last executing test programs: 9.555207362s ago: executing program 3 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x222400, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x20040050}, 0x20008000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x411, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x7059d, 0x44614}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2aec1bde69326bcb}, 0x20048000) 8.451589508s ago: executing program 4 (id=561): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x40f1, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000040)='fd/3\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r2) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 7.970959954s ago: executing program 4 (id=563): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x84}], 0x1, 0x3ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x8040, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000400)=""/254, 0xfe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x81ff, 0x0) vmsplice(r3, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x7ff, 0xfa11, 0xff7fffff}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x10, @loopback, 0x80000}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000ac0)={0x40, 0x4, 0x53, {0x53, 0x2, "d6cad23fb933daccf712fdccfef892b8141e05ca8624a8843961eae9cdff2ba0447c6a6ac2a9d6235188f41247fa018ef22405125f94fe798e71f63ebfa007cf22b4d50fac6429c3fbf1a128c01414d6ba"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000b80)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, '\x00 '}, @main=@item_012={0x1, 0x0, 0xa, '$'}, @main=@item_012={0x2, 0x0, 0x9, "ecfc"}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x272}}}}, &(0x7f0000000e00)={0x18, &(0x7f0000000c40)={0x40, 0x5, 0x51, "710e44b1ac2b5be6a621a9a7a3838e9d24b175f708b5a83daab98359c291f7c15a30312849dea751320d38d42ada585d45b1aa9da6794278bf1c89e03d211d28d4a2b840fbf60b8ce870e28245ae156223"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x6a, "d1ab51975d5f002f31807e83159ca3b62a5fd7cdc18f1d8208b65aae6ff7afa1d0f04ed029c9e3ca37a225662753737d4b55480b97c7c3dd84396536803353059ef489aaeb1e97b6584c85203bb1a79969111ab7a43b0e6d350ae62f1c2420c09d946d626cc82765d213"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x9}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000180)) 7.819441936s ago: executing program 3 (id=564): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x2, 0x3, 0x3, 0xb, 0x0, 0xffffffffffffffc0, 0x1}]}, &(0x7f0000001fc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 30) 7.818901402s ago: executing program 0 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000001e00)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000008c0)) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYBLOB='Y'], 0x0) 7.23851427s ago: executing program 3 (id=567): syz_io_uring_setup(0x54a0, &(0x7f0000000140)={0x0, 0x1e9a, 0x400, 0x3, 0x5b}, &(0x7f00000001c0), &(0x7f0000000040), 0x0) (async, rerun: 64) symlinkat(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') (async, rerun: 64) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00') timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003d00)=ANY=[@ANYBLOB="14000000100001000000ffff000000000200000a24000000000a010800000000000000000a0000000800024000000000080002400000000148004c00030a010100000000000000000a000000080007006e61740014000480080002400000000008000140000000000900010073797a31000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x46, 0x0) (async) openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r5, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="842cd9", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="289da3d6e9ee7a9d370000006200000030a1000010000000290000004300000001000080587abfac99dde97b78ea34cd6d77339e973b5f2d061a2c12be85b79249911c62c16ce95f3877147aa1d7ee2cdaacc74f0855fb401d5670d57fc1bc30145aea514ab3384496efdfe31e05000000000000000976c9415619b726f91a5e076db26649526517ffa356969af99f22d27788af0cfe4e578b007398bcc9f0b05eeab81bff03cb1a1033fcecc9e39ed8e9adaedd0522ecfd9ff62528612f40126afad43e641e16a1dbc6e2190a7f51ea9131f826"], 0x24}}], 0x2, 0x4404c880) (async, rerun: 32) readv(r4, 0x0, 0x0) (async) timer_getoverrun(r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) futex_waitv(&(0x7f00000031c0)=[{0xfffffffffffffff8, &(0x7f0000000280)=0x101, 0x2}, {0x1ff, &(0x7f0000000300)=0xfffffffffffffe01, 0x2}, {0x0, &(0x7f0000000480)=0x3, 0x82}, {0x5, &(0x7f00000004c0), 0x82}, {0x43, &(0x7f0000000500)=0x3fb, 0x2}, {0x80000000, &(0x7f0000000540), 0x82}, {0x7fff, &(0x7f0000000580)=0x8, 0x2}, {0x2, &(0x7f00000005c0)=0xa2, 0x82}, {0x8, &(0x7f0000000600)=0x9, 0x82}, {0x5, &(0x7f0000000640)=0x17, 0x2}, {0x8, &(0x7f0000000680)=0x4, 0x2}, {0x2, &(0x7f00000006c0)=0x1e2982ff, 0x2}, {0xe32, &(0x7f0000000700)=0xac, 0x2}, {0x9, &(0x7f0000000740)=0xfb, 0x82}, {0x2, &(0x7f0000000780)=0x9, 0x2}, {0x6, &(0x7f00000007c0)=0x100, 0x80}, {0x10, &(0x7f0000000800)=0x3, 0x82}, {0x7bf, &(0x7f0000000840)=0x80000000, 0x82}, {0x2, &(0x7f0000000880)=0x9, 0x82}, {0x140000000000, &(0x7f00000008c0)=0xd6, 0x2}, {0x7e59, &(0x7f0000000900)=0x4, 0x82}, {0x800000, &(0x7f0000000940)=0x4d08, 0x82}, {0x8000, &(0x7f0000000980), 0x2}, {0x400, &(0x7f00000009c0)=0x8000, 0x2}, {0xc, &(0x7f0000000a00)=0x8, 0x2}, {0xd, &(0x7f0000000a40)=0x8, 0x82}, {0x7fffffffffffffff, &(0x7f0000000a80)=0x3, 0x82}, {0x3, &(0x7f0000000ac0)=0x1, 0x2}, {0x2, &(0x7f0000000b00)=0x2, 0x2}, {0x6, &(0x7f0000000b40)=0xfffffffffffffff8, 0x2}, {0x7fff, &(0x7f0000000b80)=0x7ffc, 0x82}, {0x3, &(0x7f0000000bc0), 0x82}, {0xd6, &(0x7f0000000c00)=0x4, 0x104}, {0xfffffffffffff120, &(0x7f0000000c40)=0x7, 0x2}, {0xffffffffffffffff, &(0x7f0000000c80)=0x6, 0x2}, {0x0, &(0x7f0000000cc0)=0x2, 0x2}, {0x0, &(0x7f0000000d00)=0x84b, 0x2}, {0x4, &(0x7f0000000d40)=0x4, 0x2}, {0x40000000006, &(0x7f0000000d80)=0x4, 0x2}, {0x0, &(0x7f0000000dc0)=0x5, 0x2}, {0xc16d, &(0x7f0000000e00)=0xa15, 0x147}, {0x4, &(0x7f0000000e40)=0x6, 0x82}, {0x7fff, &(0x7f0000000e80)=0x7, 0x82}, {0x40, &(0x7f0000000ec0)=0x1, 0x2}, {0x5, &(0x7f0000000f00)=0xffffffffffffffff, 0x82}, {0x6, &(0x7f0000000f40)=0x3, 0x82}, {0xf, &(0x7f0000000f80)=0xf4f, 0x82}, {0x0, &(0x7f0000000fc0)=0xfffffffffffff001, 0x2}, {0x6, &(0x7f0000001000)=0x1, 0x2}, {0x847, &(0x7f0000001040)=0x9f63, 0x2}, {0x8, &(0x7f0000001080)=0x81, 0x2}, {0x4, &(0x7f00000010c0)=0xd9, 0x2}, {0x6e, &(0x7f0000001100)=0xd480, 0x2}, {0x9, &(0x7f0000001140)=0x400000ce, 0x82}, {0x7, &(0x7f0000001180)=0x81, 0x82}, {0xa023, &(0x7f00000011c0)=0x3e1c, 0x2}, {0x9, &(0x7f0000001200)=0x4b, 0x2}, {0xfffffffffffffffe, &(0x7f0000001240)=0x1ff, 0x82}, {0x0, &(0x7f0000001280)=0xd, 0x2}, {0xfffffffffffffc01, &(0x7f00000012c0)=0x10001, 0x82}, {0xa99f, &(0x7f0000001300), 0x2}, {0x5, &(0x7f0000001340)=0x3, 0x82}, {0x100, &(0x7f0000001380)=0x6, 0x2}, {0x2, &(0x7f00000013c0)=0x9, 0x82}, {0x80000000, &(0x7f0000001400)=0x1, 0x2}, {0x203a, &(0x7f0000001440)=0xb, 0x82}, {0x1, &(0x7f0000001480)=0x38, 0x82}, {0x8, &(0x7f00000014c0)=0xfffffffffffffffc, 0x106}, {0x9, &(0x7f0000001500)=0x3, 0x2}, {0x10, &(0x7f0000001540)=0xc4eb, 0x2}, {0x5, &(0x7f0000001580)=0x9658, 0x82}, {0x7, &(0x7f00000015c0)=0x5, 0x82}, {0x9, &(0x7f0000001600)=0x385, 0x2}, {0x0, &(0x7f0000001640)=0x2, 0x82}, {0xfffffffffffffe01, &(0x7f0000001680), 0x82}, {0x4f, &(0x7f00000016c0)=0x6, 0x2}, {0x506, &(0x7f0000001700)=0x5, 0x2}, {0x1, &(0x7f0000001740)=0x8, 0x82}, {0x4, &(0x7f0000001780)=0x4, 0x2}, {0x6, &(0x7f00000017c0)=0x5, 0x82}, {0xbe6, &(0x7f0000001800)=0x10000, 0x82}, {0x2, &(0x7f0000001840), 0x106}, {0x8, &(0x7f0000001880)=0x2, 0x2}, {0x2c76d0cf, &(0x7f00000018c0)=0x8, 0x2}, {0x4, &(0x7f0000001900)=0x96, 0x2}, {0x0, &(0x7f0000001940)=0x7766, 0x2}, {0xfffffffffffffffd, &(0x7f0000001980)=0x6}, {0xfffffffffffffffa, &(0x7f00000019c0)=0x4, 0x2}, {0x1, &(0x7f0000001a00)=0x9, 0x2}, {0x9, &(0x7f0000001a40)=0x270fdd54, 0x2}, {0xb, &(0x7f0000001a80)=0xff, 0x82}, {0xfffffffffffffffe, &(0x7f0000003dc0)=0x6, 0x82}, {0x8, &(0x7f0000001b00)=0x100000000}, {0x4, &(0x7f0000001b40)=0xce, 0x82}, {0x97, &(0x7f0000001b80)=0x6, 0x82}, {0x7, &(0x7f0000001bc0)=0x5, 0x82}, {0x0, &(0x7f0000001c00)=0x8, 0x2}, {0x95, &(0x7f0000001c40)=0x9}, {0x0, &(0x7f0000001c80)=0x2, 0x2}, {0x5, &(0x7f0000001cc0)=0x8, 0x82}, {0x9, &(0x7f0000001d00)=0x401, 0x2}, {0x5, &(0x7f0000001d40)=0xf44, 0x2}, {0x3, &(0x7f0000001d80)=0x5, 0x2}, {0xc6a, &(0x7f0000001dc0)=0x400000, 0x2}, {0x1000, &(0x7f0000001e00)=0x1, 0x2}, {0x9, &(0x7f0000001e40)=0xffffffff, 0x82}, {0x4, &(0x7f0000001e80)=0xfffffffffffffff7, 0x2}, {0x8, &(0x7f0000001ec0)=0xfffffffffffffffb, 0x2}, {0x8000000000000001, &(0x7f0000001f00)=0x5, 0x2}, {0x6, &(0x7f0000001f40)=0x10000, 0x82}, {0x8, &(0x7f0000001f80)=0x1, 0x2}, {0xfffffffffffffe00, &(0x7f0000001fc0)=0x1, 0x2}, {0xd, &(0x7f0000002000)=0xfffffffffffffffe, 0x2}, {0x7, &(0x7f0000002040)=0x8, 0x2}, {0x8, &(0x7f0000003080)=0x4, 0x80}, {0x8001, &(0x7f00000030c0)=0x8f5, 0x83}, {0x0, &(0x7f0000001ac0)=0x3, 0x2}, {0xa, &(0x7f0000003140)=0x8000000000000001, 0x2}, {0x2, &(0x7f0000003180)=0x7, 0x82}], 0x77, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$FE_SET_PROPERTY(r6, 0x40086f52, &(0x7f0000000340)={0x2b, &(0x7f0000000080)=[{0x3c, '\x00', @data=0x6, 0x1}]}) (async) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(0xffffffffffffffff, 0x800a6f2f, &(0x7f0000000200)) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 7.079390501s ago: executing program 1 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCGETSGCNT_IN6(r7, 0x89e1, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @remote}, @local}) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r9, 0x2000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r10, 0x1000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac1414bb"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x439, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_TOS={0x5, 0x9, 0x2}]}}}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r12 = syz_ublk_setup_io_uring(0x1c08, &(0x7f0000000100)={0x0, 0x2c4b, 0x8000, 0x1, 0x1c2}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_setup(0x206f, &(0x7f00000001c0)={0x0, 0x80023fb, 0x40, 0x0, 0x5f, 0x0, r12}) socket$inet6(0xa, 0x80802, 0x0) timerfd_create(0x0, 0x800) socket$l2tp(0x2, 0x2, 0x73) 5.959035479s ago: executing program 3 (id=571): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0x1, 0x87}) r5 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r5, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, &(0x7f00000014c0), &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5d, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0xfffffffc}) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b02000000000001090224"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x79, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x3, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "ce1d63"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x6, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @country_functional={0x10, 0x24, 0x7, 0x40, 0x9, [0x1, 0x9, 0x8001, 0x0, 0x9]}, @acm={0x4, 0x24, 0x2, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0xfb, 0x9}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x288, 0xe7, 0x2, 0x7, 0x8, 0xc}, 0xfd, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x6, [{0xb3, &(0x7f00000015c0)=@string={0xb3, 0x3, "f34b83aa9dc47cd765ff4694d08a40bb21c8a8df2fd409d45446b85b92aa09c36549d839eb86c3f586bdf3f1e79b3b04b7f8cefc51f50fcc1357d9a078587c0decc731ec2f29b71bc8184d61a53b298f0c41d077da41250a96f9534fade374c021e5b29ea5242f4a004ff5c9157c3d36f198a400e6d4ab6ff7dd9a2e9ff450fb94b92923b087ed1cdc075a0f6fa8b571c941eba68d33d1c3d0d7c6a1d3c963e9e30e8ac250272f1078d5cdb2a3b4b7ab07"}}, {0xca, &(0x7f0000001680)=ANY=[@ANYBLOB="ca03e7819bd4a88784cfda2321f0890287ce656d037a362d31c1daf92f1e6b225a399a9a0e950147c072f434dbb741c2fdf4e209d6a2dad9d91a3e5305a0d0a113bff6f56ec245509743431e02a8c06e7a99839059482629ca78a833398b66508df7c9e95e534fc8b67eb69ba4fe7349a6bdcee7c3ed69c0ffda0bc906c9db1fe86a4bf7a5bd550424fda1dbb33c3010e12917f4aaae34931cd1aae70ce50af75ad2cd009d104b315b4f766ca953e6b0421e4c7e52ca7e8cd867c6b2a098e85627e95de007137e81e16b"]}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0xc0a}}, {0x18, &(0x7f00000017c0)=@string={0x18, 0x3, "3ab2248e488d528e5960f031c1a631317edf7937f7c9"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x410}}, {0x9a, &(0x7f0000001840)=@string={0x9a, 0x3, "4f553a0e2a1edc6c656e4afec4cfa4140bae642b84d24939916b77aed8a50ff125ec27612b11054c26cb0000f05edf1efb2f28d774600a48e5d838b72a240daa58037b78d31dd0394488ab604d0a9dcb623e392ddc92debe9dbece7b3041a3efbb5767e3bb46c83c957cd9c3f4949bc26407c7c0ef464351377e6e4dd7675e9ef1a745a1e21a61071846d6ee5e7e4c8653e70292a901b486"}}]}) 5.7263685s ago: executing program 1 (id=572): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x7ff, 0x3}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x4, @empty, 0x3}], 0x2c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) r5 = openat$vmci(0xffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, 0x0) 5.014909148s ago: executing program 0 (id=575): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x3c00) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x4, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000c280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbb78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d155a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3315fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783f13cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b000000001034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db234687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a5aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0xfffffffffffffff9, {0x7, 0x3, 0x0, 0x20, 0xf, 0x4, {0x5, 0xfffffffffffffff7, 0x1000, 0x1, 0x9, 0x1, 0xfffffffa, 0x47, 0x0, 0x8000, 0xf8, r4, r5, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4901, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc01c586a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x7, 0x0, &(0x7f0000000400)=0x7}) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000040)={0x6, @pix_mp={0xfc, 0xffffffc0, 0x33524742, 0x8, 0x8, [{0x6, 0x8000}, {0x3, 0xfffffffe}, {0x5, 0x7}, {0x9, 0x81}, {0x5}, {0x8, 0x9d}, {0x7bd, 0x4000083e}, {0x7, 0x200}], 0xc, 0x82, 0x4, 0x1, 0x7}}) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r10, 0x501c4814, 0x0) ioctl$HIDIOCGUSAGE(r10, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) ppoll(&(0x7f00000000c0)=[{r8, 0x9000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x64) r11 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r11, &(0x7f00000082c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.79997485s ago: executing program 1 (id=576): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x200, r1, 0x818, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5f6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xda, 0x3, "f23aa31a44df6a65fcec8deabd59a02fc729f4a83e82c577c6d0fbb6b4a5aee7ac75a8df79a036571a7c0af4901a48bc7c75148b8de7cc658479b8cde0a8f226b56d821c0ed04d466a5b0c4dfdfd42121471c11f2b6ba935ee0e9fb026f8836f4f625938529b165e3c4e0e0cbff2fcb9503d6d08c50147a38f38a266c6cd779ee1f70c8e16dfd32158f01053dae5afe7a8d645ee40a86a69b15eb63e7804e64420e9c4287be3d6f08dbe9dedfcb5f39574442e778aa0227defdd81edbcf914e7309eaa96b30aa68eb16cf4b3e3686847c874027c23a8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000010}, 0xc001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc010) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r4 = dup2(r3, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000680)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x18) r7 = openat$vimc2(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000740)=0x40) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) (async) syz_usb_connect(0x2, 0xa00, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x52, 0x97, 0xe9, 0xff, 0x1bc7, 0x10aa, 0x616, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9ee, 0x3, 0x1, 0x3, 0x50, 0x3, "", [{{0x9, 0x4, 0xe4, 0x7, 0xd, 0xff, 0xba, 0x3a, 0x5e, [@generic={0xf1, 0x22, "a91b27cf002a89cf76e1fb3a2cd0a40d27a44f23302f2f85490a521fe8a280d888b1900c657dc39f19b72d8af9fb10634befec81032870e752915485149b04eb0377b2f9052e01de66938505eed52214d248dc154a4f4bd095d060aa875ec27c511355f15a437cf57a0efe23abb844d3302b22d0029fcb5fe32074829eb7493e358014656855ebac661cf45c5bf18bfc0455d616105fd703995c276cc7c136bf207df8857161385f67e8605bdbccbf9a78ec98fbaf637093fd66cb7fcd96a526a95f2dd19631a9460755c41f43463cbb89c51a5973ff3ed9b91df781efdfe91b18103e460dd5649d7a3d17e9bbd800"}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xb, 0x5, 0x0, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7, 0x7, 0x81}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xa0, 0x0, 0xea}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffd, 0x2, 0x4}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x741, 0xb287, 0x6, "469e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3ff, 0x2b, 0x2}]}], [{{0x9, 0x5, 0x0, 0xc, 0x200, 0x8, 0x1, 0x5, [@generic={0xec, 0x30, "15d443eaf374dc692d992d6901f6142532dcf4d935626036f804792705749e9263ba17f245e5db0f1732a49a825546b8f8a2bd74d334bd83507daa6f37cf9bc38ef4727478c503cc98fdccd50d9e024995d7393b0ac806ff71f24c56f1ff9ed8aaa5b2287a2b65d7788382dd655bc4e31c67f0b4721b5c4bc15113263e203b148a98f7914f85b909036aa57805ae09224d01a569b9f756e69b94be1e62af9a7c515f91d0401c7ae500f3dc88e18e0e4d4273f7958a45342b6cd4f37d2602f1811834f97057736f81287b788d633cb8574611112e6945995d3a72e38a566d8e596d0a421aa0f255934c56"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x2, 0x2, 0xcc, [@generic={0x6e, 0xa, "25498054d28086482f72c727519ae140873a8cb97ac55b7eff3ba9fdc09a96e694c59ae9dee552a0630e6ba70b7da847c20bfd21e2b0affb8d6d2924bdb4d4b56198064a162d7fb22079ed43b6ee123f64a2251b7ae4bf12846ec0c83fbc5274cf565c80c08d73fe7599c7f5"}, @generic={0x2b, 0x1, "b4b2065031c22af4167d564dbc5b47a949485dc1e27c88d7cbaa16cb0c1f907f188468f9d9e18c0b94"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x9, 0x9, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6c, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x3, 0x8, 0x81, [@generic={0x24, 0x21, "e9d81ba6bc8b7a9a591244460a12440fbda9b4d3ba227cbb6fa432189dd6f5fcf71d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x8, 0x1, [@generic={0x98, 0x11, "15b1ba4efc1a75ae6d60b82eb4160cfc9ff2f18882c25c1945f903498459744148a9d6b18c12d61f3f791eebae24513c9ad480190eca334e2a1aa88999b2997dac5acf876898d66d1480681b2fcfd4108936f81d33711c27e332744d1312de441d6bbd662e40437a1ab23915e0ebe1146f0ed77832f4aaf90a89a8924a1b3b5f9c4b89473fa252aff670439586224104cc87886ded59"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x1, 0x6, 0xfb, [@generic={0x25, 0x23, "2b6e642f246e054b94beca8735081e53d52495e44bd4d86c0378aeefebaea7bee15c8f"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x1, 0xa5, 0xf}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xad, 0x2, 0x1, [@generic={0xf8, 0xb, "051605949a30191f0e2b278e2952ef2142c74af7c63371304f5e7d842f149b385d72e8ce7c3ffb4ba0c7c3874f3a8811c4b1cb6f7b5b9472fa2c041ab730b7e0dcf022eec7c1e3693bc4ddf93165a4da0b708b35f88fa50233b823c0ddc964b7d4ed2006fee006778209e593e709221eda86c21a5a619242d184e40cf067c73b5905d6546257f0bd7eb5313211e64bdd6a000a229461ea1d466613977ccc863d0b311a8cd635b0f3c67051611fd6e356359ec648bcde2f263490eefc754d1f349f26e5ee491b9b9d2c6ffe35d06c02201cc8a3e6dd54a13cf18142f93c0a8cd60b6a82679dfde463912854eeea19bc16910b21617154"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xf000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x96, 0xfe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x6, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x5, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}]}}]}}, {{0x9, 0x4, 0xb2, 0x1, 0x0, 0xa3, 0x1a, 0x23, 0xd1, [@uac_control={{0xa, 0x24, 0x1, 0x1708, 0x45}, [@mixer_unit={0xa, 0x24, 0x4, 0x1, 0x1, "add6f2710f"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, 0x3, [0xa, 0x6, 0x9], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x402, 0x1, 0x5, 0x4, 0x0, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x0, 0x8, "a7"}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x5e, "2e735f4cd534"}]}]}}, {{0x9, 0x4, 0x1b, 0x6, 0xc, 0x7e, 0xc6, 0x2, 0xc1, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x3, 0x81, 0xd, [@generic={0x2, 0x27}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x3c, 0xd0, 0x9, [@generic={0x46, 0xc, "36835132afa88376b8b0151a552e284a6c689bd88ddc69f41875a5e2a2c4e0031a10c13dbd6121f1b8d8c80ac2b20a731e4d2d309c273c6a68fd12ec04a2d11f99619d80"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xfe, 0x6, 0xfa}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x66, [@generic={0xfb, 0x23, "a0df0e50842b801447f7726eb6bc8357c84d37eef050deeb287b4ec9d4ef6ba846ac505c5220cb32f542295b814e06531fc316253fd58c36d427fb21ea332a678ce55bde662d4f43ecffd59e34a0bb225afe168e188c2a9f3045752161485f6bcdfae89457bc11c8aaf8edfda16faf1cec5ebfadbfc76836d4aeee611b6f905695486ae739c945bac4f9354f918b217ef1ece4c252e00b3903123b8907608dd1f1e3a1628254145e09ef0b67f303eef935da086d45a12aff987195a5d25c1754db95743e2e68c93cd381a001aba72b035c584706f4ce6824b6b0f5224ee34b43b47db97858b123b308c0deb03e186068d958b48ed2077a8b4b"}, @generic={0x82, 0x23, "403254770ae0521f3fbc917d2d9b040f52a8f1d53014136eef1c3bdaff5039ee2288b6c678eea6006830944203fe38f3b17b206fa9818b278605150f2973ace374327ee1aa6aa56a96faa24f5f910f38d2ddb05410f2e0195cd02e9062141b6f303251dbf893447ca6803b0c94fca9ef8fa2998c43ca50e8ae624bdfa1b6dcbf"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0x7, 0x2}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x0, 0x6, 0x3, [@generic={0x8a, 0x1, "23d3bf1b690dffb0a5816c79d957e0834456d1377e93796a639f4c8d05314984225fdb1976ad762f3e3bd0bf8e3ed28b42fcc1e9961f7d585bcb3475457e3fd12fd13831e31a67994625c8b87b260cf8017953d2df45d42597a342efa0a8632f2c4d6781a4d1f811640d17319ecdf1f70db93550a452a68bd49e53b5d1871402f0c2fa02b26a6924"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x4, 0xf1, [@generic={0xc6, 0x22, "8bca87eb13b9dc69a61f23a2bae3bbbfca70542a773d435540ebf4ba5775bf93120ae399e6f5d6a0d57c31b5b08883bc9c8436afcbc84b4e2539900d9bfb41a80cb7d72b59e4263b21e955dcce4c351b6c375c1fe68d796f1eafe2e406ef400c1671ca58b33fbf1edb16cdc719dc561b683b7350139aec19a166cc43af1d6346c355c3d4a5a051c7fd3900573b773ee2fa1845321913eea48af8a2d16db9d52380ac7143c029061339506008c445bd3a4d20f8690f5554e9461d733deed377c490a2530b"}, @generic={0x46, 0x21, "7989c3c827c11bd543516db2091cab57af88a6149481c52d62599c52b6413d709fad73511d21c975f5af34d6b998adaee80cfee3600d299c227465859837f891f0e7932a"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x5, 0xb, 0x0, [@generic={0x79, 0x24, "0d0c92d84ad3545ddc1f55f319b63fd49640db001d2bd58ea1007b149e793b473a3f7454576d72c54d6f13c9db9ba744f11c8f7d0812b73b25ae57d7ef6e61516b0f8ffe1610bb3a2076ae7db967e3dcd40f7d64474382b2849759547cea4df285a1e2abac044dddad5d116e54ddd19f67de8e49092fb2"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xe0, 0x3}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x7, 0xd, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x9f, 0x7f, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x81, 0x1, 0x8}}]}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x310, 0x3, 0x60, 0xfc, 0x10, 0x9}, 0x5, &(0x7f0000001200)={0x5, 0xf, 0x5}, 0x8, [{0x91, &(0x7f0000001240)=@string={0x91, 0x3, "ddfb7691147f312bd3944cf0d2bb2e5fe5bdf40771939b6eebeaf952fb3860e530d4924170eba9fa6a1a3e9e92a89c5acb8a81d48f4d7fd9026133c2784c6ac71dcd965a29acf9932dda8c3af185f558fe68b81196f3b7a88df8bc16c365d4d59d2186ef001ae2e04c27d1047eb8d7acfa2f39490337f5408224d1b9afcc16bcfd475a6e97157c402c436a4c2c6672"}}, {0xc3, &(0x7f0000001300)=@string={0xc3, 0x3, "59e2c0f7077e970416131e06aec4d0cd269ec852a2b30f719229204332c8318fcbac18c9ee8d41dfcf9785934abeb51b57c2e662d041f413ba0303ae24a768fdee9842e0f9aa367133c4fcb67669249ca9242b3a5439234072bdb78479d3b52f254424b9a65b7defc2e8b852f8647f391fa24a5a6548680e8863a89c1bce585b2da6e01550c3f3ff47fb6b5e54b51d4fa5ad7538b38413126008ca39300328f01d90419c14215a1234d2849d78f75f0f7590c994777b9d7bfcb8c0bf1f8b405ca7"}}, {0x2d, &(0x7f0000001400)=@string={0x2d, 0x3, "82d02b0d1572601020f436444b8f97fb5a0d82d2f5d2ecaedcc00f77c85f9ab30aaed88d353cf43eb1eccd"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0xfca6}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x2809}}, {0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "b40bf5bccad876e93cc063a24254e849992c936376d0fdd1d3b1cf88e833e0b3ae520aae16ae89b967a7e77a45e46768553aceceb3b8fe8f1f590c2fb5d73a41718c083db2f62edd03117c3fcb"}}, {0xe8, &(0x7f0000001540)=@string={0xe8, 0x3, "608635e487fe1f3e8c9129cd623d0b6106399896607274776e20583120ba45ac72ad5c4ef5c897beab648c5c2e27c0c8d545e86e664115678af7cafbc856a2611f1e41b3efa2ce6caf913b2b82db1bafabe456b17a8407d8533b0cda472056204650e4ba8511723ccb1d34e07dc4d6f0d49eba951c55dcd8c59257bbb9548c5a6dfa3054179187d1b23679904e5545e3b825a67ef04dacb872337ad8529c5775e801c67613413a4c7492abf02fea10aa18cc8fff5dbee4158754c52144068fa963f32483e90dddf468f09bfe6aabae6d023184fcbffeebb5921bafba385f6c85ff04dd50f88d"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x180a}}]}) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000001700)={{0x5, 0x4, 0x3e, 0x8}, 'syz0\x00', 0x31}) (async) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8d63}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000001940)=@buf={0xbd, &(0x7f0000001880)="3efd0a66ba8da3ae5e101ce828cf6f0ddeed558654d5ea866fdc1261f8268589d103e0ec0e486b2ba2d1693757cf5b0457a3d8f61e47f27013a51cc30444772051288300ecf50ced7ea440eedf61bdcf76b4152ccfba6911eca1c2f4438e3cc52981a6a5d610dcdd66e32e60ceaa45428acd863043872ad8719da0178a7998a84823674bd7a6ac2ac12fe9aedf48d7865f6d717a6225ecec4870dabbe78c838dd3060787421401662a209af4756ba18aa698add654e0c2e176320229f0"}) (async) write$input_event(r4, &(0x7f0000001980)={{0x77359400}, 0x5, 0x7f, 0x347}, 0x10) (async) r8 = landlock_create_ruleset(&(0x7f00000019c0)={0x100, 0x3, 0x1, 0x40, 0x4}, 0x30, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000001a00)={r5, @in={{0x2, 0x4e22, @remote}}, [0x3000000000, 0xb, 0xadf, 0xfffffffffffffff9, 0x100, 0x9, 0x3bb2, 0x3, 0x8, 0x7, 0x0, 0xfffffffffffffffa, 0x11fb, 0x3, 0xfffffffffffffffe]}, &(0x7f0000001b00)=0xfc) (async) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000001b40)={0x2, 0x3, 0x3, 0xb}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001b80)={0x9, 0x1, 0x7, 0xfffffffb, 0xfff}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) (async) r9 = openat$ttynull(0xffffff9c, &(0x7f0000001bc0), 0x803, 0x0) r10 = getpgrp(0xffffffffffffffff) fcntl$lock(r9, 0x5, &(0x7f0000001c00)={0x1, 0x4, 0x1, 0xbd, r10}) (async) add_key(&(0x7f0000001c40)='id_resolver\x00', &(0x7f0000001c80)={'syz', 0x3}, &(0x7f0000001cc0)="a6fe501af4e05b0f23edb45bcd88b2bb9136c0a967dc36bdbe1ff4cb328c7a6bd9eb778442509abcd915", 0x2a, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001d00)=@assoc_value={r6, 0xeb1}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000001d40)) 4.453547737s ago: executing program 2 (id=577): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0xfc}}, 0x40) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = syz_clone(0x10204000, &(0x7f0000000100)="8875fe75736e2c2ed97efff6bb2eb903a68895ad492f6449a08653342ea4e68971dd7bcb42f58af7a14f837a15f026c9e9911f1c0a5f47bd46217c08a2b0c9b92cf1b1d14126e365d3ec5e3e1319528e939b1eab0378cfddb0c03e6f12a5177df40c0f3ca8fbb90922", 0x69, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)="f7297cfb762a500297efe8ba803e357fc417f49c7eee63a172cd0c5a899a2e3762456fe8aa009b20b8079e1a8dbf7a1bd038b1401424b60697cfa4345f2fac") ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r1) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c040000", @ANYRES16, @ANYBLOB="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"], 0x41c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x42}, &(0x7f0000000080)=0x4) (async) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) close(0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003880)={'dummy0\x00', &(0x7f0000003840)=@ethtool_channels={0x3c, 0x4, 0xc4, 0x1, 0x7, 0xb49e, 0x4, 0x73, 0xfffffffc}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000005c0)=[{0x0, 0xf0ff}, {&(0x7f0000000140)="050cd8", 0x3}], 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) (async) io_setup(0x7, &(0x7f0000000280)=0x0) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async, rerun: 64) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000000), 0xfffffc98}]) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 4.23541661s ago: executing program 4 (id=578): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x2, 0x3, 0x3, 0xb, 0x0, 0xffffffffffffffc0, 0x1}]}, &(0x7f0000001fc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 31) 3.499271132s ago: executing program 4 (id=579): mmap(&(0x7f0000173000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, 0xffffffffffffffff, 0x8000000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) readv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)=""/165, 0xa5}], 0x2) (async, rerun: 64) setsockopt$inet_mreqsrc(r5, 0x0, 0xe, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2}, 0xc) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) (rerun: 64) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) (async) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1800, &(0x7f00000002c0)={0x82, 0xf7, 0xa0000, {r9}}, 0x20) (async) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2.905803636s ago: executing program 2 (id=580): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f0214f90408faac4700001e0000010000000700080008000dc00e0000ff", 0x24) 2.823406523s ago: executing program 0 (id=581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x400000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r1, 0x40045613, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) r2 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x100000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f00008e8000/0x4000)=nil) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x8, "4e75ea753dcb482607a7350a337b8c9e54dfae2444249814aa034a6c50696115"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x0, 0x1, 0x95e5c1440d20a39d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8, 0x800, 0x4}}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000000}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x44084) 2.715019861s ago: executing program 1 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read(r2, 0x0, 0x0) r3 = signalfd4(r0, &(0x7f0000000240)={[0x8, 0x2]}, 0x8, 0x0) ioctl$TUNATTACHFILTER(r3, 0x400854d5, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xfc, 0x7, 0x0, 0xffff}, {0x1, 0x2, 0x30, 0x9}, {0xd69c, 0x3, 0xed, 0x400}, {0x7fff, 0xa5, 0x5, 0xf}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000100)={0x9, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async) read(r2, 0x0, 0x0) (async) signalfd4(r0, &(0x7f0000000240)={[0x8, 0x2]}, 0x8, 0x0) (async) ioctl$TUNATTACHFILTER(r3, 0x400854d5, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xfc, 0x7, 0x0, 0xffff}, {0x1, 0x2, 0x30, 0x9}, {0xd69c, 0x3, 0xed, 0x400}, {0x7fff, 0xa5, 0x5, 0xf}]}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) fcntl$setlease(r4, 0x400, 0x1) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000100)={0x9, 0x6}) (async) 2.624135812s ago: executing program 2 (id=583): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$igmp(0x2, 0x3, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000002180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x5, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) 2.199311075s ago: executing program 0 (id=584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x6, &(0x7f00000000c0)={0x5, "810556c721100f00"}}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x6, &(0x7f00000000c0)={0x5, "810556c721100f00"}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2.198268977s ago: executing program 1 (id=585): syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c00144000000000000000000500130001"], 0x30}}, 0x4000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x1, 0x1, 0x17, @loopback, @loopback={0x0, 0xffff888101827518}, 0x8000, 0x10, 0xffffffff, 0xa}}) syz_emit_ethernet(0xc2, &(0x7f0000000100)={@local, @random="9319cd95ede8", @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0xf46, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8}, {0xfff, 0x0, 0x1}, {0x8}, {0x4, 0x0, 0x1}, {0x81}, {0xa40}], @ipv6=@udp={0xf, 0x6, "692006", 0x64, 0x11, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4e21, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "2ef1b3e04208b87a71557bfead5f7a304d5c95fdcf0526675b6729058f77ed18", "d1ca50a15b7109cdc68a812d521826cd", {"8a7a46209d48372fbbf2aca46bf72eac", "d22430e2e858fde0db575d8ba36e2778"}}}}}}}}}, &(0x7f0000000300)={0x0, 0x4, [0xf9b, 0xda9, 0xb2f, 0x11f]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x80000001, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x80, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x826, 0x0, 0x0}}, 0x0) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) preadv(r11, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x100000000000019e, 0x0, 0x0) r13 = syz_io_uring_complete(0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r13, 0x4014f50b, &(0x7f0000000080)={0x0, 0x727, 0xaebf}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) r14 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r16 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r15, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_RESET(r14, 0x5100) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r10, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20000081) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000400002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000001000000116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.025963514s ago: executing program 2 (id=586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000813000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x28, @remote, 0x7040e159}}, 0xff, 0x8, 0x7, 0x629a40e6, 0x1, 0xe, 0x8a}, &(0x7f0000000300)=0x9c) r1 = io_uring_setup(0x1b6b, &(0x7f0000000040)={0x0, 0xb70, 0x0, 0x1, 0x155}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0xffffffff, 0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4844}, 0x24004002) bind$inet(r2, &(0x7f0000000740)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4840) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r5) socket$unix(0x1, 0x2, 0x0) 1.900411102s ago: executing program 3 (id=587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000040)={{0xf}, 0x1, 0x3, 0x7000, {0xfe, 0x80}, 0xf8}) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001004010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a0104000000000000000002000000090001007379030000000000090003002e797a3000000000140000001100010000000000000000000200000a"], 0x74}}, 0x0) r8 = openat$make_it_fail(0xffffff9c, &(0x7f0000000140)='/proc/self/make-it-fail\x00', 0x1, 0x0) unshare(0xa020480) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x281620, 0x0) ioctl$XFS_IOC_FSCOUNTS(r8, 0x80205871, &(0x7f00000001c0)) 1.447471663s ago: executing program 4 (id=588): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.384348755s ago: executing program 1 (id=589): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000580)={0xfffffffc, 0x3, 0xb17, 0x8, 0x5, 0xc1c}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@empty, @empty, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0x80000000, 0x6, 0x6}, 0x3c) syz_emit_ethernet(0x36, &(0x7f0000002180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x91, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109027f00010100800009040000120206000007241a00007f5b05240000000d240f01000000000900000009072414768c01000f2413044c067bb685642aef9665c31524120004a317a88b045e4f01a607c0ffcb7e392a0724"], 0x0) 1.166454713s ago: executing program 4 (id=590): r0 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r4, r4, &(0x7f00000001c0), 0x7fa) (async) sendfile(r4, r4, &(0x7f00000001c0), 0x7fa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000001e00)={&(0x7f0000000e00)=[0x2, 0x200, 0x8, 0x6, 0xffffff00, 0x50, 0x1c, 0x5d31, 0x7, 0x80, 0x9, 0x5, 0x80000001, 0x0, 0x3, 0x4, 0xfffffffc, 0x0, 0xe5b, 0x2, 0x7, 0x9, 0x400, 0x6, 0xffffffc0, 0x5, 0x2, 0xe, 0x8bd, 0x5, 0x8, 0xb, 0x2, 0x0, 0xd1, 0x3fe, 0x2, 0x7000000, 0x2, 0xfff, 0x3, 0x3ff, 0x1, 0xd, 0x0, 0x8, 0x7ff, 0xffff6ebe, 0x800, 0x8000, 0x5, 0x9, 0x5, 0x33dc2b77, 0x1, 0x400, 0x0, 0xd8, 0xfff, 0x9, 0x3, 0xfffffff8, 0x989, 0x9, 0xd2, 0x9, 0x1, 0x3, 0xb, 0x80000000, 0x3, 0xfffffffe, 0x3, 0x101, 0xfffffffb, 0x7fffffff, 0xfcfe, 0x2, 0x1, 0x0, 0x717, 0x2, 0x81, 0x8036, 0x8, 0xa4, 0x21729e7b, 0x6, 0x1a1b, 0x2, 0xffff, 0x7, 0x8, 0x80000001, 0x5, 0x9c83, 0x4, 0xe079, 0x800, 0xfff, 0xf6a, 0x9, 0xfffffffa, 0x0, 0x8, 0x7e2, 0x5, 0x5, 0x9, 0x51, 0x10001, 0x9, 0x400, 0x2, 0x0, 0x0, 0x5, 0xffffffff, 0x72fb, 0xff, 0x1, 0x5, 0x7, 0x6, 0x0, 0xffffffff, 0x180000, 0x6, 0xff, 0x10, 0xe5, 0x0, 0xfffff303, 0xffffffff, 0x2, 0x1, 0x7, 0xf419, 0xfff, 0xa, 0x7, 0xfffffffb, 0x4, 0x10000, 0x8, 0x7, 0x358, 0x35f2, 0x0, 0x0, 0x9, 0x0, 0x6, 0x6, 0xff, 0x5, 0x6, 0x5, 0x2, 0x1, 0x6, 0x3fe, 0x5, 0xee9, 0x8000, 0x67, 0xd8, 0xffffffff, 0x2, 0x8, 0x8, 0xbb, 0x5, 0x9, 0x401, 0x80000000, 0x2, 0xc, 0x3, 0x7fffffff, 0x7, 0x2, 0x9, 0x0, 0x5, 0xb84a, 0x8, 0xffff8000, 0x7f, 0x3, 0x3, 0xd, 0x6, 0x8, 0x2, 0x8, 0x4, 0x9, 0x5, 0x8, 0xdb, 0x7, 0x6, 0x8, 0x9, 0x67a8, 0xa3, 0xbce7, 0x2, 0x9, 0x1, 0x5, 0xd9c, 0xa, 0xffffffff, 0x7, 0x7f, 0x200, 0x9, 0x985, 0xfffffffd, 0x2, 0xffffffff, 0x5f, 0x7, 0x3, 0x4, 0x8, 0xb57, 0x8, 0x4, 0x125d, 0xf615, 0x5, 0x1, 0x0, 0x2ec, 0x1c0, 0x5, 0x18, 0x100, 0x42b0, 0x2, 0x101, 0x4, 0x100, 0xffffffc5, 0x401, 0x4, 0x5, 0x2, 0x53b, 0xff, 0x14000, 0x80000001, 0x7, 0x3, 0x5, 0x1, 0x68a8, 0xef5, 0x0, 0x571, 0xffffffff, 0x7, 0x7, 0x1, 0x8, 0xd8, 0x7, 0x4, 0xffffffff, 0x2, 0x1, 0xe, 0x2, 0x8, 0xfffffffc, 0x1, 0x1, 0x8, 0x2, 0x1, 0x7, 0x3, 0x800, 0xb4, 0x6, 0x8, 0x6, 0x73af, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x5, 0x85f, 0x5, 0xb, 0xfffffffd, 0x6, 0x6, 0x7, 0x1, 0x3, 0x65, 0x0, 0x9, 0x2, 0xfffffff9, 0x6e, 0x6, 0x80, 0xffffffff, 0x5, 0x2, 0xffff, 0xfffffffa, 0x4cb, 0x933, 0x10000, 0xd, 0x0, 0x3, 0x5, 0x2, 0x0, 0x9, 0x40, 0x7f, 0x2, 0x5, 0x0, 0x80, 0x3, 0x5, 0x1, 0x4, 0x4, 0x2, 0x7, 0x3, 0x9, 0x9, 0x9, 0x8, 0x4, 0xffff8001, 0x7, 0x9d6f, 0x1, 0xfffffff8, 0x7fff, 0x2, 0x0, 0x77, 0x7, 0x81, 0x9, 0x400, 0xc, 0x376, 0xfffffffb, 0x7, 0x7, 0xfffffffd, 0x7fffffff, 0xfcc, 0x7, 0x3, 0x62d2, 0x4, 0x3, 0xf43, 0x7, 0x3, 0x100, 0x800, 0x24ef, 0x7, 0x7, 0x4, 0x5, 0x350, 0x3, 0x8f1a, 0x8, 0x10001, 0x4, 0x2, 0x3, 0xc, 0x1, 0x8001, 0x1, 0x7, 0x6, 0x8, 0x8, 0x7, 0x190, 0x3, 0xb, 0x8, 0x7, 0x6, 0x9, 0x80000001, 0x3, 0x1, 0x5, 0x7, 0x80000001, 0x101, 0x9, 0x80, 0x78000, 0xc, 0x6, 0x7f, 0x9, 0xf, 0xffffffff, 0x7, 0x7fff, 0x6, 0xfffffff0, 0x5, 0x3, 0x8ca, 0x3, 0x8, 0x5, 0x7ff, 0x401, 0xffff, 0x7, 0x7fffffff, 0x6, 0x8, 0x3, 0x4, 0x6c, 0x9, 0x1, 0x5, 0x1, 0xfffffffa, 0x2, 0x9, 0x2, 0x0, 0x7, 0x5, 0x7, 0x9, 0x0, 0xd736, 0xfffff000, 0x4, 0x0, 0x4, 0x400, 0xffffffff, 0x22cc, 0xfffffff7, 0xfffff800, 0x4, 0x94, 0x9, 0x400, 0x81, 0x7, 0x1, 0x7fff, 0x40, 0x101, 0xa7b, 0x9, 0x7fff, 0xbbd, 0x9, 0x5, 0x4, 0x80000001, 0x6, 0x9, 0xfffffff8, 0x3, 0x4, 0x2, 0x6, 0x8, 0x3, 0x6, 0x1, 0x1, 0x7806df5f, 0x2, 0x9, 0x3ff, 0x0, 0xff, 0x2, 0xdb4, 0x5, 0x7, 0x6, 0xffffffff, 0x80, 0x7, 0x789, 0x0, 0x400, 0x7f, 0x1, 0x1000, 0x9, 0x5, 0x1, 0x40, 0xe1f, 0x5, 0xda, 0x9, 0x1a97, 0x0, 0x7, 0x10000000, 0x6, 0x3, 0x400000, 0x5, 0xb, 0xffffffff, 0x4, 0x65d7, 0x5d7, 0x7, 0x8, 0xe846, 0xa480, 0x800, 0x2, 0x4a, 0x9, 0x8, 0x0, 0x6, 0x4, 0x7, 0x0, 0x8001, 0x7fff, 0x7, 0x944, 0x10000, 0xaefe, 0x4, 0x3, 0xe, 0x4cf, 0x3, 0x81, 0x8, 0x1, 0xc90, 0xfffffff8, 0x80000001, 0x5, 0x3, 0x1, 0x3, 0x5, 0x80000001, 0x3e1, 0xd, 0x382deb70, 0x6, 0xffffda6c, 0xffff, 0x40, 0x7, 0x7, 0x7, 0x80, 0x0, 0x1, 0x3, 0xf0b, 0x5, 0xfffffffa, 0x9, 0x2, 0x800, 0x9, 0xdaf, 0x101, 0x0, 0x8, 0x2, 0x101, 0x6, 0xff, 0x7ff, 0x3ff, 0xfffffffe, 0x0, 0xd, 0x5, 0x80000000, 0x6, 0xa, 0x3, 0x7, 0x6, 0xfffffffc, 0x7, 0x9, 0x6, 0x7fffffff, 0x3, 0x0, 0x40, 0x7f, 0x8001, 0x10, 0x5, 0x70, 0x8, 0xfffff000, 0x7, 0x6, 0x0, 0x2, 0xffffff81, 0x8001, 0x9, 0x9, 0x6, 0x6, 0x9, 0x18, 0x8b9, 0x0, 0x8000, 0xffffffff, 0xb, 0x1b5, 0x401, 0x5, 0x10001, 0x7f, 0x5, 0x8, 0x400, 0x6, 0xb, 0x1, 0x8000, 0x100, 0x6ea, 0x200800, 0x10, 0x8, 0x4, 0x101, 0x7, 0xfffffffd, 0x401, 0x8000, 0xe, 0x3, 0x9, 0x2, 0x10, 0x2, 0x7, 0x1000, 0x341a, 0x9, 0x40d6, 0x9, 0x9, 0x7, 0x7, 0x0, 0x7fffffff, 0x6, 0x80000001, 0x0, 0x400, 0x2, 0x9, 0x5, 0x1, 0x0, 0x2b00, 0x8000, 0x9, 0x9a015ac6, 0xff, 0x5, 0x123, 0xfffffff8, 0x2, 0x3, 0xfffffff9, 0x101, 0x3, 0x5, 0x8, 0x220, 0x4, 0xfffff007, 0xea0, 0x9, 0x9, 0x7, 0xfffffffb, 0x3, 0x9, 0x101, 0x1, 0x4, 0x847, 0x9, 0x1, 0x8cf, 0x9, 0x4, 0x4, 0xda, 0x80, 0x9, 0x800, 0x7, 0xd, 0x4, 0x0, 0x5, 0x5, 0x6eda13b5, 0xe76a, 0x5, 0x7, 0x9254, 0x10, 0xd9, 0x6, 0x5, 0x100, 0x380, 0x113, 0x0, 0x7, 0x3, 0xf47, 0x5, 0xb, 0x0, 0x800, 0x81, 0xffffff81, 0x5, 0x0, 0xa, 0x8094, 0xf45, 0x8, 0x7, 0x3, 0x3983, 0x1ff, 0x634, 0x9, 0x5, 0x9, 0x58, 0x4, 0x2, 0xeb9a, 0x100, 0x7b148c11, 0x66ef9026, 0xf8f, 0x5981, 0x4, 0x0, 0xb3, 0x7, 0x3, 0x323, 0x1, 0x145, 0xd, 0x148, 0x8, 0x3, 0x8, 0x6, 0x1, 0x0, 0x10000, 0x8, 0x2, 0x3, 0x7, 0x5, 0x9, 0x7, 0x0, 0x4, 0x7, 0x0, 0xffffffff, 0xc0000000, 0x3, 0x10000, 0x40, 0xfffffffe, 0x7fff, 0x7, 0x8, 0x5, 0x1, 0x5, 0x6, 0x3, 0x4, 0xfffffff8, 0x9, 0x800, 0x9, 0xf, 0x8, 0x5, 0x3, 0x10000, 0x4, 0x2, 0xfffffffe, 0x1, 0x7, 0x4, 0x2, 0x101, 0x3, 0x40, 0x8, 0x7, 0x6, 0x200, 0x2, 0xc, 0x9, 0x5, 0x3, 0x1000, 0x4, 0xa, 0x2, 0x10, 0xfffffff9, 0x87, 0xfffff000, 0x5, 0x3, 0xc26, 0x7fffffff, 0x1, 0x1, 0xffffff00, 0x3, 0x6, 0x5, 0xb12, 0x7, 0x1, 0x0, 0x0, 0x5, 0xfffffff3, 0xffff, 0x38f, 0x5, 0x30000000, 0x8a0, 0xb6c1, 0x2, 0x5168, 0x9df5, 0x3, 0x6, 0x0, 0x40, 0x9, 0x4, 0x6, 0x80, 0x4, 0xfffffbbc, 0x55, 0xb585, 0x5, 0x3, 0x4, 0x6, 0x9, 0x4, 0x80000001, 0x2, 0xfffffffa, 0x2, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x1, 0x100, 0x4, 0x1, 0x0, 0x5, 0x2, 0x9, 0x8ba, 0x39, 0x400, 0x0, 0x3a, 0x5, 0x200, 0xdf, 0x4, 0x401, 0x10001, 0x835, 0x1200, 0x2, 0x2, 0x9, 0x7ff, 0x3, 0x2, 0x7fffffff, 0x6, 0x80, 0x4, 0x72b30182, 0x8, 0x8000, 0x8, 0x7ae, 0x1, 0x5, 0xdc, 0xfffffff6, 0x9, 0xdd2, 0x0, 0x10, 0x0, 0x6, 0x8, 0x0, 0x7, 0x4, 0x9, 0xc0e3, 0x9, 0xfffeffff, 0x1, 0x6, 0x5, 0xc3e, 0x6, 0x7fffffff, 0x3ff, 0x0, 0x7, 0xa, 0x0, 0x5, 0x6, 0x7, 0x5, 0x3, 0x3ff, 0x3, 0x1, 0xffffffa1, 0x77, 0x0, 0x9, 0x101, 0x9, 0x3, 0x7fff, 0x5, 0x1, 0xcae0, 0x101, 0x7, 0x2, 0x7fffffff, 0x4, 0x5, 0x1, 0x13, 0x7, 0x4, 0x6, 0xf0a3, 0xa5, 0x7, 0x6, 0x8, 0x6, 0x200], 0x3, 0x400, 0x3}) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x19c87445, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, 0x8000000}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) dup3(r9, r6, 0x80000) (async) r10 = dup3(r9, r6, 0x80000) pwritev(r6, &(0x7f0000000dc0)=[{&(0x7f0000000240)="83", 0x1}], 0x1, 0x2, 0xfff) (async) pwritev(r6, &(0x7f0000000dc0)=[{&(0x7f0000000240)="83", 0x1}], 0x1, 0x2, 0xfff) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r10, 0xc008551b, &(0x7f0000000400)=ANY=[@ANYBLOB="58b1286900000000000000000000000045afb01574040027f9e16610fbeb4e6c864476ace1f9671601c10f37b3edc63467350ce3531f64484394d93166dd48f97b035921e468391eef26ba224317dba6a93dfb196742f8bc6eeb74dd"]) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000040a010200000c000000000000000008425550a782ddaa81acc14652311540f0e7ef3916bdb9a10c789694299709fb82dd1ffea6f7146f8150bd07c124792742c9ba6998ce176b0c407e25f78320f04ed08d9fe65eee08a66ee33e43cd7992074340ddbd2cda029e2f11"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r11, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup(r5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r14 = memfd_create(&(0x7f0000002a40)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feeV\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xc4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17$\x9e\xd8\xae\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xce\x86in\xd4\xd0\xb4\x02?gl\x8f\x1e\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r14, 0xbc4cd000) (async) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r14, 0xbc4cd000) madvise(&(0x7f0000203000/0x1000)=nil, 0x1000, 0xe) read$FUSE(r13, &(0x7f0000000640)={0x2020}, 0x2020) (async) read$FUSE(r13, &(0x7f0000000640)={0x2020}, 0x2020) 263.189538ms ago: executing program 2 (id=591): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x328, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x314, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x278, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r0 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000004940)={0x1, 0xd, 0x2, "d84a5bb83bca0b71b49956bb09c8babd4eb4fe1abc585e1ce00b75a0d0594c99", 0x33524742}) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) 187.183295ms ago: executing program 3 (id=592): syz_usb_connect(0x2, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="120804334091960102032309021200124a01040f1002294bfbaf33a08a16943609046a59"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44e}}, {0xe3, &(0x7f0000000480)=ANY=[@ANYRES8]}]}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@report={0x9c, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x33, {@in6=@mcast1, @in=@multicast1, 0x7ff, 0x6, 0x4e20, 0x0, 0x0, 0x30, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @proto={0x5, 0x19, 0x6c}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737951527a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x28048800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ab042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x0, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0}}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getrusage(0x1, &(0x7f0000000580)) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r8, 0x4, 0xc00) r9 = syz_open_procfs(0x0, &(0x7f0000001380)='net/raw\x00') ioctl$UFFDIO_MOVE(r9, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2000}) read$char_usb(r8, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000500), 0x0, 0x2) 186.354543ms ago: executing program 0 (id=593): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f0214f90408faac4700001e0000010000000b00080008000dc00e0000ff", 0x24) 42.058942ms ago: executing program 2 (id=594): r0 = socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$uac3(0x6, 0x104, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2, 0x3, 0x1, 0x5, 0x0, 0xb, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x36, 0x80000000}, [@power_domain={0xa, 0x24, 0x10, 0x9, 0x40, 0x7ff, 0x5, "17"}, @processing_unit={0xd, 0x24, 0x9, 0x4, 0x6, [0x1, 0x2]}, @processing_unit={0x15, 0x24, 0x9, 0x6, 0x2, [0x2, 0xb86cfd20bb601ff1, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x0, 0xa, "835db7", "c7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x4, 0x97, "1116f0ff0094181b4d"}, @as_header={0x17, 0x24, 0x1, 0x5, 0x3, 0x6c, 0x5, 0xd, 0x8, 0x0, 0xe}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x4, 0x4d, "be"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x1, 0xe, "8d45"}]}, {{0x9, 0x5, 0x1, 0x9, 0x208, 0x6, 0x4, 0x0, {0xa, 0x25, 0x25, 0x1b, 0x80, 0xcf0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xa, 0x3, 0x0, 0x5, "ad6096", "69a10b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x60, 0x1, 0x6, {0xa, 0x25, 0x25, 0x0, 0x8, 0x5}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x8, 0xb, 0xe4, 0x8, 0x2}, 0x4d, &(0x7f00000001c0)={0x5, 0xf, 0x4d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x9, 0xf00, 0x7, [0xffc000, 0x1fe0000, 0x7e00, 0xc000, 0x0, 0x410f]}, @ptm_cap={0x3}, @generic={0xd, 0x10, 0xb, "14d91a4d023ffdaf5802"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x5, 0x343}]}, 0x6, [{0x9e, &(0x7f0000000300)=@string={0x9e, 0x3, "69388dda03f2d17cc817398bac6c78166049eadd2365c0840b2a87e6813c040efec823d7cea6da07a65f0f89ba3b4cd3f7127cbb6906d688f6ee94807afb0dd947cd7cb179b4785abd876e85899b74121be6cc8126642af94ab7c191d71b1b1f0534029b83dd1800656876fd1ac98f74fcdd8fb2d15e723bb03e218833cf14923fbe396d3d1044efeb5540ea2ae15ceecf6a2b0e93448664539c0344"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140c}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "28b01dc93bfdcaef40a4fba07f8f5a9e2453"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000640)={0xc, &(0x7f0000000580)={0x0, 0x10, 0x6e, {0x6e, 0x21, "5a7bf472cd87253b3a3c3c19d842e804f19bb6ac5b9f057c09ff65864cbadef77c745dd38b6c848201d6ee95a7c3f464d0191d6e78dd93d1719b1cda768d66dde721854cfb7e09a260432dcf020b72983b811754a9436dc3c282dc77f229fcc42a498f797104cb77d7d42544"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f00000008c0)={0x24, &(0x7f0000000680)={0x40, 0x30, 0x79, "1965a10f31a7f9b0439396eaf6b1b4d98644d5f4f7ed401ac7a15b9d725242596499be9f951b59c09c868f08fb3f3e3d35944f8866db8213241cd84399726c9f7c99b6122ffd932d7eaed6ac452194023edd3e6265372cfe9baf51561c6ac247145015f68031963956296bc4899cd10dd49eb3274e029de59c"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000780)={0x20, 0x81, 0x2, "2805"}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "bc"}, &(0x7f0000000800)={0x20, 0x83, 0x3, "dc65e5"}, &(0x7f0000000840)={0x20, 0x84, 0x3, "186f1b"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "9f550f"}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xfffffffe, 0x2, 0x2, 0x0, 0x8001, 0x1}}) 0s ago: executing program 0 (id=595): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1000}}, 0x2e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1080800, 0x0, 0x40, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3fbe2cd60000cdb70000", @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0495c575dc070e004ed6068c7d9a9459d756fbcf93cf66a46aa452a600b1758792b7393133cff6dd731dab9158ba69efc7d691a1baa8f72305f379610e35fe50158cd1d45b60efbb16dc1af4eddcd50d939ff68d2fd33d21c1ae06742a23", @ANYRESOCT=r4, @ANYRESDEC=r6], 0x34}}, 0x20042000) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000000)=0x40081f4, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) r9 = syz_open_procfs(0x0, 0x0) read$eventfd(r9, &(0x7f0000000000), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r10 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::]::/\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYRES64=r8]) read$FUSE(r11, &(0x7f000000a400)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 00 [ 144.194023][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.196126][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.789964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.050600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 145.730354][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 145.880792][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.918132][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.918165][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 145.918189][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.955843][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.955871][ T9] usb 2-1: SerialNumber: syz [ 146.090217][ T9] usb 2-1: No union descriptors [ 146.390754][ T9] usb 2-1: USB disconnect, device number 20 [ 147.384890][ T6528] loop5: detected capacity change from 0 to 7 [ 147.389325][ T6528] loop5: [ 147.389349][ T6528] loop5: partition table partially beyond EOD, truncated [ 147.941726][ T6532] fuse: Unknown parameter '0x0000000000000004' [ 148.149961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 149.624083][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.643522][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.729106][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.765585][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.130005][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 150.281424][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.283284][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.283311][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 150.283335][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.285807][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.285832][ T9] usb 1-1: SerialNumber: syz [ 150.349128][ T1218] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 150.389366][ T9] usb 1-1: No union descriptors [ 150.510039][ T1218] usb 2-1: Using ep0 maxpacket: 8 [ 150.511548][ T1218] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 150.512803][ T1218] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.512826][ T1218] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.516792][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.516818][ T1218] usb 2-1: Product: syz [ 150.516834][ T1218] usb 2-1: Manufacturer: syz [ 150.516858][ T1218] usb 2-1: SerialNumber: syz [ 150.588238][ T9] usb 1-1: USB disconnect, device number 26 [ 151.094882][ T1218] usb 2-1: unit 5 not found! [ 151.094945][ T1218] usb 2-1: unit 16 not found! [ 151.284810][ T1218] usb 2-1: USB disconnect, device number 21 [ 151.626657][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.062863][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'. [ 152.600059][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 152.761390][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 152.762913][ T9] usb 2-1: config 1 has an invalid interface number: 188 but max is 0 [ 152.762939][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.762960][ T9] usb 2-1: config 1 has no interface number 0 [ 152.763001][ T9] usb 2-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.763035][ T9] usb 2-1: config 1 interface 188 has no altsetting 0 [ 152.766913][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.766936][ T9] usb 2-1: Product: syz [ 152.766950][ T9] usb 2-1: Manufacturer: syz [ 152.766965][ T9] usb 2-1: SerialNumber: syz [ 152.864478][ T9] usb 2-1: cannot find UAC_HEADER [ 152.922337][ T9] snd-usb-audio 2-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 153.018185][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.558839][ T6603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.642004][ T9] usb 2-1: USB disconnect, device number 22 [ 153.683465][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.699790][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.887326][ T6618] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 153.905864][ T6618] binder: 6616:6618 ioctl 8040942d 800001c0 returned -22 [ 153.918459][ T6618] binder: 6616:6618 ioctl c0306201 80000040 returned -14 [ 153.927934][ T6618] binder: 6616:6618 ioctl c0306201 80000640 returned -22 [ 154.210225][ T5708] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 154.310094][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 154.360901][ T5708] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 154.362149][ T5708] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.364790][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.364821][ T5708] usb 1-1: Product: syz [ 154.364833][ T5708] usb 1-1: Manufacturer: syz [ 154.364857][ T5708] usb 1-1: SerialNumber: syz [ 154.491176][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.492412][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.492438][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 154.492463][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.494560][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.494585][ T9] usb 2-1: SerialNumber: syz [ 154.559114][ T9] usb 2-1: No union descriptors [ 154.617887][ T9] usb 1-1: USB disconnect, device number 27 [ 154.721059][ T5732] usb 2-1: USB disconnect, device number 23 [ 155.051406][ T6632] loop5: detected capacity change from 0 to 7 [ 155.059863][ T6632] loop5: [ 155.059906][ T6632] loop5: partition table partially beyond EOD, truncated [ 155.464239][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 155.611228][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.612054][ T9] usb 1-1: config 0 has no interfaces? [ 155.612090][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.630614][ T9] usb 1-1: config 0 descriptor?? [ 155.785873][ T6643] kvm: user requested TSC rate below hardware speed [ 155.799972][ T6643] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 155.896425][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.930317][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.431209][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 156.431229][ T30] audit: type=1804 audit(1789646820.336:161): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.255" name="/newroot/55/file1" dev="tmpfs" ino=311 res=1 errno=0 [ 156.586509][ T6657] sock: sock_timestamping_bind_phc: sock not bind to device [ 156.702546][ T5723] usb 1-1: USB disconnect, device number 28 [ 156.917876][ T6653] netlink: 'syz.4.255': attribute type 4 has an invalid length. [ 156.917915][ T6653] netlink: 128 bytes leftover after parsing attributes in process `syz.4.255'. [ 157.339965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 157.630721][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.631213][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.745906][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.259'. [ 158.271771][ T1218] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 158.371852][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 158.435405][ T1218] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.437559][ T1218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.437583][ T1218] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 158.437611][ T1218] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.470746][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.470769][ T1218] usb 1-1: SerialNumber: syz [ 158.537122][ T5675] Bluetooth: Configuration file not found ar3k/ramps_0xb0e332f2_0.dfu [ 158.537141][ T5675] Bluetooth: Loading sysconfig file failed [ 158.537165][ T5675] ath3k 5-1:0.0: probe with driver ath3k failed with error -110 [ 158.539315][ T1218] usb 1-1: No union descriptors [ 158.570342][ T9] usb 2-1: device descriptor read/64, error -71 [ 158.578261][ T5675] usb 5-1: USB disconnect, device number 2 [ 158.749684][ T1218] usb 1-1: USB disconnect, device number 29 [ 158.810038][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 158.950190][ T9] usb 2-1: device descriptor read/64, error -71 [ 159.060365][ T9] usb usb2-port1: attempt power cycle [ 159.411970][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 159.433331][ T9] usb 2-1: device descriptor read/8, error -71 [ 159.670112][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 159.708388][ T9] usb 2-1: device descriptor read/8, error -71 [ 159.760078][ T5675] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 159.810322][ T9] usb usb2-port1: unable to enumerate USB device [ 159.910005][ T5675] usb 1-1: Using ep0 maxpacket: 8 [ 159.910915][ T5675] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 159.916929][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.916956][ T5675] usb 1-1: Product: syz [ 159.916972][ T5675] usb 1-1: Manufacturer: syz [ 159.916988][ T5675] usb 1-1: SerialNumber: syz [ 159.959000][ T5675] usb 1-1: config 0 descriptor?? [ 159.969776][ T5675] gspca_main: sq930x-2.14.0 probing 2770:930c [ 160.913727][ T5675] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 161.130000][ T5675] gspca_sq930x: Sensor ov9630 not yet treated [ 161.130098][ T5675] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 161.137919][ T5675] usb 1-1: USB disconnect, device number 30 [ 161.691816][ T5675] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 161.741944][ T5723] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 161.850806][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 161.852052][ T5675] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 161.854687][ T5675] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.888660][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.888688][ T5675] usb 5-1: Product: syz [ 161.888704][ T5675] usb 5-1: Manufacturer: syz [ 161.888720][ T5675] usb 5-1: SerialNumber: syz [ 161.914323][ T5723] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 161.930705][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.930731][ T5723] usb 2-1: config 0 has no interfaces? [ 161.930764][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.970864][ T5723] usb 2-1: config 0 descriptor?? [ 162.101988][ T6738] input: syz0 as /devices/virtual/input/input11 [ 162.142884][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 162.220767][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.221597][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.422173][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.424857][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.454598][ T5675] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 162.705556][ T5675] usb 5-1: USB disconnect, device number 3 [ 162.910983][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.244001][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.267272][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.387384][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 163.710772][ T5708] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.867942][ T5708] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 163.884625][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.915785][ T5708] usb 5-1: config 0 descriptor?? [ 164.351609][ T5708] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 164.353999][ T5708] [drm:udl_init] *ERROR* Selecting channel failed [ 164.626607][ T5708] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 164.626673][ T5708] [drm] Initialized udl on minor 1 [ 164.722123][ T5708] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 164.722431][ T6759] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 164.765075][ T6759] xt_l2tp: invalid flags combination: 0 [ 164.801656][ T5708] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 164.889279][ T5708] usb 5-1: USB disconnect, device number 4 [ 165.169277][ T30] audit: type=1326 audit(1789646829.076:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.213255][ T30] audit: type=1326 audit(1789646829.076:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.213658][ T30] audit: type=1326 audit(1789646829.126:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.214252][ T30] audit: type=1326 audit(1789646829.126:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.216606][ T30] audit: type=1326 audit(1789646829.126:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.335697][ T30] audit: type=1326 audit(1789646829.226:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.389210][ T30] audit: type=1326 audit(1789646829.296:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.389518][ T30] audit: type=1326 audit(1789646829.296:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.446193][ T30] audit: type=1326 audit(1789646829.356:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 165.446269][ T30] audit: type=1326 audit(1789646829.356:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe50ec code=0x7ffc0000 [ 166.133234][ T6780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.287'. [ 166.133257][ T6780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'. [ 166.807971][ T5723] usb 2-1: string descriptor 0 read error: -71 [ 166.821220][ T5723] usb 2-1: USB disconnect, device number 28 [ 167.395902][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 167.484558][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 167.765018][ T5708] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 167.840162][ T5704] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 167.843046][ T6816] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 167.922405][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 167.924348][ T5708] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 167.929556][ T5708] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 167.929620][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.929683][ T5708] usb 2-1: config 0 has no interface number 0 [ 167.976813][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.976877][ T5708] usb 2-1: Product: syz [ 167.976933][ T5708] usb 2-1: Manufacturer: syz [ 167.976971][ T5708] usb 2-1: SerialNumber: syz [ 168.008206][ T5704] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 168.019218][ T5704] usb 1-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 168.019253][ T5704] usb 1-1: config 2 interface 0 altsetting 178 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 168.019281][ T5704] usb 1-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0 [ 168.019317][ T5704] usb 1-1: config 2 interface 0 has no altsetting 0 [ 168.024154][ T5708] usb 2-1: config 0 descriptor?? [ 168.067618][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.067674][ T5704] usb 1-1: Product: syz [ 168.067705][ T5704] usb 1-1: Manufacturer: syz [ 168.067734][ T5704] usb 1-1: SerialNumber: syz [ 168.279338][ T5708] usb 2-1: USB disconnect, device number 29 [ 168.452028][ T5704] ims_pcu 1-1:2.0: Incorrect number of endpoints on data interface (1) [ 168.452159][ T5704] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 168.490497][ T5704] usb 1-1: USB disconnect, device number 31 [ 169.818779][ T832] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 170.026792][ T832] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 170.055922][ T832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.055940][ T832] usb 2-1: config 0 has no interfaces? [ 170.055988][ T832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.100833][ T832] usb 2-1: config 0 descriptor?? [ 170.384870][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.389535][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.944299][ T5675] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 171.156565][ T5675] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 171.168265][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.168291][ T5675] usb 1-1: Product: syz [ 171.168306][ T5675] usb 1-1: Manufacturer: syz [ 171.168320][ T5675] usb 1-1: SerialNumber: syz [ 171.245151][ T5675] usb 1-1: config 0 descriptor?? [ 171.327119][ T6869] netlink: 9 bytes leftover after parsing attributes in process `syz.2.314'. [ 171.660652][ T5675] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 171.660703][ T5675] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 171.841461][ T5675] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 171.889977][ T5675] usb 1-1: USB disconnect, device number 32 [ 172.526044][ T6878] FAULT_INJECTION: forcing a failure. [ 172.526044][ T6878] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 172.526096][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.0.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.526124][ T6878] Tainted: [L]=SOFTLOCKUP [ 172.526132][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.526143][ T6878] Call Trace: [ 172.526152][ T6878] [ 172.526160][ T6878] dump_stack_lvl+0xe8/0x150 [ 172.526194][ T6878] should_fail_ex+0x410/0x560 [ 172.526222][ T6878] prepare_alloc_pages+0x223/0x600 [ 172.526250][ T6878] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 172.526277][ T6878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.526303][ T6878] ? __pfx_policy_nodemask+0x10/0x10 [ 172.526338][ T6878] alloc_pages_mpol+0x21e/0x390 [ 172.526369][ T6878] alloc_pages_noprof+0xb1/0x2b0 [ 172.526407][ T6878] get_free_pages_noprof+0xf/0x80 [ 172.526429][ T6878] __kasan_populate_vmalloc+0x38/0x1c0 [ 172.526447][ T6878] ? do_raw_spin_unlock+0xf5/0x200 [ 172.526478][ T6878] alloc_vmap_area+0xd1a/0x1420 [ 172.526517][ T6878] ? __pfx_alloc_vmap_area+0x10/0x10 [ 172.526540][ T6878] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 172.526560][ T6878] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 172.526580][ T6878] ? __get_vm_area_node+0x155/0x2f0 [ 172.526609][ T6878] __get_vm_area_node+0x200/0x2f0 [ 172.526641][ T6878] __vmalloc_node_range_noprof+0x343/0x1540 [ 172.526669][ T6878] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 172.526717][ T6878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.526747][ T6878] ? lock_acquire+0x115/0x350 [ 172.526770][ T6878] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 172.526790][ T6878] __vmalloc_noprof+0xd2/0x120 [ 172.526816][ T6878] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 172.526858][ T6878] bpf_prog_alloc_no_stats+0x47/0x560 [ 172.526880][ T6878] ? bpf_prog_alloc+0x2a/0x1a0 [ 172.526905][ T6878] bpf_prog_alloc+0x3c/0x1a0 [ 172.526930][ T6878] bpf_prog_load+0x7f8/0x1c20 [ 172.526982][ T6878] ? __pfx_bpf_prog_load+0x10/0x10 [ 172.527046][ T6878] __sys_bpf+0xd0d/0xd90 [ 172.527077][ T6878] ? __pfx___sys_bpf+0x10/0x10 [ 172.527102][ T6878] ? ksys_write+0x1e6/0x270 [ 172.527136][ T6878] ? __mutex_unlock_slowpath+0x731/0x900 [ 172.527177][ T6878] ? fput+0xa0/0xd0 [ 172.527202][ T6878] ? ksys_write+0x242/0x270 [ 172.527238][ T6878] __ia32_sys_bpf+0xba/0xd0 [ 172.527261][ T6878] __do_fast_syscall_32+0x27a/0x6a0 [ 172.527285][ T6878] ? do_fast_syscall_32+0x33/0x70 [ 172.527308][ T6878] ? asm_int80_emulation+0x1a/0x20 [ 172.527328][ T6878] ? do_int80_emulation+0x299/0x500 [ 172.527349][ T6878] ? trace_irq_disable+0x3b/0x140 [ 172.527374][ T6878] do_fast_syscall_32+0x33/0x70 [ 172.527397][ T6878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.527422][ T6878] RIP: 0023:0xf7fe50ec [ 172.527445][ T6878] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 172.527465][ T6878] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 172.527487][ T6878] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 172.527501][ T6878] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.527512][ T6878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.527524][ T6878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.527536][ T6878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.527564][ T6878] [ 172.556338][ T6878] syz.0.316: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 172.556545][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.0.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.556574][ T6878] Tainted: [L]=SOFTLOCKUP [ 172.556583][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.556595][ T6878] Call Trace: [ 172.556604][ T6878] [ 172.556613][ T6878] dump_stack_lvl+0xe8/0x150 [ 172.556650][ T6878] warn_alloc+0x24d/0x270 [ 172.556674][ T6878] ? lockdep_hardirqs_on+0x7b/0x110 [ 172.556701][ T6878] ? __pfx_warn_alloc+0x10/0x10 [ 172.556722][ T6878] ? kfree+0x1c5/0x650 [ 172.556759][ T6878] ? __get_vm_area_node+0x219/0x2f0 [ 172.556800][ T6878] __vmalloc_node_range_noprof+0x36b/0x1540 [ 172.556863][ T6878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.556898][ T6878] ? lock_acquire+0x115/0x350 [ 172.556926][ T6878] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 172.556951][ T6878] __vmalloc_noprof+0xd2/0x120 [ 172.556984][ T6878] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 172.557013][ T6878] bpf_prog_alloc_no_stats+0x47/0x560 [ 172.557037][ T6878] ? bpf_prog_alloc+0x2a/0x1a0 [ 172.557065][ T6878] bpf_prog_alloc+0x3c/0x1a0 [ 172.557094][ T6878] bpf_prog_load+0x7f8/0x1c20 [ 172.557132][ T6878] ? __pfx_bpf_prog_load+0x10/0x10 [ 172.557184][ T6878] __sys_bpf+0xd0d/0xd90 [ 172.557227][ T6878] ? __pfx___sys_bpf+0x10/0x10 [ 172.557285][ T6878] ? ksys_write+0x1e6/0x270 [ 172.557385][ T6878] ? __mutex_unlock_slowpath+0x731/0x900 [ 172.557509][ T6878] ? fput+0xa0/0xd0 [ 172.557577][ T6878] ? ksys_write+0x242/0x270 [ 172.557691][ T6878] __ia32_sys_bpf+0xba/0xd0 [ 172.557764][ T6878] __do_fast_syscall_32+0x27a/0x6a0 [ 172.557829][ T6878] ? do_fast_syscall_32+0x33/0x70 [ 172.557892][ T6878] ? asm_int80_emulation+0x1a/0x20 [ 172.557946][ T6878] ? do_int80_emulation+0x299/0x500 [ 172.558016][ T6878] ? trace_irq_disable+0x3b/0x140 [ 172.558081][ T6878] do_fast_syscall_32+0x33/0x70 [ 172.558157][ T6878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.558227][ T6878] RIP: 0023:0xf7fe50ec [ 172.558294][ T6878] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 172.558337][ T6878] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 172.558391][ T6878] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 172.558434][ T6878] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.558477][ T6878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.558507][ T6878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.558538][ T6878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.558611][ T6878] [ 172.616617][ T6878] Mem-Info: [ 172.616657][ T6878] active_anon:11433 inactive_anon:28 isolated_anon:0 [ 172.616657][ T6878] active_file:0 inactive_file:54693 isolated_file:0 [ 172.616657][ T6878] unevictable:0 dirty:88 writeback:14 [ 172.616657][ T6878] slab_reclaimable:10437 slab_unreclaimable:94913 [ 172.616657][ T6878] mapped:34287 shmem:5523 pagetables:1253 [ 172.616657][ T6878] sec_pagetables:0 bounce:0 [ 172.616657][ T6878] kernel_misc_reclaimable:0 [ 172.616657][ T6878] free:1305886 free_pcp:9951 free_cma:0 [ 172.616811][ T6878] Node 0 active_anon:45732kB inactive_anon:112kB active_file:0kB inactive_file:218544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137112kB dirty:352kB writeback:56kB shmem:22092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12296kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.616979][ T6878] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.617115][ T6878] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.617265][ T6878] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 172.617359][ T6878] Node 0 DMA32 free:1275408kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:45732kB inactive_anon:112kB active_file:0kB inactive_file:218544kB unevictable:0kB writepending:408kB zspages:0kB present:3129332kB managed:2546636kB mlocked:0kB bounce:0kB free_pcp:39436kB local_pcp:17424kB free_cma:0kB [ 172.617523][ T6878] lowmem_reserve[]: 0 0 0 0 0 [ 172.617611][ T6878] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.617762][ T6878] lowmem_reserve[]: 0 0 0 0 0 [ 172.617810][ T6878] Node 1 Normal free:3932776kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:368kB local_pcp:368kB free_cma:0kB [ 172.617868][ T6878] lowmem_reserve[]: 0 0 0 0 0 [ 172.617903][ T6878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.618020][ T6878] Node 0 DMA32: 38*4kB (UE) 772*8kB (UME) 370*16kB (UE) 610*32kB (UME) 403*64kB (UME) 163*128kB (UME) 66*256kB (M) 9*512kB (UM) 4*1024kB (ME) 2*2048kB (UM) 285*4096kB (UM) = 1275480kB [ 172.674877][ T6878] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.675251][ T6878] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 9*16kB (UM) 3*32kB (U) 3*64kB (UM) 3*128kB (U) 1*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3932776kB [ 172.675747][ T6878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.675787][ T6878] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.675841][ T6878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.675880][ T6878] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.675918][ T6878] 60273 total pagecache pages [ 172.675947][ T6878] 36 pages in swap cache [ 172.675960][ T6878] Free swap = 124852kB [ 172.675978][ T6878] Total swap = 124996kB [ 172.675997][ T6878] 2097051 pages RAM [ 172.676015][ T6878] 0 pages HighMem/MovableOnly [ 172.676034][ T6878] 428776 pages reserved [ 172.676046][ T6878] 0 pages cma reserved [ 173.034725][ T832] usb 2-1: string descriptor 0 read error: -71 [ 173.224594][ T832] usb 2-1: USB disconnect, device number 30 [ 174.381607][ T832] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 174.534576][ T832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.555473][ T832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.555510][ T832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 174.555545][ T832] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.601853][ T832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.601911][ T832] usb 2-1: SerialNumber: syz [ 174.671833][ T832] usb 2-1: No union descriptors [ 174.880845][ T44] usb 2-1: USB disconnect, device number 31 [ 175.410061][ T5675] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.611803][ T5675] usb 5-1: Using ep0 maxpacket: 8 [ 175.614679][ T5675] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.642857][ T5675] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 175.642905][ T5675] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.642925][ T5675] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.642954][ T5675] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.642975][ T5675] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.643013][ T5675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.852927][ T5675] usb 5-1: usb_control_msg returned -32 [ 175.852974][ T5675] usbtmc 5-1:16.0: can't read capabilities [ 175.987836][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.018717][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.273415][ T6926] netlink: 160 bytes leftover after parsing attributes in process `syz.4.325'. [ 176.273446][ T6926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.440035][ T5675] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 176.568975][ T6929] FAULT_INJECTION: forcing a failure. [ 176.568975][ T6929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.569015][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.2.330 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.569044][ T6929] Tainted: [L]=SOFTLOCKUP [ 176.569052][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.569070][ T6929] Call Trace: [ 176.569078][ T6929] [ 176.569088][ T6929] dump_stack_lvl+0xe8/0x150 [ 176.569125][ T6929] should_fail_ex+0x410/0x560 [ 176.569155][ T6929] prepare_alloc_pages+0x223/0x600 [ 176.569185][ T6929] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 176.569214][ T6929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 176.569237][ T6929] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 176.569264][ T6929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 176.569292][ T6929] ? __pfx_policy_nodemask+0x10/0x10 [ 176.569325][ T6929] __alloc_pages_noprof+0x10/0x100 [ 176.569350][ T6929] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 176.569382][ T6929] ? alloc_pages_noprof+0x140/0x2b0 [ 176.569414][ T6929] __kasan_populate_vmalloc+0xb7/0x1c0 [ 176.569444][ T6929] alloc_vmap_area+0xd1a/0x1420 [ 176.569490][ T6929] ? __pfx_alloc_vmap_area+0x10/0x10 [ 176.569518][ T6929] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 176.569541][ T6929] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 176.569563][ T6929] ? __get_vm_area_node+0x155/0x2f0 [ 176.569599][ T6929] __get_vm_area_node+0x200/0x2f0 [ 176.569637][ T6929] __vmalloc_node_range_noprof+0x343/0x1540 [ 176.569682][ T6929] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 176.569718][ T6929] ? __pfx___schedule+0x10/0x10 [ 176.569761][ T6929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.569792][ T6929] ? irqentry_exit+0x218/0x910 [ 176.569815][ T6929] ? irqentry_exit+0x218/0x910 [ 176.569847][ T6929] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 176.569870][ T6929] __vmalloc_noprof+0xd2/0x120 [ 176.569899][ T6929] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 176.569928][ T6929] bpf_prog_alloc_no_stats+0x47/0x560 [ 176.569950][ T6929] ? bpf_prog_alloc+0x2a/0x1a0 [ 176.569992][ T6929] bpf_prog_alloc+0x3c/0x1a0 [ 176.570018][ T6929] bpf_prog_load+0x7f8/0x1c20 [ 176.570054][ T6929] ? __pfx_bpf_prog_load+0x10/0x10 [ 176.570104][ T6929] __sys_bpf+0xd0d/0xd90 [ 176.570136][ T6929] ? __pfx___sys_bpf+0x10/0x10 [ 176.570163][ T6929] ? ksys_write+0x1e6/0x270 [ 176.570199][ T6929] ? __mutex_unlock_slowpath+0x731/0x900 [ 176.570242][ T6929] ? fput+0xa0/0xd0 [ 176.570268][ T6929] ? ksys_write+0x242/0x270 [ 176.570306][ T6929] __ia32_sys_bpf+0xba/0xd0 [ 176.570332][ T6929] __do_fast_syscall_32+0x27a/0x6a0 [ 176.570358][ T6929] ? do_fast_syscall_32+0x33/0x70 [ 176.570382][ T6929] ? asm_int80_emulation+0x1a/0x20 [ 176.570403][ T6929] ? do_int80_emulation+0x299/0x500 [ 176.570427][ T6929] ? trace_irq_disable+0x3b/0x140 [ 176.570453][ T6929] do_fast_syscall_32+0x33/0x70 [ 176.570478][ T6929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.570504][ T6929] RIP: 0023:0xf701f0ec [ 176.570524][ T6929] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 176.570541][ T6929] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 176.570566][ T6929] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 176.570580][ T6929] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.570593][ T6929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.570606][ T6929] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.570618][ T6929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.570649][ T6929] [ 176.754248][ T5675] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.817152][ T5675] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 176.817186][ T5675] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.949957][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.949982][ T5675] usb 2-1: Product: syz [ 176.949996][ T5675] usb 2-1: Manufacturer: syz [ 176.950026][ T5675] usb 2-1: SerialNumber: syz [ 177.021442][ T5675] usb 2-1: config 0 descriptor?? [ 177.028961][ T5675] usb 2-1: selecting invalid altsetting 0 [ 177.341256][ T6922] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 177.358686][ T5723] usb 2-1: USB disconnect, device number 32 [ 177.504322][ T6935] xt_hashlimit: size too large, truncated to 1048576 [ 177.504516][ T6935] xt_hashlimit: max too large, truncated to 1048576 [ 177.504617][ T6935] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 178.294871][ T5723] usb 5-1: USB disconnect, device number 5 [ 178.478815][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 178.584026][ T44] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 178.670003][ T5732] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 178.730247][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 178.768031][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.768126][ T44] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 178.817444][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.817510][ T44] usb 1-1: Product: syz [ 178.817546][ T44] usb 1-1: Manufacturer: syz [ 178.817581][ T44] usb 1-1: SerialNumber: syz [ 178.837544][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.861888][ T5732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.861914][ T5732] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 178.861935][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.868671][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.868696][ T5732] usb 2-1: SerialNumber: syz [ 178.921420][ T6943] socket: no more sockets [ 178.941653][ T5732] usb 2-1: No union descriptors [ 179.165164][ T5732] usb 2-1: USB disconnect, device number 33 [ 179.506922][ T6949] binder: 6944:6949 ioctl 4018620d 0 returned -22 [ 179.530804][ T6949] binder: 6944:6949 ioctl c0306201 80000040 returned -22 [ 180.045286][ T6964] netlink: 'syz.4.342': attribute type 10 has an invalid length. [ 180.080980][ T6964] xt_l2tp: invalid flags combination: 0 [ 180.211145][ T5732] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 180.365537][ T5732] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 180.410243][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.410272][ T5732] usb 2-1: Product: syz [ 180.410287][ T5732] usb 2-1: Manufacturer: syz [ 180.410303][ T5732] usb 2-1: SerialNumber: syz [ 180.448324][ T5732] usb 2-1: config 0 descriptor?? [ 180.776126][ T5723] usb 2-1: USB disconnect, device number 34 [ 181.304833][ T44] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 181.307720][ T44] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 181.311547][ T44] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 181.311718][ T44] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 181.779142][ T44] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 181.821870][ T44] usb 1-1: USB disconnect, device number 33 [ 182.088769][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.231130][ T5723] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 182.382170][ T5723] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 182.384255][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 182.384286][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 182.384315][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 182.384350][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 182.426029][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.426049][ T5723] usb 2-1: Product: syz [ 182.426059][ T5723] usb 2-1: Manufacturer: syz [ 182.426069][ T5723] usb 2-1: SerialNumber: syz [ 182.483726][ T5723] usb 2-1: config 0 descriptor?? [ 182.509758][ T5723] iguanair 2-1:0.0: failed to get version [ 182.522238][ T5723] iguanair 2-1:0.0: probe with driver iguanair failed with error -90 [ 182.720455][ T5723] usb 2-1: USB disconnect, device number 35 [ 183.060144][ T5732] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 183.190245][ T5732] usb 1-1: device descriptor read/64, error -71 [ 183.440028][ T5732] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 183.570672][ T5732] usb 1-1: device descriptor read/64, error -71 [ 183.680409][ T5732] usb usb1-port1: attempt power cycle [ 183.850052][ T5723] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 184.001058][ T5723] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 184.002519][ T5723] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 184.002553][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.005918][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 184.005941][ T5723] usb 2-1: Product: syz [ 184.005955][ T5723] usb 2-1: Manufacturer: syz [ 184.005970][ T5723] usb 2-1: SerialNumber: syz [ 184.020185][ T5732] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 184.075505][ T5723] usb 2-1: config 0 descriptor?? [ 184.076273][ T5732] usb 1-1: device descriptor read/8, error -71 [ 184.096267][ T5723] usb 2-1: selecting invalid altsetting 0 [ 184.321120][ T5732] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 184.350961][ T5732] usb 1-1: device descriptor read/8, error -71 [ 184.428176][ T7000] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 184.446724][ T832] usb 2-1: USB disconnect, device number 36 [ 184.460415][ T5732] usb usb1-port1: unable to enumerate USB device [ 184.791671][ T7012] syz_tun: entered allmulticast mode [ 184.796611][ T7013] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 184.812887][ T7013] xt_l2tp: invalid flags combination: 0 [ 185.080262][ T832] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 185.231539][ T832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.235090][ T832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.235123][ T832] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.235152][ T832] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.237905][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.237935][ T832] usb 5-1: SerialNumber: syz [ 185.307411][ T832] usb 5-1: No union descriptors [ 185.527872][ T832] usb 5-1: USB disconnect, device number 6 [ 185.672034][ T7024] netlink: 80 bytes leftover after parsing attributes in process `syz.3.358'. [ 185.912113][ T7023] syzkaller0: entered promiscuous mode [ 185.912146][ T7023] syzkaller0: entered allmulticast mode [ 185.938821][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.948794][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.029462][ T7028] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.799686][ T7044] input: syz1 as /devices/virtual/input/input13 [ 187.008507][ T7049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.364'. [ 187.065857][ T7052] netlink: 72 bytes leftover after parsing attributes in process `syz.1.364'. [ 187.191162][ T7040] binder: 7035:7040 ioctl c0306201 800003c0 returned -14 [ 187.355778][ T7058] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 187.450474][ T7054] xt_l2tp: invalid flags combination: 0 [ 188.146943][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 189.352370][ T7069] pim6reg: entered allmulticast mode [ 189.529304][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 189.721262][ T7084] loop5: detected capacity change from 0 to 7 [ 189.722946][ T7084] loop5: [ 189.723045][ T7084] loop5: partition table partially beyond EOD, truncated [ 189.910005][ T5723] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 190.039994][ T5723] usb 2-1: device descriptor read/64, error -71 [ 190.261908][ T832] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 190.280466][ T5723] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 190.410250][ T5723] usb 2-1: device descriptor read/64, error -71 [ 190.419884][ T832] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 190.456129][ T832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.456163][ T832] usb 5-1: config 0 has no interfaces? [ 190.456198][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.495127][ T832] usb 5-1: config 0 descriptor?? [ 190.520386][ T5723] usb usb2-port1: attempt power cycle [ 190.811715][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.850788][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.891146][ T5723] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 190.915313][ T5723] usb 2-1: device descriptor read/8, error -71 [ 191.102103][ T5732] bridge0: entered promiscuous mode [ 191.150040][ T5723] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 191.177655][ T5723] usb 2-1: device descriptor read/8, error -71 [ 191.280515][ T5723] usb usb2-port1: unable to enumerate USB device [ 192.309394][ T7121] input: syz0 as /devices/virtual/input/input14 [ 192.903487][ T5723] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 193.063631][ T5723] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 193.102492][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 193.102520][ T5723] usb 1-1: Product: syz [ 193.102534][ T5723] usb 1-1: Manufacturer: syz [ 193.102548][ T5723] usb 1-1: SerialNumber: syz [ 193.158433][ T5723] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 193.597802][ T832] usb 5-1: string descriptor 0 read error: -71 [ 193.621510][ T832] usb 5-1: USB disconnect, device number 7 [ 193.732633][ T5723] vp7045: USB control message 'in' went wrong. [ 193.732673][ T5723] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 193.732729][ T5723] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 193.769335][ T5723] usb 1-1: USB disconnect, device number 38 [ 194.273158][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273224][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.749083][ T7182] FAULT_INJECTION: forcing a failure. [ 195.749083][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 195.749150][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.4.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.749181][ T7182] Tainted: [L]=SOFTLOCKUP [ 195.749189][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.749201][ T7182] Call Trace: [ 195.749210][ T7182] [ 195.749218][ T7182] dump_stack_lvl+0xe8/0x150 [ 195.749253][ T7182] should_fail_ex+0x410/0x560 [ 195.749282][ T7182] should_failslab+0xa8/0x100 [ 195.749311][ T7182] __kmalloc_cache_noprof+0xa3/0x600 [ 195.749335][ T7182] ? bpf_diag_init+0x87/0x140 [ 195.749359][ T7182] ? bpf_diag_init+0x87/0x140 [ 195.749391][ T7182] bpf_diag_init+0x87/0x140 [ 195.749418][ T7182] bpf_check+0x5df/0x2e10 [ 195.749452][ T7182] ? ktime_get_with_offset+0x93/0x2d0 [ 195.749480][ T7182] ? __pfx_bpf_check+0x10/0x10 [ 195.749506][ T7182] ? bpf_obj_name_cpy+0x194/0x1e0 [ 195.749540][ T7182] bpf_prog_load+0x14d6/0x1c20 [ 195.749590][ T7182] ? __pfx_bpf_prog_load+0x10/0x10 [ 195.749641][ T7182] __sys_bpf+0xd0d/0xd90 [ 195.749673][ T7182] ? __pfx___sys_bpf+0x10/0x10 [ 195.749707][ T7182] ? __mutex_unlock_slowpath+0x731/0x900 [ 195.749750][ T7182] ? fput+0xa0/0xd0 [ 195.749777][ T7182] ? ksys_write+0x242/0x270 [ 195.749815][ T7182] __ia32_sys_bpf+0xba/0xd0 [ 195.749840][ T7182] __do_fast_syscall_32+0x27a/0x6a0 [ 195.749867][ T7182] ? do_fast_syscall_32+0x33/0x70 [ 195.749891][ T7182] ? asm_int80_emulation+0x1a/0x20 [ 195.749912][ T7182] ? do_int80_emulation+0x299/0x500 [ 195.749941][ T7182] do_fast_syscall_32+0x33/0x70 [ 195.749966][ T7182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.749992][ T7182] RIP: 0023:0xf702f0ec [ 195.750011][ T7182] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 195.750029][ T7182] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 195.750052][ T7182] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 195.750067][ T7182] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.750080][ T7182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.750093][ T7182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.750106][ T7182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.750136][ T7182] [ 195.837243][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 195.844419][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 196.261814][ T7183] syzkaller0: entered promiscuous mode [ 196.262483][ T7183] syzkaller0: entered allmulticast mode [ 196.382496][ T7192] fuse: Unknown parameter 'fhæ0x0000000000000008' [ 196.737701][ T7198] netlink: 'syz.0.395': attribute type 10 has an invalid length. [ 196.738566][ T7203] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 196.822925][ T5723] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.925040][ T7198] xt_l2tp: invalid flags combination: 0 [ 196.970187][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 196.970909][ T5723] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 196.971926][ T5723] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.971959][ T5723] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.971988][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.972032][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.041797][ T5723] usb 5-1: config 0 descriptor?? [ 197.552637][ T5723] input: HID 05ac:0269 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0269.0002/input/input15 [ 197.812413][ T7227] binder: 7224:7227 ioctl c0306201 80000080 returned -14 [ 197.898292][ T5723] magicmouse 0003:05AC:0269.0002: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 197.927020][ T5723] usb 5-1: USB disconnect, device number 8 [ 198.338953][ T7231] tipc: Enabling of bearer rejected, failed to enable media [ 198.438953][ T7231] tipc: Enabling of bearer rejected, failed to enable media [ 198.562270][ T7236] fido_id[7236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 199.266600][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.280464][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.420096][ T5723] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 199.580272][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.582564][ T5723] usb 5-1: not running at top speed; connect to a high speed hub [ 199.582599][ T5723] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice=e7.3f [ 199.584348][ T5723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.584373][ T5723] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.625036][ T832] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 199.647914][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.647933][ T5723] usb 5-1: Product: syz [ 199.647943][ T5723] usb 5-1: Manufacturer: syz [ 199.647971][ T5723] usb 5-1: SerialNumber: syz [ 199.810896][ T832] usb 1-1: Using ep0 maxpacket: 8 [ 199.819207][ T832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.819319][ T832] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 199.851402][ T832] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 203, changing to 7 [ 199.877873][ T832] usb 1-1: string descriptor 0 read error: -22 [ 199.878166][ T832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.188655][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.189233][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.423815][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 200.961165][ T5732] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 201.090061][ T5732] usb 2-1: device descriptor read/64, error -71 [ 201.340081][ T5732] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 201.446478][ T5723] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 201.446558][ T5723] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 201.482859][ T5732] usb 2-1: device descriptor read/64, error -71 [ 201.531054][ T5723] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.538053][ T832] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 201.538864][ T5723] usb 5-1: USB disconnect, device number 9 [ 201.539035][ T832] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.565974][ T832] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 201.590248][ T5732] usb usb2-port1: attempt power cycle [ 201.638035][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.707101][ T832] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 201.709436][ T7287] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 201.712792][ T832] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.714057][ T832] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 201.778934][ T832] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 201.780908][ T832] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.901559][ T7285] xt_l2tp: invalid flags combination: 0 [ 201.931685][ T5732] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 201.953795][ T5732] usb 2-1: device descriptor read/8, error -71 [ 202.104197][ T832] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 202.125721][ T832] usb 1-1: USB disconnect, device number 39 [ 202.180092][ T5723] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 202.197697][ T5732] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 202.225902][ T5732] usb 2-1: device descriptor read/8, error -71 [ 202.311086][ T5723] usb 5-1: device descriptor read/64, error -71 [ 202.332007][ T5732] usb usb2-port1: unable to enumerate USB device [ 202.441955][ T832] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 202.560576][ T5723] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 202.597828][ T832] usb 1-1: Using ep0 maxpacket: 32 [ 202.620205][ T832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.620250][ T832] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 202.624605][ T832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.624731][ T832] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.648561][ T832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.648622][ T832] usb 1-1: Product: syz [ 202.648661][ T832] usb 1-1: Manufacturer: syz [ 202.648698][ T832] usb 1-1: SerialNumber: syz [ 202.701412][ T5723] usb 5-1: device descriptor read/64, error -71 [ 202.810474][ T5723] usb usb5-port1: attempt power cycle [ 203.057063][ T7306] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.414' resets device [ 203.151744][ T5723] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 203.170846][ T5723] usb 5-1: device descriptor read/8, error -71 [ 203.410045][ T5723] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.440739][ T5723] usb 5-1: device descriptor read/8, error -71 [ 203.550792][ T5723] usb usb5-port1: unable to enumerate USB device [ 204.271968][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 204.528711][ T832] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 204.621740][ T832] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 204.670427][ T5732] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 204.800047][ T5732] usb 2-1: device descriptor read/64, error -71 [ 205.040322][ T5732] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 205.134380][ T832] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 205.194407][ T832] usb 1-1: USB disconnect, device number 40 [ 205.210000][ T5732] usb 2-1: device descriptor read/64, error -71 [ 205.250453][ T7331] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 205.321444][ T5732] usb usb2-port1: attempt power cycle [ 205.384808][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.680271][ T5732] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 205.701055][ T5732] usb 2-1: device descriptor read/8, error -71 [ 205.950423][ T5732] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 205.970779][ T5732] usb 2-1: device descriptor read/8, error -71 [ 206.080682][ T5732] usb usb2-port1: unable to enumerate USB device [ 206.600336][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 206.600375][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 206.600401][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 206.600425][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 206.600701][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 207.420503][ T5708] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 207.570529][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 207.574384][ T5708] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 207.577495][ T5708] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 207.577524][ T5708] usb 5-1: config 0 has no interface number 0 [ 207.579630][ T5708] usb 5-1: config 0 interface 184 has no altsetting 0 [ 207.625771][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.625802][ T5708] usb 5-1: Product: syz [ 207.625813][ T5708] usb 5-1: Manufacturer: syz [ 207.625835][ T5708] usb 5-1: SerialNumber: syz [ 207.662536][ T5708] usb 5-1: config 0 descriptor?? [ 207.795167][ T5732] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 207.923272][ T5732] usb 1-1: device descriptor read/64, error -71 [ 208.171342][ T5732] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 208.310016][ T5732] usb 1-1: device descriptor read/64, error -71 [ 208.421950][ T5732] usb usb1-port1: attempt power cycle [ 208.770146][ T5732] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 208.791173][ T5732] usb 1-1: device descriptor read/8, error -71 [ 208.834321][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 208.972633][ T9] usb 2-1: device descriptor read/64, error -71 [ 209.030523][ T5732] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 209.059619][ T5732] usb 1-1: device descriptor read/8, error -71 [ 209.160445][ T5732] usb usb1-port1: unable to enumerate USB device [ 209.210433][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 209.321875][ T7392] ipvlan2: entered promiscuous mode [ 209.340238][ T9] usb 2-1: device descriptor read/64, error -71 [ 209.342156][ T7392] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 209.342372][ T7392] team0: Device ipvlan2 failed to register rx_handler [ 209.450447][ T9] usb usb2-port1: attempt power cycle [ 209.790485][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 209.827557][ T9] usb 2-1: device descriptor read/8, error -71 [ 210.064801][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 210.082277][ T9] usb 2-1: device descriptor read/8, error -71 [ 210.190939][ T9] usb usb2-port1: unable to enumerate USB device [ 210.671886][ T5708] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 210.671949][ T5708] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 210.672012][ T5708] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 210.672636][ T5708] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.765234][ T5708] usb 5-1: USB disconnect, device number 14 [ 211.734122][ T7406] netlink: 56 bytes leftover after parsing attributes in process `syz.1.450'. [ 211.734527][ T7407] netlink: 56 bytes leftover after parsing attributes in process `syz.1.450'. [ 213.009353][ T7416] syzkaller0: entered promiscuous mode [ 213.009391][ T7416] syzkaller0: entered allmulticast mode [ 213.107275][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 213.530001][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 213.690812][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.692020][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 213.692051][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.695862][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.695886][ T9] usb 1-1: Product: syz [ 213.695901][ T9] usb 1-1: Manufacturer: syz [ 213.695916][ T9] usb 1-1: SerialNumber: syz [ 213.752720][ T9] usb 1-1: config 0 descriptor?? [ 213.771924][ T9] usb 1-1: selecting invalid altsetting 0 [ 213.971458][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.978791][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.093060][ T7432] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 214.104618][ T5668] usb 1-1: USB disconnect, device number 45 [ 214.391780][ T5708] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.544001][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 214.546948][ T5708] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 214.548541][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.548583][ T5708] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.548744][ T5708] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.584068][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 214.626475][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.626507][ T5708] usb 5-1: Product: syz [ 214.626531][ T5708] usb 5-1: Manufacturer: syz [ 214.626601][ T5708] usb 5-1: SerialNumber: syz [ 214.791240][ T9] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 214.799809][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.799835][ T9] usb 2-1: config 0 has no interfaces? [ 214.799865][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.839152][ T9] usb 2-1: config 0 descriptor?? [ 215.174104][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.177233][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.590723][ T7453] 8021q: VLANs not supported on vxcan1 [ 215.615239][ T7451] syzkaller0: entered promiscuous mode [ 215.615276][ T7451] syzkaller0: entered allmulticast mode [ 215.716208][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.731905][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.835537][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.837810][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.475338][ T5708] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 217.475386][ T5708] usb 5-1: clock source 0 is not valid, cannot use [ 217.476727][ T5708] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 217.502372][ T5708] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 218.122760][ T5708] usb 5-1: USB disconnect, device number 15 [ 218.513829][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.323433][ T7470] ALSA: mixer_oss: invalid OSS volume 'VO' [ 219.324410][ T9] usb 2-1: string descriptor 0 read error: -71 [ 219.351165][ T9] usb 2-1: USB disconnect, device number 53 [ 219.449011][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.449438][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.503123][ T7470] ip6tnl2: entered promiscuous mode [ 219.503147][ T7470] ip6tnl2: entered allmulticast mode [ 220.080057][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 220.226660][ T5668] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 220.258652][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 220.258688][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 220.296818][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 220.296858][ T9] usb 2-1: can't read configurations, error -61 [ 220.407150][ T5668] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 220.428164][ T5668] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.428263][ T5668] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.428383][ T5668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.443063][ T9] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 220.538488][ T5668] usb 5-1: config 0 descriptor?? [ 220.624181][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 220.624237][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 220.654754][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 220.654793][ T9] usb 2-1: can't read configurations, error -61 [ 220.656101][ T9] usb usb2-port1: attempt power cycle [ 220.716272][ T7484] fuse: fd is not a fuse device [ 221.031592][ T9] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 221.086861][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 221.086899][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 221.113133][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 221.113173][ T9] usb 2-1: can't read configurations, error -61 [ 221.244724][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 221.277599][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 221.277633][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 221.308067][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 221.308125][ T9] usb 2-1: can't read configurations, error -61 [ 221.308439][ T9] usb usb2-port1: unable to enumerate USB device [ 221.366898][ T5668] waltop 0003:172F:0037.0003: unknown main item tag 0x2 [ 221.366986][ T5668] waltop 0003:172F:0037.0003: unexpected long global item [ 221.436131][ T5668] waltop 0003:172F:0037.0003: probe with driver waltop failed with error -22 [ 221.709419][ T7486] sctp: [Deprecated]: syz.0.474 (pid 7486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.709419][ T7486] Use struct sctp_sack_info instead [ 222.044385][ T7492] FAULT_INJECTION: forcing a failure. [ 222.044385][ T7492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.044425][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.0.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.044456][ T7492] Tainted: [L]=SOFTLOCKUP [ 222.044465][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.044479][ T7492] Call Trace: [ 222.044488][ T7492] [ 222.044498][ T7492] dump_stack_lvl+0xe8/0x150 [ 222.044536][ T7492] should_fail_ex+0x410/0x560 [ 222.044568][ T7492] prepare_alloc_pages+0x223/0x600 [ 222.044600][ T7492] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 222.044631][ T7492] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 222.044662][ T7492] ? __pfx_policy_nodemask+0x10/0x10 [ 222.044688][ T7492] ? __get_vm_area_node+0x155/0x2f0 [ 222.044718][ T7492] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 222.044750][ T7492] ? __vmalloc_noprof+0xd2/0x120 [ 222.044781][ T7492] ? bpf_prog_calc_tag+0x51/0x370 [ 222.044807][ T7492] ? check_and_resolve_insns+0xbb/0x21d0 [ 222.044832][ T7492] ? bpf_prog_load+0x14d6/0x1c20 [ 222.044856][ T7492] ? __sys_bpf+0xd0d/0xd90 [ 222.044879][ T7492] ? __ia32_sys_bpf+0xba/0xd0 [ 222.044899][ T7492] ? __do_fast_syscall_32+0x27a/0x6a0 [ 222.044926][ T7492] ? do_fast_syscall_32+0x33/0x70 [ 222.044955][ T7492] alloc_pages_mpol+0x21e/0x390 [ 222.044992][ T7492] alloc_pages_noprof+0xb1/0x2b0 [ 222.045035][ T7492] get_free_pages_noprof+0xf/0x80 [ 222.045059][ T7492] __kasan_populate_vmalloc+0x38/0x1c0 [ 222.045093][ T7492] ? do_raw_spin_unlock+0xf5/0x200 [ 222.045127][ T7492] alloc_vmap_area+0xd1a/0x1420 [ 222.045169][ T7492] ? __pfx_alloc_vmap_area+0x10/0x10 [ 222.045196][ T7492] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 222.045218][ T7492] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 222.045248][ T7492] ? __get_vm_area_node+0x155/0x2f0 [ 222.045283][ T7492] __get_vm_area_node+0x200/0x2f0 [ 222.045319][ T7492] __vmalloc_node_range_noprof+0x343/0x1540 [ 222.045351][ T7492] ? bpf_prog_calc_tag+0x51/0x370 [ 222.045377][ T7492] ? format_decode+0xdc/0xda0 [ 222.045411][ T7492] ? vsnprintf+0xe42/0xef0 [ 222.045453][ T7492] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.045484][ T7492] ? bpf_verifier_vlog+0x3d1/0x900 [ 222.045525][ T7492] ? bpf_prog_calc_tag+0x51/0x370 [ 222.045548][ T7492] __vmalloc_noprof+0xd2/0x120 [ 222.045578][ T7492] ? bpf_prog_calc_tag+0x51/0x370 [ 222.045605][ T7492] bpf_prog_calc_tag+0x51/0x370 [ 222.045634][ T7492] check_and_resolve_insns+0xbb/0x21d0 [ 222.045661][ T7492] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 222.045684][ T7492] ? add_subprog+0x2e2/0x3f0 [ 222.045711][ T7492] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 222.045745][ T7492] bpf_check+0x180a/0x2e10 [ 222.045779][ T7492] ? ktime_get_with_offset+0x93/0x2d0 [ 222.045804][ T7492] ? __pfx_bpf_check+0x10/0x10 [ 222.045830][ T7492] ? bpf_obj_name_cpy+0x194/0x1e0 [ 222.045863][ T7492] bpf_prog_load+0x14d6/0x1c20 [ 222.045899][ T7492] ? __pfx_bpf_prog_load+0x10/0x10 [ 222.045947][ T7492] __sys_bpf+0xd0d/0xd90 [ 222.045996][ T7492] ? __pfx___sys_bpf+0x10/0x10 [ 222.046024][ T7492] ? ksys_write+0x1e6/0x270 [ 222.046063][ T7492] ? __mutex_unlock_slowpath+0x731/0x900 [ 222.046109][ T7492] ? fput+0xa0/0xd0 [ 222.046136][ T7492] ? ksys_write+0x242/0x270 [ 222.046177][ T7492] __ia32_sys_bpf+0xba/0xd0 [ 222.046203][ T7492] __do_fast_syscall_32+0x27a/0x6a0 [ 222.046238][ T7492] ? do_fast_syscall_32+0x33/0x70 [ 222.046264][ T7492] ? asm_int80_emulation+0x1a/0x20 [ 222.046286][ T7492] ? do_int80_emulation+0x299/0x500 [ 222.046311][ T7492] ? trace_irq_disable+0x3b/0x140 [ 222.046338][ T7492] do_fast_syscall_32+0x33/0x70 [ 222.046366][ T7492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.046395][ T7492] RIP: 0023:0xf7fe50ec [ 222.046416][ T7492] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 222.046436][ T7492] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 222.046461][ T7492] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 222.046476][ T7492] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.046490][ T7492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.046504][ T7492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.046517][ T7492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.046550][ T7492] [ 222.234807][ T7492] warn_alloc: 1 callbacks suppressed [ 222.234857][ T7492] syz.0.476: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 222.235158][ T7492] CPU: 1 UID: 0 PID: 7492 Comm: syz.0.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.235238][ T7492] Tainted: [L]=SOFTLOCKUP [ 222.235263][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.235291][ T7492] Call Trace: [ 222.235311][ T7492] [ 222.235330][ T7492] dump_stack_lvl+0xe8/0x150 [ 222.235414][ T7492] warn_alloc+0x24d/0x270 [ 222.235471][ T7492] ? lockdep_hardirqs_on+0x7b/0x110 [ 222.235534][ T7492] ? __pfx_warn_alloc+0x10/0x10 [ 222.235581][ T7492] ? kfree+0x1c5/0x650 [ 222.235670][ T7492] ? __get_vm_area_node+0x219/0x2f0 [ 222.235772][ T7492] __vmalloc_node_range_noprof+0x36b/0x1540 [ 222.235851][ T7492] ? format_decode+0xdc/0xda0 [ 222.235936][ T7492] ? vsnprintf+0xe42/0xef0 [ 222.236025][ T7492] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.236097][ T7492] ? bpf_verifier_vlog+0x3d1/0x900 [ 222.236190][ T7492] ? bpf_prog_calc_tag+0x51/0x370 [ 222.236210][ T7492] __vmalloc_noprof+0xd2/0x120 [ 222.236238][ T7492] ? bpf_prog_calc_tag+0x51/0x370 [ 222.236262][ T7492] bpf_prog_calc_tag+0x51/0x370 [ 222.236289][ T7492] check_and_resolve_insns+0xbb/0x21d0 [ 222.236314][ T7492] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 222.236389][ T7492] ? add_subprog+0x2e2/0x3f0 [ 222.236465][ T7492] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 222.236559][ T7492] bpf_check+0x180a/0x2e10 [ 222.236638][ T7492] ? ktime_get_with_offset+0x93/0x2d0 [ 222.236699][ T7492] ? __pfx_bpf_check+0x10/0x10 [ 222.236762][ T7492] ? bpf_obj_name_cpy+0x194/0x1e0 [ 222.236838][ T7492] bpf_prog_load+0x14d6/0x1c20 [ 222.236920][ T7492] ? __pfx_bpf_prog_load+0x10/0x10 [ 222.237035][ T7492] __sys_bpf+0xd0d/0xd90 [ 222.237102][ T7492] ? __pfx___sys_bpf+0x10/0x10 [ 222.237161][ T7492] ? ksys_write+0x1e6/0x270 [ 222.237235][ T7492] ? __mutex_unlock_slowpath+0x731/0x900 [ 222.237325][ T7492] ? fput+0xa0/0xd0 [ 222.237384][ T7492] ? ksys_write+0x242/0x270 [ 222.237469][ T7492] __ia32_sys_bpf+0xba/0xd0 [ 222.237522][ T7492] __do_fast_syscall_32+0x27a/0x6a0 [ 222.237577][ T7492] ? do_fast_syscall_32+0x33/0x70 [ 222.237629][ T7492] ? asm_int80_emulation+0x1a/0x20 [ 222.237662][ T7492] ? do_int80_emulation+0x299/0x500 [ 222.237709][ T7492] ? trace_irq_disable+0x3b/0x140 [ 222.237770][ T7492] do_fast_syscall_32+0x33/0x70 [ 222.237840][ T7492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.237900][ T7492] RIP: 0023:0xf7fe50ec [ 222.237944][ T7492] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 222.237987][ T7492] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 222.238034][ T7492] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 222.238057][ T7492] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.238078][ T7492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.238105][ T7492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.238132][ T7492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.238202][ T7492] [ 222.238215][ T7492] Mem-Info: [ 222.238234][ T7492] active_anon:18850 inactive_anon:74127 isolated_anon:0 [ 222.238234][ T7492] active_file:1288 inactive_file:51772 isolated_file:0 [ 222.238234][ T7492] unevictable:0 dirty:174 writeback:0 [ 222.238234][ T7492] slab_reclaimable:10544 slab_unreclaimable:96397 [ 222.238234][ T7492] mapped:41069 shmem:87819 pagetables:1607 [ 222.238234][ T7492] sec_pagetables:0 bounce:0 [ 222.238234][ T7492] kernel_misc_reclaimable:0 [ 222.238234][ T7492] free:1224549 free_pcp:10436 free_cma:0 [ 222.238384][ T7492] Node 0 active_anon:75400kB inactive_anon:296508kB active_file:5152kB inactive_file:206860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164240kB dirty:664kB writeback:0kB shmem:351276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12500kB pagetables:6296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 222.238516][ T7492] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:32kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 222.313390][ T7492] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.313564][ T7492] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 222.313662][ T7492] Node 0 DMA32 free:949692kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:76300kB inactive_anon:295508kB active_file:5152kB inactive_file:206860kB unevictable:0kB writepending:664kB zspages:1616kB present:3129332kB managed:2546636kB mlocked:0kB bounce:0kB free_pcp:41740kB local_pcp:21092kB free_cma:0kB [ 222.313806][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 222.313942][ T7492] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.314070][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 222.314172][ T7492] Node 1 Normal free:3933144kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB writepending:32kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.314332][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 222.314432][ T7492] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.314867][ T7492] Node 0 DMA32: 16*4kB (ME) 14*8kB (UME) 82*16kB (U) 269*32kB (UE) 24*64kB (UE) 6*128kB (UME) 1*256kB (U) 0*512kB 3*1024kB (UE) 0*2048kB 228*4096kB (UM) = 949616kB [ 222.315288][ T7492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 222.315518][ T7492] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 9*16kB (UM) 3*32kB (U) 3*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3933144kB [ 222.315902][ T7492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.315945][ T7492] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.315982][ T7492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.316011][ T7492] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.316048][ T7492] 140916 total pagecache pages [ 222.316073][ T7492] 16 pages in swap cache [ 222.316090][ T7492] Free swap = 123864kB [ 222.316108][ T7492] Total swap = 124996kB [ 222.316125][ T7492] 2097051 pages RAM [ 222.316143][ T7492] 0 pages HighMem/MovableOnly [ 222.316160][ T7492] 428776 pages reserved [ 222.316178][ T7492] 0 pages cma reserved [ 222.786390][ T7491] nfs: Unknown parameter ' ' [ 223.379701][ T5723] usb 5-1: USB disconnect, device number 16 [ 223.690136][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.480'. [ 224.882711][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.883185][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.674819][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.713313][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.143010][ T7525] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 227.251123][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.252079][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.468844][ T7539] FAULT_INJECTION: forcing a failure. [ 227.468844][ T7539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.468882][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.1.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.468913][ T7539] Tainted: [L]=SOFTLOCKUP [ 227.468921][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.468935][ T7539] Call Trace: [ 227.468944][ T7539] [ 227.468953][ T7539] dump_stack_lvl+0xe8/0x150 [ 227.468990][ T7539] should_fail_ex+0x410/0x560 [ 227.469022][ T7539] prepare_alloc_pages+0x223/0x600 [ 227.469052][ T7539] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 227.469081][ T7539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.469104][ T7539] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 227.469132][ T7539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.469160][ T7539] ? __pfx_policy_nodemask+0x10/0x10 [ 227.469186][ T7539] ? __get_vm_area_node+0x155/0x2f0 [ 227.469231][ T7539] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 227.469263][ T7539] ? __vmalloc_noprof+0xd2/0x120 [ 227.469317][ T7539] __alloc_pages_noprof+0x10/0x100 [ 227.469343][ T7539] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 227.469377][ T7539] ? alloc_pages_noprof+0x140/0x2b0 [ 227.469411][ T7539] __kasan_populate_vmalloc+0xb7/0x1c0 [ 227.469444][ T7539] alloc_vmap_area+0xd1a/0x1420 [ 227.469492][ T7539] ? __pfx_alloc_vmap_area+0x10/0x10 [ 227.469521][ T7539] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 227.469546][ T7539] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 227.469568][ T7539] ? __get_vm_area_node+0x155/0x2f0 [ 227.469605][ T7539] __get_vm_area_node+0x200/0x2f0 [ 227.469645][ T7539] __vmalloc_node_range_noprof+0x343/0x1540 [ 227.469679][ T7539] ? bpf_prog_calc_tag+0x51/0x370 [ 227.469714][ T7539] ? format_decode+0xdc/0xda0 [ 227.469753][ T7539] ? vsnprintf+0xe42/0xef0 [ 227.469798][ T7539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 227.469833][ T7539] ? bpf_verifier_vlog+0x3d1/0x900 [ 227.469878][ T7539] ? bpf_prog_calc_tag+0x51/0x370 [ 227.469903][ T7539] __vmalloc_noprof+0xd2/0x120 [ 227.469935][ T7539] ? bpf_prog_calc_tag+0x51/0x370 [ 227.469965][ T7539] bpf_prog_calc_tag+0x51/0x370 [ 227.469995][ T7539] check_and_resolve_insns+0xbb/0x21d0 [ 227.470026][ T7539] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 227.470052][ T7539] ? add_subprog+0x2e2/0x3f0 [ 227.470080][ T7539] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 227.470118][ T7539] bpf_check+0x180a/0x2e10 [ 227.470154][ T7539] ? ktime_get_with_offset+0x93/0x2d0 [ 227.470184][ T7539] ? __pfx_bpf_check+0x10/0x10 [ 227.470212][ T7539] ? bpf_obj_name_cpy+0x194/0x1e0 [ 227.470249][ T7539] bpf_prog_load+0x14d6/0x1c20 [ 227.470289][ T7539] ? __pfx_bpf_prog_load+0x10/0x10 [ 227.470343][ T7539] __sys_bpf+0xd0d/0xd90 [ 227.470378][ T7539] ? __pfx___sys_bpf+0x10/0x10 [ 227.470420][ T7539] ? ksys_write+0x1e6/0x270 [ 227.470457][ T7539] ? __mutex_unlock_slowpath+0x731/0x900 [ 227.470501][ T7539] ? fput+0xa0/0xd0 [ 227.470539][ T7539] ? ksys_write+0x242/0x270 [ 227.470575][ T7539] __ia32_sys_bpf+0xba/0xd0 [ 227.470599][ T7539] __do_fast_syscall_32+0x27a/0x6a0 [ 227.470624][ T7539] ? do_fast_syscall_32+0x33/0x70 [ 227.470647][ T7539] ? asm_int80_emulation+0x1a/0x20 [ 227.470667][ T7539] ? do_int80_emulation+0x299/0x500 [ 227.470689][ T7539] ? trace_irq_disable+0x3b/0x140 [ 227.470721][ T7539] do_fast_syscall_32+0x33/0x70 [ 227.470745][ T7539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.470771][ T7539] RIP: 0023:0xf701f0ec [ 227.470789][ T7539] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 227.470807][ T7539] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 227.470830][ T7539] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 227.470844][ T7539] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.470857][ T7539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.470869][ T7539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 227.470881][ T7539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.470911][ T7539] [ 228.815077][ T7553] loop5: detected capacity change from 0 to 7 [ 228.830925][ T7553] loop5: [ 228.830951][ T7553] loop5: partition table partially beyond EOD, truncated [ 229.705492][ T7567] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 230.092996][ T5723] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 230.233551][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.261248][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.263503][ T5723] usb 5-1: not running at top speed; connect to a high speed hub [ 230.263538][ T5723] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 230.264623][ T5723] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 230.264649][ T5723] usb 5-1: config 0 has no interface number 0 [ 230.264693][ T5723] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 230.264722][ T5723] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 230.264748][ T5723] usb 5-1: config 0 interface 88 has no altsetting 0 [ 230.280354][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.358270][ T5723] usb 5-1: language id specifier not provided by device, defaulting to English [ 230.375042][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.375930][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.414677][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 230.414706][ T5723] usb 5-1: Product: syz [ 230.414723][ T5723] usb 5-1: SerialNumber: syz [ 230.461369][ T5723] usb 5-1: config 0 descriptor?? [ 231.282964][ T7545] syz.2.489 (7545) used greatest stack depth: 18856 bytes left [ 233.090957][ T5723] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input17 [ 233.198293][ T5723] usb 5-1: USB disconnect, device number 17 [ 236.166670][ T7615] loop5: detected capacity change from 0 to 7 [ 236.194239][ T7615] loop5: [ 236.194306][ T7615] loop5: partition table partially beyond EOD, truncated [ 236.195610][ T5668] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 236.377118][ T5668] usb 1-1: device descriptor read/64, error -71 [ 236.634099][ T5668] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 236.792530][ T5668] usb 1-1: device descriptor read/64, error -71 [ 236.900890][ T5668] usb usb1-port1: attempt power cycle [ 237.241857][ T5668] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 237.274190][ T5668] usb 1-1: device descriptor read/8, error -71 [ 237.345151][ T7621] fuse: Unknown parameter 'groupK° —w\Á½…HœR‰ab¨F½vÜ©C@´o¬ ]| +00000000000000000000' [ 237.415536][ T7621] loop5: detected capacity change from 0 to 7 [ 237.440008][ T7621] Dev loop5: unable to read RDB block 7 [ 237.440073][ T7621] loop5: AHDI p1 p2 [ 237.440101][ T7621] loop5: partition table partially beyond EOD, truncated [ 237.440297][ T7621] loop5: p1 start 3749173 is beyond EOD, truncated [ 237.541567][ T5668] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 237.562989][ T5668] usb 1-1: device descriptor read/8, error -71 [ 237.625983][ T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 237.678009][ T5668] usb usb1-port1: unable to enumerate USB device [ 237.819714][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 237.887043][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.887147][ T44] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 237.941248][ T44] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 237.941310][ T44] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 237.941347][ T44] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 237.941403][ T44] usb 5-1: config 128 has no interface number 0 [ 237.941479][ T44] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 237.941537][ T44] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.941578][ T44] usb 5-1: config 128 interface 127 has no altsetting 0 [ 238.072709][ T44] usb 5-1: language id specifier not provided by device, defaulting to English [ 238.106769][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.106826][ T44] usb 5-1: Product: syz [ 238.106857][ T44] usb 5-1: Manufacturer: syz [ 238.106887][ T44] usb 5-1: SerialNumber: syz [ 238.979533][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.006616][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.058110][ T44] usb 5-1: USB disconnect, device number 18 [ 239.501787][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.689170][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 239.711258][ T7637] netlink: 72 bytes leftover after parsing attributes in process `syz.0.520'. [ 239.886755][ T5675] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 240.066845][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 240.096424][ T5675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.096474][ T5675] usb 5-1: New USB device found, idVendor=0001, idProduct=50ff, bcdDevice= 9.0d [ 240.099548][ T5675] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 240.099581][ T5675] usb 5-1: can't read configurations, error -61 [ 240.254479][ T5675] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 240.411303][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 240.437387][ T5675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.437443][ T5675] usb 5-1: New USB device found, idVendor=0001, idProduct=50ff, bcdDevice= 9.0d [ 240.476454][ T5675] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 240.476495][ T5675] usb 5-1: can't read configurations, error -61 [ 240.476824][ T5675] usb usb5-port1: attempt power cycle [ 240.649275][ T5723] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.687250][ T5723] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.824391][ T5675] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 240.844372][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 240.875679][ T5675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.875729][ T5675] usb 5-1: New USB device found, idVendor=0001, idProduct=50ff, bcdDevice= 9.0d [ 240.914276][ T5675] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 240.914316][ T5675] usb 5-1: can't read configurations, error -61 [ 241.057143][ T5675] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 241.075486][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 241.103937][ T5675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.103989][ T5675] usb 5-1: New USB device found, idVendor=0001, idProduct=50ff, bcdDevice= 9.0d [ 241.156039][ T5675] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 241.156077][ T5675] usb 5-1: can't read configurations, error -61 [ 241.179397][ T5675] usb usb5-port1: unable to enumerate USB device [ 241.458802][ T7357] syz.2.438 (7357) used greatest stack depth: 15856 bytes left [ 242.202822][ T7661] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 242.221785][ T7663] loop5: detected capacity change from 0 to 7 [ 242.250824][ T7663] loop5: [ 242.251085][ T7663] loop5: partition table partially beyond EOD, truncated [ 242.417960][ T7664] xt_l2tp: invalid flags combination: 0 [ 242.805570][ T7379] syz.2.438 (7379) used greatest stack depth: 15784 bytes left [ 243.097154][ T832] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 243.191627][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.192108][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.241696][ T832] usb 2-1: Using ep0 maxpacket: 8 [ 243.264308][ T832] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 243.280466][ T832] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 243.306151][ T832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.306220][ T832] usb 2-1: Product: syz [ 243.306258][ T832] usb 2-1: Manufacturer: syz [ 243.306314][ T832] usb 2-1: SerialNumber: syz [ 243.315336][ T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 243.346918][ T832] usb 2-1: config 0 descriptor?? [ 243.380837][ T832] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 243.380993][ T832] usb 2-1: setting power ON [ 243.406860][ T832] dvb-usb: bulk message failed: -22 (2/0) [ 243.464289][ T832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.465300][ T832] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 243.465410][ T832] usb 2-1: media controller created [ 243.500264][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.520602][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.520663][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.521979][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.522007][ T44] usb 5-1: SerialNumber: syz [ 243.591666][ T44] usb 5-1: No union descriptors [ 243.721694][ T832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.794827][ T5732] usb 5-1: USB disconnect, device number 23 [ 243.886932][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.905005][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.909056][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.909492][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.009043][ T832] usb 2-1: selecting invalid altsetting 6 [ 244.009074][ T832] usb 2-1: digital interface selection failed (-22) [ 244.009102][ T832] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 244.051144][ T832] usb 2-1: setting power OFF [ 244.051222][ T832] dvb-usb: bulk message failed: -22 (2/0) [ 244.051247][ T832] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 244.051256][ T832] (NULL device *): no alternate interface [ 244.101616][ T7670] netlink: 'syz.1.530': attribute type 3 has an invalid length. [ 244.517091][ T7687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 244.743850][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 244.759695][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 244.822554][ T7692] loop5: detected capacity change from 0 to 7 [ 244.868282][ T7692] loop5: [ 244.868346][ T7692] loop5: partition table partially beyond EOD, truncated [ 244.983331][ T832] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 245.037871][ T7361] syz.2.438 (7361) used greatest stack depth: 15696 bytes left [ 245.782984][ T7708] FAULT_INJECTION: forcing a failure. [ 245.782984][ T7708] name failslab, interval 1, probability 0, space 0, times 0 [ 245.783023][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.4.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.783052][ T7708] Tainted: [L]=SOFTLOCKUP [ 245.783061][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.783074][ T7708] Call Trace: [ 245.783083][ T7708] [ 245.783092][ T7708] dump_stack_lvl+0xe8/0x150 [ 245.783130][ T7708] should_fail_ex+0x410/0x560 [ 245.783160][ T7708] should_failslab+0xa8/0x100 [ 245.783190][ T7708] __kvmalloc_node_noprof+0x176/0x820 [ 245.783217][ T7708] ? __kvmalloc_node_noprof+0x345/0x820 [ 245.783240][ T7708] ? bpf_compute_postorder+0xda/0x970 [ 245.783263][ T7708] ? bpf_compute_postorder+0xda/0x970 [ 245.783292][ T7708] bpf_compute_postorder+0xda/0x970 [ 245.783315][ T7708] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 245.783345][ T7708] ? add_kfuncs+0x251/0x2e0 [ 245.783375][ T7708] bpf_check+0x24d6/0x2e10 [ 245.783415][ T7708] ? ktime_get_with_offset+0x93/0x2d0 [ 245.783443][ T7708] ? __pfx_bpf_check+0x10/0x10 [ 245.783470][ T7708] ? bpf_obj_name_cpy+0x194/0x1e0 [ 245.783506][ T7708] bpf_prog_load+0x14d6/0x1c20 [ 245.783545][ T7708] ? __pfx_bpf_prog_load+0x10/0x10 [ 245.783597][ T7708] __sys_bpf+0xd0d/0xd90 [ 245.783631][ T7708] ? __pfx___sys_bpf+0x10/0x10 [ 245.783658][ T7708] ? ksys_write+0x1e6/0x270 [ 245.783692][ T7708] ? __mutex_unlock_slowpath+0x731/0x900 [ 245.783734][ T7708] ? fput+0xa0/0xd0 [ 245.783768][ T7708] ? ksys_write+0x242/0x270 [ 245.783807][ T7708] __ia32_sys_bpf+0xba/0xd0 [ 245.783833][ T7708] __do_fast_syscall_32+0x27a/0x6a0 [ 245.783877][ T7708] ? do_fast_syscall_32+0x33/0x70 [ 245.783903][ T7708] ? asm_int80_emulation+0x1a/0x20 [ 245.783924][ T7708] ? do_int80_emulation+0x299/0x500 [ 245.783949][ T7708] ? trace_irq_disable+0x3b/0x140 [ 245.783977][ T7708] do_fast_syscall_32+0x33/0x70 [ 245.784003][ T7708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.784031][ T7708] RIP: 0023:0xf702f0ec [ 245.784051][ T7708] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 245.784071][ T7708] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 245.784096][ T7708] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 245.784112][ T7708] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.784126][ T7708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.784139][ T7708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.784153][ T7708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.784186][ T7708] [ 246.306720][ T7714] netlink: 52 bytes leftover after parsing attributes in process `syz.2.541'. [ 246.526593][ T7722] netlink: 'syz.1.542': attribute type 10 has an invalid length. [ 246.590036][ T5708] usb 2-1: USB disconnect, device number 58 [ 246.622252][ T7723] xt_l2tp: invalid flags combination: 0 [ 247.983171][ T7746] loop5: detected capacity change from 0 to 7 [ 247.997522][ T7746] loop5: [ 247.997560][ T7746] loop5: partition table partially beyond EOD, truncated [ 248.080150][ T5732] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 248.124279][ T7749] FAULT_INJECTION: forcing a failure. [ 248.124279][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 248.124343][ T7749] CPU: 1 UID: 0 PID: 7749 Comm: syz.2.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.124377][ T7749] Tainted: [L]=SOFTLOCKUP [ 248.124385][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.124399][ T7749] Call Trace: [ 248.124408][ T7749] [ 248.124417][ T7749] dump_stack_lvl+0xe8/0x150 [ 248.124455][ T7749] should_fail_ex+0x410/0x560 [ 248.124486][ T7749] should_failslab+0xa8/0x100 [ 248.124516][ T7749] __kvmalloc_node_noprof+0x176/0x820 [ 248.124542][ T7749] ? bpf_compute_postorder+0x87c/0x970 [ 248.124566][ T7749] ? bpf_stack_liveness_init+0x29/0x90 [ 248.124590][ T7749] ? bpf_stack_liveness_init+0x29/0x90 [ 248.124621][ T7749] bpf_stack_liveness_init+0x29/0x90 [ 248.124648][ T7749] bpf_check+0x24f6/0x2e10 [ 248.124685][ T7749] ? ktime_get_with_offset+0x93/0x2d0 [ 248.124713][ T7749] ? __pfx_bpf_check+0x10/0x10 [ 248.124741][ T7749] ? bpf_obj_name_cpy+0x194/0x1e0 [ 248.124777][ T7749] bpf_prog_load+0x14d6/0x1c20 [ 248.124817][ T7749] ? __pfx_bpf_prog_load+0x10/0x10 [ 248.124871][ T7749] __sys_bpf+0xd0d/0xd90 [ 248.124906][ T7749] ? __pfx___sys_bpf+0x10/0x10 [ 248.124934][ T7749] ? ksys_write+0x1e6/0x270 [ 248.124971][ T7749] ? __mutex_unlock_slowpath+0x731/0x900 [ 248.125018][ T7749] ? fput+0xa0/0xd0 [ 248.125044][ T7749] ? ksys_write+0x242/0x270 [ 248.125092][ T7749] __ia32_sys_bpf+0xba/0xd0 [ 248.125115][ T7749] __do_fast_syscall_32+0x27a/0x6a0 [ 248.125140][ T7749] ? do_fast_syscall_32+0x33/0x70 [ 248.125163][ T7749] ? asm_int80_emulation+0x1a/0x20 [ 248.125189][ T7749] ? do_int80_emulation+0x299/0x500 [ 248.125211][ T7749] ? trace_irq_disable+0x3b/0x140 [ 248.125236][ T7749] do_fast_syscall_32+0x33/0x70 [ 248.125258][ T7749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.125282][ T7749] RIP: 0023:0xf701f0ec [ 248.125301][ T7749] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 248.125318][ T7749] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 248.125340][ T7749] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 248.125354][ T7749] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.125366][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.125377][ T7749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.125389][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.125419][ T7749] [ 248.307103][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.374205][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.374259][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.419301][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 248.419326][ T5732] usb 2-1: SerialNumber: syz [ 248.502154][ T5732] usb 2-1: No union descriptors [ 248.714117][ T5723] usb 2-1: USB disconnect, device number 59 [ 248.867001][ T7761] input: syz0 as /devices/virtual/input/input18 [ 248.899980][ T5732] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 249.050864][ T5732] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 249.053114][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.053140][ T5732] usb 1-1: config 0 has no interfaces? [ 249.053173][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.107647][ T5732] usb 1-1: config 0 descriptor?? [ 249.332458][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.352613][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.651115][ T7767] input: syz0 as /devices/virtual/input/input19 [ 250.991964][ T7781] lo: left promiscuous mode [ 251.013406][ T7781] tunl0: left promiscuous mode [ 251.027982][ T7781] gre0: left promiscuous mode [ 251.278680][ T7781] gretap0: left promiscuous mode [ 251.297809][ T7781] erspan0: left promiscuous mode [ 251.323847][ T7781] ip_vti0: left promiscuous mode [ 251.346612][ T7781] ip6_vti0: left promiscuous mode [ 251.368353][ T7781] sit0: left promiscuous mode [ 251.681977][ T7781] ip6tnl0: left promiscuous mode [ 251.698993][ T7781] ip6gre0: left promiscuous mode [ 251.707501][ T7781] syz_tun: left promiscuous mode [ 251.717923][ T7781] ip6gretap0: left promiscuous mode [ 251.738834][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.738965][ T7781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.739304][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.739430][ T7781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.748508][ T7781] bridge0: left promiscuous mode [ 252.233349][ T7781] ip6gretap1: left allmulticast mode [ 252.238601][ T7781] ip6tnl2: left promiscuous mode [ 252.238620][ T7781] ip6tnl2: left allmulticast mode [ 252.445569][ T5732] usb 1-1: string descriptor 0 read error: -71 [ 252.459774][ T5732] usb 1-1: USB disconnect, device number 50 [ 252.582816][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.583017][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.610156][ T5675] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.657251][ T7800] FAULT_INJECTION: forcing a failure. [ 252.657251][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 252.657310][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.3.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.657339][ T7800] Tainted: [L]=SOFTLOCKUP [ 252.657346][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.657358][ T7800] Call Trace: [ 252.657365][ T7800] [ 252.657373][ T7800] dump_stack_lvl+0xe8/0x150 [ 252.657406][ T7800] should_fail_ex+0x410/0x560 [ 252.657432][ T7800] should_failslab+0xa8/0x100 [ 252.657458][ T7800] __kvmalloc_node_noprof+0x176/0x820 [ 252.657479][ T7800] ? kasan_save_track+0x3e/0x80 [ 252.657516][ T7800] ? __kvmalloc_node_noprof+0x50f/0x820 [ 252.657536][ T7800] ? bpf_stack_liveness_init+0x29/0x90 [ 252.657557][ T7800] ? bpf_check+0x24f6/0x2e10 [ 252.657578][ T7800] ? bpf_compute_const_regs+0x18f/0x3450 [ 252.657601][ T7800] ? bpf_compute_const_regs+0x18f/0x3450 [ 252.657651][ T7800] bpf_compute_const_regs+0x18f/0x3450 [ 252.657695][ T7800] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 252.657717][ T7800] ? check_attach_btf_id+0x325/0x1a30 [ 252.657745][ T7800] ? rcu_is_watching+0x16/0xb0 [ 252.657768][ T7800] ? bpf_stack_liveness_init+0x29/0x90 [ 252.657787][ T7800] ? trace_kmalloc+0x2a/0xf0 [ 252.657833][ T7800] ? __pfx_check_attach_btf_id+0x10/0x10 [ 252.657857][ T7800] ? bpf_stack_liveness_init+0x29/0x90 [ 252.657879][ T7800] ? __kvmalloc_node_noprof+0x52f/0x820 [ 252.657910][ T7800] ? __asan_memset+0x22/0x50 [ 252.657944][ T7800] bpf_check+0x255d/0x2e10 [ 252.657977][ T7800] ? ktime_get_with_offset+0x93/0x2d0 [ 252.658003][ T7800] ? __pfx_bpf_check+0x10/0x10 [ 252.658028][ T7800] ? bpf_obj_name_cpy+0x194/0x1e0 [ 252.658060][ T7800] bpf_prog_load+0x14d6/0x1c20 [ 252.658096][ T7800] ? __pfx_bpf_prog_load+0x10/0x10 [ 252.658145][ T7800] __sys_bpf+0xd0d/0xd90 [ 252.658176][ T7800] ? __pfx___sys_bpf+0x10/0x10 [ 252.658202][ T7800] ? taprio_dequeue+0x250/0x540 [ 252.658236][ T7800] ? kvm_sched_clock_read+0x11/0x20 [ 252.658256][ T7800] ? sched_clock+0x41/0x60 [ 252.658304][ T7800] ? __irq_exit_rcu+0xcb/0x220 [ 252.658331][ T7800] ? lockdep_softirqs_on+0x11e/0x190 [ 252.658354][ T7800] __ia32_sys_bpf+0xba/0xd0 [ 252.658377][ T7800] __do_fast_syscall_32+0x27a/0x6a0 [ 252.658402][ T7800] ? do_fast_syscall_32+0x33/0x70 [ 252.658425][ T7800] ? irqentry_exit+0x10f/0x910 [ 252.658450][ T7800] do_fast_syscall_32+0x33/0x70 [ 252.658473][ T7800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.658497][ T7800] RIP: 0023:0xf6fff0ec [ 252.658515][ T7800] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 252.658533][ T7800] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 252.658556][ T7800] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 252.658570][ T7800] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.658583][ T7800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.658594][ T7800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.658607][ T7800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.658643][ T7800] [ 252.785405][ T7802] netlink: 115 bytes leftover after parsing attributes in process `syz.0.565'. [ 252.925039][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.192775][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.230635][ T5675] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 253.384373][ T5675] usb 1-1: Using ep0 maxpacket: 8 [ 253.389661][ T5675] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 253.427765][ T5675] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 253.427794][ T5675] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 253.427816][ T5675] usb 1-1: config 0 has no interface number 0 [ 253.427859][ T5675] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 253.427887][ T5675] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 253.468294][ T5675] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 253.468359][ T5675] usb 1-1: Product: syz [ 253.468394][ T5675] usb 1-1: Manufacturer: syz [ 253.529246][ T5675] usb 1-1: config 0 descriptor?? [ 254.549539][ T5675] usb 1-1: USB disconnect, device number 51 [ 254.846962][ T7844] loop5: detected capacity change from 0 to 7 [ 254.857550][ T7844] loop5: [ 254.857565][ T7844] loop5: partition table partially beyond EOD, truncated [ 255.007528][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.032666][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.140119][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.162670][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.575154][ T7851] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 255.708587][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.719099][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719188][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.722002][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.759115][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 255.920023][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 255.920120][ T832] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 255.926240][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.929022][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 255.929066][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.929087][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.929110][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.929131][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.929168][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.101857][ T832] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.124233][ T832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.124302][ T832] usb 2-1: Product: syz [ 256.124339][ T832] usb 2-1: Manufacturer: syz [ 256.124393][ T832] usb 2-1: SerialNumber: syz [ 256.184823][ T7864] netlink: 72 bytes leftover after parsing attributes in process `syz.2.577'. [ 256.245277][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 256.245325][ T9] usbtmc 1-1:16.0: can't read capabilities [ 256.399524][ T7873] FAULT_INJECTION: forcing a failure. [ 256.399524][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 256.399562][ T7873] CPU: 0 UID: 0 PID: 7873 Comm: syz.4.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.399590][ T7873] Tainted: [L]=SOFTLOCKUP [ 256.399596][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.399613][ T7873] Call Trace: [ 256.399621][ T7873] [ 256.399629][ T7873] dump_stack_lvl+0xe8/0x150 [ 256.399665][ T7873] should_fail_ex+0x410/0x560 [ 256.399692][ T7873] should_failslab+0xa8/0x100 [ 256.399720][ T7873] __kvmalloc_node_noprof+0x176/0x820 [ 256.399750][ T7873] ? bpf_compute_postorder+0x87c/0x970 [ 256.399773][ T7873] ? bpf_stack_liveness_init+0x29/0x90 [ 256.399794][ T7873] ? bpf_stack_liveness_init+0x29/0x90 [ 256.399823][ T7873] bpf_stack_liveness_init+0x29/0x90 [ 256.399848][ T7873] bpf_check+0x24f6/0x2e10 [ 256.399881][ T7873] ? ktime_get_with_offset+0x93/0x2d0 [ 256.399907][ T7873] ? __pfx_bpf_check+0x10/0x10 [ 256.399931][ T7873] ? bpf_obj_name_cpy+0x194/0x1e0 [ 256.399969][ T7873] bpf_prog_load+0x14d6/0x1c20 [ 256.400006][ T7873] ? __pfx_bpf_prog_load+0x10/0x10 [ 256.400054][ T7873] __sys_bpf+0xd0d/0xd90 [ 256.400085][ T7873] ? __pfx___sys_bpf+0x10/0x10 [ 256.400111][ T7873] ? ksys_write+0x1e6/0x270 [ 256.400146][ T7873] ? __mutex_unlock_slowpath+0x731/0x900 [ 256.400188][ T7873] ? fput+0xa0/0xd0 [ 256.400213][ T7873] ? ksys_write+0x242/0x270 [ 256.400247][ T7873] __ia32_sys_bpf+0xba/0xd0 [ 256.400273][ T7873] __do_fast_syscall_32+0x27a/0x6a0 [ 256.400295][ T7873] ? do_fast_syscall_32+0x33/0x70 [ 256.400315][ T7873] ? asm_int80_emulation+0x1a/0x20 [ 256.400334][ T7873] ? do_int80_emulation+0x299/0x500 [ 256.400352][ T7873] ? trace_irq_disable+0x3b/0x140 [ 256.400377][ T7873] do_fast_syscall_32+0x33/0x70 [ 256.400401][ T7873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.400423][ T7873] RIP: 0023:0xf702f0ec [ 256.400440][ T7873] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 256.400455][ T7873] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 256.400476][ T7873] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 256.400488][ T7873] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.400501][ T7873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.400510][ T7873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 256.400520][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.400546][ T7873] [ 256.511343][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.776141][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.777319][ T5668] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.778916][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.849270][ T9] usb 1-1: USB disconnect, device number 52 [ 256.983684][ T5723] usb 2-1: USB disconnect, device number 60 [ 257.823736][ T7888] input: syz1 as /devices/virtual/input/input20 [ 257.871147][ T5668] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 257.871575][ T5668] ath9k_htc: Failed to initialize the device [ 257.878888][ T5723] usb 2-1: ath9k_htc: USB layer deinitialized [ 258.414194][ T7905] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 258.451816][ T5723] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 258.456051][ T7905] xt_l2tp: invalid flags combination: 0 [ 258.602137][ T5723] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 258.609636][ T5723] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 258.609672][ T5723] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 258.609690][ T5723] usb 1-1: config 4 has no interface number 0 [ 258.609727][ T5723] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.636317][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.636450][ T5723] usb 1-1: Product: syz [ 258.636488][ T5723] usb 1-1: Manufacturer: syz [ 258.636524][ T5723] usb 1-1: SerialNumber: syz [ 259.108096][ T5723] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 259.198925][ T5723] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 259.199001][ T5723] dib0700: firmware download failed at 7 with -22 [ 259.313155][ T5723] usb 1-1: USB disconnect, device number 53 [ 259.640147][ T5675] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 259.803538][ T5675] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.806987][ T5675] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.807043][ T5675] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.811969][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.811992][ T5675] usb 2-1: SerialNumber: syz [ 259.881271][ T5675] usb 2-1: No union descriptors [ 260.134109][ T44] usb 2-1: USB disconnect, device number 61 [ 260.209722][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.210451][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.236790][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.240884][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.415059][ T7939] bridge_slave_0: left allmulticast mode [ 260.415101][ T7939] bridge_slave_0: left promiscuous mode [ 260.416838][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.433502][ T7939] bridge_slave_1: left allmulticast mode [ 260.433525][ T7939] bridge_slave_1: left promiscuous mode [ 260.434476][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.491915][ T7940] fuse: Unknown parameter '' [ 260.495203][ T7939] bond0: (slave bond_slave_0): Releasing backup interface [ 260.504864][ T7939] bond0: (slave bond_slave_1): Releasing backup interface [ 260.541225][ T7939] team0: Port device team_slave_0 removed [ 260.544604][ T7932] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 260.547672][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 260.547687][ T30] audit: type=1326 audit(1789646924.456:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.547910][ T30] audit: type=1326 audit(1789646924.456:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.548998][ T30] audit: type=1326 audit(1789646924.456:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.549050][ T30] audit: type=1326 audit(1789646924.456:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.549095][ T30] audit: type=1326 audit(1789646924.456:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.549141][ T30] audit: type=1326 audit(1789646924.456:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.549186][ T30] audit: type=1326 audit(1789646924.456:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.549501][ T30] audit: type=1326 audit(1789646924.456:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.557222][ T30] audit: type=1326 audit(1789646924.456:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.563561][ T7939] team0: Port device team_slave_1 removed [ 260.575921][ T30] audit: type=1326 audit(1789646924.456:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.3.592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 260.576646][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.576667][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.620759][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.620812][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.637857][ T7939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.858252][ T31] INFO: task kworker/1:6:5753 blocked for more than 143 seconds. [ 260.858279][ T31] Tainted: G L syzkaller #0 [ 260.858300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.858310][ T31] task:kworker/1:6 state:D stack:25408 pid:5753 tgid:5753 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 260.858516][ T31] Workqueue: usb_hub_wq hub_event [ 260.858599][ T31] Call Trace: [ 260.858621][ T31] [ 260.858660][ T31] __schedule+0x17db/0x58f0 [ 260.858821][ T31] ? __pfx___schedule+0x10/0x10 [ 260.858927][ T31] ? schedule+0x90/0x2b0 [ 260.859012][ T31] schedule+0x164/0x2b0 [ 260.859113][ T31] schedule_timeout+0xc0/0x2c0 [ 260.859195][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 260.859273][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.859396][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.859481][ T31] ? wait_for_completion+0x272/0x5e0 [ 260.859544][ ** replaying previous printk message ** [ 260.859544][ T31] wait_for_completion+0x2ca/0x5e0 [ 260.859637][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 260.859709][ T31] ? kobject_put+0x50f/0x550 [ 260.859797][ T31] i2c_del_adapter+0x292/0x440 [ 260.859915][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 260.860019][ T31] ? kfree+0x1c5/0x650 [ 260.860099][ T31] ? em28xx_release_resources+0xde/0x240 [ 260.860202][ T31] em28xx_i2c_unregister+0x4b/0x60 [ 260.860307][ T31] em28xx_release_resources+0x13b/0x240 [ 260.865936][ T31] em28xx_usb_disconnect+0x19f/0x2f0 [ 260.865984][ T31] usb_unbind_interface+0x295/0x9f0 [ 260.866014][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 260.866069][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 260.866098][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 260.866125][ T31] device_release_driver_internal+0x4f5/0x880 [ 260.866161][ T31] bus_remove_device+0x444/0x560 [ 260.866201][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 260.866239][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 260.866270][ T31] device_del+0x524/0x8f0 [ 260.866312][ T31] ? __pfx_device_del+0x10/0x10 [ 260.866336][ T31] ? kobject_put+0x516/0x550 [ 260.866375][ T31] usb_disable_device+0x3d4/0x8d0 [ 260.866411][ T31] usb_disconnect+0x346/0x9a0 [ 260.866444][ T31] hub_event+0x1bbb/0x4d30 [ 260.866470][ T31] ? __lock_acquire+0x747/0x2de0 [ 260.866508][ T31] ? register_lock_class+0x31/0x2e0 [ 260.866566][ T31] ? __pfx_hub_event+0x10/0x10 [ 260.866602][ T31] ? rcu_is_watching+0x16/0xb0 [ 260.866632][ T31] ? process_scheduled_works+0x97a/0x1630 [ 260.866663][ T31] process_scheduled_works+0xc3d/0x1630 [ 260.866727][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 260.866765][ T31] ? assign_work+0x3cf/0x5d0 [ 260.866801][ T31] worker_thread+0xa47/0xfb0 [ 260.866847][ T31] ? __kthread_parkme+0x71/0x1f0 [ 260.888765][ T31] kthread+0x38b/0x480 [ 260.888857][ T31] ? __pfx_worker_thread+0x10/0x10 [ 260.888949][ T31] ? __pfx_kthread+0x10/0x10 [ 260.889034][ T31] ret_from_fork+0x514/0xb70 [ 260.889108][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 260.889202][ T31] ? __switch_to+0xc89/0x1420 [ 260.889296][ T31] ? __pfx_kthread+0x10/0x10 [ 260.889353][ T31] ret_from_fork_asm+0x1a/0x30 [ 260.889490][ T31] [ 260.889572][ T31] [ 260.889572][ T31] Showing all locks held in the system: [ 260.889603][ T31] locks held by pr/ttyS0/16: 2, last CPU#0: [ 260.889646][ T31] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 260.889812][ T31] #1: ffffffff9ad39098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 260.889994][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 260.890037][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 260.890185][ T31] locks held by kworker/u8:2/37: 3, last CPU#1: [ 260.890240][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.890413][ T31] #1: ffffc90000ad7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.890573][ T31] #2: ffff88802b98c258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 260.890823][ T31] locks held by getty/5370: 2, on CPU#0: [ 260.890847][ T31] #0: ffff88803516e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 260.890908][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 260.890968][ T31] locks held by kworker/0:4/5675: 3, last CPU#0: [ 260.890984][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.891061][ T31] #1: ffffc9000428fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.891121][ T31] #2: ffffffff8f994858 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x450 [ 260.891187][ T31] locks held by kworker/1:6/5753: 6, on CPU#1: [ 260.891203][ T31] #0: ffff8880222b6540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.891264][ T31] #1: ffffc9000466fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.891333][ T31] #2: ffff88802951f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 260.891388][ T31] #3: ffff88807ef091d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 260.891440][ T31] #4: ffff888076c8a1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 260.891499][ T31] #5: ffff888055fb1cf0 (&dev->lock#3){+.+.}-{4:4}, at: em28xx_release_resources+0x75/0x240 [ 260.891572][ T31] locks held by kworker/u8:9/7016: 3, last CPU#1: [ 260.891588][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.891649][ T31] #1: ffffc9000ec8fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 260.891712][ T31] #2: ffff88802f4c6258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 260.891776][ T31] locks held by syz.1.589/7915: 2, last CPU#1: [ 260.891792][ T31] #0: ffff88807ec19078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 260.891854][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 260.891916][ T31] locks held by syz.3.592/7932: 1, last CPU#1: [ 260.891932][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 260.891990][ T31] [ 260.891996][ T31] ============================================= [ 260.891996][ T31] [ 260.892006][ T31] NMI backtrace for cpu 1 [ 260.892023][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 260.892052][ T31] Tainted: [L]=SOFTLOCKUP [ 260.892060][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.892072][ T31] Call Trace: [ 260.892081][ T31] [ 260.892090][ T31] dump_stack_lvl+0xe8/0x150 [ 260.892123][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 260.892154][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 260.892191][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 260.892226][ T31] sys_info+0x135/0x170 [ 260.892264][ T31] watchdog+0xfd7/0x1030 [ 260.892300][ T31] ? watchdog+0x1c7/0x1030 [ 260.892328][ T31] kthread+0x38b/0x480 [ 260.892349][ T31] ? __pfx_watchdog+0x10/0x10 [ 260.892368][ T31] ? __pfx_kthread+0x10/0x10 [ 260.892390][ T31] ret_from_fork+0x514/0xb70 [ 260.892413][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 260.892481][ T31] ? __switch_to+0xc89/0x1420 [ 260.892570][ T31] ? __pfx_kthread+0x10/0x10 [ 260.892646][ T31] ret_from_fork_asm+0x1a/0x30 [ 260.892771][ T31] [ 260.895956][ T31] Sending NMI from CPU 1 to CPUs 0: [ 260.896024][ C0] NMI backtrace for cpu 0 [ 260.896041][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.896067][ C0] Tainted: [L]=SOFTLOCKUP [ 260.896074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.896086][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 260.896110][ C0] Code: e8 1e 35 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 35 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 260.896127][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 260.896144][ C0] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000 [ 260.896157][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 260.896169][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 260.896181][ C0] R10: dffffc0000000000 R11: ffffffff85729520 R12: dffffc0000000000 [ 260.896195][ C0] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 260.896208][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 260.896224][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.896238][ C0] CR2: 00000000f53ccda4 CR3: 0000000059432000 CR4: 00000000003526f0 [ 260.896255][ C0] Call Trace: [ 260.896262][ C0] [ 260.896270][ C0] wait_for_lsr+0x184/0x2f0 [ 260.896295][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 260.896326][ C0] serial8250_console_write+0xaa1/0x1200 [ 260.896346][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 260.896371][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 260.896390][ C0] ? __schedule+0x17f1/0x58f0 [ 260.896428][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 260.896457][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 260.896482][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 260.896510][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 260.896541][ C0] nbcon_kthread_func+0x679/0x880 [ 260.896565][ C0] ? nbcon_kthread_func+0x163/0x880 [ 260.896583][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 260.896607][ C0] ? __kthread_parkme+0x71/0x1f0 [ 260.896634][ C0] ? __kthread_parkme+0x199/0x1f0 [ 260.896664][ C0] kthread+0x38b/0x480 [ 260.896682][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 260.896700][ C0] ? __pfx_kthread+0x10/0x10 [ 260.896718][ C0] ret_from_fork+0x514/0xb70 [ 260.896737][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 260.896766][ C0] ? __switch_to+0xc89/0x1420 [ 260.896800][ C0] ? __pfx_kthread+0x10/0x10 [ 260.896819][ C0] ret_from_fork_asm+0x1a/0x30 [ 260.896857][ C0] [ 260.987146][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 261.900824][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 261.911529][ T31] Tainted: [L]=SOFTLOCKUP [ 261.915859][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.925916][ T31] Call Trace: [ 261.929219][ T31] [ 261.932158][ T31] vpanic+0x56d/0xa60 [ 261.936169][ T31] ? __pfx___schedule+0x10/0x10 [ 261.941039][ T31] ? __pfx_vpanic+0x10/0x10 [ 261.945557][ T31] panic+0xc5/0xd0 [ 261.949296][ T31] ? __pfx_panic+0x10/0x10 [ 261.953724][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 261.959204][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 261.964597][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 261.970777][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 261.976940][ T31] watchdog+0x1030/0x1030 [ 261.981286][ T31] ? watchdog+0x1c7/0x1030 [ 261.985716][ T31] kthread+0x38b/0x480 [ 261.989796][ T31] ? __pfx_watchdog+0x10/0x10 [ 261.994482][ T31] ? __pfx_kthread+0x10/0x10 [ 261.999085][ T31] ret_from_fork+0x514/0xb70 [ 262.003681][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 262.008815][ T31] ? __switch_to+0xc89/0x1420 [ 262.013506][ T31] ? __pfx_kthread+0x10/0x10 [ 262.018112][ T31] ret_from_fork_asm+0x1a/0x30 [ 262.022905][ T31] [ 262.026568][ T31] Kernel Offset: disabled [ 262.030903][ T31] Rebooting in 86400 seconds..