last executing test programs: 7.206084759s ago: executing program 0 (id=785): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = dup(0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x140}, 0x1, 0x241, 0x0, 0x4000000}, 0xc0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000000)={0xa, {0x9, 0xfe, 0x1a}}, 0xa) recvmsg$can_raw(r2, &(0x7f0000000700)={&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/128, 0x80}], 0x3, &(0x7f00000006c0)=""/23, 0x17}, 0x40000060) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a008000", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x4e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0x1f0, 0xb, 0x0, 0x4, 0xf0}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x3, 0x59565955, 0x0, 0x4, 0x10001, 0xb, 0xfeedcafe, 0x0, 0x1, 0x0, 0x5}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000001380), &(0x7f0000001400)=0x68) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) 6.710598407s ago: executing program 4 (id=787): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026900030104600e080b02020106204009040000000101200009240107000209000109040100000102200009040101010102200009050109400004ba05082501033f0f070009040200000102200009040201"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x9, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0x4, 0x49}, {0x6, 0x24, 0x1a, 0x2b35}, [@obex={0x5}, @obex={0x5, 0x24, 0x15, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xed}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0xb1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x4a, 0x1}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xf0, 0x7, 0x2, 0x10, 0xa}, 0x11b, &(0x7f0000000140)={0x5, 0xf, 0x11b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x0, 0x9f, 0x100}, @generic={0xc5, 0x10, 0x2, "43584a26050b04113059333d58e348531d8ceb983063f8cb8c2333d21231f0d6f84426dfb520a81cf9e6e3019ddd5073eb2cd200c6b78dde9d5f71ca898bfa78e39a2cee1033a573eb7757c0151fb629bc92d01e7d174e4aaab1ecbe4416427181af78c5a235046e2058510d5b636defa2c82cfcf5494f9578029315d974a0029e98d3181d96758a6e05bac2afe91e0e884b574515c75585f4169bceda8551e89bd2ddfd43bb834a4d670d46f272bea23bd5e0eaed63dc5ea0a1adf5dda9c991f089"}, @generic={0x40, 0x10, 0xb, "3f00b0c7801b82e317018adb8d1e2947064b84abe69890ee48c5445f8eefa434fdc5382883bee756dd5385c93c02c0efaf89c123eb8b801f560b8d3795"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x2, 0x5}]}, 0x1, [{0xbc, &(0x7f0000000280)=@string={0xbc, 0x3, "e5052fb5e1eee35e1348d7e8406509348f89e464b668bcf9e088b6c24ff4cdee67c8f9c3e7c7a2398f786e0d4d7b7fdc3cfd4208692a52b4efd9a476159d4d3d87ad32d1e8720102bd9ee4c08be81f7feaebe35e7c99c47d9894b88deaa88308ad806638668f634317211a3b50e5d327bc55ee3d14cba6f7ee5ac26fe88cee7544e85e5014698e52bc14def26cbec093e0175f0b322b71ecd7a63cdaca78b4220b52e469fca788975b4d0bafbe2396a436fb5d7df2ab618f3738"}}]}) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026900030104600e080b02020106204009040000000101200009240107000209000109040100000102200009040101010102200009050109400004ba05082501033f0f070009040200000102200009040201"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x9, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0x4, 0x49}, {0x6, 0x24, 0x1a, 0x2b35}, [@obex={0x5}, @obex={0x5, 0x24, 0x15, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xed}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0xb1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x4a, 0x1}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xf0, 0x7, 0x2, 0x10, 0xa}, 0x11b, &(0x7f0000000140)={0x5, 0xf, 0x11b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x0, 0x9f, 0x100}, @generic={0xc5, 0x10, 0x2, "43584a26050b04113059333d58e348531d8ceb983063f8cb8c2333d21231f0d6f84426dfb520a81cf9e6e3019ddd5073eb2cd200c6b78dde9d5f71ca898bfa78e39a2cee1033a573eb7757c0151fb629bc92d01e7d174e4aaab1ecbe4416427181af78c5a235046e2058510d5b636defa2c82cfcf5494f9578029315d974a0029e98d3181d96758a6e05bac2afe91e0e884b574515c75585f4169bceda8551e89bd2ddfd43bb834a4d670d46f272bea23bd5e0eaed63dc5ea0a1adf5dda9c991f089"}, @generic={0x40, 0x10, 0xb, "3f00b0c7801b82e317018adb8d1e2947064b84abe69890ee48c5445f8eefa434fdc5382883bee756dd5385c93c02c0efaf89c123eb8b801f560b8d3795"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x2, 0x5}]}, 0x1, [{0xbc, &(0x7f0000000280)=@string={0xbc, 0x3, "e5052fb5e1eee35e1348d7e8406509348f89e464b668bcf9e088b6c24ff4cdee67c8f9c3e7c7a2398f786e0d4d7b7fdc3cfd4208692a52b4efd9a476159d4d3d87ad32d1e8720102bd9ee4c08be81f7feaebe35e7c99c47d9894b88deaa88308ad806638668f634317211a3b50e5d327bc55ee3d14cba6f7ee5ac26fe88cee7544e85e5014698e52bc14def26cbec093e0175f0b322b71ecd7a63cdaca78b4220b52e469fca788975b4d0bafbe2396a436fb5d7df2ab618f3738"}}]}) (async) 6.169802421s ago: executing program 1 (id=789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 5.97675913s ago: executing program 1 (id=791): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00') sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000180)="27050200160014000600002fb96d", 0xe}, {&(0x7f0000000700)="83ea8b7f91f30000000000000000000000b7f77d74000000", 0x18}], 0x2}, 0x24000000) 5.708563893s ago: executing program 1 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000006c0)={0x1, 0x0, 0xac21}) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', r6, 0x80a1, 0x700, 0x1, 0x12, {{0x50, 0x4, 0x0, 0x6, 0x140, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, {@multicast2, 0x29}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x57e}, {@dev, 0xcd2d}, {@multicast2, 0x4}, {@broadcast, 0xe}]}, @noop, @lsrr={0x83, 0x13, 0xf1, [@remote, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}]}, @cipso={0x86, 0x37, 0x0, [{0x2, 0x9, "41542e98ca7813"}, {0x0, 0xc, "ca41bc83570ecfce124a"}, {0x6, 0x10, "1511525cce0926fc6b0d584ecfad"}, {0x2, 0xc, "75c5d5db23294a6cd516"}]}, @timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@local, 0x2000}, {@rand_addr=0x64010101}]}, @timestamp_addr={0x44, 0x1c, 0x11, 0x1, 0x2, [{@private=0xa010100, 0x1}, {@remote, 0x5}, {@multicast2, 0xb39}]}, @timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x2, [{@local, 0x9}, {@empty, 0x7466}]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x2, [{@empty, 0x7ff}]}, @generic={0x82, 0x2}, @cipso={0x86, 0x51, 0x0, [{0x5, 0xa, "386189779fb36c43"}, {0x6, 0xf, "a43e813f2c399028eeda038222"}, {0x1, 0x4, "8708"}, {0x6, 0x4, "8904"}, {0x6, 0xa, "a74de8bcab55f7ba"}, {0x2, 0xc, "e58df12454e8852c7bf1"}, {0x5, 0x2}, {0x6, 0xd, "688d1ac5acd1921e87fcb3"}, {0x7, 0x5, "65e0e6"}]}]}}}}}) r8 = openat$procfs(0xffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0) preadv(r8, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$KDENABIO(r8, 0x4b36) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40814) 5.120347226s ago: executing program 0 (id=794): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x6}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="220000000000000003000000fc0f000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1da064ceffffffffffff0000000000000000000000004800f5ffffff"], 0x50) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "1388"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x30, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x80000007, 0x2, 0x180, 0x4, 0x2000014, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x9, 0x0, 0xd77, 0x0, 0xbda], 0x4}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x41000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x8, 0x87}, {0x0, 0xdddd0000, 0x1, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x6, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x2, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x2000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8080000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x400000000000003, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x5}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000048, 0x8, 0x5, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4084080}, 0x24000850) close(r9) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r12, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) close_range(r4, 0xffffffffffffffff, 0x0) 4.763657055s ago: executing program 4 (id=795): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d73f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095", @ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.412934487s ago: executing program 3 (id=797): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4095, 0xfff}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000280)=""/124, 0x7c}], 0xa}, 0x102) 4.331626121s ago: executing program 2 (id=798): openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x28541, 0x10) socket(0x11, 0x80a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 4.215690922s ago: executing program 2 (id=799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x2000, 0x1000, 0x5}, 0x6d) syz_fuse_handle_req(r5, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x3, 0x0, {0x3, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0xa442, 0x3, 0xe000, 0x601d824b499141fd, 0xcd36, 0x0, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) chown(&(0x7f0000000540)='./file0\x00', r7, r8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x2}, 0x1c) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r11, 0x540b, 0x1) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x1, 0xfffffffa, 0x2, 0x7ff, 0x6, "c9c6ecdac55d56b2532a384130006bcabf0df3", 0x7, 0xffff}) 4.194616918s ago: executing program 3 (id=800): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/slabinfo\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x315b, &(0x7f00000002c0)={0x0, 0x70a1, 0x1040, 0x2, 0x21}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000140), 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x3, 0x1, 0x2, 0x2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x7fc, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffffffffffffffd9}, 0x48) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000007c00000400c2800c0001000600061400843b00dec0b0bace4ce1bb803620c32d37375f60f7f270bc819a859ab7b8a905365b0b1344abbf6de0f172ce34ea30efb30294beed6e8c9822d5"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xa83, &(0x7f0000000080)={0x0, 0x3776, 0x8, 0x2, 0x3d6}, 0x0, 0x0, 0x0) r10 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r12 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x25d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r10, r11, r12}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0x10}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 4.075446028s ago: executing program 0 (id=801): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="be2662de3770e5986cd894f960a359941a2a4f77ff8b3be585b6ae29c7e309b43da35c4e3048edd642618b01bcba017c29a367b0902ec9c8fb1052b2c11e3bded2d77870e7c24cdf1a114bc4fa96be600be17e1eaabf91d7b0625f8a2009a9eb6638941d8dcd3a470baa0e392da8bec430b6a0d3fbb065b0fa399c6d1e98f6e422702c62adab4619aa9ebc47bcb0823afedc1da41018aeaf8e22cfe17d8e61ec", 0xa0}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x881) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0xfffffffffffffffc, 0xfffffe0000000004, 0xfa11, 0x9}, 0x0) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000900)={0x5, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x38415262, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x6, 0xa}, {0x110, 0x3}, {0x3, 0x7}, {0x1000101, 0x81}, {0x8c}], 0x10, 0x7e, 0x1, 0x2, 0x3}}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r8, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000640)=""/131, &(0x7f0000000500)=0x83) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[0x0], 0x0}) 3.513806248s ago: executing program 1 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0) 3.284853263s ago: executing program 1 (id=803): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) fcntl$lock(r1, 0x7, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x9394}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="a982eadf1bca14f4", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.060009319s ago: executing program 2 (id=804): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x6) r1 = openat$sw_sync(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x7, "554093ee97b34c65cea5aa83e9956dd41af8f64ecae55c5c1be81711b2686eb2"}) 3.023102733s ago: executing program 4 (id=805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x11, 0x1, 0x5e}}) (fail_nth: 5) 2.986106515s ago: executing program 1 (id=806): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002880)=""/60, 0x3c}], 0x1}, 0x2}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x10c8, &(0x7f0000002d40)={@link_local, @remote, @void, {@ipv4={0x800, @generic={{0xe, 0x4, 0x2, 0x1, 0x10ba, 0x4, 0x0, 0x7f, 0x88, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x7, 0xe8, [@remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x31, [@local, @private=0xa010100]}, @timestamp={0x44, 0xc, 0x69, 0x0, 0xf, [0xfffffffd, 0x9]}]}}, "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"}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x563, 0x1, 0x0, 0xd, 0x2, 0x7a}, 0x20) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0xe, 0x2, "ea3a"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socket(0x1, 0x5, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.896653451s ago: executing program 3 (id=807): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x6) r1 = openat$sw_sync(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x7, "554093ee97b34c65cea5aa83e9956dd41af8f64ecae55c5c1be81711b2686eb2"}) (fail_nth: 2) 2.892628749s ago: executing program 2 (id=808): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x1, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x401e3a9}]}}]}, 0x3c}}, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0xfa015000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x33a0173c, 0x1, r2}, 0x50) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x6) r4 = openat$sw_sync(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x7, "55ee97b3ff4e00e55c5c1be81711b2686eb200000600000000000000bc00"}) 2.75187354s ago: executing program 2 (id=809): openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x28541, 0x10) socket(0x11, 0x80a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.119937819s ago: executing program 4 (id=810): socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000a80)="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", 0x101) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) sendmmsg$inet6(r2, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}, 0x1c, 0x0}}], 0x1, 0x4000004) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1d, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x0, 0x2, {0x8}}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2) r5 = getpid() sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc), 0xa, 0x301, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8) 1.769505563s ago: executing program 3 (id=811): r0 = socket$kcm(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x1, 0x0, [{0xe, 0xfffffff4, 0x3, 0x80000001, 0x10, 0xf6, 0xdf}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4073, 0xfe9}], 0x1}, 0x9}], 0x1, 0x40012100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40500, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x3d, 0x0, [{0x48, 0x0, 0x5}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0x21a, 0x0, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@deltaction={0x40, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r7 = mq_open(&(0x7f0000001280)='\xb9\x19\xd4\x1f\xc1\x0f\x05\x86A\xa1\xbb\x10:\xf0\xbceth0\x00\x87\x0f\x87\x9aT\xa3\xba}\v5\xdf\xf9\xe3\xf3\xe7,)U\xae\xa3)\x85F\x05bq\xe99\x1d\xa0\xbf{\x01\xb4\xcb:u\xce\xc4\xb4\xa8\xd96\x81\xa0\xd9\xaf\x93\x8d\x01\x9f\xb8\x1dia\xaeP\xd21;\xe2YwG\xe0\xd92(}\xfc\x18\x85\x11\xbft\x9e0O?\x11\xe5\xac\x96\xf9\xc8\xca6\x01\xfc\xca=\x8ar5G~o\x92,\x90\x97\xa5/\a\xed\x16C\xcc\x03Gm\xe6P\xab\xb6\xecN^<', 0x42, 0x1c, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x11, 0x7, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x12002, 0x7, 0x8003, 0x1}}, 0x44) mq_notify(r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r9) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000080)=@phonet={0x23, 0x6, 0x5, 0xff}, 0x80, 0x0}, 0xe07e872400dfefca) 1.72516517s ago: executing program 2 (id=812): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x50002, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x101}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x152) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="e1", 0x1}], 0x1) close(r2) read$char_usb(r1, &(0x7f00000000c0)=""/169, 0x10a) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x181000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x140) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20040) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x28, 0x77, 0xfb, 0x10, 0x1286, 0x2001, 0x9d84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x15, 0x80, 0x61, "", [{{0x9, 0x4, 0x4c, 0x58, 0x2, 0x1b, 0xc1, 0xda, 0x7, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x40, 0x1, 0x1}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x51, 0x9e, 0x9}}]}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7e033533"]}]}) 1.26906039s ago: executing program 0 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0) 1.199623043s ago: executing program 0 (id=814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x10, 0xa00}], 0x1, 0x0, 0x0, 0x0) 1.031881529s ago: executing program 0 (id=815): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d73f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095", @ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 948.168168ms ago: executing program 4 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='net/vlan/config\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd2000000000143c0020010000000000000000000000000002fe8000000000000000000000000000aafff50000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) statx(0xffffffffffffff9c, 0x0, 0x2900, 0x88c, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r2, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000020c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0000000400000000000000", @ANYRES32, @ANYBLOB="ca2e0b19e3397a8c3f8ef615a1025a1bb01b9ebcdf7ce94c85d58c4889f6c7b09f56fca5abaa6d4f44bab681bebec5987e9088206f618be809d3e27909f5d3faf2e4db2282594c3e66d4188d441084f01959175f165f254cf4092aec2e9427a15bccd9d1573f1b5ccbf507bd63b935e783e3839bdc64ef37b564c5357ed336b798ecc3b8e8dd8c581b18febf85fd1794d25d0cdd3e143fd8", @ANYRES64=0x0], 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = dup(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="6e65772065637279707466732074728d737465643a73797a20303030303030303030303030303030303234313200ff4384e8abf4"], 0x2e, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0xce1e, 0x4, @empty, 0x2d}}, 0x7, 0x41, 0xf06, 0x3, 0xb4, 0x6, 0x9}, 0x9c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000240)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r10, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r1, 0x0, r1, 0x0, 0x4, 0x1) 737.408842ms ago: executing program 3 (id=817): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="eb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0c00000084"], 0xc}}], 0x2, 0xc8844) 616.10851ms ago: executing program 3 (id=818): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000100)={0x10000000000, 0xd4, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) 0s ago: executing program 4 (id=819): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) r1 = fsmount(r0, 0x1, 0x3) r2 = openat$procfs(0xffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r2, 0x1f, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000240), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r2, 0xffffffffffffffff, 0xb, 0x0, r2, @void, @value=r2, @void, @void, r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r1, r1, 0x14, 0x8, r1, @void, @value=r1, @void, @void, r3}, 0x20) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001400000000904"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/251, 0xfb}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000002d00)=""/114, 0x72}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000002d80)=""/249, 0xf9}], 0x9}, 0x81}], 0x4, 0x40012032, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x1, 0x5, 0x4, &(0x7f0000000040)={0x22, "9ead99f0e6880391a01b247a4cf9866ef8741b1300"}}) unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x80000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) syz_usb_connect$uac1(0x4, 0xbf, &(0x7f0000002c40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0xc, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x38}, [@selector_unit={0x7, 0x24, 0x5, 0x1, 0xc, "ef8c"}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x7, "b8ab4e60ea"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x4, 0x5, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0xd7, 0x1, 0x16}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x6, 0x4, "60403db05715"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x4, 0x6, 'j', "192e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x2, 0x3, 0x38}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff8, 0xff, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x5, 0x0, {0x7, 0x25, 0x1, 0xc, 0x94, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x87, 0x7, {0x7, 0x25, 0x1, 0x0, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000003040)={0xa, &(0x7f0000002f80)={0xa, 0x6, 0x250, 0x2, 0x2, 0x1, 0x620e3fd1780c9c1f, 0x48}, 0x28, &(0x7f0000002fc0)={0x5, 0xf, 0x28, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0xf6, 0x8, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x2, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x5, 0xe}]}, 0x1, [{0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x801}}]}) kernel console output (not intermixed with test programs): b 4-1: Product: syz [ 255.342060][ T9] usb 4-1: Manufacturer: syz [ 255.346750][ T9] usb 4-1: SerialNumber: syz [ 255.411481][ T5728] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 255.420422][ T5728] usb 3-1: config 0 has no interface number 0 [ 255.426619][ T5728] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 255.442575][ T5728] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 255.459679][ T5728] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 255.469220][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 255.477328][ T5728] usb 3-1: Manufacturer: syz [ 255.483121][ T5728] usb 3-1: SerialNumber: syz [ 255.494436][ T5728] usb 3-1: config 0 descriptor?? [ 255.544013][ T7813] syzkaller0: entered promiscuous mode [ 255.550731][ T7813] syzkaller0: entered allmulticast mode [ 255.569280][ T5789] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 255.732975][ T5789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.756190][ T5789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.776107][ T5789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.798918][ T5789] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.823417][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.850413][ T5789] usb 1-1: config 0 descriptor?? [ 255.914180][ T5728] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 255.939394][ T5728] usb 3-1: USB disconnect, device number 60 [ 255.951975][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.958520][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.081268][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.099733][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.128069][ T9] usb 4-1: selecting invalid altsetting 0 [ 256.134270][ T9] usb 4-1: 8:6 : no UAC_FORMAT_TYPE desc [ 256.142099][ T9] usb 4-1: selecting invalid altsetting 0 [ 256.204013][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.224926][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.248177][ T7809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.640'. [ 256.267880][ T9] usb 4-1: USB disconnect, device number 56 [ 256.290272][ T5789] usbhid 1-1:0.0: can't add hid device: -71 [ 256.296653][ T5789] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.320214][ T5729] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 256.359541][ T5789] usb 1-1: USB disconnect, device number 59 [ 256.504834][ T5729] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.515321][ T5729] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 256.526860][ T5729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.536622][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 256.555975][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 256.595427][ T5729] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.607189][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.617050][ T5729] usb 2-1: Product: syz [ 256.624777][ T5729] usb 2-1: Manufacturer: syz [ 256.638257][ T5729] cdc_wdm 2-1:1.0: skipping garbage [ 256.648494][ T5729] cdc_wdm 2-1:1.0: skipping garbage [ 256.658001][ T5729] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 256.670205][ T5729] cdc_wdm 2-1:1.0: Unknown control protocol [ 257.161355][ T30] audit: type=1326 audit(1778695255.099:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.203579][ T30] audit: type=1326 audit(1778695255.129:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.237131][ T7111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.257442][ T30] audit: type=1326 audit(1778695255.169:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.291232][ T30] audit: type=1326 audit(1778695255.169:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.317986][ T30] audit: type=1326 audit(1778695255.169:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.353405][ T5789] usb 2-1: USB disconnect, device number 56 [ 257.409637][ T30] audit: type=1326 audit(1778695255.169:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.608301][ T30] audit: type=1326 audit(1778695255.189:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.710360][ T30] audit: type=1326 audit(1778695255.189:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.801501][ T30] audit: type=1326 audit(1778695255.189:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3401c code=0x7ffc0000 [ 257.891833][ T30] audit: type=1326 audit(1778695255.189:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71361ab code=0x7ffc0000 [ 258.059794][ T5729] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 258.152450][ T5789] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 258.211632][ T5789] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.252117][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 258.274647][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.316237][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.359691][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.402509][ T5729] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 258.437525][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.475955][ T5729] usb 1-1: config 0 descriptor?? [ 258.623342][ T7857] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 258.895584][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 258.918437][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 258.928041][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 258.941281][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 258.950986][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 258.961136][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 258.969828][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 258.978533][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 258.994560][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 259.004809][ T5729] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 259.020122][ T5729] zydacron 0003:13EC:0006.0006: hidraw0: USB HID v0.0b Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 259.088908][ T5690] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 259.097729][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 259.245302][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.266679][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.281948][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.298682][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.315371][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.336879][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.354718][ T5690] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.374625][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.382334][ T5625] usb 1-1: USB disconnect, device number 60 [ 259.386729][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.411175][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.463421][ T5690] usb 4-1: config 0 descriptor?? [ 259.479608][ T9] usb 3-1: config 0 descriptor?? [ 259.705516][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.721061][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.756816][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.782652][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.801263][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.658'. [ 259.844350][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 259.858722][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 259.889574][ T9] usb 3-1: USB disconnect, device number 61 [ 260.036476][ T7882] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 260.075484][ T7882] bond3: entered promiscuous mode [ 260.081212][ T7882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.115456][ T7884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.123580][ T7884] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 260.146075][ T7884] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 260.197651][ T7884] bond3: (slave ip6gre1): making interface the new active one [ 260.223434][ T7884] ip6gre1: entered promiscuous mode [ 260.244920][ T7884] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 260.395963][ T7882] FAULT_INJECTION: forcing a failure. [ 260.395963][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 260.440402][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.0.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.440438][ T7882] Tainted: [L]=SOFTLOCKUP [ 260.440447][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.440460][ T7882] Call Trace: [ 260.440469][ T7882] [ 260.440478][ T7882] dump_stack_lvl+0xe8/0x150 [ 260.440508][ T7882] should_fail_ex+0x412/0x560 [ 260.440542][ T7882] should_failslab+0xa8/0x100 [ 260.440577][ T7882] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 260.440609][ T7882] ? __alloc_skb+0x1d0/0x7d0 [ 260.440635][ T7882] ? __local_bh_enable_ip+0xd0/0x130 [ 260.440662][ T7882] __alloc_skb+0x1d0/0x7d0 [ 260.440694][ T7882] rtmsg_ifinfo_build_skb+0x84/0x260 [ 260.440730][ T7882] rtmsg_ifinfo+0x8c/0x1a0 [ 260.440760][ T7882] netif_close_many+0x284/0x420 [ 260.440791][ T7882] ? __pfx_netif_close_many+0x10/0x10 [ 260.440822][ T7882] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.440856][ T7882] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 260.440890][ T7882] unregister_netdevice_many_notify+0xb50/0x22c0 [ 260.440915][ T7882] ? __mutex_lock+0x608/0x1550 [ 260.440952][ T7882] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 260.440978][ T7882] ? unregister_netdevice_queue+0x19b/0x360 [ 260.441013][ T7882] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 260.441080][ T7882] ? __nla_parse+0x40/0x60 [ 260.441112][ T7882] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 260.441145][ T7882] rtnl_dellink+0x5d4/0x820 [ 260.441178][ T7882] ? __pfx_rtnl_dellink+0x10/0x10 [ 260.441281][ T7882] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 260.441323][ T7882] ? __pfx_rtnl_dellink+0x10/0x10 [ 260.441349][ T7882] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 260.441379][ T7882] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 260.441404][ T7882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.441429][ T7882] ? ref_tracker_free+0x693/0x840 [ 260.441460][ T7882] ? __pfx_ref_tracker_free+0x10/0x10 [ 260.441499][ T7882] netlink_rcv_skb+0x232/0x4b0 [ 260.441529][ T7882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.441558][ T7882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.441583][ T7882] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.441635][ T7882] netlink_unicast+0x75c/0x8e0 [ 260.441671][ T7882] netlink_sendmsg+0x813/0xb40 [ 260.441711][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.441743][ T7882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 260.441773][ T7882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.441811][ T7882] ____sys_sendmsg+0x972/0x9f0 [ 260.441852][ T7882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.441887][ T7882] ? kstrtoull+0x12f/0x1d0 [ 260.441920][ T7882] ___sys_sendmsg+0x2a5/0x360 [ 260.441947][ T7882] ? __lock_acquire+0x6b5/0x2cf0 [ 260.441973][ T7882] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.442006][ T7882] ? get_pid_task+0x20/0x1f0 [ 260.442033][ T7882] ? get_pid_task+0x20/0x1f0 [ 260.442058][ T7882] ? get_pid_task+0x20/0x1f0 [ 260.442113][ T7882] ? __fget_files+0x2a/0x420 [ 260.442138][ T7882] ? __fget_files+0x3a0/0x420 [ 260.442174][ T7882] __sys_sendmsg+0x183/0x260 [ 260.442207][ T7882] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.442260][ T7882] __do_fast_syscall_32+0x229/0x6e0 [ 260.442292][ T7882] ? do_fast_syscall_32+0x33/0x70 [ 260.442322][ T7882] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.442351][ T7882] ? asm_int80_emulation+0x1a/0x20 [ 260.442370][ T7882] ? do_int80_emulation+0x286/0x530 [ 260.442405][ T7882] do_fast_syscall_32+0x33/0x70 [ 260.442434][ T7882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.442461][ T7882] RIP: 0023:0xf7f3401c [ 260.442481][ T7882] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 260.442499][ T7882] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 260.442522][ T7882] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 260.442536][ T7882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.442549][ T7882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.442561][ T7882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.442573][ T7882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.442605][ T7882] [ 261.019295][ T7882] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 261.053435][ T7882] ip6gre1: left promiscuous mode [ 261.094490][ T7882] bond3 (unregistering): Released all slaves [ 261.214720][ T7886] syzkaller1: entered promiscuous mode [ 261.295842][ T7886] syzkaller1: entered allmulticast mode [ 261.375257][ T7898] FAULT_INJECTION: forcing a failure. [ 261.375257][ T7898] name failslab, interval 1, probability 0, space 0, times 0 [ 261.390359][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.1.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.390398][ T7898] Tainted: [L]=SOFTLOCKUP [ 261.390407][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.390419][ T7898] Call Trace: [ 261.390428][ T7898] [ 261.390437][ T7898] dump_stack_lvl+0xe8/0x150 [ 261.390466][ T7898] should_fail_ex+0x412/0x560 [ 261.390498][ T7898] should_failslab+0xa8/0x100 [ 261.390532][ T7898] __kmalloc_noprof+0xe8/0x760 [ 261.390562][ T7898] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 261.390590][ T7898] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 261.390621][ T7898] genl_family_rcv_msg_doit+0xd9/0x330 [ 261.390651][ T7898] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.390682][ T7898] ? apparmor_capable+0x126/0x170 [ 261.390727][ T7898] ? bpf_lsm_capable+0x9/0x20 [ 261.390748][ T7898] ? security_capable+0x7e/0x2c0 [ 261.390779][ T7898] genl_rcv_msg+0x61c/0x7a0 [ 261.390808][ T7898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.390827][ T7898] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 261.390853][ T7898] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 261.390875][ T7898] ? __pfx_nl80211_post_doit+0x10/0x10 [ 261.390901][ T7898] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.390927][ T7898] ? __asan_memcpy+0x40/0x70 [ 261.390950][ T7898] ? __skb_clone+0x63/0x7a0 [ 261.390988][ T7898] netlink_rcv_skb+0x232/0x4b0 [ 261.391017][ T7898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.391040][ T7898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.391086][ T7898] ? down_read+0x270/0x2e0 [ 261.391104][ T7898] ? genl_rcv+0xd/0x40 [ 261.391126][ T7898] genl_rcv+0x28/0x40 [ 261.391144][ T7898] netlink_unicast+0x75c/0x8e0 [ 261.391179][ T7898] netlink_sendmsg+0x813/0xb40 [ 261.391218][ T7898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.391251][ T7898] ? aa_sock_msg_perm+0xf1/0x1b0 [ 261.391280][ T7898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.391312][ T7898] ____sys_sendmsg+0x972/0x9f0 [ 261.391350][ T7898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.391384][ T7898] ? kstrtoull+0x12f/0x1d0 [ 261.391417][ T7898] ___sys_sendmsg+0x2a5/0x360 [ 261.391444][ T7898] ? __lock_acquire+0x6b5/0x2cf0 [ 261.391471][ T7898] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.391504][ T7898] ? get_pid_task+0x20/0x1f0 [ 261.391529][ T7898] ? get_pid_task+0x20/0x1f0 [ 261.391554][ T7898] ? get_pid_task+0x20/0x1f0 [ 261.391608][ T7898] ? __fget_files+0x2a/0x420 [ 261.391633][ T7898] ? __fget_files+0x3a0/0x420 [ 261.391668][ T7898] __sys_sendmsg+0x183/0x260 [ 261.391708][ T7898] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.391763][ T7898] __do_fast_syscall_32+0x229/0x6e0 [ 261.391796][ T7898] ? do_fast_syscall_32+0x33/0x70 [ 261.391826][ T7898] ? lockdep_hardirqs_on+0x7a/0x110 [ 261.391854][ T7898] ? asm_int80_emulation+0x1a/0x20 [ 261.391874][ T7898] ? do_int80_emulation+0x286/0x530 [ 261.391910][ T7898] do_fast_syscall_32+0x33/0x70 [ 261.391941][ T7898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.391967][ T7898] RIP: 0023:0xf7fb301c [ 261.391987][ T7898] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 261.392006][ T7898] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 261.392030][ T7898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 261.392045][ T7898] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.392059][ T7898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.392072][ T7898] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.392085][ T7898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.392116][ T7898] [ 262.045383][ T5690] usbhid 4-1:0.0: can't add hid device: -71 [ 262.052953][ T5690] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 262.063737][ T5690] usb 4-1: USB disconnect, device number 57 [ 262.150423][ T7900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.670'. [ 262.160316][ T7900] netlink: 31 bytes leftover after parsing attributes in process `syz.1.670'. [ 262.169448][ T1223] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 262.182225][ T7900] netlink: 'syz.1.670': attribute type 4 has an invalid length. [ 262.222261][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 262.234753][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 262.244665][ T7904] netlink: 'syz.1.670': attribute type 11 has an invalid length. [ 262.333130][ T1223] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 262.342115][ T1223] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 262.342131][ T7107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.361637][ T1223] usb 3-1: config 0 has no interface number 0 [ 262.367837][ T1223] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 262.378566][ T1223] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.389363][ T1223] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 262.398544][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.413160][ T1223] usb 3-1: config 0 descriptor?? [ 262.476855][ T7911] 8021q: VLANs not supported on ip_vti0 [ 262.480674][ T5625] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 262.639005][ T5625] usb 1-1: Using ep0 maxpacket: 32 [ 262.648200][ T5625] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 262.656895][ T5625] usb 1-1: config 0 has no interface number 0 [ 262.663200][ T5625] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 262.674574][ T5625] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 262.686763][ T5625] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 262.696199][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.704284][ T5625] usb 1-1: Product: syz [ 262.708537][ T5625] usb 1-1: Manufacturer: syz [ 262.713495][ T5625] usb 1-1: SerialNumber: syz [ 262.723160][ T5625] usb 1-1: config 0 descriptor?? [ 262.788970][ T5690] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 262.843938][ T1223] usb 3-1: USB disconnect, device number 62 [ 262.950191][ T5690] usb 5-1: Using ep0 maxpacket: 32 [ 262.978282][ T5690] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 262.999280][ T5690] usb 5-1: config 0 has no interface number 0 [ 263.002581][ T5625] radio-si470x 1-1:0.35: this is not a si470x device. [ 263.008610][ T5690] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 263.026589][ T5690] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 263.045432][ T5690] usb 5-1: config 0 interface 89 has no altsetting 0 [ 263.056128][ T5690] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 263.068140][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.078666][ T5690] usb 5-1: Product: syz [ 263.084036][ T5690] usb 5-1: Manufacturer: syz [ 263.089044][ T5690] usb 5-1: SerialNumber: syz [ 263.090271][ T5625] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 263.103660][ T5690] usb 5-1: config 0 descriptor?? [ 263.109674][ T5625] usb 1-1: USB disconnect, device number 61 [ 263.125483][ T5690] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 263.150960][ T5690] em28xx 5-1:0.89: Video interface 89 found: isoc [ 263.290079][ T808] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 263.307684][ T7922] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 263.368349][ T7924] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 263.399510][ T5690] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 263.459598][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 263.470027][ T808] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 263.479972][ T808] usb 4-1: config 0 has no interface number 0 [ 263.493481][ T808] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 263.505240][ T5690] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 263.509332][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.523172][ T808] usb 4-1: Product: syz [ 263.527630][ T5690] em28xx 5-1:0.89: board has no eeprom [ 263.559396][ T808] usb 4-1: Manufacturer: syz [ 263.574352][ T808] usb 4-1: SerialNumber: syz [ 263.602955][ T808] usb 4-1: config 0 descriptor?? [ 263.609176][ T5690] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 263.633609][ T5690] em28xx 5-1:0.89: analog set to isoc mode. [ 263.656393][ T1223] em28xx 5-1:0.89: Registering V4L2 extension [ 263.664126][ T808] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 263.706484][ T5690] usb 5-1: USB disconnect, device number 55 [ 263.732433][ T5690] em28xx 5-1:0.89: Disconnecting em28xx [ 263.783280][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 263.783299][ T30] audit: type=1400 audit(1778695261.709:116): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 264.028513][ T7932] fuse: Bad value for 'fd' [ 264.136432][ T808] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 264.155382][ T1223] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 264.185615][ T808] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 264.213942][ T1223] em28xx 5-1:0.89: No AC97 audio processor [ 264.258267][ T5631] Bluetooth: hci1: unexpected cc 0x0c5b length: 2 > 1 [ 264.273424][ T5631] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 264.332974][ T1223] usb 5-1: Decoder not found [ 264.384057][ T1223] em28xx 5-1:0.89: failed to create media graph [ 264.444942][ T1223] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 264.502682][ T1223] em28xx 5-1:0.89: Registering snapshot button... [ 264.555365][ T1223] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input20 [ 264.640926][ T1223] em28xx 5-1:0.89: Remote control support is not available for this card. [ 264.669082][ T5690] em28xx 5-1:0.89: Closing input extension [ 264.705899][ T5690] em28xx 5-1:0.89: Deregistering snapshot button [ 264.742276][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 264.751139][ T808] usb 4-1: USB disconnect, device number 58 [ 264.815842][ T808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 264.947805][ T808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 264.987324][ T808] quatech2 4-1:0.51: device disconnected [ 264.993442][ T5690] em28xx 5-1:0.89: Freeing device [ 265.170897][ T1223] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 265.257263][ T5631] Bluetooth: hci1: unexpected cc 0x0c5b length: 2 > 1 [ 265.264666][ T5631] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 265.352296][ T1223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.394953][ T1223] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 265.469761][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.542895][ T1223] usb 3-1: config 0 descriptor?? [ 265.584322][ T1223] pwc: Askey VC010 type 2 USB webcam detected. [ 265.644896][ T7955] FAULT_INJECTION: forcing a failure. [ 265.644896][ T7955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.690490][ T7955] CPU: 1 UID: 0 PID: 7955 Comm: syz.3.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.690525][ T7955] Tainted: [L]=SOFTLOCKUP [ 265.690533][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.690546][ T7955] Call Trace: [ 265.690556][ T7955] [ 265.690566][ T7955] dump_stack_lvl+0xe8/0x150 [ 265.690597][ T7955] should_fail_ex+0x412/0x560 [ 265.690630][ T7955] _copy_to_user+0x31/0xb0 [ 265.690663][ T7955] simple_read_from_buffer+0xe1/0x170 [ 265.690694][ T7955] proc_fail_nth_read+0x1bb/0x230 [ 265.690726][ T7955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.690756][ T7955] ? rw_verify_area+0x2a6/0x4d0 [ 265.690786][ T7955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.690807][ T7955] vfs_read+0x20c/0xa70 [ 265.690851][ T7955] ? __pfx___mutex_lock+0x10/0x10 [ 265.690885][ T7955] ? __pfx_vfs_read+0x10/0x10 [ 265.690914][ T7955] ? __fget_files+0x2a/0x420 [ 265.690947][ T7955] ? __fget_files+0x3a0/0x420 [ 265.690964][ T7955] ? __fget_files+0x2a/0x420 [ 265.690988][ T7955] ksys_read+0x150/0x270 [ 265.691035][ T7955] ? __pfx_ksys_read+0x10/0x10 [ 265.691069][ T7955] ? asm_int80_emulation+0x1a/0x20 [ 265.691100][ T7955] do_int80_emulation+0x181/0x530 [ 265.691123][ T7955] ? trace_irq_disable+0x3b/0x140 [ 265.691145][ T7955] ? asm_int80_emulation+0x1a/0x20 [ 265.691177][ T7955] ? clear_bhb_loop+0x40/0x90 [ 265.691199][ T7955] ? clear_bhb_loop+0x40/0x90 [ 265.691224][ T7955] asm_int80_emulation+0x1a/0x20 [ 265.691243][ T7955] RIP: 0023:0xf71161ab [ 265.691265][ T7955] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 265.691278][ T7955] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 265.691295][ T7955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 265.691305][ T7955] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 265.691329][ T7955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.691349][ T7955] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.691362][ T7955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.691392][ T7955] [ 266.346252][ T1223] pwc: recv_control_msg error -32 req 02 val 2b00 [ 266.387229][ T1223] pwc: recv_control_msg error -32 req 02 val 2700 [ 266.434023][ T1223] pwc: recv_control_msg error -32 req 02 val 2c00 [ 266.474128][ T1223] pwc: recv_control_msg error -32 req 04 val 1000 [ 266.491427][ T1223] pwc: recv_control_msg error -32 req 04 val 1300 [ 266.514589][ T1223] pwc: recv_control_msg error -32 req 04 val 1400 [ 266.533265][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.569586][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.579386][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.611418][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.635523][ T1223] pwc: recv_control_msg error -32 req 02 val 2000 [ 266.645600][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.646485][ T1223] pwc: recv_control_msg error -32 req 02 val 2100 [ 266.689880][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.702841][ T1223] pwc: recv_control_msg error -32 req 04 val 1500 [ 266.718919][ T808] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 266.732218][ T1223] pwc: recv_control_msg error -32 req 02 val 2500 [ 266.749831][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.773208][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.776326][ T1223] pwc: recv_control_msg error -32 req 02 val 2400 [ 266.832044][ T1223] pwc: recv_control_msg error -32 req 02 val 2600 [ 266.844957][ T1223] pwc: recv_control_msg error -32 req 02 val 2900 [ 266.856829][ T1223] pwc: recv_control_msg error -32 req 02 val 2800 [ 266.949669][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 266.970999][ T808] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 266.992487][ T808] usb 2-1: config 0 has no interface number 0 [ 267.018581][ T808] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 267.034097][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.055955][ T808] usb 2-1: Product: syz [ 267.067424][ T808] usb 2-1: Manufacturer: syz [ 267.074340][ T808] usb 2-1: SerialNumber: syz [ 267.083066][ T1223] pwc: recv_control_msg error -71 req 04 val 1200 [ 267.105506][ T808] usb 2-1: config 0 descriptor?? [ 267.132368][ T808] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 267.197937][ T1223] pwc: Registered as video103. [ 267.215017][ T1223] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 267.279106][ T5720] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 267.301953][ T1223] usb 3-1: USB disconnect, device number 63 [ 267.325564][ T808] usb 2-1: qt2_attach - failed to power on unit: -71 [ 267.354965][ T808] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 267.419452][ T5720] usb 1-1: device descriptor read/64, error -71 [ 267.429333][ T808] usb 2-1: USB disconnect, device number 57 [ 267.682221][ T5720] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 267.859301][ T5720] usb 1-1: device descriptor read/64, error -71 [ 268.035865][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.037865][ T5720] usb usb1-port1: attempt power cycle [ 268.099840][ T7111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.428881][ T5720] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 268.479797][ T5720] usb 1-1: device descriptor read/8, error -71 [ 268.740350][ T5720] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 268.817308][ T5720] usb 1-1: device descriptor read/8, error -71 [ 268.854554][ T8003] can: request_module (can-proto-0) failed. [ 268.981463][ T5720] usb usb1-port1: unable to enumerate USB device [ 269.139615][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 269.279156][ T5720] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 269.288974][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 269.488899][ T5720] usb 1-1: device descriptor read/64, error -71 [ 269.495922][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 269.520754][ T9] usb 5-1: config 0 has no interfaces? [ 269.531157][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 269.550824][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.673229][ T9] usb 5-1: config 0 descriptor?? [ 269.809206][ T5720] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 269.914966][ T9] usb 5-1: USB disconnect, device number 56 [ 270.079279][ T5710] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 270.262028][ T5710] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 270.290237][ T5710] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 270.314904][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.382792][ T5710] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 270.781752][ T8026] FAULT_INJECTION: forcing a failure. [ 270.781752][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.809762][ T5720] usb usb1-port1: attempt power cycle [ 270.824297][ T8026] CPU: 1 UID: 0 PID: 8026 Comm: syz.1.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.824330][ T8026] Tainted: [L]=SOFTLOCKUP [ 270.824336][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.824346][ T8026] Call Trace: [ 270.824352][ T8026] [ 270.824359][ T8026] dump_stack_lvl+0xe8/0x150 [ 270.824381][ T8026] should_fail_ex+0x412/0x560 [ 270.824407][ T8026] _copy_from_user+0x2d/0xb0 [ 270.824430][ T8026] ucma_resolve_ip+0xb8/0x490 [ 270.824452][ T8026] ? __might_fault+0xaf/0x130 [ 270.824472][ T8026] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 270.824506][ T8026] ucma_write+0x24e/0x2f0 [ 270.824527][ T8026] ? __pfx_ucma_write+0x10/0x10 [ 270.824544][ T8026] ? security_file_permission+0x75/0x260 [ 270.824562][ T8026] ? rw_verify_area+0x255/0x4d0 [ 270.824583][ T8026] ? __pfx_ucma_write+0x10/0x10 [ 270.824602][ T8026] vfs_write+0x29a/0xb90 [ 270.824628][ T8026] ? __pfx_vfs_write+0x10/0x10 [ 270.824650][ T8026] ? __fget_files+0x2a/0x420 [ 270.824670][ T8026] ? __fget_files+0x2a/0x420 [ 270.824687][ T8026] ? __fget_files+0x3a0/0x420 [ 270.824704][ T8026] ? __fget_files+0x2a/0x420 [ 270.824729][ T8026] ksys_write+0x150/0x270 [ 270.824753][ T8026] ? __pfx_ksys_write+0x10/0x10 [ 270.824781][ T8026] __do_fast_syscall_32+0x229/0x6e0 [ 270.824805][ T8026] ? do_fast_syscall_32+0x33/0x70 [ 270.824826][ T8026] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.824847][ T8026] ? asm_int80_emulation+0x1a/0x20 [ 270.824861][ T8026] ? do_int80_emulation+0x286/0x530 [ 270.824883][ T8026] ? trace_irq_disable+0x3b/0x140 [ 270.824908][ T8026] do_fast_syscall_32+0x33/0x70 [ 270.824932][ T8026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.824951][ T8026] RIP: 0023:0xf7fb301c [ 270.824965][ T8026] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 270.824984][ T8026] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 270.825001][ T8026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 270.825012][ T8026] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.825021][ T8026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.825030][ T8026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.825040][ T8026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.825061][ T8026] [ 271.341806][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 271.396477][ T8023] netlink: 'syz.4.707': attribute type 41 has an invalid length. [ 271.404856][ T5720] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 271.425919][ T5720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.447828][ T5720] usb 1-1: not running at top speed; connect to a high speed hub [ 271.464314][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.475665][ T5710] stv0680 3-1:4.0: Could not get descriptor 0200 [ 271.482935][ T5720] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 271.499061][ T5720] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.528447][ T5720] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice=e7.3f [ 271.546876][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.557469][ T5720] usb 1-1: Product: syz [ 271.565446][ T5720] usb 1-1: Manufacturer: syz [ 271.580516][ T5720] usb 1-1: SerialNumber: syz [ 271.688531][ T5710] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 271.705741][ T5710] stv0680 3-1:4.0: last error: 34, command = 0x19 [ 271.724064][ T5710] usb 3-1: USB disconnect, device number 64 [ 271.853190][ T8031] 8021q: VLANs not supported on ip_vti0 [ 272.245338][ T1223] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 272.293913][ T5631] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 272.459653][ T1223] usb 5-1: Using ep0 maxpacket: 32 [ 272.463450][ T8038] FAULT_INJECTION: forcing a failure. [ 272.463450][ T8038] name failslab, interval 1, probability 0, space 0, times 0 [ 272.487905][ T1223] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 272.510848][ T1223] usb 5-1: config 0 has no interface number 0 [ 272.520914][ T1223] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 272.537859][ T8038] CPU: 1 UID: 0 PID: 8038 Comm: syz.2.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.537894][ T8038] Tainted: [L]=SOFTLOCKUP [ 272.537903][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.537917][ T8038] Call Trace: [ 272.537926][ T8038] [ 272.537936][ T8038] dump_stack_lvl+0xe8/0x150 [ 272.537970][ T8038] should_fail_ex+0x412/0x560 [ 272.538003][ T8038] should_failslab+0xa8/0x100 [ 272.538036][ T8038] ? skb_clone+0x212/0x3a0 [ 272.538066][ T8038] kmem_cache_alloc_noprof+0x87/0x650 [ 272.538093][ T8038] ? apparmor_capable+0x126/0x170 [ 272.538133][ T8038] skb_clone+0x212/0x3a0 [ 272.538161][ T8038] ? nfnetlink_rcv+0x4b0/0x27b0 [ 272.538191][ T8038] nfnetlink_rcv+0x4de/0x27b0 [ 272.538229][ T8038] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.538259][ T8038] ? __local_bh_enable_ip+0xd0/0x130 [ 272.538281][ T8038] ? __dev_queue_xmit+0x2b6/0x3950 [ 272.538312][ T8038] ? __dev_queue_xmit+0x1fe5/0x3950 [ 272.538342][ T8038] ? __sys_sendmsg+0x183/0x260 [ 272.538378][ T8038] ? __dev_queue_xmit+0x2b6/0x3950 [ 272.538415][ T8038] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 272.538466][ T8038] ? ref_tracker_free+0x693/0x840 [ 272.538499][ T8038] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.538526][ T8038] ? __asan_memcpy+0x40/0x70 [ 272.538550][ T8038] ? __skb_clone+0x63/0x7a0 [ 272.538583][ T8038] ? __skb_clone+0x483/0x7a0 [ 272.538620][ T8038] ? skb_clone+0x246/0x3a0 [ 272.538653][ T8038] ? __netlink_deliver_tap+0x807/0x850 [ 272.538683][ T8038] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.538718][ T8038] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.538745][ T8038] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.538779][ T8038] netlink_unicast+0x75c/0x8e0 [ 272.538816][ T8038] netlink_sendmsg+0x813/0xb40 [ 272.538856][ T8038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.538888][ T8038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 272.538917][ T8038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.538950][ T8038] ____sys_sendmsg+0x972/0x9f0 [ 272.539006][ T8038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.539052][ T8038] ___sys_sendmsg+0x2a5/0x360 [ 272.539080][ T8038] ? __lock_acquire+0x6b5/0x2cf0 [ 272.539108][ T8038] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.539142][ T8038] ? __lock_acquire+0x6b5/0x2cf0 [ 272.539194][ T8038] ? __fget_files+0x2a/0x420 [ 272.539219][ T8038] ? __fget_files+0x3a0/0x420 [ 272.539254][ T8038] __sys_sendmsg+0x183/0x260 [ 272.539286][ T8038] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.539326][ T8038] ? lockdep_softirqs_on+0x11d/0x180 [ 272.539358][ T8038] __do_fast_syscall_32+0x229/0x6e0 [ 272.539390][ T8038] ? do_fast_syscall_32+0x33/0x70 [ 272.539439][ T8038] ? irqentry_exit+0x10f/0x760 [ 272.539474][ T8038] do_fast_syscall_32+0x33/0x70 [ 272.539505][ T8038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.539531][ T8038] RIP: 0023:0xf7f3701c [ 272.539551][ T8038] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 272.539569][ T8038] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 272.539592][ T8038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 272.539607][ T8038] RDX: 0000000000004840 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.539620][ T8038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.539633][ T8038] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.539646][ T8038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.539676][ T8038] [ 272.542854][ T1223] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 272.597757][ T4943] Bluetooth: hci3: command 0x0406 tx timeout [ 272.978046][ T1223] usb 5-1: config 0 interface 89 has no altsetting 0 [ 273.025966][ T1223] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 273.069528][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.110536][ T1223] usb 5-1: Product: syz [ 273.120964][ T1223] usb 5-1: Manufacturer: syz [ 273.135589][ T1223] usb 5-1: SerialNumber: syz [ 273.157470][ T1223] usb 5-1: config 0 descriptor?? [ 273.186215][ T1223] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 273.221897][ T1223] em28xx 5-1:0.89: Video interface 89 found: isoc [ 273.331904][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 273.401258][ T5720] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 273.448404][ T5720] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 273.560685][ T1223] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 273.654799][ T1223] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 273.691864][ T1223] em28xx 5-1:0.89: board has no eeprom [ 273.713387][ T5720] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 273.744602][ T5720] usb 1-1: USB disconnect, device number 68 [ 273.768974][ T1223] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 273.795591][ T1223] em28xx 5-1:0.89: analog set to isoc mode. [ 273.815324][ T8049] syzkaller1: entered promiscuous mode [ 273.829100][ T5690] em28xx 5-1:0.89: Registering V4L2 extension [ 273.851966][ T1223] usb 5-1: USB disconnect, device number 57 [ 273.870796][ T7115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.883757][ T8049] syzkaller1: entered allmulticast mode [ 273.917142][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.926407][ T1223] em28xx 5-1:0.89: Disconnecting em28xx [ 274.011826][ T5690] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 274.032873][ T5690] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 274.046744][ T5690] em28xx 5-1:0.89: No AC97 audio processor [ 274.096836][ T5690] usb 5-1: Decoder not found [ 274.112865][ T5690] em28xx 5-1:0.89: failed to create media graph [ 274.128102][ T5690] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 274.148575][ T5690] em28xx 5-1:0.89: Registering snapshot button... [ 274.170536][ T5690] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input22 [ 274.197004][ T5690] em28xx 5-1:0.89: Remote control support is not available for this card. [ 274.205882][ T1223] em28xx 5-1:0.89: Closing input extension [ 274.212446][ T1223] em28xx 5-1:0.89: Deregistering snapshot button [ 274.290940][ T5729] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 274.358492][ T1223] em28xx 5-1:0.89: Freeing device [ 274.372170][ T8061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.469075][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 274.480804][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 274.509744][ T5729] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 274.532836][ T5729] usb 4-1: can't read configurations, error -71 [ 274.634651][ T8069] netlink: 15 bytes leftover after parsing attributes in process `syz.0.724'. [ 274.668427][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 274.679210][ T5690] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 274.859005][ T5690] usb 3-1: Using ep0 maxpacket: 32 [ 274.866756][ T5690] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 274.885538][ T5690] usb 3-1: config 0 has no interface number 0 [ 274.902323][ T8074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.725'. [ 274.939475][ T5690] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 274.950870][ T5690] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 274.959341][ T5720] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 274.973635][ T5690] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 274.984639][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 274.999351][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.021515][ T5690] usb 3-1: Product: syz [ 275.029294][ T5690] usb 3-1: Manufacturer: syz [ 275.035027][ T5690] usb 3-1: SerialNumber: syz [ 275.074546][ T5690] usb 3-1: config 0 descriptor?? [ 275.138963][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 275.165628][ T5720] usb 1-1: config 190 has too many interfaces: 138, using maximum allowed: 32 [ 275.198887][ T5720] usb 1-1: config 190 has an invalid interface number: 187 but max is 137 [ 275.221787][ T5720] usb 1-1: config 190 has an invalid descriptor of length 0, skipping remainder of the config [ 275.240452][ T5720] usb 1-1: config 190 has 1 interface, different from the descriptor's value: 138 [ 275.257932][ T5720] usb 1-1: config 190 has no interface number 0 [ 275.267186][ T5720] usb 1-1: config 190 interface 187 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.283831][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 275.298349][ T5720] usb 1-1: config 190 interface 187 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 275.333540][ T5720] usb 1-1: config 190 interface 187 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 275.374422][ T5690] radio-si470x 3-1:0.35: this is not a si470x device. [ 275.398511][ T5720] usb 1-1: config 190 interface 187 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 275.445012][ T5720] usb 1-1: config 190 interface 187 has no altsetting 0 [ 275.446459][ T5690] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 275.469984][ T5710] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 275.504745][ T5720] usb 1-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 275.515553][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.542867][ T5720] usb 1-1: Product: syz [ 275.552108][ T5720] usb 1-1: Manufacturer: syz [ 275.562261][ T5720] usb 1-1: SerialNumber: syz [ 275.567409][ T8081] FAULT_INJECTION: forcing a failure. [ 275.567409][ T8081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.620721][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: syz.3.728 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.620755][ T8081] Tainted: [L]=SOFTLOCKUP [ 275.620764][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.620777][ T8081] Call Trace: [ 275.620785][ T8081] [ 275.620794][ T8081] dump_stack_lvl+0xe8/0x150 [ 275.620822][ T8081] should_fail_ex+0x412/0x560 [ 275.620854][ T8081] _copy_from_user+0x2d/0xb0 [ 275.620883][ T8081] memdup_user+0x5e/0xd0 [ 275.620905][ T8081] strndup_user+0x68/0xd0 [ 275.620923][ T8081] __se_sys_fsconfig+0x4b5/0x820 [ 275.620950][ T8081] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 275.620981][ T8081] ? __ia32_sys_fsconfig+0x20/0xc0 [ 275.621004][ T8081] __do_fast_syscall_32+0x229/0x6e0 [ 275.621035][ T8081] ? do_fast_syscall_32+0x33/0x70 [ 275.621064][ T8081] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.621090][ T8081] ? asm_int80_emulation+0x1a/0x20 [ 275.621110][ T8081] ? do_int80_emulation+0x286/0x530 [ 275.621139][ T8081] ? trace_irq_disable+0x3b/0x140 [ 275.621172][ T8081] do_fast_syscall_32+0x33/0x70 [ 275.621204][ T8081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.621229][ T8081] RIP: 0023:0xf7f1301c [ 275.621248][ T8081] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 275.621266][ T8081] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 00000000000001af [ 275.621288][ T8081] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 275.621302][ T8081] RDX: 0000000080000080 RSI: 00000000800000c0 RDI: 0000000000000004 [ 275.621315][ T8081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.621327][ T8081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.621339][ T8081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.621368][ T8081] [ 275.631599][ T5710] usb 2-1: device descriptor read/64, error -71 [ 275.692721][ T5690] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 275.859784][ T5638] Bluetooth: hci1: command 0x2016 tx timeout [ 275.880753][ T5720] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 275.910984][ T5720] usb 1-1: USB disconnect, device number 69 [ 275.948031][ T8083] FAULT_INJECTION: forcing a failure. [ 275.948031][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 275.965804][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.3.729 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.965830][ T8083] Tainted: [L]=SOFTLOCKUP [ 275.965836][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.965846][ T8083] Call Trace: [ 275.965853][ T8083] [ 275.965859][ T8083] dump_stack_lvl+0xe8/0x150 [ 275.965882][ T8083] should_fail_ex+0x412/0x560 [ 275.965937][ T8083] should_failslab+0xa8/0x100 [ 275.965969][ T8083] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 275.966001][ T8083] ? __alloc_skb+0x1d0/0x7d0 [ 275.966026][ T8083] ? __local_bh_enable_ip+0xd0/0x130 [ 275.966053][ T8083] __alloc_skb+0x1d0/0x7d0 [ 275.966084][ T8083] netlink_dump+0x1d8/0xe10 [ 275.966126][ T8083] ? __pfx_netlink_dump+0x10/0x10 [ 275.966178][ T8083] __netlink_dump_start+0x5cb/0x7e0 [ 275.966223][ T8083] inet_diag_handler_cmd+0x1e0/0x2c0 [ 275.966260][ T8083] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 275.966291][ T8083] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 275.966321][ T8083] ? __pfx_inet_diag_dump+0x10/0x10 [ 275.966351][ T8083] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 275.966385][ T8083] ? sock_diag_lock_handler+0x19/0x290 [ 275.966410][ T8083] ? sock_diag_lock_handler+0x19/0x290 [ 275.966441][ T8083] sock_diag_rcv_msg+0x4cc/0x600 [ 275.966469][ T8083] netlink_rcv_skb+0x232/0x4b0 [ 275.966496][ T8083] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 275.966521][ T8083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.966566][ T8083] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.966593][ T8083] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.966627][ T8083] netlink_unicast+0x75c/0x8e0 [ 275.966662][ T8083] netlink_sendmsg+0x813/0xb40 [ 275.966699][ T8083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.966730][ T8083] ? aa_sock_msg_perm+0xf1/0x1b0 [ 275.966760][ T8083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.966790][ T8083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.966816][ T8083] sock_write_iter+0x49b/0x4f0 [ 275.966840][ T8083] ? __pfx_sock_write_iter+0x10/0x10 [ 275.966872][ T8083] ? kstrtoull+0x12f/0x1d0 [ 275.966930][ T8083] do_iter_readv_writev+0x619/0x8c0 [ 275.966967][ T8083] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 275.967003][ T8083] ? bpf_lsm_file_permission+0x9/0x20 [ 275.967033][ T8083] ? security_file_permission+0x75/0x260 [ 275.967057][ T8083] ? rw_verify_area+0x255/0x4d0 [ 275.967089][ T8083] vfs_writev+0x33c/0x990 [ 275.967123][ T8083] ? __pfx_vfs_writev+0x10/0x10 [ 275.967159][ T8083] ? __fget_files+0x2a/0x420 [ 275.967197][ T8083] ? __fget_files+0x3a0/0x420 [ 275.967223][ T8083] ? __fget_files+0x2a/0x420 [ 275.967256][ T8083] do_writev+0x154/0x2e0 [ 275.967281][ T8083] ? __pfx_do_writev+0x10/0x10 [ 275.967315][ T8083] __do_fast_syscall_32+0x229/0x6e0 [ 275.967348][ T8083] ? do_fast_syscall_32+0x33/0x70 [ 275.967377][ T8083] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.967406][ T8083] ? asm_int80_emulation+0x1a/0x20 [ 275.967426][ T8083] ? do_int80_emulation+0x286/0x530 [ 275.967455][ T8083] ? trace_irq_disable+0x3b/0x140 [ 275.967490][ T8083] do_fast_syscall_32+0x33/0x70 [ 275.967513][ T8083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.967532][ T8083] RIP: 0023:0xf7f1301c [ 275.967547][ T8083] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 275.967561][ T8083] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 275.967578][ T8083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 275.967588][ T8083] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.967597][ T8083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.967606][ T8083] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.967615][ T8083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.967637][ T8083] [ 276.488888][ T5690] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 276.505407][ T5690] usb 3-1: USB disconnect, device number 65 [ 276.514224][ T5690] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 276.546155][ T5710] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 276.809263][ T5710] usb 2-1: device descriptor read/64, error -71 [ 276.900861][ T8089] 8021q: VLANs not supported on ip_vti0 [ 276.919601][ T5710] usb usb2-port1: attempt power cycle [ 276.944555][ T8090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.732'. [ 277.220189][ T5690] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 277.235432][ T8098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.258909][ T5710] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 277.299891][ T5710] usb 2-1: device descriptor read/8, error -71 [ 277.379254][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 277.386715][ T5690] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 277.396276][ T5690] usb 4-1: config 0 has no interface number 0 [ 277.403755][ T5690] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 277.415844][ T5690] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 277.428716][ T5690] usb 4-1: config 0 interface 89 has no altsetting 0 [ 277.442712][ T5690] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 277.452194][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.461129][ T5690] usb 4-1: Product: syz [ 277.465591][ T5690] usb 4-1: Manufacturer: syz [ 277.471749][ T5690] usb 4-1: SerialNumber: syz [ 277.480004][ T5690] usb 4-1: config 0 descriptor?? [ 277.490177][ T5690] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 277.499939][ T5729] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 277.507918][ T5690] em28xx 4-1:0.89: Video interface 89 found: isoc [ 277.540750][ T5710] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 277.569926][ T5710] usb 2-1: device descriptor read/8, error -71 [ 277.579012][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 277.672588][ T5729] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 277.684119][ T5729] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 277.684835][ T5710] usb usb2-port1: unable to enumerate USB device [ 277.706449][ T5729] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.726923][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.737217][ T5729] usb 3-1: Product: syz [ 277.742098][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 277.750258][ T5729] usb 3-1: Manufacturer: syz [ 277.755328][ T5729] usb 3-1: SerialNumber: syz [ 277.761764][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.778745][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.782006][ T5690] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 277.801501][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.814911][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.826078][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.840670][ T9] usb 5-1: config 0 descriptor?? [ 277.886309][ T5690] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 277.896179][ T5690] em28xx 4-1:0.89: board has no eeprom [ 277.949244][ T4943] Bluetooth: hci1: command 0x2016 tx timeout [ 277.958983][ T5690] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 277.969828][ T5690] em28xx 4-1:0.89: analog set to isoc mode. [ 277.976008][ T1223] em28xx 4-1:0.89: Registering V4L2 extension [ 278.006963][ T5690] usb 4-1: USB disconnect, device number 61 [ 278.075217][ T5690] em28xx 4-1:0.89: Disconnecting em28xx [ 278.185620][ T1223] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 278.185724][ T8111] FAULT_INJECTION: forcing a failure. [ 278.185724][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 278.209542][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.1.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.209576][ T8111] Tainted: [L]=SOFTLOCKUP [ 278.209585][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.209599][ T8111] Call Trace: [ 278.209608][ T8111] [ 278.209617][ T8111] dump_stack_lvl+0xe8/0x150 [ 278.209646][ T8111] should_fail_ex+0x412/0x560 [ 278.209677][ T8111] should_failslab+0xa8/0x100 [ 278.209711][ T8111] __kmalloc_noprof+0xe8/0x760 [ 278.209742][ T8111] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 278.209772][ T8111] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 278.209804][ T8111] genl_family_rcv_msg_doit+0xd9/0x330 [ 278.209834][ T8111] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.209888][ T8111] ? apparmor_capable+0x126/0x170 [ 278.209923][ T8111] ? bpf_lsm_capable+0x9/0x20 [ 278.209944][ T8111] ? security_capable+0x7e/0x2c0 [ 278.209980][ T8111] genl_rcv_msg+0x61c/0x7a0 [ 278.210010][ T8111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.210031][ T8111] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 278.210056][ T8111] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 278.210075][ T8111] ? __pfx_nl80211_post_doit+0x10/0x10 [ 278.210101][ T8111] ? __pfx_ref_tracker_free+0x10/0x10 [ 278.210128][ T8111] ? __asan_memcpy+0x40/0x70 [ 278.210152][ T8111] ? __skb_clone+0x63/0x7a0 [ 278.210191][ T8111] netlink_rcv_skb+0x232/0x4b0 [ 278.210222][ T8111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.210246][ T8111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.210291][ T8111] ? down_read+0x270/0x2e0 [ 278.210311][ T8111] ? genl_rcv+0xd/0x40 [ 278.210334][ T8111] genl_rcv+0x28/0x40 [ 278.210353][ T8111] netlink_unicast+0x75c/0x8e0 [ 278.210390][ T8111] netlink_sendmsg+0x813/0xb40 [ 278.210430][ T8111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.210464][ T8111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 278.210494][ T8111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.210526][ T8111] ____sys_sendmsg+0x972/0x9f0 [ 278.210567][ T8111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.210602][ T8111] ? kstrtoull+0x12f/0x1d0 [ 278.210636][ T8111] ___sys_sendmsg+0x2a5/0x360 [ 278.210665][ T8111] ? __lock_acquire+0x6b5/0x2cf0 [ 278.210693][ T8111] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.210727][ T8111] ? get_pid_task+0x20/0x1f0 [ 278.210754][ T8111] ? get_pid_task+0x20/0x1f0 [ 278.210778][ T8111] ? get_pid_task+0x20/0x1f0 [ 278.210834][ T8111] ? __fget_files+0x2a/0x420 [ 278.210858][ T8111] ? __fget_files+0x3a0/0x420 [ 278.210903][ T8111] __sys_sendmsg+0x183/0x260 [ 278.210936][ T8111] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.210989][ T8111] __do_fast_syscall_32+0x229/0x6e0 [ 278.211022][ T8111] ? do_fast_syscall_32+0x33/0x70 [ 278.211052][ T8111] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.211079][ T8111] ? asm_int80_emulation+0x1a/0x20 [ 278.211099][ T8111] ? do_int80_emulation+0x286/0x530 [ 278.211129][ T8111] ? trace_irq_disable+0x3b/0x140 [ 278.211164][ T8111] do_fast_syscall_32+0x33/0x70 [ 278.211196][ T8111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.211222][ T8111] RIP: 0023:0xf7fb301c [ 278.211241][ T8111] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 278.211259][ T8111] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 278.211281][ T8111] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 278.211296][ T8111] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.211309][ T8111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.211322][ T8111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.211335][ T8111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.211365][ T8111] [ 278.224934][ T1223] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 278.617887][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.659393][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 278.710444][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input23 [ 278.777681][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.810584][ T9] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 278.850331][ T5710] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 278.891850][ T9] usb 5-1: USB disconnect, device number 58 [ 279.002560][ T1223] em28xx 4-1:0.89: No AC97 audio processor [ 279.021083][ T5710] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.030022][ T5710] usb 1-1: config 0 has no interface number 0 [ 279.045967][ T5710] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 279.059529][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.073265][ T1223] usb 4-1: Decoder not found [ 279.083789][ T5710] usb 1-1: Product: syz [ 279.090554][ T5710] usb 1-1: Manufacturer: syz [ 279.091025][ T1223] em28xx 4-1:0.89: failed to create media graph [ 279.100823][ T5710] usb 1-1: SerialNumber: syz [ 279.125366][ T5710] usb 1-1: config 0 descriptor?? [ 279.127116][ T1223] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 279.148642][ T5710] usb 1-1: selecting invalid altsetting 1 [ 279.155816][ T8120] fido_id[8120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 279.174459][ T1223] em28xx 4-1:0.89: Registering snapshot button... [ 279.195866][ T1223] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input24 [ 279.216942][ T5710] dvb_ttusb_budget: ttusb_init_controller: error [ 279.236858][ T5710] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 279.242059][ T5721] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 279.258067][ T1223] em28xx 4-1:0.89: Remote control support is not available for this card. [ 279.267361][ T5690] em28xx 4-1:0.89: Closing input extension [ 279.279638][ T5690] em28xx 4-1:0.89: Deregistering snapshot button [ 279.354755][ T5690] em28xx 4-1:0.89: Freeing device [ 279.408858][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 279.425031][ T5721] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 279.447238][ T5721] usb 2-1: config 4 has no interface number 0 [ 279.477552][ T5710] DVB: Unable to find symbol stv0299_attach() [ 279.492224][ T5721] usb 2-1: config 4 interface 228 altsetting 4 bulk endpoint 0x7 has invalid maxpacket 8 [ 279.525795][ T5721] usb 2-1: config 4 interface 228 has no altsetting 0 [ 279.546743][ T5721] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 279.560696][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.582277][ T5721] usb 2-1: Product: syz [ 279.592510][ T5721] usb 2-1: Manufacturer: syz [ 279.602719][ T5721] usb 2-1: SerialNumber: syz [ 279.621611][ T7107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.637712][ T5710] DVB: Unable to find symbol tda8083_attach() [ 279.655463][ T8122] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 279.658574][ T5710] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 279.689083][ T5690] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 279.690885][ T5710] usb 1-1: USB disconnect, device number 70 [ 279.812868][ T5729] cdc_ncm 3-1:1.0: bind() failure [ 279.832105][ T5729] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 279.839277][ T5729] cdc_ncm 3-1:1.1: bind() failure [ 279.848929][ T1223] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 279.862889][ T5690] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 279.873653][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.894374][ T5729] usb 3-1: USB disconnect, device number 66 [ 279.913798][ T5690] usb 4-1: config 0 descriptor?? [ 279.935437][ T5690] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 280.000758][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 280.021164][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 280.037452][ T1223] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 280.053098][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 280.072700][ T5721] usb 2-1: USB disconnect, device number 62 [ 280.083503][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 280.105577][ T1223] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 280.119740][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.129031][ T1223] usb 5-1: Product: syz [ 280.137245][ T5688] udevd[5688]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.146262][ T1223] usb 5-1: Manufacturer: syz [ 280.160687][ T1223] usb 5-1: SerialNumber: syz [ 280.175115][ T1223] usb 5-1: config 0 descriptor?? [ 280.181806][ T8127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 280.193559][ T1223] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 280.200174][ T1223] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 280.289237][ T5710] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 280.371852][ T8118] netlink: 424 bytes leftover after parsing attributes in process `syz.3.742'. [ 280.381657][ T8118] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 280.403016][ T5690] gp8psk: usb in 138 operation failed. [ 280.430744][ T5690] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 280.456848][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.472798][ T5690] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 280.498506][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.531174][ T5690] usb 4-1: USB disconnect, device number 62 [ 280.542386][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.570559][ T5710] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.598946][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.646692][ T5710] usb 1-1: config 0 descriptor?? [ 280.714683][ T8133] netlink: 'syz.1.747': attribute type 2 has an invalid length. [ 280.739495][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 280.821519][ T4943] Bluetooth: hci3: command 0x0406 tx timeout [ 280.833410][ T30] audit: type=1326 audit(1778695278.769:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 280.860230][ T30] audit: type=1326 audit(1778695278.769:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 280.884897][ T8135] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 280.889318][ T30] audit: type=1326 audit(1778695278.769:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 280.916975][ T30] audit: type=1326 audit(1778695278.799:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 280.945882][ T30] audit: type=1326 audit(1778695278.799:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 280.972105][ T30] audit: type=1326 audit(1778695278.799:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 280.997228][ T30] audit: type=1326 audit(1778695278.809:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 281.021894][ T5721] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 281.058962][ T30] audit: type=1326 audit(1778695278.809:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 281.090423][ T30] audit: type=1326 audit(1778695278.879:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 281.117693][ T30] audit: type=1326 audit(1778695278.879:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.746" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3701c code=0x7ffc0000 [ 281.170596][ T5721] usb 2-1: device descriptor read/64, error -71 [ 281.233001][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.749'. [ 281.300422][ T1223] usb 5-1: USB disconnect, device number 59 [ 281.418740][ T8142] bond_slave_1: entered promiscuous mode [ 281.418919][ T5721] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 281.432939][ T8142] bond_slave_1: entered allmulticast mode [ 281.523470][ T8129] syzkaller1: entered promiscuous mode [ 281.532572][ T8129] syzkaller1: entered allmulticast mode [ 281.568910][ T5721] usb 2-1: device descriptor read/64, error -71 [ 281.661814][ T5710] usbhid 1-1:0.0: can't add hid device: -71 [ 281.669565][ T5710] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 281.680758][ T5721] usb usb2-port1: attempt power cycle [ 281.705414][ T5710] usb 1-1: USB disconnect, device number 71 [ 281.787447][ T5631] Bluetooth: hci2: unexpected event for opcode 0x200c [ 282.050382][ T5721] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 282.092098][ T5721] usb 2-1: device descriptor read/8, error -71 [ 282.275874][ T8163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.755'. [ 282.339299][ T5721] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 282.361339][ T5721] usb 2-1: device descriptor read/8, error -71 [ 282.409729][ T5710] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 282.438160][ T8167] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.757'. [ 282.469267][ T5721] usb usb2-port1: unable to enumerate USB device [ 282.504392][ T8169] FAULT_INJECTION: forcing a failure. [ 282.504392][ T8169] name failslab, interval 1, probability 0, space 0, times 0 [ 282.517393][ T8169] CPU: 0 UID: 0 PID: 8169 Comm: syz.4.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.517418][ T8169] Tainted: [L]=SOFTLOCKUP [ 282.517424][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.517435][ T8169] Call Trace: [ 282.517441][ T8169] [ 282.517449][ T8169] dump_stack_lvl+0xe8/0x150 [ 282.517471][ T8169] should_fail_ex+0x412/0x560 [ 282.517497][ T8169] should_failslab+0xa8/0x100 [ 282.517524][ T8169] __kmalloc_noprof+0xe8/0x760 [ 282.517546][ T8169] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 282.517569][ T8169] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 282.517591][ T8169] genl_family_rcv_msg_doit+0xd9/0x330 [ 282.517612][ T8169] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 282.517634][ T8169] ? apparmor_capable+0x126/0x170 [ 282.517661][ T8169] ? bpf_lsm_capable+0x9/0x20 [ 282.517676][ T8169] ? security_capable+0x7e/0x2c0 [ 282.517699][ T8169] genl_rcv_msg+0x61c/0x7a0 [ 282.517719][ T8169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.517734][ T8169] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 282.517752][ T8169] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 282.517769][ T8169] ? __pfx_nl80211_post_doit+0x10/0x10 [ 282.517788][ T8169] ? __pfx_ref_tracker_free+0x10/0x10 [ 282.517808][ T8169] ? __asan_memcpy+0x40/0x70 [ 282.517826][ T8169] ? __skb_clone+0x63/0x7a0 [ 282.517853][ T8169] netlink_rcv_skb+0x232/0x4b0 [ 282.517874][ T8169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.517891][ T8169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.517923][ T8169] ? down_read+0x270/0x2e0 [ 282.517936][ T8169] ? genl_rcv+0xd/0x40 [ 282.517951][ T8169] genl_rcv+0x28/0x40 [ 282.517965][ T8169] netlink_unicast+0x75c/0x8e0 [ 282.517991][ T8169] netlink_sendmsg+0x813/0xb40 [ 282.518036][ T8169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.518060][ T8169] ? aa_sock_msg_perm+0xf1/0x1b0 [ 282.518081][ T8169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.518104][ T8169] ____sys_sendmsg+0x972/0x9f0 [ 282.518133][ T8169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.518157][ T8169] ? kstrtoull+0x12f/0x1d0 [ 282.518192][ T8169] ___sys_sendmsg+0x2a5/0x360 [ 282.518237][ T8169] ? __lock_acquire+0x6b5/0x2cf0 [ 282.518264][ T8169] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.518300][ T8169] ? get_pid_task+0x20/0x1f0 [ 282.518319][ T8169] ? get_pid_task+0x20/0x1f0 [ 282.518337][ T8169] ? get_pid_task+0x20/0x1f0 [ 282.518374][ T8169] ? __fget_files+0x2a/0x420 [ 282.518392][ T8169] ? __fget_files+0x3a0/0x420 [ 282.518417][ T8169] __sys_sendmsg+0x183/0x260 [ 282.518440][ T8169] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.518477][ T8169] __do_fast_syscall_32+0x229/0x6e0 [ 282.518501][ T8169] ? do_fast_syscall_32+0x33/0x70 [ 282.518524][ T8169] ? lockdep_hardirqs_on+0x7a/0x110 [ 282.518544][ T8169] ? asm_int80_emulation+0x1a/0x20 [ 282.518558][ T8169] ? do_int80_emulation+0x286/0x530 [ 282.518580][ T8169] ? trace_irq_disable+0x3b/0x140 [ 282.518608][ T8169] do_fast_syscall_32+0x33/0x70 [ 282.518632][ T8169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.518650][ T8169] RIP: 0023:0xf7fa301c [ 282.518665][ T8169] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 282.518678][ T8169] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 282.518694][ T8169] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000600 [ 282.518704][ T8169] RDX: 0000000020004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.518714][ T8169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.518723][ T8169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.518732][ T8169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.518769][ T8169] [ 282.581871][ T5728] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 282.910696][ T5710] usb 3-1: device descriptor read/64, error -71 [ 282.917136][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 283.002736][ T8171] ÿ: renamed from dummy0 (while UP) [ 283.079852][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 283.094799][ T5728] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 283.114713][ T5728] usb 1-1: config 0 has no interface number 0 [ 283.126449][ T5728] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 283.137376][ T5728] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 283.150113][ T5710] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 283.158588][ T5728] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 283.169826][ T5728] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 283.185750][ T5728] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 283.200043][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.212059][ T5728] usb 1-1: Product: syz [ 283.216360][ T5728] usb 1-1: Manufacturer: syz [ 283.225648][ T5728] usb 1-1: SerialNumber: syz [ 283.239461][ T5728] usb 1-1: config 0 descriptor?? [ 283.247035][ T8163] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 283.308890][ T5710] usb 3-1: device descriptor read/64, error -71 [ 283.429470][ T1223] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 283.430041][ T5710] usb usb3-port1: attempt power cycle [ 283.463559][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.472830][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.538124][ T5728] qcserial 1-1:0.49: Qualcomm USB modem converter detected [ 283.558742][ T5728] usb 1-1: USB disconnect, device number 72 [ 283.569047][ T5721] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 283.584488][ T5728] qcserial 1-1:0.49: device disconnected [ 283.592243][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 283.604722][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.620230][ T1223] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 283.630244][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.646592][ T1223] usb 4-1: config 0 descriptor?? [ 283.720535][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 283.740406][ T5721] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 283.756704][ T5721] usb 5-1: config 0 has no interface number 0 [ 283.773464][ T5721] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 283.784866][ T5721] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.790777][ T5710] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 283.795805][ T5721] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 283.816193][ T5721] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 283.831489][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.840893][ T5721] usb 5-1: Product: syz [ 283.845201][ T5721] usb 5-1: Manufacturer: syz [ 283.850825][ T5721] usb 5-1: SerialNumber: syz [ 283.862287][ T5710] usb 3-1: device descriptor read/8, error -71 [ 283.875026][ T5721] usb 5-1: config 0 descriptor?? [ 283.897939][ T8180] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 283.934944][ T8185] FAULT_INJECTION: forcing a failure. [ 283.934944][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 283.958123][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.1.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.958157][ T8185] Tainted: [L]=SOFTLOCKUP [ 283.958166][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.958179][ T8185] Call Trace: [ 283.958188][ T8185] [ 283.958198][ T8185] dump_stack_lvl+0xe8/0x150 [ 283.958227][ T8185] should_fail_ex+0x412/0x560 [ 283.958261][ T8185] should_failslab+0xa8/0x100 [ 283.958293][ T8185] ? skb_clone+0x212/0x3a0 [ 283.958325][ T8185] kmem_cache_alloc_noprof+0x87/0x650 [ 283.958353][ T8185] ? apparmor_capable+0x126/0x170 [ 283.958393][ T8185] skb_clone+0x212/0x3a0 [ 283.958421][ T8185] ? nfnetlink_rcv+0x4b0/0x27b0 [ 283.958462][ T8185] nfnetlink_rcv+0x4de/0x27b0 [ 283.958498][ T8185] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.958528][ T8185] ? __local_bh_enable_ip+0xd0/0x130 [ 283.958548][ T8185] ? __dev_queue_xmit+0x2b6/0x3950 [ 283.958578][ T8185] ? __dev_queue_xmit+0x1fe5/0x3950 [ 283.958608][ T8185] ? __sys_sendmsg+0x183/0x260 [ 283.958642][ T8185] ? __dev_queue_xmit+0x2b6/0x3950 [ 283.958677][ T8185] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 283.958715][ T8185] ? ref_tracker_free+0x693/0x840 [ 283.958752][ T8185] ? __pfx_ref_tracker_free+0x10/0x10 [ 283.958777][ T8185] ? __asan_memcpy+0x40/0x70 [ 283.958801][ T8185] ? __skb_clone+0x63/0x7a0 [ 283.958834][ T8185] ? __skb_clone+0x483/0x7a0 [ 283.958869][ T8185] ? skb_clone+0x246/0x3a0 [ 283.958902][ T8185] ? __netlink_deliver_tap+0x807/0x850 [ 283.958931][ T8185] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.958965][ T8185] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.958993][ T8185] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.959026][ T8185] netlink_unicast+0x75c/0x8e0 [ 283.959063][ T8185] netlink_sendmsg+0x813/0xb40 [ 283.959102][ T8185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.959135][ T8185] ? aa_sock_msg_perm+0xf1/0x1b0 [ 283.959164][ T8185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.959195][ T8185] ____sys_sendmsg+0x972/0x9f0 [ 283.959234][ T8185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.959268][ T8185] ? kstrtoull+0x12f/0x1d0 [ 283.959300][ T8185] ___sys_sendmsg+0x2a5/0x360 [ 283.959328][ T8185] ? __lock_acquire+0x6b5/0x2cf0 [ 283.959356][ T8185] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.959388][ T8185] ? get_pid_task+0x20/0x1f0 [ 283.959414][ T8185] ? get_pid_task+0x20/0x1f0 [ 283.959437][ T8185] ? get_pid_task+0x20/0x1f0 [ 283.959499][ T8185] ? __fget_files+0x2a/0x420 [ 283.959524][ T8185] ? __fget_files+0x3a0/0x420 [ 283.959560][ T8185] __sys_sendmsg+0x183/0x260 [ 283.959591][ T8185] ? __pfx___sys_sendmsg+0x10/0x10 [ 283.959643][ T8185] __do_fast_syscall_32+0x229/0x6e0 [ 283.959674][ T8185] ? do_fast_syscall_32+0x33/0x70 [ 283.959703][ T8185] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.959731][ T8185] ? asm_int80_emulation+0x1a/0x20 [ 283.959752][ T8185] ? do_int80_emulation+0x286/0x530 [ 283.959782][ T8185] ? trace_irq_disable+0x3b/0x140 [ 283.959816][ T8185] do_fast_syscall_32+0x33/0x70 [ 283.959848][ T8185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.959872][ T8185] RIP: 0023:0xf7fb301c [ 283.959893][ T8185] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 283.959912][ T8185] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 283.959935][ T8185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 283.959950][ T8185] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.959962][ T8185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.959974][ T8185] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.959985][ T8185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.960013][ T8185] [ 283.964621][ T8177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.109437][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 284.359610][ T5710] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 284.385641][ T5721] usb 5-1: USB disconnect, device number 60 [ 284.399764][ T5710] usb 3-1: device descriptor read/8, error -71 [ 284.509263][ T5710] usb usb3-port1: unable to enumerate USB device [ 284.583858][ T1223] hid_parser_main: 28 callbacks suppressed [ 284.583883][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.605686][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.615345][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.623042][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.633583][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.645344][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.658283][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.666339][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.675106][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.684510][ T1223] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 284.694851][ T1223] holtek_mouse 0003:04D9:A04A.0008: item fetching failed at offset 18/235 [ 284.707644][ T1223] holtek_mouse 0003:04D9:A04A.0008: hid parse failed: -22 [ 284.718579][ T1223] holtek_mouse 0003:04D9:A04A.0008: probe with driver holtek_mouse failed with error -22 [ 284.844115][ T5710] usb 4-1: USB disconnect, device number 63 [ 285.209278][ T5720] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 285.380606][ T7115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.402422][ T5720] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.416469][ T5720] usb 5-1: config 0 has no interfaces? [ 285.422925][ T5720] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 285.424111][ T8209] 8021q: VLANs not supported on ip_vti0 [ 285.478134][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.519542][ T5720] usb 5-1: config 0 descriptor?? [ 285.798498][ T4943] Bluetooth: hci1: unexpected cc 0x0c5b length: 2 > 1 [ 285.799120][ T1223] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 285.814754][ T4943] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 285.842814][ T5690] usb 5-1: USB disconnect, device number 61 [ 286.019066][ T1223] usb 3-1: Using ep0 maxpacket: 32 [ 286.030272][ T1223] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 286.046713][ T1223] usb 3-1: config 0 has no interface number 0 [ 286.062129][ T1223] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 286.092506][ T1223] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 286.123325][ T1223] usb 3-1: config 0 interface 89 has no altsetting 0 [ 286.139537][ T1223] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 286.148944][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.162854][ T1223] usb 3-1: Product: syz [ 286.167111][ T1223] usb 3-1: Manufacturer: syz [ 286.172692][ T1223] usb 3-1: SerialNumber: syz [ 286.186712][ T1223] usb 3-1: config 0 descriptor?? [ 286.209703][ T1223] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 286.221806][ T1223] em28xx 3-1:0.89: Video interface 89 found: isoc [ 286.368888][ T5690] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 286.421628][ T4943] Bluetooth: hci4: command 0x0406 tx timeout [ 286.475216][ T8223] usb usb7: usbfs: process 8223 (syz.1.775) did not claim interface 0 before use [ 286.519841][ T5690] usb 1-1: Using ep0 maxpacket: 8 [ 286.537928][ T5690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.578641][ T5690] usb 1-1: config 240 has an invalid interface number: 167 but max is 0 [ 286.589296][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 286.614494][ T5690] usb 1-1: config 240 has no interface number 0 [ 286.652441][ T5690] usb 1-1: config 240 interface 167 altsetting 255 bulk endpoint 0x6 has invalid maxpacket 1024 [ 286.704811][ T5690] usb 1-1: config 240 interface 167 has no altsetting 0 [ 286.715768][ T8227] FAULT_INJECTION: forcing a failure. [ 286.715768][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 286.734591][ T5690] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=40.c1 [ 286.758565][ T8227] CPU: 1 UID: 0 PID: 8227 Comm: syz.3.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.758601][ T8227] Tainted: [L]=SOFTLOCKUP [ 286.758610][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.758623][ T8227] Call Trace: [ 286.758632][ T8227] [ 286.758642][ T8227] dump_stack_lvl+0xe8/0x150 [ 286.758676][ T8227] should_fail_ex+0x412/0x560 [ 286.758718][ T8227] should_failslab+0xa8/0x100 [ 286.758750][ T8227] ? skb_clone+0x212/0x3a0 [ 286.758779][ T8227] kmem_cache_alloc_noprof+0x87/0x650 [ 286.758817][ T8227] skb_clone+0x212/0x3a0 [ 286.758850][ T8227] __netlink_deliver_tap+0x404/0x850 [ 286.758879][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.758891][ T8227] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.758922][ T8227] netlink_deliver_tap+0x19c/0x1b0 [ 286.759032][ T8227] __netlink_sendskb+0x47/0x90 [ 286.759132][ T8227] netlink_dump+0xa0f/0xe10 [ 286.759247][ T8227] ? __pfx_netlink_dump+0x10/0x10 [ 286.759366][ T8227] ? netlink_lookup+0x30/0x200 [ 286.759437][ T8227] ? netlink_lookup+0x30/0x200 [ 286.759504][ T8227] ? netlink_lookup+0x30/0x200 [ 286.759591][ T8227] __netlink_dump_start+0x5cb/0x7e0 [ 286.759684][ T8227] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 286.759759][ T8227] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 286.759834][ T8227] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 286.759909][ T8227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.759980][ T8227] ? ref_tracker_free+0x693/0x840 [ 286.760045][ T8227] ? __pfx_rtnl_dumpit+0x10/0x10 [ 286.760111][ T8227] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 286.760185][ T8227] ? __asan_memcpy+0x40/0x70 [ 286.760207][ T8227] ? __skb_clone+0x63/0x7a0 [ 286.760301][ T8227] netlink_rcv_skb+0x232/0x4b0 [ 286.760374][ T8227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.760453][ T8227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.760584][ T8227] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.760655][ T8227] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.760756][ T8227] netlink_unicast+0x75c/0x8e0 [ 286.760851][ T8227] netlink_sendmsg+0x813/0xb40 [ 286.760954][ T8227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.761040][ T8227] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.761116][ T8227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.761192][ T8227] ____sys_sendmsg+0x972/0x9f0 [ 286.761296][ T8227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.761385][ T8227] ? kstrtoull+0x12f/0x1d0 [ 286.761461][ T8227] ___sys_sendmsg+0x2a5/0x360 [ 286.761533][ T8227] ? __lock_acquire+0x6b5/0x2cf0 [ 286.761605][ T8227] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.761695][ T8227] ? get_pid_task+0x20/0x1f0 [ 286.761761][ T8227] ? get_pid_task+0x20/0x1f0 [ 286.761838][ T8227] ? get_pid_task+0x20/0x1f0 [ 286.762002][ T8227] ? __fget_files+0x2a/0x420 [ 286.762065][ T8227] ? __fget_files+0x3a0/0x420 [ 286.762157][ T8227] __sys_sendmsg+0x183/0x260 [ 286.762234][ T8227] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.762370][ T8227] __do_fast_syscall_32+0x229/0x6e0 [ 286.762452][ T8227] ? do_fast_syscall_32+0x33/0x70 [ 286.762526][ T8227] ? lockdep_hardirqs_on+0x7a/0x110 [ 286.762598][ T8227] ? asm_int80_emulation+0x1a/0x20 [ 286.762650][ T8227] ? do_int80_emulation+0x286/0x530 [ 286.762742][ T8227] ? trace_irq_disable+0x3b/0x140 [ 286.762826][ T8227] do_fast_syscall_32+0x33/0x70 [ 286.762906][ T8227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.762972][ T8227] RIP: 0023:0xf7f1301c [ 286.763025][ T8227] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 286.763068][ T8227] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 286.763130][ T8227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 286.763169][ T8227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.763189][ T8227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.763233][ T8227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.763281][ T8227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.763369][ T8227] [ 286.765313][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 286.780383][ T5690] usb 1-1: Product: syz [ 287.186248][ T5690] usb 1-1: Manufacturer: syz [ 287.191149][ T1223] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 287.199563][ T5690] usb 1-1: SerialNumber: syz [ 287.259972][ T5720] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 287.259972][ T8221] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 287.294981][ T1223] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 287.328587][ T1223] em28xx 3-1:0.89: board has no eeprom [ 287.408924][ T1223] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 287.435258][ T1223] em28xx 3-1:0.89: analog set to isoc mode. [ 287.442288][ T5721] em28xx 3-1:0.89: Registering V4L2 extension [ 287.452646][ T5720] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 287.470864][ T1223] usb 3-1: USB disconnect, device number 71 [ 287.478092][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.512796][ T5720] usb 5-1: Product: syz [ 287.525852][ T5720] usb 5-1: Manufacturer: syz [ 287.548211][ T5720] usb 5-1: SerialNumber: syz [ 287.577583][ T1223] em28xx 3-1:0.89: Disconnecting em28xx [ 287.591810][ T5720] usb 5-1: config 0 descriptor?? [ 287.675518][ T5721] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 287.682868][ T5721] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 287.702417][ T5721] em28xx 3-1:0.89: No AC97 audio processor [ 287.717645][ T5721] usb 3-1: Decoder not found [ 287.726188][ T5721] em28xx 3-1:0.89: failed to create media graph [ 287.738284][ T5721] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 287.753496][ T5721] em28xx 3-1:0.89: Registering snapshot button... [ 287.768180][ T5721] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input27 [ 287.779928][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 287.805895][ T5721] em28xx 3-1:0.89: Remote control support is not available for this card. [ 287.819127][ T1223] em28xx 3-1:0.89: Closing input extension [ 287.826256][ T1223] em28xx 3-1:0.89: Deregistering snapshot button [ 287.842821][ T5690] kvaser_usb 1-1:240.167: error -ENODEV: Cannot get usb endpoint(s) [ 287.882423][ T5690] usb 1-1: USB disconnect, device number 73 [ 287.924154][ T1223] em28xx 3-1:0.89: Freeing device [ 287.940093][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 287.966565][ T9] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 287.997032][ T9] usb 2-1: config 0 has no interface number 0 [ 288.013677][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 288.042724][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.075237][ T9] usb 2-1: config 0 descriptor?? [ 288.202224][ T9] viperboard 2-1:0.143: version 0.00 found at bus 002 address 067 [ 288.241576][ T1223] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 288.256094][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 288.282130][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 288.335880][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.350025][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.378912][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.393619][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.408273][ T5710] usb 2-1: USB disconnect, device number 67 [ 288.431656][ T1223] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.442802][ T1223] usb 3-1: config 0 has no interface number 0 [ 288.455991][ T1223] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 288.471167][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.483427][ T1223] usb 3-1: Product: syz [ 288.489172][ T1223] usb 3-1: Manufacturer: syz [ 288.495259][ T1223] usb 3-1: SerialNumber: syz [ 288.500844][ T5720] usb 5-1: Firmware version (0.0) predates our first public release. [ 288.500873][ T5720] usb 5-1: Please update to version 0.2 or newer [ 288.573241][ T1223] usb 3-1: config 0 descriptor?? [ 288.589137][ T1223] usb 3-1: selecting invalid altsetting 1 [ 288.596624][ T1223] dvb_ttusb_budget: ttusb_init_controller: error [ 288.607939][ T1223] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 288.619289][ T5728] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 288.658927][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 288.674044][ T5720] usb 5-1: USB disconnect, device number 62 [ 288.747971][ T1223] DVB: Unable to find symbol stv0299_attach() [ 288.759613][ T5728] usb 4-1: device descriptor read/64, error -71 [ 288.821271][ T1223] DVB: Unable to find symbol tda8083_attach() [ 288.832094][ T1223] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 288.886318][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.785'. [ 289.010304][ T5728] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 289.073436][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.786'. [ 289.171408][ T5728] usb 4-1: device descriptor read/64, error -71 [ 289.230038][ T8261] FAULT_INJECTION: forcing a failure. [ 289.230038][ T8261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.243756][ T8261] CPU: 1 UID: 0 PID: 8261 Comm: syz.1.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.243790][ T8261] Tainted: [L]=SOFTLOCKUP [ 289.243798][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.243812][ T8261] Call Trace: [ 289.243823][ T8261] [ 289.243834][ T8261] dump_stack_lvl+0xe8/0x150 [ 289.243866][ T8261] should_fail_ex+0x412/0x560 [ 289.243891][ T8261] _copy_from_user+0x2d/0xb0 [ 289.243915][ T8261] kstrtouint_from_user+0xd6/0x180 [ 289.243936][ T8261] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 289.243967][ T8261] proc_fail_nth_write+0x8e/0x210 [ 289.243990][ T8261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.244013][ T8261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.244034][ T8261] vfs_write+0x29a/0xb90 [ 289.244062][ T8261] ? __pfx_vfs_write+0x10/0x10 [ 289.244084][ T8261] ? __fget_files+0x2a/0x420 [ 289.244122][ T8261] ? __fget_files+0x3a0/0x420 [ 289.244147][ T8261] ? __fget_files+0x2a/0x420 [ 289.244180][ T8261] ksys_write+0x150/0x270 [ 289.244212][ T8261] ? __pfx_ksys_write+0x10/0x10 [ 289.244246][ T8261] ? asm_int80_emulation+0x1a/0x20 [ 289.244272][ T8261] do_int80_emulation+0x181/0x530 [ 289.244305][ T8261] ? trace_irq_disable+0x3b/0x140 [ 289.244336][ T8261] ? asm_int80_emulation+0x1a/0x20 [ 289.244357][ T8261] ? clear_bhb_loop+0x40/0x90 [ 289.244379][ T8261] ? clear_bhb_loop+0x40/0x90 [ 289.244406][ T8261] asm_int80_emulation+0x1a/0x20 [ 289.244428][ T8261] RIP: 0023:0xf71b61ab [ 289.244448][ T8261] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 289.244466][ T8261] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 289.244499][ T8261] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 289.244514][ T8261] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.244527][ T8261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.244540][ T8261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.244554][ T8261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.244587][ T8261] [ 289.477896][ T5728] usb usb4-port1: attempt power cycle [ 289.561037][ T5720] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 289.591686][ T9] usb 3-1: USB disconnect, device number 72 [ 289.729135][ T5720] usb 5-1: Using ep0 maxpacket: 16 [ 289.738593][ T5720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.755234][ T5720] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 289.768392][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.781119][ T5720] usb 5-1: Product: syz [ 289.786571][ T5720] usb 5-1: Manufacturer: syz [ 289.813428][ T5720] usb 5-1: SerialNumber: syz [ 289.830686][ T5728] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 289.860981][ T5728] usb 4-1: device descriptor read/8, error -71 [ 289.876838][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.790'. [ 289.930350][ T30] audit: type=1326 audit(1778695287.869:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.001028][ T30] audit: type=1326 audit(1778695287.869:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.070433][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.111987][ T30] audit: type=1326 audit(1778695287.899:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.129772][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.147732][ T5728] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 290.204363][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.219850][ T5728] usb 4-1: device descriptor read/8, error -71 [ 290.240309][ T30] audit: type=1326 audit(1778695287.899:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.240714][ T8269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.273164][ T8269] IPv6: NLM_F_CREATE should be set when creating new route [ 290.289071][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.305022][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.322219][ T8272] 8021q: VLANs not supported on ip_vti0 [ 290.339668][ T5728] usb usb4-port1: unable to enumerate USB device [ 290.351769][ T30] audit: type=1326 audit(1778695287.899:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.380570][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.428645][ T5720] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 290.450616][ T30] audit: type=1326 audit(1778695287.899:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.485942][ T5720] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 290.536918][ T30] audit: type=1326 audit(1778695287.899:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.612074][ T30] audit: type=1326 audit(1778695287.899:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.642772][ T30] audit: type=1326 audit(1778695287.899:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=237 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.677960][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 290.718970][ T30] audit: type=1326 audit(1778695287.899:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8266 comm="syz.1.791" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb301c code=0x7ffc0000 [ 290.796334][ T8277] netlink: 'syz.0.794': attribute type 7 has an invalid length. [ 290.844280][ T8277] netlink: 'syz.0.794': attribute type 8 has an invalid length. [ 290.860267][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 290.869470][ T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 290.881076][ T9] usb 2-1: config 0 has no interface number 0 [ 290.894889][ T9] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 290.932171][ T9] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 290.952291][ T5720] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 290.977956][ T9] usb 2-1: config 0 interface 89 has no altsetting 0 [ 290.990917][ T5720] usb 5-1: USB disconnect, device number 63 [ 291.011874][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 291.042897][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.075982][ T9] usb 2-1: Product: syz [ 291.098115][ T9] usb 2-1: Manufacturer: syz [ 291.114397][ T9] usb 2-1: SerialNumber: syz [ 291.126286][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.143467][ T3337] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.173340][ T9] usb 2-1: config 0 descriptor?? [ 291.213011][ T9] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 291.231244][ T9] em28xx 2-1:0.89: Video interface 89 found: isoc [ 291.348513][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'. [ 291.442970][ T5720] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 291.496424][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 291.508144][ T8288] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.797'. [ 291.522635][ T9] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 291.540518][ T8288] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.797'. [ 291.609986][ T9] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 291.614856][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 291.642523][ T9] em28xx 2-1:0.89: board has no eeprom [ 291.653982][ T5720] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 291.679336][ T5720] usb 5-1: config 0 has no interface number 0 [ 291.698030][ T5720] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 291.719211][ T9] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 291.733380][ T5720] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 291.750599][ T9] em28xx 2-1:0.89: analog set to isoc mode. [ 291.760691][ T5720] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 291.771522][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.774885][ T1223] em28xx 2-1:0.89: Registering V4L2 extension [ 291.781141][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 291.793091][ T5720] usb 5-1: Product: syz [ 291.797348][ T5720] usb 5-1: Manufacturer: syz [ 291.804657][ T5720] usb 5-1: SerialNumber: syz [ 291.826511][ T5720] usb 5-1: config 0 descriptor?? [ 291.833795][ T9] usb 2-1: USB disconnect, device number 68 [ 291.851296][ T9] em28xx 2-1:0.89: Disconnecting em28xx [ 291.927649][ T1223] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 291.942160][ T1223] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 291.954642][ T1223] em28xx 2-1:0.89: No AC97 audio processor [ 291.961849][ T1223] usb 2-1: Decoder not found [ 291.961872][ T1223] em28xx 2-1:0.89: failed to create media graph [ 291.961897][ T1223] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 291.966139][ T1223] em28xx 2-1:0.89: Registering snapshot button... [ 291.986504][ T1223] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input28 [ 292.046789][ T1223] em28xx 2-1:0.89: Remote control support is not available for this card. [ 292.050058][ T9] em28xx 2-1:0.89: Closing input extension [ 292.050091][ T9] em28xx 2-1:0.89: Deregistering snapshot button [ 292.085840][ T9] em28xx 2-1:0.89: Freeing device [ 292.125929][ T5720] radio-si470x 5-1:0.35: this is not a si470x device. [ 292.185113][ T5720] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 292.282687][ T5720] usb 5-1: USB disconnect, device number 64 [ 292.990503][ T8318] FAULT_INJECTION: forcing a failure. [ 292.990503][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 293.036062][ T8318] CPU: 1 UID: 0 PID: 8318 Comm: syz.4.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.036094][ T8318] Tainted: [L]=SOFTLOCKUP [ 293.036102][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.036115][ T8318] Call Trace: [ 293.036123][ T8318] [ 293.036133][ T8318] dump_stack_lvl+0xe8/0x150 [ 293.036156][ T8318] should_fail_ex+0x412/0x560 [ 293.036181][ T8318] should_failslab+0xa8/0x100 [ 293.036205][ T8318] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 293.036228][ T8318] ? __alloc_skb+0x1d0/0x7d0 [ 293.036245][ T8318] ? __local_bh_enable_ip+0xd0/0x130 [ 293.036265][ T8318] __alloc_skb+0x1d0/0x7d0 [ 293.036284][ T8318] ? br_dev_siocdevprivate+0xddb/0x1630 [ 293.036303][ T8318] br_info_notify+0x105/0x280 [ 293.036325][ T8318] br_dev_siocdevprivate+0xe10/0x1630 [ 293.036345][ T8318] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 293.036378][ T8318] ? dev_ioctl+0x83c/0x1150 [ 293.036397][ T8318] ? full_name_hash+0x92/0xe0 [ 293.036421][ T8318] dev_ifsioc+0xb6b/0x1330 [ 293.036442][ T8318] ? dev_load+0x21/0x1f0 [ 293.036461][ T8318] dev_ioctl+0x84c/0x1150 [ 293.036485][ T8318] sock_ioctl+0x75f/0x7f0 [ 293.036502][ T8318] ? __pfx_sock_ioctl+0x10/0x10 [ 293.036528][ T8318] compat_sock_ioctl+0x288/0xcb0 [ 293.036547][ T8318] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 293.036564][ T8318] ? __fget_files+0x3a0/0x420 [ 293.036582][ T8318] ? __fget_files+0x2a/0x420 [ 293.036602][ T8318] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 293.036628][ T8318] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 293.036654][ T8318] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 293.036681][ T8318] ? __fget_files+0x3a0/0x420 [ 293.036704][ T8318] ? fput+0xa0/0xd0 [ 293.036721][ T8318] ? ksys_write+0x242/0x270 [ 293.036751][ T8318] __do_fast_syscall_32+0x229/0x6e0 [ 293.036775][ T8318] ? do_fast_syscall_32+0x33/0x70 [ 293.036802][ T8318] ? lockdep_hardirqs_on+0x7a/0x110 [ 293.036823][ T8318] ? asm_int80_emulation+0x1a/0x20 [ 293.036838][ T8318] ? do_int80_emulation+0x286/0x530 [ 293.036859][ T8318] ? trace_irq_disable+0x3b/0x140 [ 293.036885][ T8318] do_fast_syscall_32+0x33/0x70 [ 293.036908][ T8318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.036926][ T8318] RIP: 0023:0xf7fa301c [ 293.036940][ T8318] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 293.036953][ T8318] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 293.036969][ T8318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 293.036980][ T8318] RDX: 0000000080001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.036989][ T8318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.036998][ T8318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.037007][ T8318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.037029][ T8318] [ 293.259287][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 293.623272][ T8323] FAULT_INJECTION: forcing a failure. [ 293.623272][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 293.641622][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.809'. [ 293.668970][ T8323] CPU: 1 UID: 0 PID: 8323 Comm: syz.3.807 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.669003][ T8323] Tainted: [L]=SOFTLOCKUP [ 293.669012][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.669025][ T8323] Call Trace: [ 293.669033][ T8323] [ 293.669043][ T8323] dump_stack_lvl+0xe8/0x150 [ 293.669073][ T8323] should_fail_ex+0x412/0x560 [ 293.669106][ T8323] should_failslab+0xa8/0x100 [ 293.669151][ T8323] __kmalloc_noprof+0xe8/0x760 [ 293.669180][ T8323] ? trace_kmalloc+0x2a/0xf0 [ 293.669205][ T8323] ? tomoyo_encode+0x28b/0x550 [ 293.669239][ T8323] tomoyo_encode+0x28b/0x550 [ 293.669273][ T8323] tomoyo_realpath_from_path+0x58d/0x5d0 [ 293.669305][ T8323] ? tomoyo_domain+0xd7/0x130 [ 293.669341][ T8323] ? tomoyo_path_number_perm+0x219/0x630 [ 293.669366][ T8323] tomoyo_path_number_perm+0x246/0x630 [ 293.669394][ T8323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.669419][ T8323] ? __lock_acquire+0x6b5/0x2cf0 [ 293.669482][ T8323] ? __fget_files+0x2a/0x420 [ 293.669512][ T8323] ? __fget_files+0x3a0/0x420 [ 293.669536][ T8323] ? __fget_files+0x2a/0x420 [ 293.669566][ T8323] security_file_ioctl_compat+0xc3/0x2a0 [ 293.669592][ T8323] __ia32_compat_sys_ioctl+0x139/0x950 [ 293.669627][ T8323] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 293.669663][ T8323] ? __fget_files+0x3a0/0x420 [ 293.669696][ T8323] ? fput+0xa0/0xd0 [ 293.669720][ T8323] ? ksys_write+0x242/0x270 [ 293.669762][ T8323] __do_fast_syscall_32+0x229/0x6e0 [ 293.669795][ T8323] ? do_fast_syscall_32+0x33/0x70 [ 293.669824][ T8323] ? lockdep_hardirqs_on+0x7a/0x110 [ 293.669853][ T8323] ? asm_int80_emulation+0x1a/0x20 [ 293.669873][ T8323] ? do_int80_emulation+0x286/0x530 [ 293.669903][ T8323] ? trace_irq_disable+0x3b/0x140 [ 293.669938][ T8323] do_fast_syscall_32+0x33/0x70 [ 293.669970][ T8323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.669995][ T8323] RIP: 0023:0xf7f1301c [ 293.670015][ T8323] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 293.670033][ T8323] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 293.670056][ T8323] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0285700 [ 293.670071][ T8323] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.670085][ T8323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.670098][ T8323] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.670118][ T8323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.670150][ T8323] [ 293.670171][ T8323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.769399][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 293.953475][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 294.083234][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 294.094953][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 294.106668][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.115906][ T9] usb 2-1: Product: syz [ 294.120991][ T9] usb 2-1: Manufacturer: syz [ 294.125751][ T9] usb 2-1: SerialNumber: syz [ 294.144877][ T9] usb 2-1: config 0 descriptor?? [ 294.154743][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 294.167647][ T9] usb 2-1: Detected FT232R [ 294.232832][ T8330] kvm: user requested TSC rate below hardware speed [ 294.361898][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 294.439244][ T5720] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 294.601009][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 294.619912][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 294.633413][ T5720] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 294.663879][ T5720] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 294.683606][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 294.703659][ T5720] usb 3-1: Product: syz [ 294.722911][ T5720] usb 3-1: Manufacturer: syz [ 294.730911][ T5720] usb 3-1: SerialNumber: syz [ 294.760101][ T5720] usb 3-1: config 0 descriptor?? [ 294.778684][ T8332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.799285][ T5720] hub 3-1:0.0: bad descriptor, ignoring hub [ 294.828858][ T5720] hub 3-1:0.0: probe with driver hub failed with error -5 [ 294.950797][ T8342] netlink: 'syz.4.816': attribute type 4 has an invalid length. [ 294.979296][ T8342] trusted_key: encrypted_key: insufficient parameters specified [ 295.047742][ T8342] binder: 8340:8342 ioctl c018620c 80000240 returned -1 [ 295.079702][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 295.238930][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 295.246419][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 295.255388][ T9] usb 1-1: config 0 has no interface number 0 [ 295.262474][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 295.273941][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 295.288606][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 295.298239][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.306434][ T9] usb 1-1: Product: syz [ 295.311166][ T9] usb 1-1: Manufacturer: syz [ 295.317317][ T9] usb 1-1: SerialNumber: syz [ 295.325159][ T9] usb 1-1: config 0 descriptor?? [ 295.388893][ T5729] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 295.542652][ T9] radio-si470x 1-1:0.35: this is not a si470x device. [ 295.550703][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 295.560261][ T5729] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 295.568929][ T5729] usb 4-1: config 179 has no interface number 0 [ 295.575285][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 295.587401][ T9] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 295.599008][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 295.612078][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 295.628475][ T9] usb 1-1: USB disconnect, device number 74 [ 295.641240][ T5729] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 295.660570][ T5729] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 295.676034][ T5729] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 295.687305][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.706936][ T8349] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 295.799819][ T8346] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 295.813094][ T8346] usb 3-1: device reset changed ep0 maxpacket size! [ 295.845868][ T5720] usb 3-1: USB disconnect, device number 73 [ 295.939643][ T5710] usb 4-1: USB disconnect, device number 68 [ 295.939829][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 295.953969][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 295.962993][ C0] ================================================================== [ 295.971098][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 295.979547][ C0] Read of size 4 at addr ffff888022fb905c by task ksoftirqd/0/15 [ 295.987668][ C0] [ 295.990045][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.990081][ C0] Tainted: [L]=SOFTLOCKUP [ 295.990091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.990104][ C0] Call Trace: [ 295.990112][ C0] [ 295.990121][ C0] dump_stack_lvl+0xe8/0x150 [ 295.990149][ C0] print_address_description+0x55/0x1e0 [ 295.990171][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 295.990200][ C0] print_report+0x58/0x70 [ 295.990218][ C0] kasan_report+0x117/0x150 [ 295.990249][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 295.990282][ C0] do_raw_spin_lock+0x28b/0x2f0 [ 295.990309][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 295.990340][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.990373][ C0] _raw_spin_lock_irqsave+0x4c/0x60 [ 295.990399][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 295.990433][ C0] __usb_hcd_giveback_urb+0x3b0/0x540 [ 295.990466][ C0] dummy_timer+0xbc0/0x4650 [ 295.990495][ C0] ? pwq_dec_nr_in_flight+0xbc1/0xf60 [ 295.990519][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 295.990548][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 295.990581][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 295.990608][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 295.990635][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 295.990661][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.990689][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 295.990716][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 295.990753][ C0] hrtimer_run_softirq+0x17a/0x240 [ 295.990783][ C0] handle_softirqs+0x22a/0x840 [ 295.990806][ C0] ? schedule+0x90/0x360 [ 295.990831][ C0] ? run_ksoftirqd+0x36/0x60 [ 295.990858][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 295.990882][ C0] run_ksoftirqd+0x36/0x60 [ 295.990905][ C0] smpboot_thread_fn+0x541/0xa50 [ 295.990928][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 295.990956][ C0] kthread+0x388/0x470 [ 295.990992][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 295.991014][ C0] ? __pfx_kthread+0x10/0x10 [ 295.991039][ C0] ret_from_fork+0x514/0xb70 [ 295.991062][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 295.991084][ C0] ? __switch_to+0xc79/0x1410 [ 295.991114][ C0] ? __pfx_kthread+0x10/0x10 [ 295.991142][ C0] ret_from_fork_asm+0x1a/0x30 [ 295.991175][ C0] [ 295.991183][ C0] [ 296.249892][ C0] Allocated by task 5729: [ 296.254779][ C0] kasan_save_track+0x3e/0x80 [ 296.259700][ C0] __kasan_kmalloc+0x93/0xb0 [ 296.265448][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 296.271729][ C0] xpad_probe+0x428/0x1fc0 [ 296.276321][ C0] usb_probe_interface+0x659/0xc70 [ 296.282522][ C0] really_probe+0x267/0xaf0 [ 296.289418][ C0] __driver_probe_device+0x1ef/0x380 [ 296.298185][ C0] driver_probe_device+0x4f/0x240 [ 296.307176][ C0] __device_attach_driver+0x279/0x430 [ 296.313380][ C0] bus_for_each_drv+0x258/0x2f0 [ 296.321455][ C0] __device_attach+0x2c5/0x450 [ 296.327524][ C0] device_initial_probe+0xa1/0xd0 [ 296.333373][ C0] bus_probe_device+0x12a/0x220 [ 296.339698][ C0] device_add+0x7e9/0xbb0 [ 296.344943][ C0] usb_set_configuration+0x1a87/0x2110 [ 296.353919][ C0] usb_generic_driver_probe+0x8d/0x150 [ 296.361253][ C0] usb_probe_device+0x1c4/0x3b0 [ 296.366412][ C0] really_probe+0x267/0xaf0 [ 296.371564][ C0] __driver_probe_device+0x1ef/0x380 [ 296.377853][ C0] driver_probe_device+0x4f/0x240 [ 296.384841][ C0] __device_attach_driver+0x279/0x430 [ 296.391994][ C0] bus_for_each_drv+0x258/0x2f0 [ 296.398473][ C0] __device_attach+0x2c5/0x450 [ 296.405051][ C0] device_initial_probe+0xa1/0xd0 [ 296.411190][ C0] bus_probe_device+0x12a/0x220 [ 296.419308][ C0] device_add+0x7e9/0xbb0 [ 296.425025][ C0] usb_new_device+0xa08/0x16f0 [ 296.434088][ C0] hub_event+0x2a1c/0x4f30 [ 296.442444][ C0] process_scheduled_works+0xb5d/0x1860 [ 296.451003][ C0] worker_thread+0xa53/0xfc0 [ 296.457139][ C0] kthread+0x388/0x470 [ 296.462645][ C0] ret_from_fork+0x514/0xb70 [ 296.467965][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.472774][ C0] [ 296.475336][ C0] Freed by task 5710: [ 296.480321][ C0] kasan_save_track+0x3e/0x80 [ 296.485744][ C0] kasan_save_free_info+0x46/0x50 [ 296.491086][ C0] __kasan_slab_free+0x5c/0x80 [ 296.496326][ C0] kfree+0x1c5/0x640 [ 296.500356][ C0] xpad_disconnect+0x350/0x480 [ 296.506936][ C0] usb_unbind_interface+0x26e/0x910 [ 296.513470][ C0] device_release_driver_internal+0x4d9/0x870 [ 296.520102][ C0] bus_remove_device+0x455/0x570 [ 296.525269][ C0] device_del+0x527/0x8f0 [ 296.529730][ C0] usb_disable_device+0x3d4/0x8d0 [ 296.534772][ C0] usb_disconnect+0x32f/0x990 [ 296.539468][ C0] hub_event+0x1cc9/0x4f30 [ 296.543906][ C0] process_scheduled_works+0xb5d/0x1860 [ 296.549472][ C0] worker_thread+0xa53/0xfc0 [ 296.554112][ C0] kthread+0x388/0x470 [ 296.558593][ C0] ret_from_fork+0x514/0xb70 [ 296.564321][ C0] ret_from_fork_asm+0x1a/0x30 [ 296.570188][ C0] [ 296.573087][ C0] The buggy address belongs to the object at ffff888022fb9000 [ 296.573087][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 296.588410][ C0] The buggy address is located 92 bytes inside of [ 296.588410][ C0] freed 1024-byte region [ffff888022fb9000, ffff888022fb9400) [ 296.603752][ C0] [ 296.606109][ C0] The buggy address belongs to the physical page: [ 296.612556][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22fb8 [ 296.621580][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.632113][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 296.641389][ C0] page_type: f5(slab) [ 296.645489][ C0] raw: 00fff00000000040 ffff88813fe1adc0 dead000000000100 dead000000000122 [ 296.654201][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 296.662931][ C0] head: 00fff00000000040 ffff88813fe1adc0 dead000000000100 dead000000000122 [ 296.671619][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 296.680312][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 296.688999][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 296.697682][ C0] page dumped because: kasan: bad access detected [ 296.704125][ C0] page_owner tracks the page as allocated [ 296.709947][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5330, tgid 5330 (dhcpcd), ts 55285042404, free_ts 55251942467 [ 296.730807][ C0] post_alloc_hook+0x231/0x280 [ 296.735606][ C0] get_page_from_freelist+0x24ba/0x2540 [ 296.741180][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 296.747013][ C0] allocate_slab+0x77/0x660 [ 296.751530][ C0] refill_objects+0x339/0x3d0 [ 296.756225][ C0] __pcs_replace_empty_main+0x321/0x720 [ 296.761788][ C0] __kmalloc_noprof+0x474/0x760 [ 296.766660][ C0] load_elf_phdrs+0x13e/0x240 [ 296.771352][ C0] load_elf_binary+0xa0f/0x2980 [ 296.776223][ C0] bprm_execve+0x94a/0x1510 [ 296.780744][ C0] do_execveat_common+0x50d/0x690 [ 296.785798][ C0] __x64_sys_execve+0x97/0xc0 [ 296.790874][ C0] do_syscall_64+0x15f/0xf80 [ 296.795669][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.801766][ C0] page last free pid 5287 tgid 5287 stack trace: [ 296.808897][ C0] __free_frozen_pages+0xbc7/0xd30 [ 296.814659][ C0] __slab_free+0x274/0x2c0 [ 296.819224][ C0] qlist_free_all+0x99/0x100 [ 296.823849][ C0] kasan_quarantine_reduce+0x148/0x160 [ 296.829348][ C0] __kasan_slab_alloc+0x22/0x80 [ 296.834251][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 296.840184][ C0] __alloc_skb+0x1d0/0x7d0 [ 296.844634][ C0] alloc_skb_with_frags+0xc8/0x760 [ 296.849774][ C0] sock_alloc_send_pskb+0x878/0x990 [ 296.855006][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 296.860144][ C0] sock_write_iter+0x49b/0x4f0 [ 296.864924][ C0] vfs_write+0x61d/0xb90 [ 296.869810][ C0] ksys_write+0x150/0x270 [ 296.876195][ C0] do_syscall_64+0x15f/0xf80 [ 296.881862][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.889020][ C0] [ 296.891848][ C0] Memory state around the buggy address: [ 296.897974][ C0] ffff888022fb8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.906966][ C0] ffff888022fb8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.915057][ C0] >ffff888022fb9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.923132][ C0] ^ [ 296.930079][ C0] ffff888022fb9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.938182][ C0] ffff888022fb9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.946693][ C0] ================================================================== [ 296.954776][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 296.962010][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.972794][ C0] Tainted: [L]=SOFTLOCKUP [ 296.977136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.989506][ C0] Call Trace: [ 296.993082][ C0] [ 296.996652][ C0] vpanic+0x56c/0xa60 [ 297.000975][ C0] ? __pfx_vpanic+0x10/0x10 [ 297.008387][ C0] panic+0xc5/0xd0 [ 297.012935][ C0] ? __pfx_panic+0x10/0x10 [ 297.018034][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 297.025552][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 297.032548][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 297.039970][ C0] check_panic_on_warn+0x89/0xb0 [ 297.045859][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 297.051649][ C0] end_report+0x73/0x170 [ 297.056819][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 297.061880][ C0] kasan_report+0x128/0x150 [ 297.066416][ C0] ? do_raw_spin_lock+0x28b/0x2f0 [ 297.071466][ C0] do_raw_spin_lock+0x28b/0x2f0 [ 297.076344][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 297.081752][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 297.087155][ C0] _raw_spin_lock_irqsave+0x4c/0x60 [ 297.092387][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 297.097614][ C0] __usb_hcd_giveback_urb+0x3b0/0x540 [ 297.103017][ C0] dummy_timer+0xbc0/0x4650 [ 297.107554][ C0] ? pwq_dec_nr_in_flight+0xbc1/0xf60 [ 297.112948][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 297.117914][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 297.122964][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 297.127932][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 297.132897][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 297.137864][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.143722][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 297.148684][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 297.153936][ C0] hrtimer_run_softirq+0x17a/0x240 [ 297.159101][ C0] handle_softirqs+0x22a/0x840 [ 297.163897][ C0] ? schedule+0x90/0x360 [ 297.168167][ C0] ? run_ksoftirqd+0x36/0x60 [ 297.172779][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 297.177826][ C0] run_ksoftirqd+0x36/0x60 [ 297.182261][ C0] smpboot_thread_fn+0x541/0xa50 [ 297.187245][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 297.193258][ C0] kthread+0x388/0x470 [ 297.197368][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 297.203040][ C0] ? __pfx_kthread+0x10/0x10 [ 297.207689][ C0] ret_from_fork+0x514/0xb70 [ 297.212428][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 297.217770][ C0] ? __switch_to+0xc79/0x1410 [ 297.222736][ C0] ? __pfx_kthread+0x10/0x10 [ 297.227349][ C0] ret_from_fork_asm+0x1a/0x30 [ 297.232147][ C0] [ 297.236050][ C0] Kernel Offset: disabled [ 297.240383][ C0] Rebooting in 86400 seconds..