last executing test programs: 12.937677493s ago: executing program 4 (id=930): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0xe20, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000380)="6819", 0x2}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e26, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b446437747ef", 0x5f}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000000c0)}}], 0x3, 0x2000c044) 12.796271199s ago: executing program 4 (id=932): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000180001000000000000000000020000000000000900000000060015000500000018001680040001"], 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) 10.64336482s ago: executing program 4 (id=936): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x40400, 0x0) fchdir(r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3", 0xb}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x165015, r0, 0x0) r5 = fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000) ptrace$peeksig(0x4209, r6, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8.373823561s ago: executing program 4 (id=947): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r2, r1, 0x80000) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x253, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3a065a4d, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 7.411896348s ago: executing program 4 (id=952): r0 = socket(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000540)={0x0, 0x5, 0x4, {0x3, @win={{0xfa, 0x4, 0x5, 0xfff}, 0x9, 0x8, 0x0, 0x2, 0x0, 0xfc}}, 0xffeffffd}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0) 5.927764937s ago: executing program 4 (id=956): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000004040), 0x2a4c17d5bf775d3, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r2, 0x2283, &(0x7f0000000040)=0xd) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x8, 0x100}, 0x1c) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r4 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x2) sendto$packet(r5, &(0x7f0000000180)="280320000a0014000000fbf71914", 0xe, 0x840, 0x0, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000240)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000080), 0x0, r7}) 5.880582619s ago: executing program 0 (id=957): r0 = socket$kcm(0xa, 0x2, 0x0) unshare(0x8000280) unshare(0x2a020400) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000480)=0x3fd, 0x4) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000040)=0x10000000) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x46) 4.179250177s ago: executing program 0 (id=969): creat(&(0x7f0000000380)='./file0\x00', 0x206) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="a95ee66af223165fb85c7a063307d28ba66dd294927c55081f5012d8223e0c009905bba59fcad5c499ccbc3ecf96e9d6ab31713938d657bc1cdd65b0a8c5fbba04f0e4926fc32fede46dcf41865bc66b2b1b353824177c6ad6f47ead9c18951b761a2bf0f17b779c4ade8a3100cdb3f4925ce68a944881cad07ce81e6d4ffd31847a0453b3ce672102b33f5c46bab37c7fb678ba1908052334b225eea595ea982901991c169eb4e0fc23b2a45018e1544c308724adc81d1d22c012fe67aebc0d3157170f2a5eb586f9af8bd80fae3bc2e9bbd9b51a9c32fbc467e2b0a0a840b765938728ba3f6902046443434e9c8a539dbce61dd8fb0e6813208877ac1fc45e9fa75ea6c5e7dc23acf9bf14523cc47de600ab3807ae8162eda1c66cf41d61386817d1483e63591002fabca6c9c1b5201974ea2b404dd54d80e24beadcc9048059c4cb26225eb2ade9e189a1ff40fa7cbb917aab58dcda7cf32bf8ac69a4faaf3a67e06e8736f92700608e1bc38d092a18d914881fd0a17e65d465f0c3cbeb987ae1fda981203d792fe5708993cdf5648f94cf23024caa3fc99d7fe6a6a434d5dab60192987ec3f55bedb08c40078e2f5e1c9e0b033f48ee56d00336f997c17a2f976d57193ec8b3132e8ee249c3dcba95e737127c7e2cd8cd6eea30688d627637e82c27b26110c0c61631d0fe0eb8c600023e8e4f0fe495a8666baa4e3cf9de28e4d95d7b7edea0d8f1b19fcff477164bf6abb3d28485398e02dc4b003de2046aa16a808c077f59a35c0ee44d5e6958b57b60b5fe2980cb0f870395c904e735f7c726d48de3bc2b558bce111f913cbdc65e9a6fdd51f0cb6079a4e6048c61a4dba2fc6cce6e3b93d86e312bb43c30a01c0cfc72ebdc3e18781238b159d08ea32fd37fb352f5943b4a22133586ada296c9ec1a3580d9dd59569496194e8f87f95474263ee6313a8eac98de06426c0f5ff00fee25a915e899e9d99b4ca4d52204498a0c8f877adb92cce1010403ad8c53d6162202a09a099930fc4dfb3246f46134993aeae1e49f2e8b0ccb30ea1b09e12dafa24530b8844473ec04d666e8a7e1c89a1f552d04efe1b85a0bbcc33091460faf098625999c0061eaef184e8b02a96e6206d512870a7fe819dbebf93c00ccbf4357841dbe0343c0850cae8d8d15cfeb3da41bf5682c842f53ca5131545784f1dee5ffcf9b4ccf4cdd037a31e4efdb6524056057ba749cc4208df722c80948a486da031a50d129349fda2549157499b8ee553bd545ec411334b902720ef0a71819ffbf002742151d950df0fe8b2efb5a94133d943286c73adf359659480c438bcf1f7f1bc1ad2dbaa54548aa3d1b4ac7d17e755ca23de9f978f45edaaeff3ade5d122c6029f8406732d1c5cfef450635d3bfa323dd14397fa085e1c928ab84f604bd3c378b2368cb0bf371d41ff1e4982e413bc3f3aedf32237845def41805fe66a5239475f246b1bc91045384aac0dd7c0723c5ed4cb02ff0cd39db2b469790a57582543e5fd8edd24944795cb237b5ec6b09e62e7ec95af1560bbd455416d22accf42ad9fdd5eb9afe198e2a327f69ca3b617eae3c24c0fd7dd36fa9fb3bd111d8d7e5dcf3039fa06b8e3405cc73e90f07660b9aa9748643832784b36d2a1418a453645610fcc816c983065a44e86f3fed8ca3bd5397a1eba72c813a49f45af504f18e85fde740dfc63922baece7e5873beded5755869bebd1f984dade3856c34369529bbab5fc32294d2f68512f0d5d116521f56443637b67587372850ff34f093f7c00376bcd15b9d470502200f81d42a46e711ad001aa1135dee47ee2f38754ea50ac8c98b9cd6f1c1a00f862900af52d9e7007be27b3c095b2e0d880d6ff7fa8bece867dac7deb0080d08d7b31cb905666f36cebe4b8033460823ddfe658319bc26a72f1b55fc8bcf364271cb1f280f9f81abab630f656c1491f70412f735061fa1aaf9d0eb016cc5e7152699ed8e7ea5ff05cdb1c7b8c65ca35d18cb7409425240ede6afa92f211b59a825968b83499bc91db40509367fad75ede35c6553ebd28ef8c9f75a566d8107116af185f555cab0322c108ced7e8012c03916ebf8b563dbe818a2576111a0ff9749627acfe19ae3fdccdeab6349b5c1f106a490c1d128d640a81d8706b66e3a16ee0a4068d9e7102c7724a03ab121d7c93adcf179c5e661b9fd47546f2bc73f92e45b372fdb08d8e958610ad2c4acb1a3ad7bfa236565796b16ef1f9799084f7e60d5396a3a286d207051d325eb5282b54837fef08c7e28a5c38f7d72ad8535166d60e2893f58f704aa5152ea4a6b00b6a26825715156eea616c72c1fbaa46f3df4ebe3696164e47cade8edce9f1f7a509e30f135b3b29bfc849ad66bf05c17d6c8679234a7a53a3d8385c509eaf5709b1558434ad5f73b966c6db4eacf52509de480002b6bc6b65134d9cf378d5820bade7c0f0373b389e06c162745c0cedcea0eda0762697f0e73307cda99d95cd7d2388afcbff6370bf3ca5e3b3393bf5a00780a93699c0cfe0fbac6d809ceca12d95c8d5a9f71c236eea0851113ccecd0a6479350b0589b5bba13bbf4640779751328509f7db504c474392b83afb5bb31d4a4835d108584bbbd914e95851ec020a07d95d5dd51fa2bd3dd51bd706cf054a2b4ca0c2937639fc5a5ee3090d08bcd2335a5e6213e4a11c080373854bbfa7a96efa317884b38675a9891f3256ad8a1f74b64e3dde55e4d5c4775b7adc6ac284203aaf9f6ac12f95aaac02b09b2088ff5d53dfaabf0ce4c6958e97250c91147e266247042da5792e7097bc3210f514954b0dbb5163b1d71a0322fdb2c0d747d4754bc0a7da972b9579233ceed92741bf5b582e349b4aa5ce522d9abfba532f50d68b41e365bcf54b008c384bae1099d4d6ced5e7f4c1b05c7f7151d459ad5eb7dcad282b05a31f4530f2d628f93efad19bd239c06143483646c7b1d1614f700be8593108108a8f28152d48ecd6577bc387935552e396bc563db28454bf358d71eaabe0ebfb46226a3088d8c7ea244b99f8fa643d20fa92d9d0cfa4d6c58002eb18e6cc5c13a07237a218b09fcf16dae2812e9d68cedb4a37e49a8298c3dba5712cc84cf1df6427ecdbe2a9ba2f05951608a02ab7674c4c8bcea2832c89ee71efd66b7b72a04e7d2e6caabc3bccbd9d7ea5a8b95c1a9b8fdb9be258b8dd57e9f4e409445267b2f8a1f991ffe7a4b77c50b8845f1be30356f3de2789fcf49ba4ad46d47b78aeefee7e06ae7d386f115ce0a55bc0ee42d9765c12dcdbe540d41a781dd6d08ca45f27c4a91c65c9a9dbb90b9f9c9e60663e41260792663235e70d9bbe3c485f57522b7c3d13704f662fcc94949825316b814acccef8e18128ccf8834330caee12b376b802aa32214160622339c055d8071eb50c7281991495b72eaf132d0669c7d6b534149016e54d5cd2347121dea8ac60e7b5ca5a53acfb8233242ab6ffa6c01997244ccef3d485c6e5ac4b8a252210822265c1f6b9af893550c163a962bd2ea149a6e9b1ab913446c1a54934ce8f56426a8531df2f07fa73670b78d6213d10a0113864bb15af6568765dab324722a74c87bd18550bdb51663c9d8b6724c9dd1299019fe1d8241c7c9a0200257f3a8593b6830c9ed38ac983908242ec5fed94bc07e6f3cf0fecda556a6685d828343d7b7a2ae6a7ce25a1f0af2e565f4479f791d3bb4944803f5a76a768f3ec71e4aafd217da9d8d32aa2967fa320d67c8aed60cc4b5806439092c1a0cf511918beb0c30ff62a547f8bcea0183ed162ec5a7b2764e5ff49aa93539089ca814cee68ad100dfbfcc5617735be68bb8ea22aee333c88fde3124729047646bab77f08e33c7c70d4d6d023b3091337d0582c75206933ed52ed99bda3d4d5cf48bcc8e683b7c17a19768e8770123731d98c1691e22fc97a0c9ee27eff1ed455e839163ef0195ad8f6d3e653d88b0adaa325f8232787cf38629fc1103ae1e77d453db51f8c16299d68a3230e61138e6c716d7c981f8803c2222ec9d99f476701352bfb497a892398a3c84c87ec43c3494e70c92b8fe6351d73bbe68f73dd1d4168b3b67a277c4e85b2e2d34075dbfe23ed3d6f6520d4987b282c2710423cff7624fee0c5bf6364bcdf2734eb8465ad3abea522a5bc1dd787b812901e286788abb7db6fc25398bd4d6b78657bdf7a602b4706caac46bad88c4a0f6c15c8a60252fc53b3d496707e0857f5c5946ff5fcfa89eb816e1b96b335727f09f164136b367191ad047c3f1f3f5fd487ae535b0284e276c232ad5a6df68eaa8c74d5cde46ba3fb6abf3d42177e4466f18f7a8251f9809e39bcfe0ab07e24c4c7bbd99f70b7252d4a1a34a9aa34fa595871996f31a8e1eea0734e2e60d0871a4eb443a7d434b5a53c0bee62f388f4025ed1d413ae737a0b4d39591b9a5cfc5edefbed55ba21f480b7ecd2db6df235c9c6c2e0da1abacccfd8805839164f2493baf75df275012413bca9ebb38a1c88c600b1dac6cc82b9115ecd597b6b4ab0ae3720c6d9cf13bf96cd56e33898026e60e1b6bf1917b602171fe8bae56c7896aff9a5d65522c91f3478af5643dc563523e397b85f26a573d2d03ec2f63dc9615d3956273196cb4ca3033f1fdea6a95fc6fe95c0042caa07d37e0880a3a3053ea87f1a02e3e4cc062f642adfbd6769f2540c04a99335a0fa452559f27acb146257ae1b93f1c80cb000a71cf87b7a8555f4e77ac4ecd6411051a26b846796fd229417fc456e3e7a64a9d5232b0fa9794616a2bfc67ad9aec0cc361f3bb7dcff27d6815defa96896ad904a3d53b4f39030e3b2b786f82f5d46eda4de74a214d092f7d900a3c8575ff781ee659681d77ff348a21c0bec5ee66fa1abdc32ee75ad4a51a0a0f942c801aeb55ad9567d140e13fc3524648a231d8389c25d3c18550cbd54ef5493dc5a7f6ab8924765086a1e5b69ef6e80d5790f078e999883efbf04825c3326d3b7d54aa453988fa226b31cf19549bebbd46b54716e48c05df7655fbcefe426fd48b0e4867795d1a03df00e7da4245e95630f2cd3d1dbaae5b74ab2795f6ad5ababe632f4ae1abbc97182220a28eb1d108feb52f8326ec2b3abb0ed045fe64b8e302348d3bd561eaaa3a7f6d1aa426a5848f320f026db837d98063724d38a778cabe67caa2b8b7462523620661965fbdf41a2e835e64d484804321754f79e8b56f7af558a9007d8871fd60e2aeb697270d470394e97f43c93f6515e9941fce5c3e020148cabac9a3f257769afa92374b3a8b5420dfbeeb3f4f1d9106cf1f822791fab189d3a769438aa0b8ad58316d02eae97264e4238ea807c578fb215614d60f6d69d23c438854b0e0b47cb820e0deca03a8f5b0221f10b0e7164ca28b60f978ae82beb3fc52bf8f5f9d4bf9ea5a44014ffb3fba5604fb70db687bd7649fbb4b72d2e604b8031eec10d7fd55cf62234d1515905c4ecdcb2073ae480437e134fa65b37f5fc718ea1595510b302f5a750bada2b1b51c5d6c14da8e69f51c5454d3c15f94f5551ba41e402f98c31d8340bc24ce0c2d0857eee2e6699781434f9eca84e52e9dc0345c4c289880c3c7162772d39bfa62cfb8b401e1cf9a241e7afe1ae4fd5e224bb1f4c3c7098753b01c35f9c8fe1e0c3cbe7521b259e403006121e1c3f62d357394267e78209f31fa87e1aa87cf1054119ea364d7b9e82ae84b998860d8fa73da7cf6c58fb4bd754316c39bfdc453fcea16b73c1bc56996b22074fb4a1e944b6dc786e1f1d8460004c1b9abba76cb5ad9c02444d01b628aef339809a93696b8eedc658222b11f0ade5cad02ec734bdfae30421adc690dc0882cada0a1cf5ad9d538f0366232c7aca013ae8bafacda63dbdcf8507b911009829f2ef019e60a2b1236614b25c258ac4b05aa85d69e8cb2bff36728b967b58f70683e0f1f4408edc8c4fef715170c163324489d8fa4684579fb6f175af8ee8f387ff939b750c7dfd4ba62fe715eea3e5ac3ff7d5cf3ffcbea739b85374956b00b38d6f4519390d6b382d3a883c8bb7a62ce654c005744921a082479affd60092aaff76cafe07820c1aa10a0d5ba589eb21f48e09bf5c279c7a3ac6bdb7958cd439f54d5ad369f0eb68e090eb2a6cffbce0d5af05f7afe5336ad069482f8a765823c63a45d345a72b42d5ad50d8d73a3e7f22e717c1e2aca4786d43b0b1dd2651fa46c0a6cceaf8f57f2f132cf49112ea156f6a159978f8cf8e5e9d74caee5530d999c4d0e6e50d6c69b5c57edb78b0a63d6a06eeb499060300da73ca39199cd4bf6412d58bc9344b5cedf7800b6cd84f193a55314bfa047bb93f562955d1b4407781ebe40fef42f6e5401046866391dd9ad8b96dc6915d43d40df4d7ceb43f682afa7c0cce1f944d79e81eba4c01c64334bf50bb26db0992e9265ba022b49fec9f188ea213ee504d666544d0230b1272f5222db08aa5347e985abf2607fee7719a03a3dedea280e2bcc77737562cd18d979992dc3bb32dbcd3bbfbb5896b9d06cffef2ee68cb071e76d2b7ec5123a91fd73e6fb737d887c016782328ee5a85bff817a8f5a769205373e5c63ffb883158be34059deb0bb99960f3f0cf838efd35f265240cfede2ed447fd7ebaf92befa24c74546c3c9b93aa6ead03c7350327a3e0bd049a582028f3ca59fc9fdc2ac7819f8f92da0a48c4184f7d9abd10e7745a1af4457127f997580bbda67a56cf9bb67b5f3ce6b2b62dffc56b47c95886fcbbcf89da58ce694281a9e8bf50fd5878efc3d357e6f4994a9483ec74b536a5f8ccc714b045fcb5b896e1d998ac11e418d23028f088e99845ef0458dbf45f0bfe9a7188bda3bc07a27f25c741d414aae493b191d8721ddb60281c741bebccc12c841b07dfab15481f65e90d4337414112c9ec23bff763b1eca8a1bd6cb6c252b6531e4e096dbebae5a16120867ece7746a7b487216851ce059a8e3aa37dd4885c6b4e0b8ed807dcf62279f1de1b3b834add0ba26a1bbce31199a5b145ae456f84136887ba27b2e3c6d57f1cfedc9e7042a6c5c8d5c67c04c4a0610d09ae7c037cc1c75f355fc5033e434762aa8f4f23d28ac98409deea20c826b7a9317168ab0075503f3022ccbf2296b58bea2242082d3925d6788ef2d56c435b1db3f96a992d3854d5a9e2af29e5a7817b6c7f210ef511071c46fc3f013171d53703ed7ec6258f531c0d00782c8e2b30149e6157f0e898732bf683341a4a768c199f0f8953120e8d2e9ea791b228da103a2f67ec920560436bc306861fdb098c45ae66ebe12db1e27bc5d2e5b4fe530de58e90c2d5c4ab764cfe9312f2397dfb20468d7db6e9e0aa5765ff0bd2b1c1620671f9a9a516f405e0e8ca8c3498cadd75a76786d88a1adcfd91d2e7c302876b5c9d97d2ee8e5b51d73ff20039a3dd4ea244ec37242f3bbe6ebd7c2f9c583885274c0537ae5b3af6cdfd216a7e9c9f3638322e1d4c58c5f0ee9107bd19f50f2435642a9c584d4de9a4ac6cbe5f699144b9521f2669ab0df72a70d1af1ac9369c58bc8f23311bccc7e7b0b32b744135241c397d6796690f064c8e6df5d7593c2e7bb159bd1a7da0ee9002c0b7a52b549777def7e854acb8224d83c4ec769bf45e4c699c680243d6e2e4149341db46acc685f0650de45fcd75f4b0bfbb3eb5bce224f2c04a03b35edad303af6a2ba403abe9daed9bc170363333efbb9ab4725e453df55b3861499a7283c983db6cfacd367df13dbad52a31fce48bfd13ab9982d821ace9a998a2763d9bf4f484d46ca345d81360ea8841adaa5b45feace5db05fed42113647dcbe3c3dfd70f4b3537e77228a5218d9419a94685a504fe61a1169115536eb2682a63675a0a4debcfb29ac169e4a999206bb6d4a4cc5e508534e9ad4295f08f681071d5cdf0edd674ba2a43a60739929ff3e22cfd4675b669b78998cfac88a0392033930f2b788dbdfe11e560ec1a04be8fcde01fb3cf80d93ce1df819a21ff158dd18e9bdc759a59b9f7111245d336963a97ac8bc7c4bc2682c8273204117402f666e9bbf1f0c0edb08bf3e51270876f92067ae8d37bdbf857d4174a4a32de8459e4612ab723d5e52bfe77e44d7faf4b70d7c8102a5b3503460b0865e5ded0c0366d9dbfeb111deeb425c8878798cad64a84f2036dd9a883277a89d368d636ae34b7f9a8ee57f1e563d72645629ec94d5e763b29dfe2e2fcf699eee4224ec6a3881f892e4f3139962b7f8c397dda473c820761f82df111ee571df65e01b697287cbd8d1496cc98f462828cf22fcc14bfa4cedf934920892fac405290ab3ee7eedae9af2a1eb0f45309eec1cafec9d5f9fe10212417e89182cd22474a8b8972520b79728c8b712ee96a809b31a0c08bab2285fcff6d8b8f638f5550cea169055163017e5c3ff238fd5ba7e460b06ca7dd11fcb37829e6c71a29df07a53ecf8a041081977da88a21074dee4cf64132868a3d7c32e4efa49a71d98a4be181b681f22152bbdca36b377baf0c90f8cbf2c32f8dac624e7fa650d3aa974aba48d29b7d352557f5b2d8054c86d36363c00497a6e467ebe863890c6344a8151ca09a0012e8d0f904acba4edcc92d16e021dd24f0d58504152c62ddd21904a039222673e9b3c0a255ecb2c67d919cf50abeeb3ed8d52618d31242b274f96057ae05944ae0a367aeb6a29455c1171f69f7b138d20197216e552f1c11956a9a031539b032ff5d666b2b7203b8441d8e8c2bf325aadd08e01d3eebdcf663d318c3302130299b1cf852edec4300498ed3fc57073309f83490ffc5d2f65cf087f47790e950a6c810a50cdef1b6a4c62c0f40f3bf438d1ad1f0a04a4c28645de82c6fe6174147145ccc180e5989fd5368ea9c90b5b74cbb8acdde83a05f91b943d73f950940f4ba967767533e4093015f9e7c5c2bcf422e83af0d2b718dd15c219e1dad959f88f18b4592a20c396e3862bc8d629b50e670eab0e12460e1bd94e8d192fbbef19d5b5e7244ef274a5192f8e28b28d1ecfdbe6da5c4102f9535edf71a6f5de0f59a7290cecf062a0328154b1fa5ba4dcee2a856de908d9984914c5a05038b4678dc5b202150be8768b33d15f7d380f080ecb406be5e991d83f10f6113ec8ee18a4d269a96f4b30b84d059e6600af3fd36f0cd6afc8b9c0d7673ac8ae164a796ee21e4e1e4ba1d75c64a65de49bf755abe4aa4d832ca23c7833972e8735acb7d31969993437d2cbb7b12cfde845e0fa7a3ec6a9959cb859ae8ec8da9b9b93dfaba08b0bc092a1e75d95ded612837ef01b11d05b649ef903a065bbde06643bb2bb6d352b01b2db6b693941e4a6d955fe01c29c56dbd298146a6ab48c2ad9d0e191c4307c3a68c858f975d6da078c95eee82212b07c1c0c496771dfc29429cd3fb6d6932e3c49b77e834e1bcc15a7e2f62779c7eda7cb7339037676dbd603b46554de1ca7950e33d48e7615a7971e525696b69b1e024377d20653bcd41b530f6a764699f75a9134b4be30082ab571eab792063234db36907f6bdf8caba3e0e0f884816943418b32e3063378accf4d916e068f0b9055039e93a875cb500e25ef8258cbea70b445d3c2680c75600759e4df1270f9f79b1826909b2dfe6e7a2b58040d03e0963eb46b8c99a327a61a510c07103b23c40bccefc14e2d8b92140a7792eabc328e147dfcc87cd215a03ffb9d1a54351657ade1af17d4bb953ada02830869186cc820a44fa13325e3e53c565d7cdd5a1292de52150a144df0ed39ee23cb7a26f15ff042a797c9aa69ec8a33d9cede2f1f00c04b990025adf0813ceea6827c46c1ec46cfe6fc9294ac3d7963bbdcb7a5a75431e067c492b0c6da41606c6c82425145ec772f733afcdde02e2a422d64439ba43e080d1f79d1ab5ffa01392f4f21cb9940a1ed244ea5ff85bde6af06d72c5a54cb3c1af918fd0801f8ebdc410db560ec151eec471acd4634f781141c46569dd7abf178f286aed037fd73f4daa356e648eeeda0bc546f196b2b6319da806ef87542e3c47bc5cc54da7ae92e79420fbda44c35f38a72ea14d13df8a4c526175e7f0648151b5fa27ecd735965265e9c07e20f5f1e9cf01a9c9fa508d93cae05d0b666bf7d1a4cdec9b380dcd1694d7ffc09f06420fb2c97ccf1084bce8f30192004f055fe859e3de62ca7f77904d080fa7a6a099d8db70ef3ee82ff8b0d6e4eeee656b17463176c759dcf3d943807207df04da7c731dc2f56a5b263831ce89e4eaaad6e56e21764ca1d96f4cd6069bdfb0a278c23c92521b4a17763c926d70aa4f49cb718c90a426a64ea9c03469be5602ee34141c290375f5e98af76ea53512d32f268cbc0527dcca0ab3e2b1b76e79b4285dc09a3a7f89997da03a629b5d9f755b4ce6a4c50455011efacdc5d2c1b91db8b865c614b135db2e0f9e4cede55ae414cb1f14398a8c9a73a09d315796beb10e702bd8522b9875deff4435cc166b2a87d3d4d7d172b6290acb8e97f6b62615d4019d71324adeac0c3bc00a5650a5fcd471cf27f28a829d0fb8fdeb93b62973482fd1e7b57b3de16283501cd39f6d8986c191172394c39cdf11607f415cb171f8a9662b7990b51a1e42caa718229b34c4262b1db8fdd0c8093d62efd43d9ee3eed44f6208c7151544170c39b9f78becb55c08c597715b2f1901df6457da8e6ebc483b3bb5db68fd3c89668cafc4339a21f4b05e483570190cef51bf92ca49709ba11dc06bd305deadaed6b9f6f028bc95a92fb8385534883990332f54b71733807a1f2b8f25fdb1df88eb3b38976706d07a67f756e431546aebd4af2743f31b36038f91c00deddb1285e26297c174397126ff53433f2e184c1d4cef6b3a7bfa1862de9a1ec20869e03b69379de53d7b4311495acdf897855a9f23552a512ae9bf34a9775693d8957d9905504c089d19d7c98187e1dd671516f8d6b605941d8e7f77ab6118cc5ebeec6ca42a5f9f6818dcef7b0af9652bed27ec585f7e18e23a3b0736dee634cce14dc52656f0663eeee84ebca945e62adf94bba85942c89e328c4f35e43586af445f11b1b64945c8f4dad48f6db27c3444f016cce7feb7a438759d67cd203d9fcb3f44211f4977b5f347800f3f37b874df4ef985dc55d6a1cb3457e6c10a539f4bff7623a09ffe0761fff206afcfb5cc4b5a9fbd54f98e9a553ae59790facbda1adf615a79e439172341c3bf95b99dd8f78ff53699d110769c9731c03ad3ccd8abb8877fe84c0ab0d646ff06a49f73c42764ad003bf85703f633a9d85d0b03d3c595f9eb103a85363fb5df48e201e22d4b361bcb5de70bbaab8a02a2d3b27a5246145b2da2cc71bfa561544f7cd3cff6688a7b049ae086b43d197a61ae54d7113829e8f6afaf2414b7ac0b2f286968d2db9a4bb1b90c1ad9861dba35722483c88c63e5d77cf8b05225f31e665878f9238e55bf90f312fab7c19e400008fd67965386bbbee50999ec685fa1bb20cbf106a909a234f65de75ba4c896e218074ccdb8f75a333ed4e0c256283d1d7d326683b84ddfdb7a7b2e6dc4a93b2dbb8b37b208d4c02b6d192d28bb49ea44dfc56be4e70a3021ed442eaab2c45f832b68bf7b8600", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (fail_nth: 16) 3.705624602s ago: executing program 2 (id=971): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000038e000/0x1000)=nil, 0x1000, 0x9) write(r3, &(0x7f0000000080)='4', 0x1) setxattr$security_capability(&(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0x12d}, {&(0x7f0000000180)="f82cc2e2badde64ae94d4e4fedb85bf03a4a366b1d94b922b1d99dfcf3a6f00be18005312f6d4f274271d19219803a0a05823a8d33bea5f6b3861214d65261e534c50dbbb5671c9e112196917258451f6c45b27bad97b8a593f42e074a75b8266de93f497cefc795a8d632fb4faaf4aa93f16c", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x20044000) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES32], 0x50) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000980)="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", 0x280}, {&(0x7f00000004c0)="cb27ba3f01982dce6d0ca0ff5c847bb44ff6cda98954864bcc172558c8ed89925f612454b619fe378b8754606fc1e2cec99d11f284a8c830599768574851bfe1570e241834230241c27f6ef9946d6f672d8a5f7c2e6af3ef7bde1242570f96", 0x5f}, {&(0x7f0000000800)="752b63dfba7989785c11b289d38ef4f56a548ca43404f9a71dd065b3cb16929e2ef332fa6b6f8c4544ca29f43c189abd8fc83644e525b8357e9f3df2bc8ec0393eca5d15752fefb2b610c5501c685343f44b20a42683958282297f1459c536638e789686fe84d038b75ec75df094a669407ebae083700d22bc6031ae2d05dc8c7f19ecd96a88ebb5ef6c449b3d310cda58840a77e9327811005bec59e7ba387454706f438745", 0xa6}, {&(0x7f0000000600)="81f36e146246ea5cd873c6a5e984e9283e117e1b0c2637d0f3347927feb31f462b66a845ceb1cca7d7cf64b1b7dd1f7b8367ba379af43786513b01988fc5026e9b5297fbb48ceb0090ed7bb5e2411731d75726d1d2ee7aa02396b404b5313859deac8b34402b9f5c36c7250797f28c270998d90ac4e1fab3916d3109f10217c540bd5bfba22a7afafa48c5173c1a7cb74618be9c947fccc5654bcb49a1ecbd15d2072e01b278fb883607e7e63cfe0b09", 0xb0}, {&(0x7f0000000780)="5bff1fad8281f191b15c598466e2defa908229b042989239f3d667", 0x1b}], 0x5}}], 0x1, 0x0) socket(0xa, 0x2, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000206000/0x3000)=nil, 0x3000, 0xb) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r9 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000280)=0xb, 0x4) recvmsg(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 3.132211195s ago: executing program 0 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000100)={0x9e0902, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) socket$inet(0x2, 0x80000, 0x8) 2.883339993s ago: executing program 0 (id=977): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file0', [{0x20, 'm\xf6\\O\xfb\x05\xe3>#Y@x\xb4f\xfeD<\x97!\xddd\x10\x03\xd0Mt\v\xca\x9f\x9d\x0eJ\x00_\xd0\xef'}, {}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}, {0x20, '/!'}, {0x20, '*@\xb1'}, {0x20, 'syz2 '}, {0x20, 'cgroup.stat\x00'}, {}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000000000c99c85359d2227cd7d204190a2fb32ae3e7e4f3d839bd6a4e6f411c6ef855e6c53241f34f14773c4c19ab0fad88abad96a214f2ed56b6bb53eb28029fb01bdcdf6104221bda7baa55683f3ef7362c4aeb9e3ba6d29f71bbe"}, 0xeb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x8, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90406c7f09270000a0f4bdfdffffff001700000000fd00", [0x4, 0x200000000]}}) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000002030801020080080006400000000008000535b30ffc517f17b80006000000000000000000000000000000000039fb6ac00a3adafb1c0d4ac7264bbd3a6079e5cf3762"], 0x30}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './cgroup\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20000) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000008001c8004000480eec343be59956974a90ed39f980f9986f19f4cecca6a096e1e44b2b13b2b9c99a8a30ebfa0bb98cec8bbe1189d61c65c1d6814f32e349bca0ad5779ae7485dc280748020ebff34247259cca58b6d6bae2b7f055bbaa4f06a0f44016c2a7eb62e2b83e23503e5eaa9258f7d09574054f284a9458f14965b97cd78ba99efe6aa12ba65ad1966e6f0cb1f76f45d775bd2d304be6138be6288f93a821543ecd289a74a274523de"], 0x1c}}, 0x84) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x156) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x2, 0x2, 0x1, {0xa, 0x4e20, 0x2, @mcast1, 0xfff}}}, 0x32) r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) 2.732369438s ago: executing program 1 (id=978): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000001100)=@ethtool_gstrings={0x1b, 0x5}}) mprotect(&(0x7f0000176000/0x2000)=nil, 0x2000, 0x200000c) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x203) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x7ff, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x807) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r5) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) creat(&(0x7f0000000180)='./file0\x00', 0x44) 2.604076379s ago: executing program 0 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001200010027bd700000004000100000000c0000000000000000000000080031"], 0x28}], 0x1}, 0x4000800) listen(r1, 0x6) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x207, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4ae}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x4b1}, 0x39) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000140)={0x40, 0x3, 0x3, "b5b986"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f40)=@newqdisc={0x87c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x850, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x7, 0x3, 0x4, 0x2, 0x9, 0x9, 0x2, 0x9, 0x9, 0x7fff, 0x101, 0x8000, 0x401, 0x5, 0x200, 0x6, 0xe, 0x40, 0x1, 0x800, 0x5, 0x1, 0x46f4, 0x3, 0x800, 0x8, 0xb64, 0x1, 0x8, 0x1, 0x4, 0x100, 0x6, 0x6, 0xdc7, 0x1, 0xfff, 0x7, 0x0, 0x8, 0x8, 0x9, 0xfffffffd, 0x80, 0x2f, 0x1, 0x5, 0x5, 0xc4df, 0x2, 0x1, 0x4, 0xffffffff, 0x7d, 0x1ff, 0x3, 0x3ff, 0x3, 0x88, 0x3, 0x5, 0x2, 0x101, 0x9, 0x9, 0x2, 0x1, 0x407, 0x6, 0x5, 0xc, 0x7, 0x9, 0x8, 0x2a, 0x254, 0x23, 0x4c5, 0xa, 0x6, 0x8000, 0x90000, 0x6, 0x7d, 0x1ff, 0x4, 0x9, 0x10000, 0x80, 0x8, 0x9, 0xfffffff8, 0x3, 0x0, 0x4, 0xfffffffc, 0x7, 0x0, 0xe8b9, 0xb, 0x7, 0xb, 0x401, 0x4, 0x3, 0x1, 0x4, 0x7fff, 0x1ca, 0x4, 0x5, 0x3a6a, 0x9, 0x2, 0x3, 0x0, 0x2, 0x2, 0x8, 0x7, 0x8, 0x5, 0x6, 0x4c000000, 0x8, 0x6695f1ba, 0xd21c, 0x2, 0x6293, 0x1c22, 0x7fff, 0x1, 0x2, 0x56, 0x7, 0x2, 0x5, 0x1, 0x3, 0x7fffffff, 0xffff3562, 0x6, 0x8, 0x0, 0xe, 0x0, 0xf37, 0x3ff, 0x3, 0x10001, 0x0, 0xff7, 0x100000, 0x4, 0x2, 0xf, 0xcc22, 0x9, 0x0, 0x2, 0x5, 0x0, 0x7, 0x3, 0x7fff, 0x7, 0x3, 0x1, 0xf7, 0x36, 0x3af, 0x401, 0x9, 0x0, 0x2, 0x6, 0x6, 0x100, 0x0, 0x8, 0x9, 0x8000, 0x2af1, 0xf, 0x9, 0x2, 0x200, 0xfffffff0, 0x9300, 0x6, 0x7, 0x1, 0x6, 0x0, 0x6, 0x10000, 0x0, 0x8, 0x80000000, 0x5, 0xfffffc01, 0x18f, 0x8c6, 0x1, 0x7ff, 0xb2, 0x3, 0xff, 0x0, 0x79, 0xab, 0x0, 0x4, 0x3, 0x8f, 0xfff, 0x5, 0x800, 0x4, 0x2, 0x1, 0xb, 0x2, 0x1, 0x5, 0x6, 0x10, 0x39b, 0x2e, 0xe6, 0x800, 0x6, 0x9, 0x9, 0x4, 0xffffe076, 0x1, 0x2, 0x6, 0x0, 0xd1, 0x3dee, 0x0, 0x1, 0xffffffff, 0xa, 0x5773, 0x2, 0x9459, 0x7, 0x7, 0x80000001, 0x9, 0x10001, 0xa827]}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x4, 0x81, 0x3, 0x3ff, 0xffffffff, 0x1ee, 0x2, 0x2, 0x1, 0x6, 0x1, 0x7ff, 0x5, 0x6, 0x4, 0x81, 0x8, 0x3ff, 0x3, 0x0, 0x401, 0x5, 0x2, 0x7ff, 0x40, 0x1cd, 0x400, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x296, 0x2, 0x400, 0x9, 0x7, 0x4, 0x40, 0x0, 0x1, 0x1a, 0xfffffffb, 0xb94, 0x444, 0x6, 0x0, 0x8001, 0xa14, 0x3ff, 0x0, 0x7, 0x5cde7928, 0x1, 0x0, 0xdb, 0xd, 0x2, 0x0, 0xfff, 0xfffffffa, 0x0, 0x0, 0x0, 0xb1c0, 0x9, 0x6, 0x4, 0xd, 0xffff, 0xfffffff7, 0x6, 0xe, 0x80000000, 0x8, 0xfff, 0x4, 0xe0000000, 0xa6, 0x5, 0x6, 0x6d, 0x1, 0xa, 0x328d1a90, 0x7, 0x45fd, 0x40, 0x8, 0x401, 0x3, 0xfffffe01, 0x3ff, 0x3, 0x0, 0x2, 0x4, 0x9, 0x2, 0x3e, 0x2, 0x3, 0x0, 0x3ff, 0xfe, 0x10, 0x80, 0x3, 0x3, 0x89bf, 0x0, 0xc0000000, 0x9, 0x3, 0x9, 0x2, 0x8, 0xfff, 0x3, 0x3, 0x0, 0x9, 0x2, 0x1, 0xe, 0x8, 0x0, 0x2, 0x8, 0x3fc, 0x1185, 0x3, 0x9f2, 0x7000, 0x5, 0x3, 0x8001, 0x7, 0x0, 0xa8c6, 0x5, 0x56, 0x5, 0xfffffffb, 0x4, 0xa, 0x6, 0x9, 0x400, 0x7fff, 0x0, 0x0, 0x7, 0x4, 0x57, 0x7, 0x200, 0x7, 0x3, 0x6, 0x0, 0x49d, 0x2, 0x6, 0xa3, 0x3, 0x4, 0x3, 0x66, 0x5, 0x7, 0x8, 0x2, 0xfffffe01, 0x3, 0x401, 0x1505, 0xfff, 0x7, 0x4, 0x9, 0x5, 0x0, 0x8000, 0xfffff888, 0x4c, 0x3, 0x2, 0x6350, 0x9, 0x4, 0x6, 0x1, 0x7, 0x8, 0x9, 0x9, 0x5, 0x1, 0x0, 0xfffffff9, 0x0, 0x2, 0x1, 0x4, 0x5, 0x4, 0x8, 0x80, 0x4, 0x2, 0x7ff, 0xfff, 0x1, 0x5, 0x1, 0x4, 0x4, 0x8, 0x8, 0x163e6326, 0x33f5, 0x7fff, 0x5, 0x80, 0x0, 0x0, 0x5, 0x3ff, 0x8000, 0x7fff, 0x8, 0x75, 0x1, 0x88de, 0x9, 0x7fffffff, 0x0, 0x6145, 0x8, 0x40, 0xffffffc0, 0x4, 0x1, 0xffffff80, 0x7, 0x1, 0x80, 0x6, 0x80000000, 0xfffd, 0x60000000, 0x5, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xe, 0x2, 0x4, 0x7, 0x7, 0x8}, {0x2, 0x1, 0x1, 0xae00, 0xe, 0x9}, 0x10000, 0xc, 0x1a2f}}, @TCA_TBF_PBURST={0x8, 0x7, 0x52f}, @TCA_TBF_PBURST={0x8, 0x7, 0xfd9}, @TCA_TBF_RATE64={0xc, 0x4, 0x740b34923d806473}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r8 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 2.421502942s ago: executing program 2 (id=981): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xd4001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.283314743s ago: executing program 3 (id=982): socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x4, 0x1000, 0x50, &(0x7f0000000100)="f67b818da81017e72f07b0b1642c148743b6fb4488fc6c8975a958862b0b0b12942acbe148f2158470b37675983c64d14c6a60ab9f28e23921a0e9fd1f4b36e555d4054272365aa91dc71b33b72c9644"}, {0x5, 0x801, 0x0, 0x0}], 0x2}) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x891e, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) recvmmsg$unix(r4, &(0x7f0000004dc0)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000780)=""/188, 0xbc}, {&(0x7f0000000880)=""/6, 0x6}, {&(0x7f0000004ec0)=""/237, 0xed}, {&(0x7f00000009c0)=""/51, 0x33}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/61, 0x3d}, {0x0}, {&(0x7f0000001b40)=""/251, 0xfb}, {0x0}], 0xa, &(0x7f0000001dc0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e80)=""/46, 0x2e}, {&(0x7f0000001ec0)=""/104, 0x68}, {&(0x7f0000001f40)=""/94, 0x5e}, {&(0x7f0000001fc0)=""/21, 0x15}], 0x4, &(0x7f0000002040)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000003440)=[{&(0x7f0000002100)=""/95, 0x5f}, {&(0x7f0000002180)=""/144, 0x90}, {&(0x7f0000002240)=""/18, 0x12}, {&(0x7f0000002280)=""/40, 0x28}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/188, 0xbc}, {&(0x7f0000003380)=""/81, 0x51}, {&(0x7f0000003400)=""/55, 0x37}], 0x8, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1c}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/30, 0x1e}, {&(0x7f0000003500)=""/147, 0x93}, {&(0x7f00000035c0)=""/99, 0x63}, {&(0x7f0000003640)=""/54, 0x36}], 0x4, &(0x7f00000036c0)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xb8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x3c}}], 0x5, 0x0, &(0x7f0000004e80)={0x77359400}) (async) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x5, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x6c, &(0x7f0000000400)=""/108}]}) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f00000001c0)=0x304008000) 1.671808831s ago: executing program 2 (id=983): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) statx(0xffffffffffffffff, 0x0, 0x3400, 0x20, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x41c0, 0xffff7fff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x28011, r1, 0xffffc000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0xffffffffffffffff) lseek(r1, 0x2000, 0x4) 1.555697802s ago: executing program 2 (id=984): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x9}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, 0xffffffffffffffff, 0x80000) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x253, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3a065a4d, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 1.41134177s ago: executing program 3 (id=985): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xae0, 0x6361, 0xd03, 0x1, 0x76ed}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240408a0}, 0x20004890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.047413663s ago: executing program 2 (id=987): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x7, 0x1, 0x0, {0xf, 0x4, 0x3, 0xf, 0xf, 0x68, 0xd687, 0x8, 0x1, 0x46c, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0x10, [@rand_addr=0x64010100, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x3d, 0x1, 0x0, [{@multicast2, 0x3d}, {@multicast2, 0x406}, {@local, 0x2}]}]}}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x2804500, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000b82000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7) 1.032796013s ago: executing program 3 (id=988): r0 = syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$uac1(0x6, 0x72, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x2) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 723.434205ms ago: executing program 1 (id=989): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0xe20, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000380)="6819", 0x2}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e26, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b446437747efbd6d5e66b47e3108b53711907eb9022f40bcdb30955e5e745015254b5d64b0e309bf2311663bac832d50e9897b1f8ad40ae67bcf7b7c0f8dd02d8104db14e4ce2ce0f57d84eab3", 0xa6}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000000c0)}}], 0x3, 0x2000c044) 705.947406ms ago: executing program 1 (id=990): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}, 0x1, 0x97}, 0x40800) 647.7198ms ago: executing program 1 (id=991): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x2, {0xfffffff3, 0xffffffff, 0xfffffffe, 0x9}}) (fail_nth: 4) 503.742147ms ago: executing program 1 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x41, '\x00', @local}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x41, '\x00', @local}}}}}}, 0x0) (async) 438.457615ms ago: executing program 0 (id=993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000000002010400000000000000000a000200040001803c0003800c00028005000100010000002c00018014000300fe80000000000000000000000000002a14000400fe8800000000000000000000000001011c0002800c00028005000100860000000c002e02800500010001000000"], 0x70}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$FS_IOC_GETVERSION(r4, 0x80047601, &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000140)="01aa4180ff654d3e2d77596f928c2fbfa375ca8be52e1900009b5c8696a2a54cb59eda718cc4492750bc0b42391301000000000000001c08d85aae5f1c2408911810947eabad74b9cc3cbf454e2fac5b91b4ae5116112c10bc7a185c079102a45797607cb66229e1bf7dbcd1429df8020c3c3294dbeb3ba2e8c33b315708718d89cdf27559a5444baf116f3935017adb241f3cb1d9c13a0a480d87bd8cfb06c8239af24fddfdbf", 0xa7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)='=', 0x1}, {&(0x7f0000000040)="a9caab43c2f079c07a35206b97741ea8fa05df20e4cd9e091e", 0x19}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}}], 0x4, 0x119e75c40277adee) 256.060568ms ago: executing program 3 (id=994): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) statx(0xffffffffffffffff, 0x0, 0x3400, 0x20, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x41c0, 0xffff7fff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x28011, r1, 0xffffc000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0xffffffffffffffff) lseek(r1, 0x2000, 0x4) 70.141492ms ago: executing program 1 (id=995): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="44008000000000000000004c455e36331c750b06963ba600", @ANYRES32=0x0, @ANYBLOB="04410000089b000008000300", @ANYRES32=r3, @ANYBLOB="1c0012800e0001006970366772657461700000000800028004001200"], 0x44}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0xa, 0x2}, {0x1, 0x1}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r6, &(0x7f0000000040)=""/196, 0xc4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r7 = socket(0x840000000002, 0x40004, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r7, 0x0, 0x20, 0x0, 0x7) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="fde0ba2f872a00", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000000c0)="18fb4eae", 0x4}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="04e7430afd12d89f1f524db1be1670d296efc65c5e8acf905b4125dbbfd7d74114d74d935f4907accffa0568faf34c7ef94fd0a310bcfa42b3046235e634f1cc47da431d45c161ad4e2fb81b5498170e8e3eb0225184144793b6f2a29c4357bfd9250f619448f2499f33bd54e039e7baa1b0d7e6ae52b85005e85e8ad054d663cec6900f817d52032eaa73ead2ed03b0297b46e10135bd316df82214a28b4f461a62a3f045492340e4d8ab256a7f5a8b17896d9c590f933ba9c95d743577e8d4cc86d35ef46e5bc9842f8c050a5761cd7062126012c48f1031ab6ce0ee430c33c9cfdd09", 0xe4}], 0x1, &(0x7f0000000380)}}], 0x4, 0x4044005) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="7c024036ef514465", @ANYBLOB="cd72983d7c3024cc7ae728fa382fc25254f529c56414e3ec3e2718f4ee3bb8c0f1277d67a6c175cedad3828ba59ad256823a7a21510a255a3b26f23ba53b249383b4d5e17ccb18f53b175aefcf8b7aeb6504f57ca0bfe2f9918b6c6bd554868d14c5f4a6ed96669df18bbfdd6ee076622905388e24746786877c7bb3477c5bfc19e23b6dae5ae89526e142b134d46e9f289f9ca1ce2b6f2db5fdc8fb9d0b1e85546cf0186cbf58eb62651eb1599d0ddd73a3b131278b6988a49f4d87d8c428a788ec1f8efdd9b8a716033f1ecc6bd43f41947ea207ea99df629c685f6ea61f899c8a5ae75bc7f2b764ce", @ANYBLOB="227555011220e52adb928ab0118dd6f29e090bc2ea3f43fe4df6edd02245b7cd126b658d037f193630fdc4ae7db8fb1d923b643758dd", @ANYRESDEC=r3], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x1, 0xfffffffa, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r8, 0x100) r10 = dup3(r9, r8, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x541a, &(0x7f0000000000)=0x7f) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r11 = getpid() process_vm_readv(r11, &(0x7f0000000200)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000340)=""/116, 0x74}], 0x1, 0x0) 69.838037ms ago: executing program 3 (id=996): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x9}}}}}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$pptp(0x18, 0x1, 0x2) getpeername$unix(r2, 0x0, &(0x7f00000041c0)) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'dummy0\x00', @random="6f43f765701a"}) 0s ago: executing program 3 (id=997): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xae0, 0x6361, 0xd03, 0x1, 0x76ed}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240408a0}, 0x20004890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): nt descriptor for endpoint 1 [ 175.749123][ T5715] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 175.749256][ T5715] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 175.749362][ T5715] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 175.797290][ T5715] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 175.967363][ T5715] usb 1-1: USB disconnect, device number 26 [ 176.006559][ T5715] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 176.018738][ T5715] keyspan 1-1:0.0: device disconnected [ 176.038765][ T5700] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 176.099226][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 176.114450][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 176.193172][ T5700] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.210156][ T5700] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.210195][ T5700] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.210225][ T5700] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 176.210250][ T5700] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.210302][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.309114][ T5700] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.322963][ T5700] usb 2-1: invalid MIDI out EP 0 [ 176.461894][ T7491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.554'. [ 176.499082][ T5660] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 176.525653][ T7491] syzkaller1: entered promiscuous mode [ 176.525700][ T7491] syzkaller1: entered allmulticast mode [ 176.584846][ T5700] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 176.649109][ T5660] usb 3-1: Using ep0 maxpacket: 32 [ 176.649849][ T5660] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 176.657887][ T5660] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 176.657911][ T5660] usb 3-1: config 0 has no interface number 0 [ 176.657948][ T5660] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 176.657973][ T5660] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.658011][ T5660] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.658034][ T5660] usb 3-1: config 0 interface 196 has no altsetting 0 [ 176.660717][ T5660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.660740][ T5660] usb 3-1: Product: syz [ 176.660753][ T5660] usb 3-1: Manufacturer: syz [ 176.660767][ T5660] usb 3-1: SerialNumber: syz [ 176.696336][ T5660] usb 3-1: config 0 descriptor?? [ 176.697117][ T7489] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.763341][ T7493] input: syz0 as /devices/virtual/input/input46 [ 177.156639][ T5660] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 177.156863][ T5660] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 177.183160][ T5660] usb 3-1: USB disconnect, device number 23 [ 177.582853][ T7504] syzkaller0: entered promiscuous mode [ 177.598807][ T7504] syzkaller0: entered allmulticast mode [ 177.633244][ T7510] input: syz0 as /devices/virtual/input/input47 [ 177.693096][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.562'. [ 177.722776][ T7510] F2FS-fs: Conflicting test_dummy_encryption options [ 178.043603][ T7515] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 178.231968][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 178.232039][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 178.232803][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 178.272266][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 178.307141][ T10] usb 5-1: USB disconnect, device number 28 [ 178.760339][ T7534] input: syz0 as /devices/virtual/input/input48 [ 178.888014][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 179.181110][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 179.266533][ T5660] usb 2-1: USB disconnect, device number 33 [ 179.342182][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 179.360188][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.360242][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1 [ 179.383914][ T10] usb 1-1: config 87 has an invalid interface number: 248 but max is 0 [ 179.383956][ T10] usb 1-1: config 87 has no interface number 0 [ 179.383984][ T10] usb 1-1: config 87 interface 248 has no altsetting 0 [ 179.423454][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.423501][ T10] usb 1-1: Product: syz [ 179.423531][ T10] usb 1-1: Manufacturer: syz [ 179.423544][ T10] usb 1-1: SerialNumber: syz [ 180.428501][ T7558] FAULT_INJECTION: forcing a failure. [ 180.428501][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 180.429805][ T7558] CPU: 0 UID: 0 PID: 7558 Comm: syz.1.577 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.429836][ T7558] Tainted: [L]=SOFTLOCKUP [ 180.429843][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.429858][ T7558] Call Trace: [ 180.429866][ T7558] [ 180.429874][ T7558] dump_stack_lvl+0xe8/0x150 [ 180.429906][ T7558] should_fail_ex+0x410/0x560 [ 180.429934][ T7558] ? __alloc_skb+0x1db/0x7a0 [ 180.429958][ T7558] should_failslab+0xa8/0x100 [ 180.429981][ T7558] ? __alloc_skb+0x1db/0x7a0 [ 180.430003][ T7558] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 180.430038][ T7558] ? __alloc_skb+0x18d/0x7a0 [ 180.430062][ T7558] ? __alloc_skb+0x1db/0x7a0 [ 180.430091][ T7558] __alloc_skb+0x1db/0x7a0 [ 180.430119][ T7558] __ip_append_data+0x2aa9/0x3cf0 [ 180.430138][ T7558] ? __lock_acquire+0x683/0x2cf0 [ 180.430166][ T7558] ? register_lock_class+0x31/0x2e0 [ 180.430190][ T7558] ? __pfx_raw_getfrag+0x10/0x10 [ 180.430235][ T7558] ? ipv4_mtu+0x23/0x670 [ 180.430262][ T7558] ? __pfx___ip_append_data+0x10/0x10 [ 180.430282][ T7558] ? ipv4_mtu+0x561/0x670 [ 180.430306][ T7558] ? ipv4_mtu+0x23/0x670 [ 180.430332][ T7558] ? __pfx_ipv4_mtu+0x10/0x10 [ 180.430358][ T7558] ? ip_setup_cork+0x4ed/0x8f0 [ 180.430378][ T7558] ip_append_data+0x10d/0x190 [ 180.430399][ T7558] ? __pfx_raw_getfrag+0x10/0x10 [ 180.430428][ T7558] raw_sendmsg+0x1406/0x1a20 [ 180.430471][ T7558] ? __pfx_raw_sendmsg+0x10/0x10 [ 180.430516][ T7558] ? aa_sk_perm+0x6e0/0x910 [ 180.430553][ T7558] ? sock_rps_record_flow+0x19/0x350 [ 180.430583][ T7558] ? inet_sendmsg+0x298/0x320 [ 180.430614][ T7558] ? __pfx_inet_sendmsg+0x10/0x10 [ 180.430642][ T7558] sock_sendmsg_nosec+0x10e/0x180 [ 180.430665][ T7558] ____sys_sendmsg+0x54e/0x850 [ 180.430698][ T7558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.430741][ T7558] ___sys_sendmsg+0x2a5/0x360 [ 180.430766][ T7558] ? __lock_acquire+0x683/0x2cf0 [ 180.430789][ T7558] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.430856][ T7558] ? __fget_files+0x2a/0x420 [ 180.430880][ T7558] ? __fget_files+0x3a2/0x420 [ 180.430912][ T7558] __sys_sendmsg+0x177/0x240 [ 180.430942][ T7558] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.430987][ T7558] __do_fast_syscall_32+0x27a/0x6a0 [ 180.431010][ T7558] ? do_fast_syscall_32+0x33/0x70 [ 180.431058][ T7558] ? asm_int80_emulation+0x1a/0x20 [ 180.431077][ T7558] ? do_int80_emulation+0x299/0x500 [ 180.431104][ T7558] do_fast_syscall_32+0x33/0x70 [ 180.431126][ T7558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.431149][ T7558] RIP: 0023:0xf70af0ec [ 180.431167][ T7558] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 180.431184][ T7558] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 180.431205][ T7558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 180.431219][ T7558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.431231][ T7558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.431242][ T7558] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.431254][ T7558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.431283][ T7558] [ 180.451149][ T5715] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 180.521532][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 180.619145][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 180.620283][ T5715] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 180.621322][ T5660] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 180.621955][ T5715] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 180.621979][ T5715] usb 4-1: config 0 has no interface number 0 [ 180.622056][ T5715] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 180.622082][ T5715] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.622103][ T5715] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 180.622125][ T5715] usb 4-1: config 0 interface 196 has no altsetting 0 [ 180.626819][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.626842][ T5715] usb 4-1: Product: syz [ 180.626856][ T5715] usb 4-1: Manufacturer: syz [ 180.627459][ T5715] usb 4-1: SerialNumber: syz [ 180.644625][ T5715] usb 4-1: config 0 descriptor?? [ 180.650196][ T7545] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 180.694953][ T10] rndis_host 1-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 180.701276][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 180.715387][ T10] usb 1-1: USB disconnect, device number 27 [ 180.727028][ T25] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 180.752734][ T25] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 180.752762][ T25] usb 3-1: config 2 has no interface number 0 [ 180.752854][ T25] usb 3-1: config 2 interface 31 has no altsetting 0 [ 180.798214][ T5660] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.798263][ T5660] usb 5-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 180.830949][ T5660] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.831033][ T5660] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.837381][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.837405][ T25] usb 3-1: Product: syz [ 180.858048][ T25] usb 3-1: Manufacturer: syz [ 180.858066][ T25] usb 3-1: SerialNumber: syz [ 180.959656][ T7564] input: syz0 as /devices/virtual/input/input49 [ 181.035982][ T5660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.036023][ T5660] usb 5-1: Product: syz [ 181.036054][ T5660] usb 5-1: Manufacturer: syz [ 181.036073][ T5660] usb 5-1: SerialNumber: syz [ 181.089596][ T5715] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 181.089804][ T5715] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 181.142742][ T5715] usb 4-1: USB disconnect, device number 23 [ 181.279096][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.281129][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.305148][ T25] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71 [ 181.322771][ T25] usb 3-1: USB disconnect, device number 24 [ 181.460031][ T7568] netlink: 580 bytes leftover after parsing attributes in process `syz.4.576'. [ 181.469551][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.471471][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.618680][ T5715] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 181.683891][ T7573] syzkaller0: entered promiscuous mode [ 181.683920][ T7573] syzkaller0: entered allmulticast mode [ 181.833937][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 181.834012][ T5715] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 181.835164][ T5715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 181.835194][ T5715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 181.837851][ T5715] usb 1-1: string descriptor 0 read error: -22 [ 181.837979][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.855749][ T7569] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 181.855881][ T7569] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 181.871201][ T5715] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.220903][ T7584] input: syz0 as /devices/virtual/input/input50 [ 182.243996][ T7584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.586'. [ 183.412234][ T5660] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.421502][ T5660] usb 5-1: MIDIStreaming interface descriptor not found [ 183.520096][ T5660] usb 5-1: USB disconnect, device number 29 [ 183.700428][ T5715] usb 1-1: USB disconnect, device number 28 [ 183.886794][ T7598] input: syz0 as /devices/virtual/input/input51 [ 183.890502][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.592'. [ 184.036413][ T7602] netlink: 76 bytes leftover after parsing attributes in process `syz.3.593'. [ 184.039008][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 184.148861][ T5700] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 184.298973][ T5660] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 184.310341][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 184.313663][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.313708][ T5700] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1 [ 184.314670][ T5700] usb 5-1: config 87 has an invalid interface number: 248 but max is 0 [ 184.314693][ T5700] usb 5-1: config 87 has no interface number 0 [ 184.314720][ T5700] usb 5-1: config 87 interface 248 has no altsetting 0 [ 184.320393][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.320415][ T5700] usb 5-1: Product: syz [ 184.320429][ T5700] usb 5-1: Manufacturer: syz [ 184.320442][ T5700] usb 5-1: SerialNumber: syz [ 184.367205][ T7614] input: syz0 as /devices/virtual/input/input52 [ 184.401074][ T7614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.599'. [ 184.458673][ T5660] usb 3-1: Using ep0 maxpacket: 32 [ 184.464807][ T5660] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 184.475402][ T5660] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 184.475451][ T5660] usb 3-1: config 0 has no interface number 0 [ 184.475494][ T5660] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 184.475521][ T5660] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.475545][ T5660] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.475570][ T5660] usb 3-1: config 0 interface 196 has no altsetting 0 [ 184.530609][ T5660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.530662][ T5660] usb 3-1: Product: syz [ 184.530696][ T5660] usb 3-1: Manufacturer: syz [ 184.530716][ T5660] usb 3-1: SerialNumber: syz [ 184.557076][ T5660] usb 3-1: config 0 descriptor?? [ 184.566603][ T7603] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.097671][ T7618] syzkaller0: entered promiscuous mode [ 185.108987][ T7618] syzkaller0: entered allmulticast mode [ 185.133698][ T5660] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 185.134963][ T5660] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 185.167172][ T5660] usb 3-1: USB disconnect, device number 25 [ 186.225133][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 186.263454][ T5715] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 186.418272][ T5715] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 186.435044][ T5715] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.435089][ T5715] usb 3-1: config 1 interface 0 has no altsetting 0 [ 186.472397][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.472426][ T5715] usb 3-1: Product: syz [ 186.472480][ T5715] usb 3-1: Manufacturer: syz [ 186.472493][ T5715] usb 3-1: SerialNumber: syz [ 186.778228][ T5715] usbhid 3-1:1.0: can't add hid device: -71 [ 186.778350][ T5715] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 186.784245][ T5715] usb 3-1: USB disconnect, device number 26 [ 187.258394][ T5700] rndis_host 5-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 187.268749][ T5700] usb 5-1: USB disconnect, device number 30 [ 187.321512][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 187.322119][ T7642] tipc: Enabling of bearer rejected, failed to enable media [ 187.364362][ T7645] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 187.543534][ T7653] input: syz0 as /devices/virtual/input/input53 [ 187.555004][ T7657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.613'. [ 187.609318][ T7653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.612'. [ 188.038743][ T5700] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 188.188855][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 188.189706][ T5700] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 188.190812][ T5700] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 188.190835][ T5700] usb 5-1: config 0 has no interface number 0 [ 188.190871][ T5700] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 188.190896][ T5700] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.190916][ T5700] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 188.190940][ T5700] usb 5-1: config 0 interface 196 has no altsetting 0 [ 188.193143][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.193165][ T5700] usb 5-1: Product: syz [ 188.193179][ T5700] usb 5-1: Manufacturer: syz [ 188.193193][ T5700] usb 5-1: SerialNumber: syz [ 188.196356][ T5700] usb 5-1: config 0 descriptor?? [ 188.197317][ T7665] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.637729][ T7684] syzkaller0: entered promiscuous mode [ 188.646639][ T7684] syzkaller0: entered allmulticast mode [ 188.889511][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 189.031434][ T30] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 189.188628][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 189.188670][ T5681] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 189.217487][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.217552][ T30] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 189.237367][ T30] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 189.237406][ T30] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 189.237450][ T30] usb 2-1: config 14 has no interface number 0 [ 189.237466][ T30] usb 2-1: config 14 has no interface number 1 [ 189.237523][ T30] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 189.237546][ T30] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 189.237571][ T30] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 189.237596][ T30] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 189.237620][ T30] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 189.237645][ T30] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.237670][ T30] usb 2-1: config 14 interface 57 has no altsetting 0 [ 189.237687][ T30] usb 2-1: config 14 interface 228 has no altsetting 0 [ 189.308224][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.308253][ T30] usb 2-1: Product: syz [ 189.308266][ T30] usb 2-1: Manufacturer: syz [ 189.308280][ T30] usb 2-1: SerialNumber: syz [ 189.349714][ T5681] usb 3-1: Using ep0 maxpacket: 32 [ 189.386516][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.386585][ T5681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1 [ 189.405150][ T5681] usb 3-1: config 87 has an invalid interface number: 248 but max is 0 [ 189.405195][ T5681] usb 3-1: config 87 has no interface number 0 [ 189.405264][ T5681] usb 3-1: config 87 interface 248 has no altsetting 0 [ 189.429804][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.429870][ T5681] usb 3-1: Product: syz [ 189.429902][ T5681] usb 3-1: Manufacturer: syz [ 189.429920][ T5681] usb 3-1: SerialNumber: syz [ 189.756034][ T30] legousbtower 2-1:14.57: interrupt endpoints not found [ 190.800903][ T5700] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 190.808757][ T5700] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 190.835274][ T5700] usb 5-1: USB disconnect, device number 31 [ 190.885719][ T5681] rndis_host 3-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 190.909774][ T5681] usb 3-1: USB disconnect, device number 27 [ 191.039334][ T30] legousbtower 2-1:14.228: get version request failed: -110 [ 191.041408][ T30] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -110 [ 191.161787][ T7712] input: syz0 as /devices/virtual/input/input54 [ 191.195252][ T7712] netlink: 48 bytes leftover after parsing attributes in process `syz.3.631'. [ 191.437904][ T7723] FAULT_INJECTION: forcing a failure. [ 191.437904][ T7723] name failslab, interval 1, probability 0, space 0, times 0 [ 191.437942][ T7723] CPU: 1 UID: 0 PID: 7723 Comm: syz.2.635 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.437967][ T7723] Tainted: [L]=SOFTLOCKUP [ 191.437974][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.437985][ T7723] Call Trace: [ 191.437991][ T7723] [ 191.437998][ T7723] dump_stack_lvl+0xe8/0x150 [ 191.438026][ T7723] should_fail_ex+0x410/0x560 [ 191.438053][ T7723] should_failslab+0xa8/0x100 [ 191.438076][ T7723] __kmalloc_noprof+0xfe/0x720 [ 191.438102][ T7723] ? rcu_is_watching+0x16/0xb0 [ 191.438124][ T7723] ? tomoyo_realpath_from_path+0xef/0x640 [ 191.438149][ T7723] ? tomoyo_realpath_from_path+0xef/0x640 [ 191.438183][ T7723] tomoyo_realpath_from_path+0xef/0x640 [ 191.438223][ T7723] tomoyo_check_open_permission+0x229/0x470 [ 191.438249][ T7723] ? tomoyo_check_open_permission+0x1d3/0x470 [ 191.438273][ T7723] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 191.438299][ T7723] ? __asan_memset+0x22/0x50 [ 191.438362][ T7723] ? tomoyo_file_open+0x163/0x220 [ 191.438386][ T7723] security_file_open+0xa9/0x240 [ 191.438411][ T7723] do_dentry_open+0x4a0/0x1380 [ 191.438450][ T7723] vfs_open+0x3b/0x340 [ 191.438467][ T7723] ? path_openat+0x1428/0x1d60 [ 191.438496][ T7723] path_openat+0x1443/0x1d60 [ 191.438542][ T7723] do_file_open+0x23e/0x4a0 [ 191.438574][ T7723] ? __pfx_do_file_open+0x10/0x10 [ 191.438620][ T7723] ? _raw_spin_unlock+0x28/0x50 [ 191.438647][ T7723] ? alloc_fd+0x651/0x6c0 [ 191.438678][ T7723] do_sys_openat2+0x115/0x200 [ 191.438701][ T7723] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.438723][ T7723] ? ksys_write+0x242/0x270 [ 191.438749][ T7723] ? __pfx_ksys_write+0x10/0x10 [ 191.438777][ T7723] __ia32_compat_sys_openat+0x131/0x160 [ 191.438804][ T7723] do_int80_emulation+0x198/0x500 [ 191.438826][ T7723] ? asm_int80_emulation+0x1a/0x20 [ 191.438843][ T7723] ? clear_bhb_loop+0x70/0xc0 [ 191.438862][ T7723] ? clear_bhb_loop+0x70/0xc0 [ 191.438885][ T7723] asm_int80_emulation+0x1a/0x20 [ 191.438903][ T7723] RIP: 0023:0xf71b74eb [ 191.438919][ T7723] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 191.438936][ T7723] RSP: 002b:00000000f546d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 191.438956][ T7723] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f546d490 [ 191.438970][ T7723] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.438981][ T7723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.438992][ T7723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.439003][ T7723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.439030][ T7723] [ 191.443859][ T7723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.750028][ T30] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 191.752022][ T5660] usb 2-1: USB disconnect, device number 34 [ 191.836741][ T7727] syzkaller0: entered promiscuous mode [ 191.836774][ T7727] syzkaller0: entered allmulticast mode [ 191.906402][ T30] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 191.907794][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.907841][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.916841][ T30] usb 3-1: config 0 descriptor?? [ 192.529394][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 192.686756][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.686852][ T25] usb 1-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 192.698124][ T25] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 192.698151][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.704330][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.704380][ T25] usb 1-1: Product: syz [ 192.704401][ T25] usb 1-1: Manufacturer: syz [ 192.704415][ T25] usb 1-1: SerialNumber: syz [ 192.979804][ T25] usb 1-1: unit 115 not found! [ 192.979852][ T25] usb 1-1: unit 255 not found! [ 193.092584][ T25] usb 1-1: USB disconnect, device number 29 [ 193.219192][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.585237][ T30] ath6kl: Failed to read usb control message: -71 [ 193.585302][ T30] ath6kl: Unable to read the bmi data from the device: -71 [ 193.585332][ T30] ath6kl: Unable to recv target info: -71 [ 193.600791][ T30] ath6kl: Failed to init ath6kl core: -71 [ 193.601340][ T30] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 193.623978][ T30] usb 3-1: USB disconnect, device number 28 [ 194.162790][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.162879][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.613375][ T987] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 194.779701][ T987] usb 3-1: Using ep0 maxpacket: 32 [ 194.782620][ T987] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.782665][ T987] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 194.783596][ T987] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 194.783616][ T987] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 194.783636][ T987] usb 3-1: config 14 has no interface number 0 [ 194.783651][ T987] usb 3-1: config 14 has no interface number 1 [ 194.783707][ T987] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 194.783729][ T987] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 194.783753][ T987] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 194.783779][ T987] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 194.783804][ T987] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 194.783829][ T987] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.783855][ T987] usb 3-1: config 14 interface 57 has no altsetting 0 [ 194.783873][ T987] usb 3-1: config 14 interface 228 has no altsetting 0 [ 194.785755][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.785777][ T987] usb 3-1: Product: syz [ 194.785791][ T987] usb 3-1: Manufacturer: syz [ 194.785806][ T987] usb 3-1: SerialNumber: syz [ 195.015637][ T7770] input: syz0 as /devices/virtual/input/input55 [ 195.073064][ T7770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.648'. [ 195.268574][ T987] legousbtower 3-1:14.57: interrupt endpoints not found [ 195.528681][ T5700] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 195.675319][ T987] legousbtower 3-1:14.228: get version request failed: -71 [ 195.675747][ T987] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 195.691134][ T987] usb 3-1: USB disconnect, device number 29 [ 195.698926][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 195.699599][ T5700] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 195.707474][ T5700] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 195.707498][ T5700] usb 1-1: config 0 has no interface number 0 [ 195.707537][ T5700] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 195.707561][ T5700] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.707581][ T5700] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 195.707604][ T5700] usb 1-1: config 0 interface 196 has no altsetting 0 [ 195.712415][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.712438][ T5700] usb 1-1: Product: syz [ 195.712452][ T5700] usb 1-1: Manufacturer: syz [ 195.712465][ T5700] usb 1-1: SerialNumber: syz [ 195.721547][ T5700] usb 1-1: config 0 descriptor?? [ 195.725378][ T7782] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.934137][ T7789] FAULT_INJECTION: forcing a failure. [ 195.934137][ T7789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.948311][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz.4.658 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.948342][ T7789] Tainted: [L]=SOFTLOCKUP [ 195.948350][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.948360][ T7789] Call Trace: [ 195.948368][ T7789] [ 195.948376][ T7789] dump_stack_lvl+0xe8/0x150 [ 195.948408][ T7789] should_fail_ex+0x410/0x560 [ 195.948438][ T7789] prepare_alloc_pages+0x223/0x600 [ 195.948472][ T7789] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 195.948496][ T7789] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.948519][ T7789] ? __pfx_policy_nodemask+0x10/0x10 [ 195.948547][ T7789] ? __lock_acquire+0x683/0x2cf0 [ 195.948569][ T7789] alloc_pages_mpol+0x21e/0x390 [ 195.948596][ T7789] folio_alloc_mpol_noprof+0x39/0x160 [ 195.948619][ T7789] vma_alloc_folio_noprof+0xe1/0x1e0 [ 195.948643][ T7789] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 195.948665][ T7789] ? __pte_offset_map+0x29/0x240 [ 195.948690][ T7789] ? __pte_offset_map+0x29/0x240 [ 195.948717][ T7789] do_pte_missing+0x173a/0x34b0 [ 195.948763][ T7789] handle_mm_fault+0x19f5/0x3720 [ 195.948797][ T7789] ? handle_mm_fault+0xf4/0x3720 [ 195.948831][ T7789] ? __pfx_handle_mm_fault+0x10/0x10 [ 195.948856][ T7789] ? follow_page_pte+0x748/0xf10 [ 195.948889][ T7789] ? __pfx_follow_page_pte+0x10/0x10 [ 195.948923][ T7789] __get_user_pages+0x1675/0x2750 [ 195.948977][ T7789] __gup_longterm_locked+0xd52/0x15c0 [ 195.949012][ T7789] ? sanity_check_pinned_pages+0x817/0x8d0 [ 195.949041][ T7789] gup_fast_fallback+0x1d92/0x20e0 [ 195.949094][ T7789] ? __pfx_gup_fast_fallback+0x10/0x10 [ 195.949125][ T7789] ? rds_info_getsockopt+0x259/0x770 [ 195.949152][ T7789] ? rcu_is_watching+0x16/0xb0 [ 195.949173][ T7789] ? is_valid_gup_args+0x11f/0x200 [ 195.949198][ T7789] ? pin_user_pages_fast+0x4d/0xb0 [ 195.949224][ T7789] iov_iter_extract_pages+0x3a1/0x690 [ 195.949261][ T7789] rds_info_getsockopt+0x28b/0x770 [ 195.949294][ T7789] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 195.949332][ T7789] ? __might_fault+0xaf/0x130 [ 195.949358][ T7789] ? __might_fault+0xaf/0x130 [ 195.949385][ T7789] rds_getsockopt+0x38b/0x600 [ 195.949410][ T7789] ? __pfx_rds_getsockopt+0x10/0x10 [ 195.949441][ T7789] do_sock_getsockopt+0x6ae/0x7e0 [ 195.949474][ T7789] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 195.949499][ T7789] ? __fget_files+0x2a/0x420 [ 195.949537][ T7789] ? __fget_files+0x2a/0x420 [ 195.949560][ T7789] ? __fget_files+0x3a2/0x420 [ 195.949582][ T7789] ? __fget_files+0x2a/0x420 [ 195.949612][ T7789] __ia32_sys_getsockopt+0x1a4/0x240 [ 195.949648][ T7789] __do_fast_syscall_32+0x27a/0x6a0 [ 195.949671][ T7789] ? do_fast_syscall_32+0x33/0x70 [ 195.949691][ T7789] ? asm_int80_emulation+0x1a/0x20 [ 195.949711][ T7789] ? do_int80_emulation+0x299/0x500 [ 195.949730][ T7789] ? trace_irq_disable+0x3b/0x140 [ 195.949752][ T7789] do_fast_syscall_32+0x33/0x70 [ 195.949773][ T7789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.949796][ T7789] RIP: 0023:0xf7f240ec [ 195.949814][ T7789] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 195.949830][ T7789] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 195.949851][ T7789] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 195.949864][ T7789] RDX: 000000000000271f RSI: 0000000080019440 RDI: 00000000800000c0 [ 195.949877][ T7789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.949888][ T7789] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.949900][ T7789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.949928][ T7789] [ 196.223243][ T5700] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 196.225881][ T5700] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 196.271483][ T5700] usb 1-1: USB disconnect, device number 30 [ 196.290535][ T7792] ªªªªªª: renamed from vlan0 (while UP) [ 196.605339][ T7794] syzkaller0: entered promiscuous mode [ 196.605368][ T7794] syzkaller0: entered allmulticast mode [ 196.808691][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.664'. [ 196.971233][ T7822] FAULT_INJECTION: forcing a failure. [ 196.971233][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 196.971288][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.0.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.971315][ T7822] Tainted: [L]=SOFTLOCKUP [ 196.971322][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.971334][ T7822] Call Trace: [ 196.971342][ T7822] [ 196.971350][ T7822] dump_stack_lvl+0xe8/0x150 [ 196.971381][ T7822] should_fail_ex+0x410/0x560 [ 196.971410][ T7822] should_failslab+0xa8/0x100 [ 196.971434][ T7822] __kmalloc_cache_noprof+0xa3/0x600 [ 196.971460][ T7822] ? __kmalloc_cache_noprof+0x14d/0x600 [ 196.971486][ T7822] ? sctp_add_bind_addr+0x8c/0x370 [ 196.971512][ T7822] ? sctp_add_bind_addr+0x8c/0x370 [ 196.971544][ T7822] sctp_add_bind_addr+0x8c/0x370 [ 196.971578][ T7822] sctp_copy_local_addr_list+0x31a/0x4e0 [ 196.971610][ T7822] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 196.971637][ T7822] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 196.971666][ T7822] ? sctp_v6_is_any+0x64/0x80 [ 196.971686][ T7822] ? sctp_copy_one_addr+0x93/0x360 [ 196.971715][ T7822] sctp_bind_addr_copy+0xb3/0x3c0 [ 196.971742][ T7822] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 196.971770][ T7822] sctp_connect_new_asoc+0x2ff/0x6b0 [ 196.971794][ T7822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.971822][ T7822] ? __local_bh_enable_ip+0xd6/0x140 [ 196.971846][ T7822] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 196.971870][ T7822] ? security_sctp_bind_connect+0x7e/0x2c0 [ 196.971896][ T7822] sctp_sendmsg+0x159b/0x2d00 [ 196.971930][ T7822] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.971966][ T7822] ? aa_sk_perm+0x6e0/0x910 [ 196.971998][ T7822] ? __might_fault+0xaf/0x130 [ 196.972026][ T7822] ? sock_rps_record_flow+0x19/0x350 [ 196.972058][ T7822] ? inet_sendmsg+0x298/0x320 [ 196.972088][ T7822] ? __pfx_inet_sendmsg+0x10/0x10 [ 196.972113][ T7822] sock_sendmsg_nosec+0x10e/0x180 [ 196.972138][ T7822] __sys_sendto+0x408/0x5a0 [ 196.972167][ T7822] ? __pfx___sys_sendto+0x10/0x10 [ 196.972202][ T7822] ? __fget_files+0x3a2/0x420 [ 196.972235][ T7822] ? ksys_write+0x242/0x270 [ 196.972266][ T7822] __ia32_sys_sendto+0xdd/0x100 [ 196.972294][ T7822] __do_fast_syscall_32+0x27a/0x6a0 [ 196.972317][ T7822] ? do_fast_syscall_32+0x33/0x70 [ 196.972338][ T7822] ? asm_int80_emulation+0x1a/0x20 [ 196.972356][ T7822] ? do_int80_emulation+0x299/0x500 [ 196.972375][ T7822] ? trace_irq_disable+0x3b/0x140 [ 196.972397][ T7822] do_fast_syscall_32+0x33/0x70 [ 196.972419][ T7822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.972442][ T7822] RIP: 0023:0xf700f0ec [ 196.972458][ T7822] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 196.972476][ T7822] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 196.972496][ T7822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 196.972510][ T7822] RDX: 0000000000000001 RSI: 0000000004000057 RDI: 0000000080000080 [ 196.972522][ T7822] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 196.972534][ T7822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 196.972546][ T7822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.972574][ T7822] [ 198.119678][ T1646] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 198.281426][ T1646] usb 3-1: Using ep0 maxpacket: 32 [ 198.308892][ T1646] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.316652][ T1646] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 198.317618][ T1646] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 198.317641][ T1646] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 198.317659][ T1646] usb 3-1: config 14 has no interface number 0 [ 198.317676][ T1646] usb 3-1: config 14 has no interface number 1 [ 198.317732][ T1646] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 198.317755][ T1646] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 198.317779][ T1646] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 198.317804][ T1646] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 198.317863][ T1646] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 198.317889][ T1646] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.317915][ T1646] usb 3-1: config 14 interface 57 has no altsetting 0 [ 198.317932][ T1646] usb 3-1: config 14 interface 228 has no altsetting 0 [ 198.319938][ T1646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.319960][ T1646] usb 3-1: Product: syz [ 198.319973][ T1646] usb 3-1: Manufacturer: syz [ 198.319987][ T1646] usb 3-1: SerialNumber: syz [ 198.749758][ T1646] legousbtower 3-1:14.57: interrupt endpoints not found [ 199.165568][ T1646] legousbtower 3-1:14.228: get version request failed: -71 [ 199.165736][ T1646] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 199.174547][ T1646] usb 3-1: USB disconnect, device number 30 [ 199.501289][ T7852] netlink: 156 bytes leftover after parsing attributes in process `syz.4.680'. [ 199.599118][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 199.749113][ T1646] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 199.757584][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 199.765769][ T25] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 199.771149][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.771174][ T25] usb 1-1: Product: syz [ 199.771188][ T25] usb 1-1: Manufacturer: syz [ 199.771202][ T25] usb 1-1: SerialNumber: syz [ 199.786264][ T25] usb 1-1: config 0 descriptor?? [ 199.796187][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 199.896400][ T7868] syzkaller0: entered promiscuous mode [ 199.902246][ T7868] syzkaller0: entered allmulticast mode [ 199.909180][ T1646] usb 2-1: Using ep0 maxpacket: 32 [ 199.911058][ T1646] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 199.912489][ T1646] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 199.912512][ T1646] usb 2-1: config 0 has no interface number 0 [ 199.912571][ T1646] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 199.912596][ T1646] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.912618][ T1646] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 199.912648][ T1646] usb 2-1: config 0 interface 196 has no altsetting 0 [ 199.915509][ T1646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.915532][ T1646] usb 2-1: Product: syz [ 199.915546][ T1646] usb 2-1: Manufacturer: syz [ 199.915578][ T1646] usb 2-1: SerialNumber: syz [ 199.937817][ T1646] usb 2-1: config 0 descriptor?? [ 199.941240][ T7850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 200.194837][ T25] gspca_se401: Wrong descriptor type [ 200.687214][ T987] usb 1-1: USB disconnect, device number 31 [ 201.914578][ T1646] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 201.914786][ T1646] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 201.929379][ T1646] usb 2-1: USB disconnect, device number 35 [ 201.956531][ T7882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.678'. [ 202.145944][ T7895] FAULT_INJECTION: forcing a failure. [ 202.145944][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.146008][ T7895] CPU: 0 UID: 0 PID: 7895 Comm: syz.0.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.146035][ T7895] Tainted: [L]=SOFTLOCKUP [ 202.146042][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.146054][ T7895] Call Trace: [ 202.146062][ T7895] [ 202.146070][ T7895] dump_stack_lvl+0xe8/0x150 [ 202.146101][ T7895] should_fail_ex+0x410/0x560 [ 202.146129][ T7895] _copy_from_user+0x2d/0xb0 [ 202.146161][ T7895] get_compat_msghdr+0xb3/0x4c0 [ 202.146194][ T7895] ? __pfx_get_compat_msghdr+0x10/0x10 [ 202.146236][ T7895] ___sys_sendmsg+0x201/0x360 [ 202.146262][ T7895] ? __lock_acquire+0x683/0x2cf0 [ 202.146285][ T7895] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.146310][ T7895] ? get_pid_task+0x20/0x1f0 [ 202.146329][ T7895] ? get_pid_task+0x20/0x1f0 [ 202.146345][ T7895] ? get_pid_task+0x20/0x1f0 [ 202.146391][ T7895] ? __fget_files+0x2a/0x420 [ 202.146413][ T7895] ? __fget_files+0x3a2/0x420 [ 202.146445][ T7895] __sys_sendmsg+0x177/0x240 [ 202.146473][ T7895] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.146516][ T7895] __do_fast_syscall_32+0x27a/0x6a0 [ 202.146540][ T7895] ? do_fast_syscall_32+0x33/0x70 [ 202.146561][ T7895] ? asm_int80_emulation+0x1a/0x20 [ 202.146579][ T7895] ? do_int80_emulation+0x299/0x500 [ 202.146599][ T7895] ? trace_irq_disable+0x3b/0x140 [ 202.146621][ T7895] do_fast_syscall_32+0x33/0x70 [ 202.146643][ T7895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.146666][ T7895] RIP: 0023:0xf700f0ec [ 202.146684][ T7895] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 202.146701][ T7895] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 202.146722][ T7895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 202.146736][ T7895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.146748][ T7895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.146759][ T7895] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.146771][ T7895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.146800][ T7895] [ 202.406585][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 202.493412][ T7910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.703'. [ 202.539897][ T1646] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 202.552342][ T7912] input: syz0 as /devices/virtual/input/input56 [ 202.652602][ T7915] syzkaller0: entered promiscuous mode [ 202.658238][ T7915] syzkaller0: entered allmulticast mode [ 202.691200][ T1646] usb 4-1: Using ep0 maxpacket: 32 [ 202.695306][ T1646] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.695351][ T1646] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 202.697575][ T1646] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 202.697597][ T1646] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 202.697617][ T1646] usb 4-1: config 14 has no interface number 0 [ 202.697633][ T1646] usb 4-1: config 14 has no interface number 1 [ 202.697690][ T1646] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 202.697712][ T1646] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 202.697736][ T1646] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 202.697761][ T1646] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 202.697787][ T1646] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 202.697811][ T1646] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.697837][ T1646] usb 4-1: config 14 interface 57 has no altsetting 0 [ 202.697854][ T1646] usb 4-1: config 14 interface 228 has no altsetting 0 [ 202.701561][ T1646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.701584][ T1646] usb 4-1: Product: syz [ 202.701598][ T1646] usb 4-1: Manufacturer: syz [ 202.701617][ T1646] usb 4-1: SerialNumber: syz [ 202.738983][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 202.873303][ T7920] input: syz0 as /devices/virtual/input/input57 [ 202.891494][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.00 [ 202.895386][ T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.895418][ T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.895471][ T25] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.895497][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.895528][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.951643][ T7921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.707'. [ 202.968846][ T25] usb 5-1: config 0 descriptor?? [ 203.162563][ T1646] legousbtower 4-1:14.57: interrupt endpoints not found [ 203.380900][ T1646] legousbtower 4-1:14.228: get version request failed: -71 [ 203.381178][ T1646] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 203.423914][ T1646] usb 4-1: USB disconnect, device number 24 [ 203.426021][ T25] apple 0003:05AC:0251.000C: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 203.435307][ T25] input: HID 05ac:0251 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0251.000C/input/input58 [ 203.539968][ T25] apple 0003:05AC:0251.000C: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0251] on usb-dummy_hcd.4-1/input0 [ 203.650933][ T1646] usb 5-1: USB disconnect, device number 32 [ 203.708920][ T7926] fido_id[7926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 205.448107][ T7943] syzkaller0: entered promiscuous mode [ 205.455137][ T7943] syzkaller0: entered allmulticast mode [ 205.461790][ T7959] fuse: fd is not a fuse device [ 205.673407][ T987] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 205.835856][ T987] usb 4-1: Using ep0 maxpacket: 32 [ 205.845285][ T987] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 205.856722][ T987] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 205.856748][ T987] usb 4-1: config 0 has no interface number 0 [ 205.856787][ T987] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 205.856813][ T987] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.856835][ T987] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 205.856857][ T987] usb 4-1: config 0 interface 196 has no altsetting 0 [ 205.911384][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.911411][ T987] usb 4-1: Product: syz [ 205.911425][ T987] usb 4-1: Manufacturer: syz [ 205.911439][ T987] usb 4-1: SerialNumber: syz [ 205.922293][ T987] usb 4-1: config 0 descriptor?? [ 205.927122][ T7957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.752347][ T7979] input: syz0 as /devices/virtual/input/input59 [ 207.857089][ T987] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 207.857332][ T987] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 207.878680][ T987] usb 4-1: USB disconnect, device number 25 [ 208.212206][ T7986] syzkaller0: entered promiscuous mode [ 208.212242][ T7986] syzkaller0: entered allmulticast mode [ 209.208948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 209.392952][ T7997] syz.1.728 (7997): drop_caches: 2 [ 209.562705][ T8016] input: syz0 as /devices/virtual/input/input60 [ 210.202533][ T5660] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 211.130661][ T8047] input: syz0 as /devices/virtual/input/input61 [ 211.179576][ T1646] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 211.189466][ T5681] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 211.339369][ T5681] usb 5-1: Using ep0 maxpacket: 32 [ 211.343317][ T5681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.343361][ T5681] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 211.344294][ T5681] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 211.344316][ T5681] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 211.344336][ T5681] usb 5-1: config 14 has no interface number 0 [ 211.344352][ T5681] usb 5-1: config 14 has no interface number 1 [ 211.344408][ T5681] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 211.344430][ T5681] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 211.344454][ T5681] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 211.344479][ T5681] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 211.344505][ T5681] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 211.344529][ T5681] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.344554][ T5681] usb 5-1: config 14 interface 57 has no altsetting 0 [ 211.344571][ T5681] usb 5-1: config 14 interface 228 has no altsetting 0 [ 211.346552][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.346573][ T5681] usb 5-1: Product: syz [ 211.346588][ T5681] usb 5-1: Manufacturer: syz [ 211.346607][ T5681] usb 5-1: SerialNumber: syz [ 211.402412][ T1646] usb 4-1: Using ep0 maxpacket: 32 [ 211.426346][ T1646] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 211.519202][ T1646] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 211.519264][ T1646] usb 4-1: config 0 has no interface number 0 [ 211.519321][ T1646] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 211.519350][ T1646] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.519375][ T1646] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.519402][ T1646] usb 4-1: config 0 interface 196 has no altsetting 0 [ 211.573876][ T1646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.573918][ T1646] usb 4-1: Product: syz [ 211.573948][ T1646] usb 4-1: Manufacturer: syz [ 211.573967][ T1646] usb 4-1: SerialNumber: syz [ 211.609011][ T1646] usb 4-1: config 0 descriptor?? [ 211.610371][ T5681] legousbtower 5-1:14.57: interrupt endpoints not found [ 211.625525][ T8036] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.632685][ T5681] legousbtower 5-1:14.228: get version request failed: -71 [ 211.632849][ T5681] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 211.660148][ T5681] usb 5-1: USB disconnect, device number 33 [ 211.767278][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.769402][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.775349][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.825472][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.832908][ T5660] usb 1-1: device descriptor read/64, error -71 [ 211.844271][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.860410][ T8058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.871449][ T8058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.887069][ T8058] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 211.914933][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.915044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.922177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.922270][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.011026][ T8061] input: syz0 as /devices/virtual/input/input62 [ 212.052808][ T8064] netlink: 88 bytes leftover after parsing attributes in process `syz.2.751'. [ 212.072881][ T1646] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 212.081163][ T1646] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 212.092281][ T5660] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 212.121016][ T1646] usb 4-1: USB disconnect, device number 26 [ 212.217529][ T8066] syzkaller0: entered promiscuous mode [ 212.217587][ T8066] syzkaller0: entered allmulticast mode [ 212.259061][ T5660] usb 1-1: Using ep0 maxpacket: 32 [ 212.264701][ T5660] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 212.276278][ T5660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.276320][ T5660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.276358][ T5660] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 212.276403][ T5660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.325213][ T5660] usb 1-1: config 0 descriptor?? [ 212.347504][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 212.778845][ T1646] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 212.813763][ T5660] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000D/input/input63 [ 212.851646][ T5660] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000D/input/input64 [ 212.869017][ T5681] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 212.877985][ T5681] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.948619][ T1646] usb 5-1: Using ep0 maxpacket: 32 [ 212.955702][ T1646] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 212.970563][ T1646] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.970600][ T1646] usb 5-1: config 0 has no interface number 0 [ 212.970652][ T1646] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 212.970678][ T1646] usb 5-1: config 0 interface 1 has no altsetting 0 [ 213.008091][ T1646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.008132][ T1646] usb 5-1: Product: syz [ 213.008191][ T1646] usb 5-1: Manufacturer: syz [ 213.008209][ T1646] usb 5-1: SerialNumber: syz [ 213.042660][ T5660] kye 0003:0458:5011.000D: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 213.123210][ T1646] usb 5-1: config 0 descriptor?? [ 213.369590][ T1646] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 213.391956][ T1646] cx231xx 5-1:0.1: Failed to read PCB config [ 213.392032][ T1646] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 213.417377][ T1646] usb 5-1: USB disconnect, device number 34 [ 213.869757][ T1646] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 214.039234][ T1646] usb 5-1: Using ep0 maxpacket: 32 [ 214.047542][ T1646] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 214.061489][ T1646] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.061606][ T1646] usb 5-1: config 0 has no interface number 0 [ 214.061678][ T1646] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 214.061702][ T1646] usb 5-1: config 0 interface 1 has no altsetting 0 [ 214.069804][ T987] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 214.117592][ T1646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.126051][ T1646] usb 5-1: Product: syz [ 214.126138][ T1646] usb 5-1: Manufacturer: syz [ 214.126156][ T1646] usb 5-1: SerialNumber: syz [ 214.158999][ T1646] usb 5-1: config 0 descriptor?? [ 214.239079][ T987] usb 1-1: device descriptor read/64, error -32 [ 214.463322][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.474229][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.497430][ T12] failed to send hello msg [ 214.497634][ T12] failed while handling packet from 1:60042 [ 214.514921][ T987] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 214.547507][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.551031][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.634142][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.644010][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.646445][ T987] usb 1-1: device descriptor read/64, error -32 [ 214.879428][ T987] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 214.902177][ T987] usb 1-1: device descriptor read/8, error -32 [ 214.932806][ T5715] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 215.082270][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 215.083017][ T5715] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 215.083962][ T5715] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 215.083985][ T5715] usb 2-1: config 0 has no interface number 0 [ 215.084022][ T5715] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 215.084047][ T5715] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.084069][ T5715] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 215.084092][ T5715] usb 2-1: config 0 interface 196 has no altsetting 0 [ 215.085978][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.086001][ T5715] usb 2-1: Product: syz [ 215.086014][ T5715] usb 2-1: Manufacturer: syz [ 215.086028][ T5715] usb 2-1: SerialNumber: syz [ 215.093653][ T5715] usb 2-1: config 0 descriptor?? [ 215.094371][ T8110] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 215.148689][ T987] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 215.169012][ T987] usb 1-1: device descriptor read/8, error -32 [ 215.281568][ T987] raw-gadget.2 gadget.0: failed to queue suspend event [ 215.285709][ T5700] usb 1-1: USB disconnect, device number 33 [ 215.380280][ T5700] raw-gadget.2 gadget.0: failed to queue reset event [ 215.449198][ T5700] raw-gadget.2 gadget.0: failed to queue resume event [ 215.509477][ T5700] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 215.509743][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 215.509912][ T5700] raw-gadget.2 gadget.0: failed to queue reset event [ 215.532825][ T5715] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 215.533054][ T5715] ipheth 2-1:0.196: probe with driver ipheth failed with error -32 [ 215.580744][ T5700] raw-gadget.2 gadget.0: failed to queue resume event [ 215.607176][ T8051] raw-gadget.2 gadget.0: failed to queue suspend event [ 215.607352][ T8051] raw-gadget.2 gadget.0: failed to queue disconnect event [ 215.639275][ T5700] usb 1-1: device descriptor read/64, error -32 [ 215.666286][ T8104] warning: `syz.4.756' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 215.751131][ T9] usb 2-1: USB disconnect, device number 36 [ 215.787871][ T1646] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 215.801445][ T1646] cx231xx 5-1:0.1: Failed to read PCB config [ 215.801514][ T1646] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 215.821572][ T1646] usb 5-1: USB disconnect, device number 35 [ 216.011698][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 216.974615][ T8137] netlink: 48 bytes leftover after parsing attributes in process `syz.2.776'. [ 217.152555][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 217.207725][ T8143] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 217.666605][ T52] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 219.109727][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 219.280085][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 219.291842][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.291917][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.408348][ T8188] input: syz0 as /devices/virtual/input/input65 [ 219.532200][ T9] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 219.554598][ T9] wwan wwan0: port wwan0qmi0 attached [ 219.578621][ T1646] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 219.740502][ T1646] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.743299][ T1646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.743322][ T1646] usb 5-1: config 0 has no interfaces? [ 219.743349][ T1646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.751800][ T1646] usb 5-1: config 0 descriptor?? [ 219.807885][ T9] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 62:00:b1:16:88:86 [ 219.950178][ T5674] usb 4-1: USB disconnect, device number 27 [ 219.967503][ T5674] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 220.177227][ T5674] wwan wwan0: port wwan0qmi0 disconnected [ 220.347724][ T8203] syzkaller0: entered promiscuous mode [ 220.354350][ T8203] syzkaller0: entered allmulticast mode [ 222.007397][ T1646] usb 5-1: string descriptor 0 read error: -71 [ 222.009892][ T1646] usb 5-1: USB disconnect, device number 36 [ 222.702537][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 222.859327][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 222.865181][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 222.877401][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 222.877442][ T9] usb 5-1: config 0 has no interface number 0 [ 222.877502][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.877530][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 222.877558][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.877583][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.877625][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.952423][ T9] usb 5-1: config 0 descriptor?? [ 222.978789][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 223.230469][ T8255] FAULT_INJECTION: forcing a failure. [ 223.230469][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.230520][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.0.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.230547][ T8255] Tainted: [L]=SOFTLOCKUP [ 223.230555][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.230566][ T8255] Call Trace: [ 223.230573][ T8255] [ 223.230581][ T8255] dump_stack_lvl+0xe8/0x150 [ 223.230613][ T8255] should_fail_ex+0x410/0x560 [ 223.230641][ T8255] _copy_from_user+0x2d/0xb0 [ 223.230669][ T8255] get_compat_msghdr+0xb3/0x4c0 [ 223.230701][ T8255] ? __pfx_get_compat_msghdr+0x10/0x10 [ 223.230741][ T8255] ___sys_sendmsg+0x201/0x360 [ 223.230767][ T8255] ? __lock_acquire+0x683/0x2cf0 [ 223.230789][ T8255] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.230814][ T8255] ? get_pid_task+0x20/0x1f0 [ 223.230831][ T8255] ? get_pid_task+0x20/0x1f0 [ 223.230847][ T8255] ? get_pid_task+0x20/0x1f0 [ 223.230891][ T8255] ? __fget_files+0x2a/0x420 [ 223.230913][ T8255] ? __fget_files+0x3a2/0x420 [ 223.230943][ T8255] __sys_sendmsg+0x177/0x240 [ 223.230978][ T8255] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.231019][ T8255] __do_fast_syscall_32+0x27a/0x6a0 [ 223.231040][ T8255] ? do_fast_syscall_32+0x33/0x70 [ 223.231061][ T8255] ? asm_int80_emulation+0x1a/0x20 [ 223.231080][ T8255] ? do_int80_emulation+0x299/0x500 [ 223.231100][ T8255] ? trace_irq_disable+0x3b/0x140 [ 223.231122][ T8255] do_fast_syscall_32+0x33/0x70 [ 223.231143][ T8255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.231166][ T8255] RIP: 0023:0xf700f0ec [ 223.231183][ T8255] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 223.231199][ T8255] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 223.231219][ T8255] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 223.231233][ T8255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.231245][ T8255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.231256][ T8255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.231268][ T8255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.231295][ T8255] [ 223.352274][ T8256] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.364940][ T30] usb 5-1: USB disconnect, device number 37 [ 223.368393][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 223.410491][ T30] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 223.605499][ T8267] input: syz0 as /devices/virtual/input/input66 [ 224.028659][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 224.178708][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 224.187368][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 224.199147][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 224.199188][ T9] usb 1-1: config 0 has no interface number 0 [ 224.199244][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 224.199272][ T9] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.199297][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 224.199322][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 224.259238][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.259279][ T9] usb 1-1: Product: syz [ 224.259315][ T9] usb 1-1: Manufacturer: syz [ 224.259333][ T9] usb 1-1: SerialNumber: syz [ 224.286065][ T9] usb 1-1: config 0 descriptor?? [ 224.294176][ T8269] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.625749][ T8281] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 224.695633][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.816'. [ 224.735609][ T8281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.742588][ T9] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 224.742827][ T9] ipheth 1-1:0.196: probe with driver ipheth failed with error -32 [ 224.765858][ T8283] bond1: entered promiscuous mode [ 224.805595][ T8283] bond1: (slave dummy0): making interface the new active one [ 224.805639][ T8283] dummy0: entered promiscuous mode [ 224.831020][ T8283] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 224.852157][ T30] usb 1-1: USB disconnect, device number 36 [ 224.945538][ T8285] syzkaller0: entered promiscuous mode [ 224.951427][ T8285] syzkaller0: entered allmulticast mode [ 225.525694][ T5700] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 225.679389][ T5700] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 225.689676][ T8312] input: syz0 as /devices/virtual/input/input67 [ 225.696161][ T5700] usb 4-1: config 1 interface 0 has no altsetting 0 [ 225.720250][ T5700] usb 4-1: string descriptor 0 read error: -22 [ 225.726696][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.144356][ T5700] usbhid 4-1:1.0: can't add hid device: -32 [ 226.144480][ T5700] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 226.539797][ T30] usb 4-1: USB disconnect, device number 28 [ 226.605216][ T8330] FAULT_INJECTION: forcing a failure. [ 226.605216][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.605276][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.3.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.605301][ T8330] Tainted: [L]=SOFTLOCKUP [ 226.605307][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.605316][ T8330] Call Trace: [ 226.605323][ T8330] [ 226.605330][ T8330] dump_stack_lvl+0xe8/0x150 [ 226.605358][ T8330] should_fail_ex+0x410/0x560 [ 226.605386][ T8330] _copy_from_user+0x2d/0xb0 [ 226.605413][ T8330] cmsghdr_from_user_compat_to_kern+0x3c2/0x810 [ 226.605445][ T8330] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 226.605474][ T8330] ____sys_sendmsg+0x217/0x850 [ 226.605505][ T8330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.605546][ T8330] ___sys_sendmsg+0x2a5/0x360 [ 226.605570][ T8330] ? __lock_acquire+0x683/0x2cf0 [ 226.605592][ T8330] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.605620][ T8330] ? get_pid_task+0x20/0x1f0 [ 226.605638][ T8330] ? get_pid_task+0x20/0x1f0 [ 226.605661][ T8330] ? get_pid_task+0x20/0x1f0 [ 226.605705][ T8330] ? __fget_files+0x2a/0x420 [ 226.605727][ T8330] ? __fget_files+0x3a2/0x420 [ 226.605758][ T8330] __sys_sendmsg+0x177/0x240 [ 226.605786][ T8330] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.605830][ T8330] __do_fast_syscall_32+0x27a/0x6a0 [ 226.605854][ T8330] ? do_fast_syscall_32+0x33/0x70 [ 226.605874][ T8330] ? asm_int80_emulation+0x1a/0x20 [ 226.605893][ T8330] ? do_int80_emulation+0x299/0x500 [ 226.605913][ T8330] ? trace_irq_disable+0x3b/0x140 [ 226.605934][ T8330] do_fast_syscall_32+0x33/0x70 [ 226.605956][ T8330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.605978][ T8330] RIP: 0023:0xf700f0ec [ 226.605995][ T8330] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 226.606011][ T8330] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 226.606031][ T8330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 226.606045][ T8330] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.606056][ T8330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.606067][ T8330] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.606079][ T8330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.606105][ T8330] [ 227.760764][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 227.778483][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 228.175653][ T8362] input: syz0 as /devices/virtual/input/input68 [ 228.298610][ T30] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 228.449947][ T30] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.462033][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.479323][ T30] usb 5-1: config 0 descriptor?? [ 228.663669][ T8364] syzkaller0: entered promiscuous mode [ 228.670824][ T8364] syzkaller0: entered allmulticast mode [ 230.947606][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 230.955397][ T31] audit: type=1326 audit(1787735790.925:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.0.850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x0 [ 231.280963][ T5674] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 231.356964][ T8404] netlink: 'syz.2.855': attribute type 6 has an invalid length. [ 231.389457][ T8402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.389710][ T8402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.389917][ T8402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.390141][ T8402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.390353][ T8402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.422083][ T5674] usb 2-1: device descriptor read/64, error -71 [ 231.443540][ T8402] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 231.628952][ T5700] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 231.658732][ T5674] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 231.780522][ T5700] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 231.782357][ T5700] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 231.782397][ T5700] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.782423][ T5700] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.782445][ T5700] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 231.782472][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 231.782503][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.794339][ T5700] usb 3-1: config 0 descriptor?? [ 231.802371][ T5674] usb 2-1: device descriptor read/64, error -71 [ 231.866255][ T30] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 231.875227][ T30] [drm:udl_init] *ERROR* Selecting channel failed [ 231.920259][ T5674] usb usb2-port1: attempt power cycle [ 231.991003][ T30] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 231.992072][ T30] [drm] Initialized udl on minor 1 [ 232.048086][ T30] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.085038][ T30] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 232.108428][ T30] usb 5-1: USB disconnect, device number 38 [ 232.139209][ T52] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 232.207003][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 232.250778][ T5700] usbhid 3-1:0.0: can't add hid device: -71 [ 232.250868][ T5700] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.268710][ T5674] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 232.282320][ T5700] usb 3-1: USB disconnect, device number 31 [ 232.299666][ T5674] usb 2-1: device descriptor read/8, error -71 [ 232.548882][ T5674] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 232.581041][ T5674] usb 2-1: device descriptor read/8, error -71 [ 232.640975][ T8424] syzkaller0: entered promiscuous mode [ 232.641003][ T8424] syzkaller0: entered allmulticast mode [ 232.689937][ T5674] usb usb2-port1: unable to enumerate USB device [ 233.440587][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.440652][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.440693][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.440720][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.733625][ T8440] sctp: [Deprecated]: syz.0.865 (pid 8440) Use of int in max_burst socket option deprecated. [ 233.733625][ T8440] Use struct sctp_assoc_value instead [ 234.051695][ T8446] usb usb7: usbfs: process 8446 (syz.0.868) did not claim interface 0 before use [ 234.681012][ T8452] syzkaller0: entered promiscuous mode [ 234.681055][ T8452] syzkaller0: entered allmulticast mode [ 234.770153][ T8461] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 235.199554][ T5674] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 235.370077][ T5674] usb 5-1: Using ep0 maxpacket: 8 [ 235.387417][ T5674] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.388646][ T5674] usb 5-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 235.398488][ T5674] usb 5-1: config 2 has an invalid interface number: 99 but max is 0 [ 235.398512][ T5674] usb 5-1: config 2 has no interface number 0 [ 235.398592][ T5674] usb 5-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 235.398618][ T5674] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 235.398643][ T5674] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.398664][ T5674] usb 5-1: config 2 interface 99 has no altsetting 0 [ 235.403618][ T5674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.403642][ T5674] usb 5-1: Product: syz [ 235.403656][ T5674] usb 5-1: Manufacturer: syz [ 235.403670][ T5674] usb 5-1: SerialNumber: syz [ 235.600285][ T8479] pimreg: entered allmulticast mode [ 235.610221][ T8479] pimreg: left allmulticast mode [ 235.635046][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.638495][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.682429][ T8484] FAULT_INJECTION: forcing a failure. [ 235.682429][ T8484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.696804][ T8484] CPU: 0 UID: 0 PID: 8484 Comm: syz.2.881 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.696837][ T8484] Tainted: [L]=SOFTLOCKUP [ 235.696844][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.696852][ T8484] Call Trace: [ 235.696868][ T8484] [ 235.696876][ T8484] dump_stack_lvl+0xe8/0x150 [ 235.696907][ T8484] should_fail_ex+0x410/0x560 [ 235.696934][ T8484] _copy_to_user+0x31/0xb0 [ 235.696967][ T8484] do_sock_getsockopt+0x6ea/0x7e0 [ 235.697004][ T8484] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 235.697028][ T8484] ? __fget_files+0x2a/0x420 [ 235.697068][ T8484] ? __fget_files+0x2a/0x420 [ 235.697090][ T8484] ? __fget_files+0x3a2/0x420 [ 235.697112][ T8484] ? __fget_files+0x2a/0x420 [ 235.697141][ T8484] __ia32_sys_getsockopt+0x1a4/0x240 [ 235.697175][ T8484] __do_fast_syscall_32+0x27a/0x6a0 [ 235.697199][ T8484] ? do_fast_syscall_32+0x33/0x70 [ 235.697219][ T8484] ? asm_int80_emulation+0x1a/0x20 [ 235.697238][ T8484] ? do_int80_emulation+0x299/0x500 [ 235.697256][ T8484] ? trace_irq_disable+0x3b/0x140 [ 235.697282][ T8484] do_fast_syscall_32+0x33/0x70 [ 235.697304][ T8484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.697326][ T8484] RIP: 0023:0xf707f0ec [ 235.697343][ T8484] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 235.697360][ T8484] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 235.697381][ T8484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 235.697395][ T8484] RDX: 000000000000271b RSI: 0000000000000000 RDI: 0000000080000000 [ 235.697408][ T8484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.697419][ T8484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 235.697431][ T8484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.697456][ T8484] [ 235.728432][ T5674] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.99/input/input70 [ 235.946969][ T5674] usb 5-1: USB disconnect, device number 39 [ 235.947102][ C1] xpad 5-1:2.99: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.089069][ T8456] syz.0.872 (8456): drop_caches: 2 [ 236.275290][ T8497] syzkaller0: entered promiscuous mode [ 236.275335][ T8497] syzkaller0: entered allmulticast mode [ 236.404454][ T30] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 236.434498][ T8504] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 236.437053][ T8503] netlink: 52 bytes leftover after parsing attributes in process `syz.2.887'. [ 236.559316][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 236.560018][ T30] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 236.561511][ T30] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 236.561534][ T30] usb 4-1: config 0 has no interface number 0 [ 236.561570][ T30] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.561592][ T30] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.561614][ T30] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 236.561638][ T30] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 236.561680][ T30] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.565773][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.565797][ T30] usb 4-1: Product: syz [ 236.565811][ T30] usb 4-1: Manufacturer: syz [ 236.565825][ T30] usb 4-1: SerialNumber: syz [ 236.581067][ T30] usb 4-1: config 0 descriptor?? [ 236.775315][ T8514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.891'. [ 236.813260][ T30] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 236.841135][ T8517] FAULT_INJECTION: forcing a failure. [ 236.841135][ T8517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.841174][ T8517] CPU: 1 UID: 0 PID: 8517 Comm: syz.2.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.841198][ T8517] Tainted: [L]=SOFTLOCKUP [ 236.841204][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.841215][ T8517] Call Trace: [ 236.841222][ T8517] [ 236.841230][ T8517] dump_stack_lvl+0xe8/0x150 [ 236.841257][ T8517] should_fail_ex+0x410/0x560 [ 236.841281][ T8517] prepare_alloc_pages+0x223/0x600 [ 236.841315][ T8517] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 236.841339][ T8517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.841362][ T8517] ? __pfx_policy_nodemask+0x10/0x10 [ 236.841394][ T8517] alloc_pages_mpol+0x21e/0x390 [ 236.841420][ T8517] alloc_pages_noprof+0xb1/0x2b0 [ 236.841444][ T8517] pte_alloc_one+0x22/0x370 [ 236.841470][ T8517] __pte_alloc+0x25/0x1a0 [ 236.841495][ T8517] ? mm_alloc_pmd+0x246/0x400 [ 236.841524][ T8517] userfaultfd_zeropage+0x7f4/0xfa0 [ 236.841563][ T8517] ? __pfx_userfaultfd_zeropage+0x10/0x10 [ 236.841603][ T8517] userfaultfd_ioctl+0x483/0x560 [ 236.841626][ T8517] ? __fget_files+0x2a/0x420 [ 236.841650][ T8517] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 236.841674][ T8517] ? __fget_files+0x3a2/0x420 [ 236.841695][ T8517] ? __fget_files+0x2a/0x420 [ 236.841720][ T8517] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 236.841756][ T8517] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 236.841788][ T8517] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 236.841816][ T8517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.841840][ T8517] ? __fget_files+0x3a2/0x420 [ 236.841869][ T8517] ? fput+0xa0/0xd0 [ 236.841889][ T8517] ? ksys_write+0x242/0x270 [ 236.841924][ T8517] __do_fast_syscall_32+0x27a/0x6a0 [ 236.841947][ T8517] ? do_fast_syscall_32+0x33/0x70 [ 236.841968][ T8517] ? asm_int80_emulation+0x1a/0x20 [ 236.841986][ T8517] ? do_int80_emulation+0x299/0x500 [ 236.842006][ T8517] ? trace_irq_disable+0x3b/0x140 [ 236.842027][ T8517] do_fast_syscall_32+0x33/0x70 [ 236.842049][ T8517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.842071][ T8517] RIP: 0023:0xf707f0ec [ 236.842088][ T8517] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 236.842105][ T8517] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 236.842125][ T8517] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c020aa04 [ 236.842138][ T8517] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.842149][ T8517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.842160][ T8517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.842172][ T8517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.842200][ T8517] [ 237.246763][ T30] usb 4-1: USB disconnect, device number 29 [ 237.271175][ T8530] syzkaller0: entered promiscuous mode [ 237.271222][ T8530] syzkaller0: entered allmulticast mode [ 237.633744][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 238.466952][ T5618] cgroup: fork rejected by pids controller in /syz0 [ 238.712642][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.936370][ T8562] syzkaller0: entered promiscuous mode [ 238.942301][ T8562] syzkaller0: entered allmulticast mode [ 239.012239][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.102119][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.110229][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.117436][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.127654][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.135428][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.250518][ T30] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 239.399498][ T30] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 239.400663][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.400710][ T30] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 239.402790][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.402813][ T30] usb 4-1: Product: syz [ 239.402827][ T30] usb 4-1: Manufacturer: syz [ 239.402842][ T30] usb 4-1: SerialNumber: syz [ 239.632567][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 239.956737][ T8579] kvm: user requested TSC rate below hardware speed [ 239.960436][ T8579] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 241.199694][ T5612] Bluetooth: hci0: command tx timeout [ 241.232649][ T8579] netlink: 'syz.2.913': attribute type 2 has an invalid length. [ 241.241555][ T8580] netlink: 'syz.2.913': attribute type 2 has an invalid length. [ 241.256229][ T8587] FAULT_INJECTION: forcing a failure. [ 241.256229][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 241.272585][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.4.916 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.272615][ T8587] Tainted: [L]=SOFTLOCKUP [ 241.272625][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.272651][ T8587] Call Trace: [ 241.272659][ T8587] [ 241.272668][ T8587] dump_stack_lvl+0xe8/0x150 [ 241.272701][ T8587] should_fail_ex+0x410/0x560 [ 241.272731][ T8587] should_failslab+0xa8/0x100 [ 241.272755][ T8587] __kmalloc_noprof+0xfe/0x720 [ 241.272785][ T8587] ? tomoyo_encode+0x2ad/0x570 [ 241.272821][ T8587] ? tomoyo_encode+0x2ad/0x570 [ 241.272856][ T8587] tomoyo_encode+0x2ad/0x570 [ 241.272891][ T8587] tomoyo_realpath_from_path+0x5fa/0x640 [ 241.272931][ T8587] ? tomoyo_path_number_perm+0x219/0x5f0 [ 241.272956][ T8587] tomoyo_path_number_perm+0x246/0x5f0 [ 241.272985][ T8587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.273010][ T8587] ? __lock_acquire+0x683/0x2cf0 [ 241.273045][ T8587] ? hook_file_ioctl_compat+0x1f2/0x600 [ 241.273088][ T8587] ? __fget_files+0x2a/0x420 [ 241.273111][ T8587] ? __fget_files+0x3a2/0x420 [ 241.273128][ T8587] ? __fget_files+0x2a/0x420 [ 241.273149][ T8587] security_file_ioctl_compat+0xc3/0x2a0 [ 241.273171][ T8587] __ia32_compat_sys_ioctl+0x139/0x950 [ 241.273198][ T8587] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 241.273221][ T8587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.273240][ T8587] ? __fget_files+0x3a2/0x420 [ 241.273263][ T8587] ? fput+0xa0/0xd0 [ 241.273279][ T8587] ? ksys_write+0x242/0x270 [ 241.273310][ T8587] __do_fast_syscall_32+0x27a/0x6a0 [ 241.273328][ T8587] ? do_fast_syscall_32+0x33/0x70 [ 241.273345][ T8587] ? asm_int80_emulation+0x1a/0x20 [ 241.273359][ T8587] ? do_int80_emulation+0x299/0x500 [ 241.273375][ T8587] ? trace_irq_disable+0x3b/0x140 [ 241.273394][ T8587] do_fast_syscall_32+0x33/0x70 [ 241.273411][ T8587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.273429][ T8587] RIP: 0023:0xf7f240ec [ 241.273444][ T8587] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 241.273458][ T8587] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 241.273475][ T8587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 241.273486][ T8587] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.273496][ T8587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.273506][ T8587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.273515][ T8587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.273538][ T8587] [ 241.290420][ T8587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.307458][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.462195][ T30] usb 4-1: USB disconnect, device number 30 [ 241.629204][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.917'. [ 241.667372][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 241.677258][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.109968][ T13] bridge_slave_1: left allmulticast mode [ 242.109999][ T13] bridge_slave_1: left promiscuous mode [ 242.110208][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.123105][ T13] bridge_slave_0: left allmulticast mode [ 242.123130][ T13] bridge_slave_0: left promiscuous mode [ 242.124884][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.339999][ T1646] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 242.466089][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.477509][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.487780][ T13] bond0 (unregistering): Released all slaves [ 242.499256][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 242.499325][ T13] dummy0: entered promiscuous mode [ 242.513939][ T1646] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.515810][ T1646] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.515841][ T1646] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.515877][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.526595][ T8603] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.538347][ T1646] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.549096][ T13] bond1 (unregistering): (slave dummy0): Releasing active interface [ 242.578980][ T13] bond1 (unregistering): Released all slaves [ 242.797764][ T8603] program syz.2.922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.942797][ T9] usb 3-1: USB disconnect, device number 32 [ 243.279265][ T5612] Bluetooth: hci0: command tx timeout [ 243.311621][ T8617] syzkaller0: entered promiscuous mode [ 243.320039][ T8617] syzkaller0: entered allmulticast mode [ 243.333556][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.333651][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.333793][ T8574] bridge_slave_0: entered allmulticast mode [ 243.337639][ T8574] bridge_slave_0: entered promiscuous mode [ 243.346847][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.348498][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.349694][ T8574] bridge_slave_1: entered allmulticast mode [ 243.354911][ T8574] bridge_slave_1: entered promiscuous mode [ 245.364814][ T5612] Bluetooth: hci0: command tx timeout [ 245.711062][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 245.936713][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.929'. [ 246.059295][ T8652] FAULT_INJECTION: forcing a failure. [ 246.059295][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 246.072320][ T8652] CPU: 0 UID: 0 PID: 8652 Comm: syz.3.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.072358][ T8652] Tainted: [L]=SOFTLOCKUP [ 246.072364][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.072376][ T8652] Call Trace: [ 246.072383][ T8652] [ 246.072391][ T8652] dump_stack_lvl+0xe8/0x150 [ 246.072422][ T8652] should_fail_ex+0x410/0x560 [ 246.072451][ T8652] should_failslab+0xa8/0x100 [ 246.072474][ T8652] __kmalloc_cache_noprof+0xa3/0x600 [ 246.072513][ T8652] ? nf_tables_commit+0x9c8/0xada0 [ 246.072536][ T8652] ? nf_tables_commit+0x9c8/0xada0 [ 246.072563][ T8652] nf_tables_commit+0x9c8/0xada0 [ 246.072609][ T8652] ? do_raw_spin_unlock+0xf5/0x200 [ 246.072636][ T8652] ? __pfx_nf_tables_commit+0x10/0x10 [ 246.072661][ T8652] ? __free_frozen_pages+0x7ed/0xd90 [ 246.072697][ T8652] ? nf_tables_newrule+0x258d/0x28a0 [ 246.072736][ T8652] ? __pfx_nf_tables_newrule+0x10/0x10 [ 246.072760][ T8652] ? nfnl_pernet+0x23/0x240 [ 246.072802][ T8652] nfnetlink_rcv+0x1caf/0x28c0 [ 246.072858][ T8652] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 246.072900][ T8652] ? ref_tracker_free+0x689/0x830 [ 246.072947][ T8652] ? skb_clone+0x246/0x3a0 [ 246.072978][ T8652] ? __netlink_deliver_tap+0x811/0x860 [ 246.073012][ T8652] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.073040][ T8652] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.073072][ T8652] netlink_unicast+0x7bd/0x940 [ 246.073109][ T8652] netlink_sendmsg+0x813/0xb40 [ 246.073147][ T8652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.073179][ T8652] ? aa_sock_msg_perm+0xf6/0x1c0 [ 246.073212][ T8652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.073240][ T8652] sock_sendmsg_nosec+0x13a/0x180 [ 246.073263][ T8652] ____sys_sendmsg+0x54e/0x850 [ 246.073295][ T8652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.073335][ T8652] ___sys_sendmsg+0x2a5/0x360 [ 246.073368][ T8652] ? __lock_acquire+0x683/0x2cf0 [ 246.073391][ T8652] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.073415][ T8652] ? get_pid_task+0x20/0x1f0 [ 246.073432][ T8652] ? get_pid_task+0x20/0x1f0 [ 246.073448][ T8652] ? get_pid_task+0x20/0x1f0 [ 246.073499][ T8652] ? __fget_files+0x2a/0x420 [ 246.073521][ T8652] ? __fget_files+0x3a2/0x420 [ 246.073554][ T8652] __sys_sendmsg+0x177/0x240 [ 246.073583][ T8652] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.073626][ T8652] __do_fast_syscall_32+0x27a/0x6a0 [ 246.073650][ T8652] ? do_fast_syscall_32+0x33/0x70 [ 246.073670][ T8652] ? asm_int80_emulation+0x1a/0x20 [ 246.073688][ T8652] ? do_int80_emulation+0x299/0x500 [ 246.073709][ T8652] ? trace_irq_disable+0x3b/0x140 [ 246.073732][ T8652] do_fast_syscall_32+0x33/0x70 [ 246.073754][ T8652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.073777][ T8652] RIP: 0023:0xf700f0ec [ 246.073794][ T8652] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 246.073810][ T8652] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 246.073829][ T8652] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 246.073843][ T8652] RDX: 0000000024000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.073854][ T8652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.073864][ T8652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.073875][ T8652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.073904][ T8652] [ 247.442945][ T5612] Bluetooth: hci0: command tx timeout [ 247.863546][ T13] hsr_slave_0: left promiscuous mode [ 247.869775][ T13] hsr_slave_1: left promiscuous mode [ 247.870598][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.870623][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.892291][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.899826][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.913320][ T13] veth1_macvtap: left promiscuous mode [ 247.919659][ T13] veth0_macvtap: left promiscuous mode [ 247.925350][ T13] veth1_vlan: left promiscuous mode [ 247.929003][ T13] veth0_vlan: left promiscuous mode [ 248.128212][ T13] team0 (unregistering): Port device team_slave_1 removed [ 248.138213][ T13] team0 (unregistering): Port device team_slave_0 removed [ 248.234853][ T8574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.250377][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'. [ 248.259810][ T30] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 248.296800][ T8574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.445186][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 248.451849][ T30] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 248.457370][ T30] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 248.457396][ T30] usb 2-1: config 0 has no interface number 0 [ 248.457434][ T30] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 248.457457][ T30] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.457477][ T30] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 248.457501][ T30] usb 2-1: config 0 interface 196 has no altsetting 0 [ 248.462969][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.462993][ T30] usb 2-1: Product: syz [ 248.463007][ T30] usb 2-1: Manufacturer: syz [ 248.463020][ T30] usb 2-1: SerialNumber: syz [ 248.467493][ T30] usb 2-1: config 0 descriptor?? [ 248.470925][ T8669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 248.526778][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 248.574522][ T8574] team0: Port device team_slave_0 added [ 248.583092][ T8574] team0: Port device team_slave_1 added [ 248.589655][ T8671] syzkaller0: entered promiscuous mode [ 248.596831][ T8671] syzkaller0: entered allmulticast mode [ 248.754394][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.754449][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.754491][ T8574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.891074][ T30] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 3 bytes [ 248.891322][ T30] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 248.953720][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.953760][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.953801][ T8574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.204436][ T8574] hsr_slave_0: entered promiscuous mode [ 249.214178][ T8574] hsr_slave_1: entered promiscuous mode [ 249.220717][ T8574] debugfs: 'hsr0' already exists in 'hsr' [ 249.229096][ T8574] Cannot create hsr debugfs directory [ 249.233376][ T5674] usb 2-1: USB disconnect, device number 41 [ 249.261650][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 249.518195][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 250.537703][ T8716] raw_sendmsg: syz.3.943 forgot to set AF_INET. Fix it! [ 250.719693][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 250.879368][ T8574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.879464][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 250.896117][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.910550][ T8574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.913346][ T8574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.934646][ T9] usb 2-1: config 0 descriptor?? [ 250.950145][ T8574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.950954][ T8574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.979378][ T8574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.992153][ T8574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.001976][ T8574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.015420][ T8749] syzkaller0: entered promiscuous mode [ 251.015456][ T8749] syzkaller0: entered allmulticast mode [ 251.068779][ T5700] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 251.216716][ T8574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.238847][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 251.245135][ T5700] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 251.258431][ T8574] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.266016][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.277172][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.277265][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.296283][ T8761] syzkaller0: entered promiscuous mode [ 251.296316][ T8761] syzkaller0: entered allmulticast mode [ 251.311170][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.311208][ T5700] usb 4-1: Product: syz [ 251.311270][ T5700] usb 4-1: Manufacturer: syz [ 251.311288][ T5700] usb 4-1: SerialNumber: syz [ 251.339850][ T5700] usb 4-1: config 0 descriptor?? [ 251.344321][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.344427][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.365122][ T5700] cdc_ether 4-1:0.0: missing cdc header descriptor [ 251.370645][ T8732] binder: 8725:8732 ioctl 400c620e 80000240 returned -22 [ 251.383245][ T5700] usb 4-1: unsupported MDLM descriptors [ 251.511309][ T8574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.604990][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.605415][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.626382][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.626830][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.659922][ T8574] veth0_vlan: entered promiscuous mode [ 251.678236][ T8574] veth1_vlan: entered promiscuous mode [ 251.736204][ T8574] veth0_macvtap: entered promiscuous mode [ 251.743247][ T8574] veth1_macvtap: entered promiscuous mode [ 251.767508][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.783118][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.852907][ T1434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.856953][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.856994][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.857027][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.871565][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.871978][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.968977][ T5700] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 251.988011][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.988051][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.007837][ T9] ath6kl: Failed to submit usb control message: -110 [ 252.007911][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 252.007927][ T9] ath6kl: Unable to send get target info: -110 [ 252.037466][ T9] ath6kl: Failed to init ath6kl core: -110 [ 252.038938][ T9] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 252.045512][ T1434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.045530][ T1434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.138693][ T5700] usb 5-1: Using ep0 maxpacket: 16 [ 252.147930][ T5700] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.164904][ T5700] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.164946][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.184131][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.184524][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.208168][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.208209][ T5700] usb 5-1: Product: syz [ 252.208240][ T5700] usb 5-1: Manufacturer: syz [ 252.208258][ T5700] usb 5-1: SerialNumber: syz [ 252.243811][ T5700] usb 5-1: 0:2 : does not exist [ 252.456781][ T5700] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 252.545180][ T5700] usb 5-1: USB disconnect, device number 40 [ 252.586340][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.605659][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.616617][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.627916][ T1646] usb 4-1: USB disconnect, device number 31 [ 253.059466][ T1646] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 253.208675][ T1646] usb 3-1: Using ep0 maxpacket: 32 [ 253.215859][ T1646] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 253.231701][ T1646] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 253.231743][ T1646] usb 3-1: config 0 has no interface number 0 [ 253.231797][ T1646] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 253.231827][ T1646] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.231852][ T1646] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.231878][ T1646] usb 3-1: config 0 interface 196 has no altsetting 0 [ 253.279870][ T5700] usb 2-1: USB disconnect, device number 42 [ 253.314293][ T1646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.314336][ T1646] usb 3-1: Product: syz [ 253.314376][ T1646] usb 3-1: Manufacturer: syz [ 253.314394][ T1646] usb 3-1: SerialNumber: syz [ 253.343125][ T1646] usb 3-1: config 0 descriptor?? [ 253.362023][ T8796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 253.476341][ T8817] FAULT_INJECTION: forcing a failure. [ 253.476341][ T8817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.476397][ T8817] CPU: 0 UID: 0 PID: 8817 Comm: syz.1.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.476422][ T8817] Tainted: [L]=SOFTLOCKUP [ 253.476428][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.476436][ T8817] Call Trace: [ 253.476442][ T8817] [ 253.476449][ T8817] dump_stack_lvl+0xe8/0x150 [ 253.476478][ T8817] should_fail_ex+0x410/0x560 [ 253.476506][ T8817] _copy_to_user+0x31/0xb0 [ 253.476535][ T8817] simple_read_from_buffer+0xe1/0x170 [ 253.476563][ T8817] proc_fail_nth_read+0x1bb/0x230 [ 253.476594][ T8817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.476624][ T8817] ? rw_verify_area+0x24a/0x4c0 [ 253.476649][ T8817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.476674][ T8817] vfs_read+0x213/0xa80 [ 253.476703][ T8817] ? __pfx___mutex_lock+0x10/0x10 [ 253.476725][ T8817] ? __pfx_vfs_read+0x10/0x10 [ 253.476759][ T8817] ? __fget_files+0x2a/0x420 [ 253.476786][ T8817] ? __fget_files+0x3a2/0x420 [ 253.476806][ T8817] ? __fget_files+0x2a/0x420 [ 253.476837][ T8817] ksys_read+0x150/0x270 [ 253.476863][ T8817] ? __pfx_ksys_read+0x10/0x10 [ 253.476892][ T8817] ? asm_int80_emulation+0x1a/0x20 [ 253.476915][ T8817] do_int80_emulation+0x198/0x500 [ 253.476936][ T8817] ? trace_irq_disable+0x3b/0x140 [ 253.476953][ T8817] ? asm_int80_emulation+0x1a/0x20 [ 253.476971][ T8817] ? clear_bhb_loop+0x70/0xc0 [ 253.476989][ T8817] ? clear_bhb_loop+0x70/0xc0 [ 253.477012][ T8817] asm_int80_emulation+0x1a/0x20 [ 253.477029][ T8817] RIP: 0023:0xf71e74eb [ 253.477046][ T8817] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 253.477062][ T8817] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 253.477082][ T8817] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 253.477095][ T8817] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 253.477106][ T8817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.477116][ T8817] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 253.477127][ T8817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.477155][ T8817] [ 253.792140][ T1646] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 3 bytes [ 253.792390][ T1646] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 253.929689][ T8824] syzkaller0: entered promiscuous mode [ 253.935382][ T8824] syzkaller0: entered allmulticast mode [ 254.094201][ T5700] usb 3-1: USB disconnect, device number 33 [ 254.372840][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 254.941623][ T8868] FAULT_INJECTION: forcing a failure. [ 254.941623][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 254.941679][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.0.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.941703][ T8868] Tainted: [L]=SOFTLOCKUP [ 254.941708][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.941717][ T8868] Call Trace: [ 254.941723][ T8868] [ 254.941729][ T8868] dump_stack_lvl+0xe8/0x150 [ 254.941759][ T8868] should_fail_ex+0x410/0x560 [ 254.941787][ T8868] should_failslab+0xa8/0x100 [ 254.941809][ T8868] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 254.941839][ T8868] ? lockdep_hardirqs_on+0x7b/0x110 [ 254.941858][ T8868] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 254.941882][ T8868] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 254.941911][ T8868] kmemdup_nul+0x36/0xf0 [ 254.941932][ T8868] vfs_parse_monolithic_sep+0x21b/0x360 [ 254.941957][ T8868] ? fuse_init_fs_context+0x55/0x210 [ 254.941977][ T8868] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 254.942004][ T8868] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 254.942046][ T8868] ? alloc_fs_context+0x9b7/0xd00 [ 254.942080][ T8868] do_new_mount+0x2e2/0xdc0 [ 254.942107][ T8868] ? __pfx_do_new_mount+0x10/0x10 [ 254.942130][ T8868] ? ns_capable+0x89/0xe0 [ 254.942156][ T8868] ? path_mount+0x647/0x1050 [ 254.942180][ T8868] ? user_path_at+0xd4/0x160 [ 254.942207][ T8868] __se_sys_mount+0x31d/0x420 [ 254.942234][ T8868] ? __pfx___se_sys_mount+0x10/0x10 [ 254.942261][ T8868] ? __ia32_sys_mount+0x20/0xc0 [ 254.942285][ T8868] __do_fast_syscall_32+0x27a/0x6a0 [ 254.942307][ T8868] ? do_fast_syscall_32+0x33/0x70 [ 254.942328][ T8868] ? asm_int80_emulation+0x1a/0x20 [ 254.942346][ T8868] ? do_int80_emulation+0x299/0x500 [ 254.942366][ T8868] ? trace_irq_disable+0x3b/0x140 [ 254.942388][ T8868] do_fast_syscall_32+0x33/0x70 [ 254.942409][ T8868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.942432][ T8868] RIP: 0023:0xf6fff0ec [ 254.942448][ T8868] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 254.942465][ T8868] RSP: 002b:00000000f53cc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 254.942485][ T8868] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080002080 [ 254.942498][ T8868] RDX: 00000000800020c0 RSI: 0000000000000413 RDI: 00000000800003c0 [ 254.942511][ T8868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.942522][ T8868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.942533][ T8868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.942562][ T8868] [ 255.601272][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.607729][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853729][ T8881] syzkaller0: entered promiscuous mode [ 255.861159][ T8881] syzkaller0: entered allmulticast mode [ 256.157197][ T8875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.158450][ T8875] IPv6: NLM_F_CREATE should be set when creating new route [ 256.158498][ T8875] IPv6: NLM_F_CREATE should be set when creating new route [ 256.159182][ T8875] IPv6: NLM_F_CREATE should be set when creating new route [ 256.268798][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 256.268836][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 256.738714][ T1646] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 256.908674][ T5717] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 256.916451][ T1646] usb 1-1: Using ep0 maxpacket: 32 [ 256.922240][ T1646] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 256.932848][ T1646] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 256.932892][ T1646] usb 1-1: config 0 has no interface number 0 [ 256.932957][ T1646] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 256.932988][ T1646] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.933013][ T1646] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 256.933040][ T1646] usb 1-1: config 0 interface 196 has no altsetting 0 [ 256.989118][ T1646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.997210][ T1646] usb 1-1: Product: syz [ 257.001740][ T1646] usb 1-1: Manufacturer: syz [ 257.006425][ T1646] usb 1-1: SerialNumber: syz [ 257.022899][ T1646] usb 1-1: config 0 descriptor?? [ 257.030197][ T8900] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 257.058723][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 257.062276][ T5717] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 257.072742][ T5717] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 257.076325][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.076350][ T5717] usb 4-1: Product: syz [ 257.076364][ T5717] usb 4-1: Manufacturer: syz [ 257.076378][ T5717] usb 4-1: SerialNumber: syz [ 257.087501][ T5717] usb 4-1: config 0 descriptor?? [ 257.105135][ T5717] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 257.105532][ T5717] dvb-usb: bulk message failed: -22 (2/0) [ 257.139341][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.149420][ T5717] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 257.149496][ T5717] usb 4-1: media controller created [ 257.175405][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.267673][ T5717] usb 4-1: selecting invalid altsetting 7 [ 257.267712][ T5717] cxusb: set interface failed [ 257.268063][ T5717] dvb-usb: bulk message failed: -22 (1/0) [ 257.306117][ T8905] cxusb: i2c wr: len=80 is too big! [ 257.306117][ T8905] [ 257.461398][ T1646] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 3 bytes [ 257.470963][ T1646] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 257.491011][ T5717] DVB: Unable to find symbol lgdt330x_attach() [ 257.491050][ T5717] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 257.644661][ T8918] syzkaller0: entered promiscuous mode [ 257.644693][ T8918] syzkaller0: entered allmulticast mode [ 257.668920][ T5717] rc_core: IR keymap rc-dvico-portable not found [ 257.668949][ T5717] Registered IR keymap rc-empty [ 257.689302][ T5717] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 257.697092][ T5717] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input74 [ 257.741624][ T5717] dvb-usb: schedule remote query interval to 100 msecs. [ 257.741659][ T5717] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 257.747632][ T5717] usb 4-1: USB disconnect, device number 32 [ 257.751980][ T8916] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[8921] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[8916] [ 257.862425][ T5700] usb 1-1: USB disconnect, device number 37 [ 257.917341][ T5717] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 258.239442][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 258.371293][ T8933] FAULT_INJECTION: forcing a failure. [ 258.371293][ T8933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.371430][ T8933] CPU: 0 UID: 0 PID: 8933 Comm: syz.1.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.371453][ T8933] Tainted: [L]=SOFTLOCKUP [ 258.371460][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.371471][ T8933] Call Trace: [ 258.371479][ T8933] [ 258.371487][ T8933] dump_stack_lvl+0xe8/0x150 [ 258.371518][ T8933] should_fail_ex+0x410/0x560 [ 258.371547][ T8933] _copy_to_user+0x31/0xb0 [ 258.371574][ T8933] video_usercopy+0xdf4/0x1430 [ 258.371601][ T8933] ? __pfx___video_do_ioctl+0x10/0x10 [ 258.371622][ T8933] ? __pfx_video_usercopy+0x10/0x10 [ 258.371658][ T8933] ? __fget_files+0x2a/0x420 [ 258.371684][ T8933] v4l2_ioctl+0x18d/0x1e0 [ 258.371713][ T8933] v4l2_compat_ioctl32+0x1c4/0x270 [ 258.371742][ T8933] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 258.371773][ T8933] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 258.371802][ T8933] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.371824][ T8933] ? __fget_files+0x3a2/0x420 [ 258.371852][ T8933] ? fput+0xa0/0xd0 [ 258.371872][ T8933] ? ksys_write+0x242/0x270 [ 258.371907][ T8933] __do_fast_syscall_32+0x27a/0x6a0 [ 258.371928][ T8933] ? do_fast_syscall_32+0x33/0x70 [ 258.371949][ T8933] ? asm_int80_emulation+0x1a/0x20 [ 258.371968][ T8933] ? do_int80_emulation+0x299/0x500 [ 258.371988][ T8933] ? trace_irq_disable+0x3b/0x140 [ 258.372009][ T8933] do_fast_syscall_32+0x33/0x70 [ 258.372030][ T8933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.372052][ T8933] RIP: 0023:0xf70af0ec [ 258.372068][ T8933] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 258.372084][ T8933] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 258.372104][ T8933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565e [ 258.372117][ T8933] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.372128][ T8933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.372138][ T8933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 258.372150][ T8933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.372176][ T8933] [ 258.411608][ T25] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 258.427809][ T25] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 258.427837][ T25] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 258.427856][ T25] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 258.427874][ T25] usb 3-1: config 220 has no interface number 2 [ 258.427934][ T25] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 258.427962][ T25] usb 3-1: config 220 interface 0 has no altsetting 0 [ 258.427980][ T25] usb 3-1: config 220 interface 76 has no altsetting 0 [ 258.427997][ T25] usb 3-1: config 220 interface 1 has no altsetting 0 [ 258.464776][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.464806][ T25] usb 3-1: Product: syz [ 258.464820][ T25] usb 3-1: Manufacturer: syz [ 258.464835][ T25] usb 3-1: SerialNumber: syz [ 259.055114][ T8952] syzkaller0: entered promiscuous mode [ 259.055154][ T8952] syzkaller0: entered allmulticast mode [ 259.090559][ T8955] ================================================================== [ 259.090576][ T8955] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.090620][ T8955] Write of size 640 at addr ffffc90002566e00 by task vivid-000-vid-c/8955 [ 259.090639][ T8955] [ 259.090651][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) ** replaying previous printk message ** [ 259.090651][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 259.090678][ T8955] Tainted: [L]=SOFTLOCKUP [ 259.090685][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.090696][ T8955] Call Trace: [ 259.090704][ T8955] [ 259.090711][ T8955] dump_stack_lvl+0xe8/0x150 [ 259.090739][ T8955] print_address_description+0x55/0x1e0 [ 259.090764][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.090790][ T8955] print_report+0x58/0x70 [ 259.090812][ T8955] kasan_report+0x117/0x150 [ 259.090834][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.090865][ T8955] kasan_check_range+0x264/0x2c0 [ 259.090885][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.090912][ T8955] __asan_memcpy+0x40/0x70 [ 259.090939][ T8955] tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.090978][ T8955] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 259.091003][ T8955] ? __lock_acquire+0x683/0x2cf0 [ 259.091036][ T8955] ? __lock_acquire+0x683/0x2cf0 [ 259.091056][ T8955] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.091088][ T8955] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 259.091113][ T8955] ? vivid_thread_vid_cap+0x491/0x11e0 [ 259.091142][ T8955] vivid_thread_vid_cap+0x927/0x11e0 [ 259.091162][ T8955] ? __lock_acquire+0x683/0x2cf0 [ 259.091189][ T8955] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 259.091218][ T8955] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.091247][ T8955] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.091273][ T8955] ? __kthread_parkme+0x71/0x1f0 [ 259.091299][ T8955] ? __kthread_parkme+0x199/0x1f0 [ 259.091324][ T8955] kthread+0x38b/0x480 [ 259.091339][ T8955] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 259.091358][ T8955] ? __pfx_kthread+0x10/0x10 [ 259.091375][ T8955] ret_from_fork+0x514/0xb70 [ 259.091393][ T8955] ? __pfx_ret_from_fork+0x10/0x10 [ 259.091409][ T8955] ? load_gs_index+0x97/0xc0 [ 259.091433][ T8955] ? __switch_to+0xc89/0x1420 [ 259.091458][ T8955] ? __pfx_kthread+0x10/0x10 [ 259.091476][ T8955] ret_from_fork_asm+0x1a/0x30 [ 259.091511][ T8955] [ 259.091518][ T8955] [ 259.091523][ T8955] The buggy address belongs to a 2-page vmalloc region starting at 0xffffc90002565000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 259.091559][ T8955] The buggy address belongs to the physical page: [ 259.091575][ T8955] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888074061a50 pfn:0x74061 [ 259.091594][ T8955] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 259.091629][ T8955] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 259.091645][ T8955] raw: ffff888074061a50 0000000000000000 00000001ffffffff 0000000000000000 [ 259.091656][ T8955] page dumped because: kasan: bad access detected [ 259.091665][ T8955] page_owner tracks the page as allocated [ 259.091672][ T8955] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 8954, tgid 8949 (syz.1.995), ts 259070394371 [ 259.091701][ T8955] post_alloc_hook+0x1f9/0x250 [ 259.091725][ T8955] get_page_from_freelist+0x2209/0x2280 [ 259.091742][ T8955] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 259.091758][ T8955] alloc_pages_mpol+0x21e/0x390 [ 259.091776][ T8955] alloc_pages_noprof+0xb1/0x2b0 [ 259.091795][ T8955] __vmalloc_node_range_noprof+0x709/0x1560 [ 259.091819][ T8955] vmalloc_user_noprof+0xad/0xe0 [ 259.091841][ T8955] vb2_vmalloc_alloc+0xef/0x360 [ 259.091858][ T8955] __vb2_queue_alloc+0xa0b/0x1660 [ 259.091883][ T8955] vb2_core_reqbufs+0xc3f/0x1470 [ 259.091905][ T8955] __vb2_init_fileio+0x310/0x1040 [ 259.091922][ T8955] __vb2_perform_fileio+0x287/0x1660 [ 259.091939][ T8955] vb2_fop_read+0x282/0x360 [ 259.091954][ T8955] v4l2_read+0x19c/0x2c0 [ 259.091968][ T8955] vfs_read+0x213/0xa80 [ 259.091988][ T8955] ksys_read+0x150/0x270 [ 259.092008][ T8955] page last free pid 7923 tgid 7922 ts 203786645716 stack trace: [ 259.092021][ T8955] __free_frozen_pages+0xc93/0xd90 [ 259.092043][ T8955] packet_set_ring+0x1a5b/0x24b0 [ 259.092060][ T8955] packet_release+0x805/0xd30 [ 259.092075][ T8955] __sock_release+0xa0/0x1f0 [ 259.092091][ T8955] sock_close+0x1c/0x30 [ 259.092104][ T8955] __fput+0x418/0xa50 [ 259.092120][ T8955] task_work_run+0x1d9/0x270 [ 259.092136][ T8955] exit_to_user_mode_loop+0x204/0x770 [ 259.092152][ T8955] __do_fast_syscall_32+0x437/0x6a0 [ 259.092172][ T8955] do_fast_syscall_32+0x33/0x70 [ 259.092191][ T8955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.092212][ T8955] [ 259.092217][ T8955] Memory state around the buggy address: [ 259.092227][ T8955] ffffc90002566f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 259.092240][ T8955] ffffc90002566f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 259.092252][ T8955] >ffffc90002567000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 259.092260][ T8955] ^ [ 259.092270][ T8955] ffffc90002567080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 259.092282][ T8955] ffffc90002567100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 259.092291][ T8955] ================================================================== [ 259.132097][ T8955] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 259.626781][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 259.638059][ T8955] Tainted: [L]=SOFTLOCKUP [ 259.642374][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.652414][ T8955] Call Trace: [ 259.655680][ T8955] [ 259.658605][ T8955] vpanic+0x56d/0xa60 [ 259.662596][ T8955] ? __pfx_vpanic+0x10/0x10 [ 259.667106][ T8955] panic+0xc5/0xd0 [ 259.670822][ T8955] ? __pfx_panic+0x10/0x10 [ 259.675235][ T8955] ? preempt_schedule_thunk+0x16/0x40 [ 259.680605][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.686238][ T8955] ? preempt_schedule_thunk+0x16/0x40 [ 259.691605][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.697234][ T8955] check_panic_on_warn+0x89/0xb0 [ 259.702166][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.707795][ T8955] end_report+0x73/0x170 [ 259.712029][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.717656][ T8955] kasan_report+0x128/0x150 [ 259.722153][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.727784][ T8955] kasan_check_range+0x264/0x2c0 [ 259.732712][ T8955] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.738342][ T8955] __asan_memcpy+0x40/0x70 [ 259.742753][ T8955] tpg_fill_plane_buffer+0x1220/0x22b0 [ 259.748220][ T8955] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 259.754017][ T8955] ? __lock_acquire+0x683/0x2cf0 [ 259.758961][ T8955] ? __lock_acquire+0x683/0x2cf0 [ 259.763889][ T8955] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.769693][ T8955] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 259.775840][ T8955] ? vivid_thread_vid_cap+0x491/0x11e0 [ 259.781297][ T8955] vivid_thread_vid_cap+0x927/0x11e0 [ 259.786575][ T8955] ? __lock_acquire+0x683/0x2cf0 [ 259.791510][ T8955] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 259.797221][ T8955] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.802248][ T8955] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.808051][ T8955] ? __kthread_parkme+0x71/0x1f0 [ 259.812983][ T8955] ? __kthread_parkme+0x199/0x1f0 [ 259.818001][ T8955] kthread+0x38b/0x480 [ 259.822056][ T8955] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 259.827769][ T8955] ? __pfx_kthread+0x10/0x10 [ 259.832347][ T8955] ret_from_fork+0x514/0xb70 [ 259.836924][ T8955] ? __pfx_ret_from_fork+0x10/0x10 [ 259.842022][ T8955] ? load_gs_index+0x97/0xc0 [ 259.846607][ T8955] ? __switch_to+0xc89/0x1420 [ 259.851279][ T8955] ? __pfx_kthread+0x10/0x10 [ 259.855859][ T8955] ret_from_fork_asm+0x1a/0x30 [ 259.860626][ T8955] [ 259.863956][ T8955] Kernel Offset: disabled [ 259.868277][ T8955] Rebooting in 86400 seconds..