-1: Manufacturer: syz [ 2322.203749][T10265] usb 5-1: SerialNumber: syz [ 2322.236385][T10265] usb 5-1: config 0 descriptor?? [ 2322.262007][ T5606] usb usb7: usbfs: process 5606 (syz.8.8811) did not claim interface 0 before use [ 2322.269483][T10265] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2322.345713][ T4140] dvb-usb: bulk message failed: -22 (1/0) [ 2322.351593][ T4140] dvb-usb: error while querying for an remote control event. [ 2322.492004][T10265] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 2322.502927][T10265] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2322.531493][T10265] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2322.545765][ T4140] dvb-usb: bulk message failed: -22 (1/0) [ 2322.551674][ T4140] dvb-usb: error while querying for an remote control event. [ 2322.735723][ T4140] dvb-usb: bulk message failed: -22 (1/0) [ 2322.748716][ T4140] dvb-usb: error while querying for an remote control event. [ 2322.935693][ T4140] dvb-usb: bulk message failed: -22 (1/0) [ 2322.942617][ T4140] dvb-usb: error while querying for an remote control event. [ 2323.105679][ T4140] dvb-usb: bulk message failed: -22 (1/0) [ 2323.117431][ T4140] dvb-usb: error while querying for an remote control event. [ 2323.135683][T10265] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2323.212549][ T4140] usb 7-1: USB disconnect, device number 18 [ 2323.259565][ T5618] input: syz0 as /devices/virtual/input/input506 [ 2323.273259][ T4140] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 2323.285164][T10265] usb 9-1: Using ep0 maxpacket: 8 [ 2323.298451][T10265] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2323.348170][T10265] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2323.368361][T10265] usb 9-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 2323.378002][T10265] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.386659][T10265] usb 9-1: Product: syz [ 2323.391216][T10265] usb 9-1: Manufacturer: syz [ 2323.410707][T10265] usb 9-1: SerialNumber: syz [ 2323.424927][T10265] usb 9-1: config 0 descriptor?? [ 2323.442597][T10265] radioshark 9-1:0.0: Invalid radioSHARK device [ 2323.449123][T10265] radioshark 9-1:0.0: probe with driver radioshark failed with error -22 [ 2323.474237][T10265] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2323.619302][ T5625] vivid-000: ================= START STATUS ================= [ 2323.628602][ T5625] vivid-000: Radio HW Seek Mode: Bounded [ 2323.634450][ T5625] vivid-000: Radio Programmable HW Seek: false [ 2323.641752][ T5705] usb 9-1: USB disconnect, device number 3 [ 2323.653833][ T5625] vivid-000: RDS Rx I/O Mode: Block I/O [ 2323.663171][ T5625] vivid-000: Generate RBDS Instead of RDS: false [ 2323.670435][ T5625] vivid-000: RDS Reception: true [ 2323.675906][ T5625] vivid-000: RDS Program Type: 0 inactive [ 2323.682559][ T5625] vivid-000: RDS PS Name: inactive [ 2323.688515][ T5625] vivid-000: RDS Radio Text: inactive [ 2323.694283][ T5625] vivid-000: RDS Traffic Announcement: false inactive [ 2323.701595][ T5625] vivid-000: RDS Traffic Program: false inactive [ 2323.710443][ T5625] vivid-000: RDS Music: false inactive [ 2323.718297][ T5625] vivid-000: ================== END STATUS ================== [ 2323.929595][ T5634] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8820'. [ 2324.086329][ T5705] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 2324.235302][ T4140] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2324.244737][ T5705] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2324.253607][ T5705] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.264456][ T5705] usb 7-1: config 0 has no interface number 0 [ 2324.271916][ T5705] usb 7-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 2324.282171][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 2324.290973][ T5705] usb 7-1: Product: syz [ 2324.298846][ T5705] usb 7-1: config 0 descriptor?? [ 2324.396195][ T4140] usb 6-1: Using ep0 maxpacket: 16 [ 2324.404232][ T4140] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2324.417436][ T4140] usb 6-1: config 42 has an invalid interface number: 178 but max is 0 [ 2324.423936][T10265] usb 5-1: USB disconnect, device number 46 [ 2324.427138][ T4140] usb 6-1: config 42 has no interface number 0 [ 2324.438945][ T4140] usb 6-1: config 42 interface 178 has no altsetting 0 [ 2324.453698][ T4140] usb 6-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 2324.469254][ T4140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.491278][ T4140] usb 6-1: Product: syz [ 2324.496275][ T4140] usb 6-1: Manufacturer: syz [ 2324.501044][ T4140] usb 6-1: SerialNumber: syz [ 2325.273260][ T4140] uvcvideo 6-1:42.178: Found multiple Units with ID 1 [ 2325.292225][ T4140] uvcvideo 6-1:42.178: Found UVC 0.00 device syz (045e:00f8) [ 2325.306536][ T4140] uvcvideo 6-1:42.178: No valid video chain found. [ 2325.322812][ T4140] usb 6-1: USB disconnect, device number 28 [ 2325.420796][ T5656] pim6reg: entered allmulticast mode [ 2325.522822][ T5644] team0: entered allmulticast mode [ 2325.546865][ T5644] team_slave_0: entered allmulticast mode [ 2325.579145][ T5644] team_slave_1: entered allmulticast mode [ 2325.602922][ T5645] team0: left allmulticast mode [ 2325.628623][ T5645] team_slave_0: left allmulticast mode [ 2325.652627][ T5645] team_slave_1: left allmulticast mode [ 2325.669885][ T5645] pim6reg: left allmulticast mode [ 2325.704718][ T4140] usb 7-1: USB disconnect, device number 19 [ 2325.711074][ T5705] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2325.886623][ T5705] usb 9-1: Using ep0 maxpacket: 16 [ 2325.897964][ T5705] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.927563][ T5705] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2325.943863][ T5705] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2325.977255][ T5705] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.000026][ T5705] usb 9-1: config 0 descriptor?? [ 2326.053809][ T5665] 8021q: VLANs not supported on lo [ 2326.120228][ T5671] fuse: Unknown parameter '0x0000000000000004' [ 2326.444173][ T5705] nzxt-smart2 0003:1E71:2009.00CB: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 2326.449008][T10265] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2326.646195][T10265] usb 6-1: Using ep0 maxpacket: 8 [ 2326.653305][ T5658] RDS: rds_bind could not find a transport for 0:0:100::, load rds_tcp or rds_rdma? [ 2326.669917][T10265] usb 6-1: too many configurations: 201, using maximum allowed: 8 [ 2326.699083][T10265] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2326.716205][T10265] usb 6-1: can't read configurations, error -61 [ 2326.846120][T10265] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2326.923048][ T5705] usb 9-1: USB disconnect, device number 4 [ 2327.015182][T10265] usb 6-1: Using ep0 maxpacket: 8 [ 2327.030632][T10265] usb 6-1: too many configurations: 201, using maximum allowed: 8 [ 2327.052208][T10265] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2327.074160][T10265] usb 6-1: can't read configurations, error -61 [ 2327.101211][T10265] usb usb6-port1: attempt power cycle [ 2327.225876][ T4138] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2327.405548][ T4138] usb 5-1: Using ep0 maxpacket: 16 [ 2327.419536][ T4138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2327.445315][T10265] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2327.457877][ T4138] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 2327.486282][T10265] usb 6-1: Using ep0 maxpacket: 8 [ 2327.496812][ T4138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.498322][T10265] usb 6-1: too many configurations: 201, using maximum allowed: 8 [ 2327.530364][ T4138] usb 5-1: Product: syz [ 2327.533959][T10265] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2327.547279][T10265] usb 6-1: can't read configurations, error -61 [ 2327.558795][ T4138] usb 5-1: Manufacturer: syz [ 2327.560941][ T5697] input: syz0 as /devices/virtual/input/input507 [ 2327.572123][ T4138] usb 5-1: SerialNumber: syz [ 2327.591854][ T4138] usb 5-1: config 0 descriptor?? [ 2327.706477][T10265] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2327.748543][T10265] usb 6-1: Using ep0 maxpacket: 8 [ 2327.754467][T10265] usb 6-1: too many configurations: 201, using maximum allowed: 8 [ 2327.769180][ T5699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2327.771310][T10265] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2327.791546][T10265] usb 6-1: can't read configurations, error -61 [ 2327.802722][T10265] usb usb6-port1: unable to enumerate USB device [ 2327.859208][ T4140] usb 5-1: USB disconnect, device number 47 [ 2327.934345][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.942004][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.104082][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2328.129187][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2328.386060][ T5702] FAULT_INJECTION: forcing a failure. [ 2328.386060][ T5702] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.399990][T30004] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.410037][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: syz.6.8839 Tainted: G L syzkaller #0 PREEMPT(full) [ 2328.410068][ T5702] Tainted: [L]=SOFTLOCKUP [ 2328.410075][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2328.410086][ T5702] Call Trace: [ 2328.410095][ T5702] [ 2328.410103][ T5702] dump_stack_lvl+0xe8/0x150 [ 2328.410136][ T5702] should_fail_ex+0x40c/0x560 [ 2328.410165][ T5702] should_failslab+0xa8/0x100 [ 2328.410194][ T5702] __kmalloc_noprof+0xfe/0x720 [ 2328.410218][ T5702] ? rcu_is_watching+0x15/0xb0 [ 2328.410246][ T5702] ? tomoyo_realpath_from_path+0xef/0x640 [ 2328.410266][ T5702] ? tomoyo_realpath_from_path+0xef/0x640 [ 2328.410294][ T5702] tomoyo_realpath_from_path+0xef/0x640 [ 2328.410325][ T5702] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2328.410353][ T5702] tomoyo_path_number_perm+0x246/0x5f0 [ 2328.410383][ T5702] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2328.410409][ T5702] ? __lock_acquire+0x683/0x2cf0 [ 2328.410444][ T5702] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 2328.410492][ T5702] ? __fget_files+0x2a/0x420 [ 2328.410520][ T5702] ? __fget_files+0x3a2/0x420 [ 2328.410543][ T5702] ? __fget_files+0x2a/0x420 [ 2328.410570][ T5702] security_file_ioctl_compat+0xc3/0x2a0 [ 2328.410599][ T5702] __ia32_compat_sys_ioctl+0x139/0x950 [ 2328.410622][ T5702] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2328.410643][ T5702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2328.410672][ T5702] ? __fget_files+0x3a2/0x420 [ 2328.410703][ T5702] ? fput+0xa0/0xd0 [ 2328.410726][ T5702] ? ksys_write+0x242/0x270 [ 2328.410766][ T5702] __do_fast_syscall_32+0x23e/0x6f0 [ 2328.410793][ T5702] ? do_fast_syscall_32+0x33/0x70 [ 2328.410817][ T5702] ? lockdep_hardirqs_on+0x7a/0x110 [ 2328.410840][ T5702] ? asm_int80_emulation+0x1a/0x20 [ 2328.410859][ T5702] ? do_int80_emulation+0x29f/0x550 [ 2328.410884][ T5702] ? trace_irq_disable+0x3b/0x140 [ 2328.410911][ T5702] do_fast_syscall_32+0x33/0x70 [ 2328.410944][ T5702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2328.410967][ T5702] RIP: 0023:0xf7f840ec [ 2328.410985][ T5702] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2328.411002][ T5702] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2328.411021][ T5702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa08 [ 2328.411034][ T5702] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.411047][ T5702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.411058][ T5702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2328.411069][ T5702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.411095][ T5702] [ 2328.411158][ T5702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2328.427283][T30004] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.428245][T30004] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.785700][T30004] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.821955][ T5704] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2329.425744][ T809] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 2329.523436][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8850'. [ 2329.580907][ T809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2329.617713][ T809] usb 7-1: not running at top speed; connect to a high speed hub [ 2329.626186][ T5737] loop2: detected capacity change from 0 to 7 [ 2329.653867][ T5737] Dev loop2: unable to read RDB block 7 [ 2329.655825][ T809] usb 7-1: config 11 has an invalid interface number: 72 but max is 0 [ 2329.665011][ T5737] loop2: unable to read partition table [ 2329.676075][ T5737] loop2: partition table beyond EOD, truncated [ 2329.682684][ T5737] loop_reread_partitions: partition scan of loop2 (被x]4 ) failed (rc=-5) [ 2329.715736][ T809] usb 7-1: config 11 has no interface number 0 [ 2329.722637][ T809] usb 7-1: config 11 interface 72 has no altsetting 0 [ 2329.749142][ T809] usb 7-1: New USB device found, idVendor=046d, idProduct=e068, bcdDevice=ce.f8 [ 2329.762834][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.798761][ T4992] Dev loop2: unable to read RDB block 7 [ 2329.807662][ T809] usb 7-1: Product: syz [ 2329.819135][ T809] usb 7-1: Manufacturer: syz [ 2329.824312][ T4992] loop2: unable to read partition table [ 2329.829538][ T809] usb 7-1: SerialNumber: syz [ 2329.838260][ T4992] loop2: partition table beyond EOD, truncated [ 2330.106901][ T809] usb 7-1: USB disconnect, device number 20 [ 2331.019490][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8882'. [ 2331.035338][T10265] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2331.200090][T10265] usb 9-1: Using ep0 maxpacket: 16 [ 2331.239784][T10265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2331.280201][T10265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2331.306574][T10265] usb 9-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 2331.340509][T10265] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.372163][T10265] usb 9-1: config 0 descriptor?? [ 2331.804391][T10265] wacom 0003:056A:0084.00CC: item fetching failed at offset 5/11 [ 2331.828081][T10265] wacom 0003:056A:0084.00CC: parse failed [ 2331.834045][T10265] wacom 0003:056A:0084.00CC: probe with driver wacom failed with error -22 [ 2332.008205][ T4138] usb 9-1: USB disconnect, device number 5 [ 2344.838467][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.844941][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2403.246876][T22197] Bluetooth: hci1: command 0x0406 tx timeout [ 2406.277905][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.292107][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2408.367585][T22197] Bluetooth: hci6: command 0x0406 tx timeout [ 2467.716747][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.723115][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2509.553873][T30015] gretap0 (unregistering): left promiscuous mode [ 2509.622784][T30015] batman_adv: batadv0: Removing interface: macsec2 [ 2509.704888][T30015] : left promiscuous mode [ 2509.793037][T30015] tipc: Left network mode [ 2509.937175][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2510.683205][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2510.760197][T30015] veth1_to_team: left promiscuous mode [ 2510.790128][T30015] hsr_slave_0: left promiscuous mode [ 2510.801190][T30015] hsr_slave_1: left promiscuous mode [ 2511.367972][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2511.819560][T30015] IPVS: stop unused estimator thread 0... [ 2512.090943][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2529.156410][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.162893][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.596771][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.603231][ T1317] ieee802154 phy1 wpan1: encryption failed: -22