last executing test programs: 35.616890155s ago: executing program 3 (id=2318): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x100000}, 0x800) 35.147419544s ago: executing program 3 (id=2321): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40084) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc1205531, &(0x7f0000002680)=""/4078) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000600)=0x17f) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003"], 0xa0}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x1, 0x0, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x5, 0x1}}) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x1, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x0, 0x3}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = epoll_create(0xeb5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x1, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000480)={0x578, 0x640, 0x190, 0x384, 0x1, 0x20, 0x1, 0x1, {0x460, 0x40}, {0xfff, 0xffffffff}, {0x4, 0x6, 0x1}, {0x7f, 0x3, 0x1}, 0x1, 0x0, 0xe00, 0x8, 0x1, 0x1, 0x3, 0x1, 0xc, 0x8, 0x1, 0x3, 0x20, 0x100, 0x1, 0xc}) epoll_pwait(r10, &(0x7f0000000080)=[{}], 0x1, 0xb6c, 0x0, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f00000000c0)) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c00028004000100930000001400018008000100ac1414bb080002"], 0x90}}, 0x0) 34.976207124s ago: executing program 2 (id=2322): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xcc6bcbde88e96153) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x87, 0x4, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0xfa, 0xc, "b223f598d0ac63bd8eba246c37b349aa19cda756f57c6e0fd1f281c2bc00666b1f1cad248039a1baecc24512c7c400ccf7c2ffb8d8a3ac7f5e992cebbaf0414faf94b5fb61e3edcd9bd383b9495754cf19ed74e87dd955f88a7e2d063bb725c1d37abd08b137805d5e2c607acff63c0de32dfceee98852c55a409f1ce8e42af943dc0ada09ec4876629a804cda8812cc7156325572a7de294700b1120eebedfdcec3b409301ff1c31db9d4ad92a9bba46f0dcd47a5218e5fc99dc601c97163fa9479b76d89cfec0216e4590687c3aaa8331fa40c61154ead2032c5fa7f88d5b9b09bc9c81ab7c2af7a1cf65f3caa9e1a60d91e3bb8cc"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x154}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000002300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006180)="3ea4e4305830d12dd9009ddb857b480e92a48b3e45093694091ed788285937ce7b2473522335a690d828b02ab613f956aecae781037db019ffda49138a514ee99a088fd6a2a0028ea055aef75e65cdadd3589c49eb6088bdec10b6d405a915a037c1f8037e1b9301fe4296ab789db8c69c3636af08fbaffd5106dd3788c626c35510cc0ebafc64e8b300d0ffa3bcea4d2e036bbc8dae2e46312e9a637b3002b8931a66cbc28a30ee3287a18fd34504dce996e2a3f1bb43e867f141ed07ef08e0aea605cb5b10346efd6b41a23ea6741dba1e2416380b330788486bba4e359fc0d094cc5301530c1228fcd0e378e0260dbdd56788ad718cac668467d4c50a9878c501cabe3389dcf76acf0267489de4aec621656bdd3878de387af2a3dfa7dbf460daffbef878ce2536a57b05bc44a1e01ef54cca3ad250298c95a52ae9927030eb1096e00f265283a30b4ede2c934dc62c46929761e230567d2ba5999495a5a0977e3156a44365b177a07cae07864be9765ba56bc7ecb29264e6dad2e41eebfeb1ef4115b923c49a8e0919db1de67b1cc4c2f30a672d64efac91e63d7bbf75784aa49346338b22504452b36266eb5e924d4b215ce5037da7b98f09a8dcd086f36787cdd6fab9ce916d12b7b939f113be8b1872a75aa0d8977fe598227998c8b5fa3be8831006f6071d2522b1c9be03873844b0a6e2ca1489f2391981ed762f743e4bc35fd1ca7158bd995a7b801d8525ce381de5497916d59183636f72e9b58c72179f678d1d4434a1fd39d304c3b62cfca763ee8c6108bdca364a438145775a76462927207a7ae654801635dfe3c1915d2ab57a11675724b17c0becb9b20f95d5beea1dd5a6eb66ea864a7d22bdefdc6e13a2a4a8c7780b4250c92dd9bd99453f24268cedca6963ab64c024e56e6f3ae74cf8d1eb5bc3c7292f5fc7d37b4c48ca981b8f54528dedac99a19c1181698b1982668c49b1a6b55142944a0edf891659ea82570ceefe2ca50a95e7df6496acb6bd979ae4b5b6327a201288b8ddadfe0cb91bdd64e74f06deb0133385f5c9cb6e8e554e4fd29126f550adc440e6d42de1bd3ba0ed5d0ebc91bdaeecc7f253190a21eeb51a14b2d949fe86626a88fd33ccd40379f67de81341d225a116e60770ab972ed872c124cd7c0db88709a48487c1c9fa6442997431b99a1ac224a8523430ddcfd699ad27e16bbb54db40785b869328e8e804ed5fc2f4b3e4548a9e60d5b73b2ac8564e8424e0dd292924feb14fb76ed19b1d76edafb1bd5585717a9eb73a8bef605e3ef3f6f8518faab6559f5b4b7d2c07f73edf67d3780d8b5b2042788e5d2f7c7184a80a1951323632b62101094bd80acfae621e56cef19cd059c9ff72fe564944bf8063137fdc7905cb63489cf8d250bda94f453c94fb2f6f33f972c0ffc4830bc8d7fb98c4ed8ef2fa6e147002d488d97122d579a9b214b09f792279021a20a36a05c74c9a668bbc4ee5bba0d8f7e96fe9a61feb01b7c0537e47894c3e7b5d19ce1568f8d9f49f3adf9c02ac941a3edf68c841f29fbe82450c2bbdcb7270dd2f5722666bd21c0839541c907ff43da0a10a05e47ac636d4f9c59e2abfb00d31621ac3f0455723563e402bd3ec56a2b7e59a82262119b02eedda2baef71a5d5efd2533b7e6fc01d6cae9d514fe63b30fdbd92548760f876f8d77e7fd8500f83e6f4e6290e4df64c73d6ab61737797b05235dea939163cf55f322939014acef81d248baa46e1ffbca5a699f0824988b4313ae222bc8d3a3c1e875054a9494c9beac817179749b5cceabbb7cc40bdb8e18d598b683943a61fe105b868896d78e1e3a802774170ef3c1f339b6d20cfb5a260fa197aad2e18146ef53fa9c783772dc9e251c2140fe89709d007c5343681cdf4569d5f3190c0d799504aa0a9001e26a11708fbe929f63ff691a3a0c7a06125d3b3d13b3241abee4fa8c6d27b26eaa58b454e34fe20128a15cf7f96bfec32904af4b2e04c26bf9393d45b0d66a1a2f15780a67ff34daa1bad27262ec78f27f9ff77157ed5201bf257e1d1d06f2cd3a4cbc02bb9003caebc7e7e9fe7a256de9fc2cce105644c833ee659e3f6d526142d154a881cb70ba8df353a5714bfee5480cf8bff86c62c3a56d45f821d99413f8ea8207a41b7d577e5a1788d051c8c19cc1fc8be844f18227b7eeed330a213a58009c7ea3cfd5c77093b5315c90d36fe15ecd9d9e7e4208aac31abc3928d162449ee68f04aa2aaf5b8711529b97944a863085ed6b59b53b2ef8a397733d5207eb27a81c646eb7079aff7403181b0d658abcdc3445096844b3139ee23cb30f9527b5c84105604e8aa57b32e0470dffa95719415b74ce519ac27b20a38045a9792043d3c5b426deb70b3418d9475c6b85580e7e414c5a9ff35ce7c6fe2f2d5ee8d0aef619d8c2c06e0af87a9bad9dfa2f6ddb57c2e636563a9ee58c8613be2b329f4c16efbe56ae671e712e90712cc4f519276cd7cfa3e421e87ace7e5469665b4345322c77de68639a6f561a0d203d4823d4c3a84f1b2b04c60cd2fe855652c1000b0f5e1bcc2355496522a5046a849d407b5d86123432a41d64b549c1713dc3f0b4a787420c9d3dd3052dbac55dc15ca6584d08bbcc7ece7144fc179d302c5e0833b1f667e0f4110ad9b31f5b7e19e11fc1bf5ea0f9a81806ab5bfa8caff29b84c53c04a85d175c05a74d55b548ae69bb365760ebd841cfd094ce2d7cbf447285f53f5e7cb4ccda0a607c9cf7c3aec55966aca8b8ce33eb30a138c3e4d85e4def697e0e00defa03f2c501010baa3470450bec0acdfcdc7f530584e7c2600ba58722303a11c9387edcfbdc85f1128155374f9844f381c2a8a15bb7df67db46f30b9232d3d6037d86dbbbed316bcc5be6fb3ab78a19c9df2889188c7321ffed7795dfd67f3853e516cbaef5d079aac33cbd2cd920b560945744ae03611257ccc66e9523de5282efbf9871092795c05685cfe8749ff4a4cf42aa19fe4f935a71ba462860f1243824fc2888cccc6866f1c81f05bf993b58621cc8f9c6e72a7db971e1bb40632d75c119acbcdcb88b5f1ed4fa5162da82ea66c21f2064867d86abf308a1c65c0a16879d56e2e76ac4110acca20be3abb731effad3aef7f0da4acb9aed0283111670d5ceeba5a551dff13de90acc9dc3176923ad1791a73eb41a3f5c260e4df26a1b8782fa85e5cbf5c20a62bec97da4096264fafafc9f5dcb9a8ca2990a144d6bd138cddcba35fe3cd2609f0189d37e2d76f6d96ea2ba1d5ec9b42c94f254904cd938ea2004b43a111c2f5b53eca1bdb68f8e84fb5834098ea5dd6388d41c987763c8b2c9733f758dd74ce5eeda6cf28137a4d83a66f05d90fb1c9acb0214eb7e5d0869b201330b6fd1a2948e0ad0af0c4f3deb08fa875223ba27f1d42f63da665eaeac81ea9eca52ae1afaed3f4252976019de7d61059e29c8220e88a2d9a4e6202839c74db853670aeef953e1aa812889e4f8e153f9859af16f130053024a8bac43fad387cd526ef42bea5cad61230bbf89db7946a03101d18dc1ae46d046212ec5285564e65d876283fb937d6e38caaceb5716c8b2628b3a349058fe27fa58d53d6e5a769996217960e50846b2cd1b9fbc686f157e19d69a2050098097d45c2879e89e6fa3c5c79339fa3881fd228c29588befa5eb769a1cc1b67e8426b386ee0e6a80d7dd261b0ffb14b321190f1a390c6a0e8052a750d4cb587720ae43f6ffbd7f9328985b2aece118d4838c2eb55e8592823f74550b5d49377464890903f2650999fecb01fce6f6e51eae4f193bfab5f35b854cb0221e75898f111e94d5861fb15086889a5f804df2f7fd41cd49b663d352c59c6e8455f8287aab47cfba4d860c81ae1f61eb8bba8f18bfec3da3eec80bf39a6ff8d028650da69c108f98cdd8359756ff2b911fa688131121523187f1e449baeb64e332558c9d5ad9794e514a4239fe3277749506d69b3ba9df2c48d0111c526674e1ec144de88c58c93ef06da80e14675d0b14842a1ca644af3d7fd5907a46ae58df07f060088573683d14ab5310d471e139a47f8080fc282f16eae908671f35a9c1a7b2941ec86e85e15207e824437f8f79b173cde14b9fdcb9ecd82b224d45f724df18760a2913d907ed48a696367985713ab99d2416213f9991766161ce075aa6da4a7fba3a47c67d04ad7e669afada886f046363fb03a0cc795e5a1840e419967b1a19f40be8bf2a512015d486d00c4026ea86324b5b541ef8388f070800421c137d8ebe7c9a539b529a4af69165c1a6ea23534ce8efa7efb2ac55969df429f3b32d2f2aecb5087359c1b83224e4cfa2c583a1e147dc0202334a2c953383cc69e3a807299d86358b6f42a499eaa5d5680cd670fb49af6488c7cce6efae45682f98d63371eced65de02a82bf560a335ba630283dd77bd3d15296bc21bc337fc1b6d34d77ea7f681055459447f01b65623218dbadbd1958a249ebb76fea35d56299a017c4d7920fb0433d5769bc5130d8a5ed950f8084ba0036078374b82ad14a232f137214bcaa82ea7fcf7393ff4226aa1effda1d44a6100896ebcffb9414baf53c77c84113ef99f89f9f282b19b0e057893ef9c81399e1db0e3a25549dbdc69895e5eebbc545e248401d18dd20afd2913f89c3c0d95d54d5145f5cf434287e01b73b2646a7dc42e0f64fcdc1f3853aa41a6242c6cbafebfd62d147dce9368259beefe4d28179750893fcbdab5956f582372c1c616db2a23537a353e08e275fece1a7c0c0bd9483160fc643ceed9d687d520e944923f1eeccfe7f2e5e1c5876810efa0deb7f00c8f606ca5c14e3bab922243d013288622cad6667696e6759742376f7546339ad37a9246c98a6500686aaec51e2391285e7bdac34fbd4a1df2147bbee2d56c7189b4aeb3880bbc63e6b922b27133497be09318b064166ee8b5ca1c360dc510592bb3077293ff7e48bbfd2221a8c823eef8e677b51b40c7a8bf00e025cd19af5a418b65567ad9cecf4c16232683740dfceef0bde563a0942db0d77493b2d683d413d9fbd0ac8fca1ecaf6e57fd7ae680a493d8c697d3cc038cfcfc55a9a30152ce450dfec029a4edbd38f10222149a87d358f881847d4daf8b182d6b1313d616a767dbd9d71c7a3ca896021216665fcb2c8fbddb593013118cc8ab5044bd6f99bb278ad871917c9b1684cecb2d0e8babaf33fd98c02d8451aa48f3b2a6d6e9a5d12910c7aff613cbcdda418a76abff697229b47783577d0ce2f0041e1360a10f607612405b9b06180d85617ff9c5993a986b32071cf4c43b97f53eef9311929cb8035ec5c2f65cdc40bd757d612de5b9a7eca6e7e70365dd47256ff9f6e22e91ff22bbbee51e153d5321dc76ee8a664505da2039da1fc87e3727f085a47ce3eb52b95edb41ea295b79752c672348621e4d49c48b7d065d116cd1ebe6203e9ed62a9d3367eec2ed7cf3e4762b5f71c6ab34a953482414b762a455ded6e0ede9e07c3b9915aa51aded822c57a72ee3ed236b7c8c3b26db5092baba5d4d385d1e3c0e0d860da91b33a85c20e30da31b890f85a88a5c105e8aa32d6033beafff9ff510a7c7fa566b86eb473c702fcf08449c581650c42b90843b1baabbe95b476983fc98397abb52450a65505212b25c94a2fe3d64816eb9a76e8e8e945b7dd544aa039e61fc6331d88ee4ba297bf0d59a04c95579b62f316da65064247cc1d45792f1510103708d636c53f201b1dc2004a479bccef0bab9bff46eaaedbaa445417ee040c568ca95e606d9d9431798e91491f48434551cb8d8b4b81b389d43845e04d98dc0edbb74eae8d13ef3f662a26d7e548218952bfb4d697bd5c3700cea776ac3eb0ebae5c101bc341688371e31bda8cf7819ff4fa3a478faf97582d497112e510b2986f4238d3d4219024ac82eddc2dfe6d42dd1652ec09548768cb0a46e475493a75a75c54c47ec1e6265d34a87634e09394c77a41b01f374a79333951eec0423e037e0a5dd3cd12dbcc25fbb028613aa7382bade63c1d300b0a6d021f65fca7905e622eb54bde35d59c169f970e3de01272229e78382c7e87cc052da8b7b2dda1d29bc42fd2b7091feab28c14dd9cca5c8946afd8a466c681025128d3f752a8bfd2a8bc0c1bd89c01ad7803d8fe9ea1247e25d8ec18e0c18b8e6293b85cca5535a075b799519623d98a9bb393df5f17065a7f11142320e3138fae891346ca10040fda33128909b485ca1fa733f7d44e424d8dabe3f38d4249c3cb3f22d10521e536be978ff2dee276098db46b56e782596a68d5144ea1f2dff227956f4f860135ec2e0cee212a51b63c60e775fa2e0a7dbcb6f3d27f09dbaf55343bd2af3aee72ed39e15919d3e5b2bc67710c88a68806f1713313887e72e6af52f7de7009399b81cadfe76bff2b61e53b259218bf854d52644bd8e722e170bf9b109ee819b960b8d9da0d2dacf48083bd8a766d3818eae48ba408e18c63c8b59e282553a71f62083e6a007ffa6ce8ad271b7202da28f1d6be4332f404c1e2b98acc4d783785c1eab14361db6382594a9bbc3304f121f198948c91fe58d96aa6a8e12cc3f46f283e635548d96341fe3052aed45be1970010bb76325873b7902f0f73bf21fbe0a5cef6ec0b50902174c3515c89421a496737024b22db73916c4a41d294b8eec3913421b784a2629132461d4e6d5498a88b87abe2e385df8688b70b075e2139def62c18c60f96c1715e203850155ea7bc8d67e77428e9c96a3edf06d984f29959217633a907e7aa0f9792313fd30c6f767b79981ccbf1bf87942cf082090761f9faf5afb90f56a80908cdf34387d3c9ac4d27321b8b2c64f66eb3bc0f7937b0771b68eee977d5f3682fedb04e51868e4e588eb625a71db0057655af478006000000000000001129d95ef85921db8b584af8e389297c8d59eb4f5f784474e5e293f48c5cc45e490878c31d32bcbfc88d51f96eee3cfaaea0e443505825a52603a06aa8cdc8920af575650833e7715dc2205ecba7e304eb121cb0d65609b853974fe9ddee9b9cb9fe4d1c08fed5b2f3d0f51e104635dba4857520e0cf319438659cb765bbbe6bed3a6451a85e3efe32707b2c84d7fbb99cd80b3529605b221b808cf34bfe776607cb4074cb9371306c74f3c38a4b48f8a8da8a02be28a08f5a0da463aa85863ef54276c4f414667d3812deb6b0e882381932585e3d08c6f3c2c13b9987088b345e1216b3d525c99820c0b6688d9c0271f648da1881e58fbf5bc02acf226d9e90a64911ebb27b415f3ff4f7bdeb9fdd5bb1f39a99f909f80af444b902d1bd96562882da6e0ce9efb2adfdcd78803164a5ebacd12d6246571066e8f05a37d9eebbf41a88926b6bcb287f4ef47728ec00bd96ccd72eefd5815fa9e2840a100e08be686e6b664c938a0eaa7588e87df3c4e92a98a663f83481668e0f3ee684a6728fa38c75cf66ac73dcee17dfa5ca94601b1e5ff91215492270e24c4abe4dce8686e99d3c64e7c3f5972152da99388bb59e282a1e300627e542cfea5a390dd11f0c95f52702982c0e8c690c1e7bca2ecffb7287b617090ace76f818fa8a9078978e1e249a7f4fa281fb3174fec950f6b9afaabb3279e22c9c37a4ea1c05df6c49c1b89b2ed23ca3673f388f502edd3edc358549c039eeec6ca4ae3404bbfb688c3d90cbd4a092e035ec48c3bb1ef08e2b1b6326622419356669a8399954dcbeddb197de9fb5407e105d800b6cfa91de41b2eb3ad2ead5487b9c7b11e76f2ad08711b00cb8f3da6794398a961853bdcbde90086ff13d69154442c8caa36d56862581a9f326f85c6722be613caf2329d4ff9734c99016390e793b6ef90c540ad3c7478d7b221a71e0f10575ce5f666e2425903f3c358c4dc5b29133da5027b541898b501cfa144e166d1b1d7470d05aeda051a1cd5bc3bafee7ccf8564682cd728d0dfaa4f731438de2ca3095f105c0bad8f3b039a427729ba1f96238403e3d1c8a2bdf1730253d6c78e42f4dc5a6079e95ea5013a9d335e628ee7d2dd1c7f2d25342b2be5c9fef9fd5eeddc8665c1a39705231538d0f3a19e9c021a7d6d2d1c6b3f4b483e6198ca6d269db9e82746c5ea36c70f29fc98462ecaeed27547de6435a82112b2ec9a8c1e759f82d04810824d97f1ca45071f6ac242b90b218f2c2c9b4cd42b56dbeb5e947a8e8b476749ab8cc7d910fdb17529440107a565737b69440cac0b418858d62fb7af804c5e483faa849a6375ea62581eff9c4dd3ccacdbab7af9fe9b2be75cb2e322c296cb91a792ab424f77ff348d07dfc2a5c5af476cc7c44de169dc1702ddbd5e4d7fb11172d8eab6df3b70c7b66fec5177a533ed44641c291ed9d8cea6832c24c3cd279c9f3bbb355fe47364d23af48cf8a86d27727ab2adf771641ff447291fa9ba99cf5c2cec5c968d565aabe16cd07d752f7d5b2c78e77cbd2dcb2bc151a35207026c98b755eb0e6fdc94628de7653f7a461e0b51f5c089fc4db6deca2243e3e5532bcc279dfccd2651db61565968dfce800e995626a4bf045e3522b996dee4bd10980ede518f4a5d986f41c53f0e2820853337869645c31c41c9563f1c01ce651e916f7472b04929feecd09ff768bdf74f0b40a0c58555f2a390db9bb7990dc31f995ac4bbf1f90271cd4b90ef7fcd096c34040fbd4a74aefdc5a6b8edf38da8084c87564b10e6e2cd7d0ea6849cff02c06e4df741c278f0d29ed6c6c739376e1c262f9d780fec67aeb519cfa669c9d6487ba527e0ccf5012954dbb3ecdbd3f5be1c018784cf83b3bd040e7116be8401be644a7acf7761a9a18f28c894662f8dd13b1aea577c81bf2447753b57853765eae4353b65475e10c3b36bf0d0dc3199dabff76a06f70b173fac295db1f52100547050f052b9d287155bc8b04435ef35902395ae894bed80080fd3becba14c51da2cf34e2999cdbbf652dc6862e8e65f675b1d7e5da57fbfb497e8111dfe77164372d707a5857325c47afb462f7a38f617d158e8a28fda6d121e532e44b2ca9cef3c34a7a8d748c4edd061b62f6ab7344317b0dbd8ce4836142719a7c0835901236180840246527f3ba39cb64614e95d4af008d281b53853532abdc663051d041af7d1aa9766ab185efb77fcf278f09577e01e507a2034f435b66cab7692a1733d1ad3d5d566396fcacfd1bbdf542e35136a49e2d3cbc21ce157ff051a0c1b636b159f370366565a8ddadaa1502b425ef27a1ff070c52bd17595ee507dc984aeb14d2aba07fe786f3733e3527d5bbfcacfb09d3d5cf94738d1b13d2590b1bb1ea2eb400e9605f90b4b23c125622da85ece62e4493938099a4058e0b3dda2532c6d62bd033ee7a1cd7683620a6501e3ca420f9a64f462bbd4f125d154beff38c8f4a1278f9d6194289234d7e9fd397feb24fe1a8636e334d1342fa590b4578b3c677aae57119bea99ff7a5635b98ee867a282e5f3444b70415c0c33942f041c28589ba0de67d7b7ebe43ec6656f60c82c9d75bc8dac80791cd59a9c576ccf726cc97befcb9aeedf32b9ec6f4aaf043ab9bfc4712ee6bc4906dcd9766658ce56fea361518bb54ccca4bbb82eb64e417a37899ab31736ffddf51f97aa710b29f18ada97a200bd65d655364149db2c41cf32bac2c4bf799bb2356335a4fa01016da72bc7dd99b3f902f8b80a89d19bb04f8c49cdc5a78b17b52d52c06f18baa9839332f3ae59909748cd4dac49c1901f3c2dec64ccb40a49fed1699fe1140f8602384a930fed2ed6f9c120c9e6158aae34d8ec8a4fb0cb7ae19c2865e3939b499b5a08183c342ff4af2b3400980879aaa6e29784e90bfc915b9f31e79b742420952bda798a8b88c77134cc5752630e57fa23f9b174535e3244c9fa475d1b2829fdb768d22d6564e55556fd3750bbb223f3b5748a57c899d324f359c3842fddf8055e1b40588365393b84aa798fcc8b321ba1eeac33d340eda01fdf697e81bb5b55852f6b355a7dd2082cf087949cf9fbbf697af8f81c20f25a1c0b92fcb06dddc50c5d9e989a15a2fb7d0544f1844e3f46711165bab1658615f440b71f93ddb713ba91e8f4d91dd17243082d61cf43fd08861d42f41f1ebc68be633bfcc79b14cdfd7b171ed4b282a926055ce26e7fcf40d1e8e7d05ce6660fdb825dff76d735bce7b43c98e5b6c4763ccff99b45c1439859ccfc61756c298eef7424c465aadcd71455448827e39e5ec21293f2007617fae73b74de8efe349c726a9dac11524720fed5214101b4f26ad6fec2215a54980512a57358545899c6898692d805134d606b3022d16954747d247db0093dbec65fa7d101439ccee58a8790ee0daec0976a743d8f7aabbaf8d9945e95ceede27387e2faebe8d1eae6feedb78cdf016c6c5888e56ab4830b002513f87aed9bb4988784c0debd8f566ea9c8467bab4a52a52de9e262f16ffe222ac1ac6f6d5de557eead4554f03bc8ebd681daa2ae6cf93587d32dcf53a184f5019f0fad0729095a5788b04fc6987064b80c6bba46e36fdd767ca9c6819445e95ec7d60c3f9b2716c206a589e413fd7bf1d8fd3f1245ff54d6db4d7b45f20cb4f6dc8bcde65484d70ac38921f89261d27fc85203b801867850457a3b61fd55e805bd3c40a336bf87101d8914d21c8c968e934ce265cca3efe21d3ae1b78848f7b50a9a2e9b51bfca2ff7e0292ede0aa013af1c09242d6e53f23a216b8ccc64402a46eef3411c06cabb5435b1d2d8ddffc2c3dbbbb0e707e03ae0c518414dc7304dec25084891255011dd133d235e663ff38ee78c9abb93c9f692c5195222c881e35431d638367c7e570c962646424dae41fa2b2af118a93add1e088aaf7e1dd108c7096f4f9868a8af02cc15db7493ef011d320c6d64f6de56a51748e9dc4b7bd1bd515d3e9522a65e87e25477f71a6bddaf7ee5a01d424ac153efaa52f1e56fbef9f66efe5642f7dae41e419a64be65635a088885717942d475daa806ab151b087525446227d0d75a493d5a98486365b3981b3bb77a7c6c6ed44a120a98d0f2d35e8ce83837004c39bf09ac5723b1d7d7392f6e94462e86de853c6841027c697236331e19aa45693b2dbeffea7b00f0b284e49b04935327b9808576b397cb48d6b1960d06058f1cf2d0641d7c99e79dc9d47efd1d5bde85bb51ffe4a687c2d364713ee0ca4981f371c7a418b61118431984324f84f8cdd6e2849c00c1f14b1732a08ffa08d39c312dd809f15c8a651cbec053e870ac04c131946d80a8e684c8f309881f98220d7e532773d4d8304ae53428390ca7914a408030fae3b47619352d8a1edc33856530f806b8efe61bedcbe199aca4dbe79bdacb08b361e31f59c00463071fb19edbc0cb84c59130770fcd17643f7c37c1f54753f40fbeeeee31b22d89944ac6ee913e63145e3e35f804d2cbd08d9f2e278be717872a4fae63d8a8b462f715c3191d394a67a724fab2e4ec31c439fb2fa01295aeb56910fd406316bdfed587c1b42a733542a55793303e59dc23a40bc9b9f5713a3dc21b95b591ac9863f31a4ecd160e7d9b7b2ec2b137e6700", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x11, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x3, 0x0, 0xc0f7, 0x2, 0x8, 0xa7fff, 0x0, 0x0, 0x80, 0xffbffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.688817868s ago: executing program 0 (id=2323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffefd, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x10, 0x62, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 34.231138928s ago: executing program 0 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_trace_dev_match', 0x48180, 0x8b) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xf, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xb}}}, 0x2c}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x2, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600f70000ff0400000006000000180104000000000000000000002020207b9af8ff00000000ac9100000000000037000000f8ffffffb702000008000000b7030000f7ffffff14000000060000005d93000000000000b5030200f7ffffff8500000084000000b7000000f3e2b75307", @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', r5, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r1, &(0x7f0000000300)=0x7ff, 0x7f) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z\xe7\xeb\x06\xcf\xf3>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000005c0)='AQ=v\x0fK9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\x0e\x00\x86 \x83\xe2\xd0,]G\xdaQI\xc0\xe1x\xd6\xf6\xb9%t\x19\xda\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2\x04\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x11\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2JlL\xb8\xa3Vq\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x0e`\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\xcd\n@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6b\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7', 0x0) 33.949772789s ago: executing program 2 (id=2325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x7c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x5d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x49a4, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0x6, {0x5, 0x53, 0x1, "5a5ec3"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0x93, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x1f, 0x2107}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 32.370530034s ago: executing program 2 (id=2327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r1) close(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xecd3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x104}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x26}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x84) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a0102000000000040bafba387000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000008010900010073797a31000000000900010073797a3100000000140000001100010000000000000000000000000a"], 0xdc}}, 0x0) r5 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2710, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 32.309763192s ago: executing program 1 (id=2328): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') pread64(r0, &(0x7f0000000040)=""/33, 0x21, 0x73) (fail_nth: 1) 32.259522852s ago: executing program 3 (id=2329): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, r0, 0x2) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x8, 0x12) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="001506008a85be5fa6290dc2"], 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 32.137826346s ago: executing program 1 (id=2330): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000300)=[{r2, 0x80}], 0x1, 0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x40008001, 0x0, 0x1, 0x1000, 0x106, 0xfa11, 0x65}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) r9 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r5, @ANYRES32=r3, @ANYRES64=r9, @ANYRES32=r4, @ANYRES8=r4], 0x28}, 0x1, 0x0, 0x0, 0x44054}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(r6, 0x0) 31.822755637s ago: executing program 0 (id=2332): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0xb, 0x1, 0x1c52, 0x0, 0x1}, 0x30, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1c48, 0x0, 0x2}, 0x66, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc080) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x30, &(0x7f0000000280)={0x0, 0x400000, 0xfffffffb}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000081c000180090001006d617371000000000c000280080002"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) fremovexattr(r0, &(0x7f0000000380)=@known='user.incfs.size\x00') 31.572824332s ago: executing program 0 (id=2334): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffefd, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x10, 0x62, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 31.177728005s ago: executing program 0 (id=2335): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40084) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc1205531, &(0x7f0000002680)=""/4078) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000600)=0x17f) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003"], 0xa0}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x1, 0x0, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x5, 0x1}}) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x1, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x0, 0x3}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = epoll_create(0xeb5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x1, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000480)={0x578, 0x640, 0x190, 0x384, 0x1, 0x20, 0x1, 0x1, {0x460, 0x40}, {0xfff, 0xffffffff}, {0x4, 0x6, 0x1}, {0x7f, 0x3, 0x1}, 0x1, 0x0, 0xe00, 0x8, 0x1, 0x1, 0x3, 0x1, 0xc, 0x8, 0x1, 0x3, 0x20, 0x100, 0x1, 0xc}) epoll_pwait(r10, &(0x7f0000000080)=[{}], 0x1, 0xb6c, 0x0, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f00000000c0)) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c00028004000100930000001400018008000100ac1414bb080002"], 0x90}}, 0x0) 31.17744334s ago: executing program 4 (id=2336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001000010001000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="850b0101009804000aa2e4bc54cc76ea388900010f1a7b53cbaf2fb5e409092ea25cdad14de6fb29d597ee8c16b1d5e25df023c4f41eb8ff23450f51f1b46ed2b1bfebf53b5cdd663c0cbeec3d8859a418184d4083843c5c372664b0123739be2e7567ca76e91b26be0accab776a46ba5caf17cb37d2469342f64f4d892539a89089a28d9f51eb"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 31.110938587s ago: executing program 4 (id=2337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x7c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x5d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x49a4, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0x6, {0x5, 0x53, 0x1, "5a5ec3"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0x93, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x1f, 0x2107}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 30.974566803s ago: executing program 4 (id=2338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 30.819915889s ago: executing program 0 (id=2339): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x40, 0x4, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffff0b7) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f0000000000000000"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0xfffffffffffffde3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 30.697094839s ago: executing program 4 (id=2340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001880)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xffffffffffffff22, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2000000}]}, 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x10001, 0x81, 0x55, 0x6, 0x1, "e5adfff86b8fd490ea6c20662b0058f441312d"}) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8) sendmmsg$inet6(r2, &(0x7f00000002c0), 0x0, 0x4004804) 30.634343997s ago: executing program 4 (id=2341): socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x7fffffff}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000001}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x7}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x101, 0x4, 0x1}}], 0xb0}, 0x0) syz_usb_disconnect(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 30.241074969s ago: executing program 2 (id=2342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) poll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0xfffffffa) 30.172828761s ago: executing program 2 (id=2343): r0 = socket$inet6(0xa, 0x5, 0xfffffff8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5cf2}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904", @ANYRES64=r1, @ANYRES16=0x0, @ANYRES32=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000000), 0x4) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.140968972s ago: executing program 1 (id=2344): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) (async) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) (async) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80000, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x0, 0x8, 0x0, 0x9075, 0xef, 0xc5e}}, 0xe4) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="324000002600913e"], 0xfe33) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)={0x1}) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r7 = socket$kcm(0x10, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) r9 = syz_ublk_setup_io_uring(0x327d, &(0x7f0000000500)={0x0, 0x30b5, 0x200, 0x2, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) (async, rerun: 32) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000180)=0x7) (rerun: 32) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000300)=0x4) (async, rerun: 32) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99", @ANYRES32], 0x0) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async, rerun: 64) close(0x3) (rerun: 64) 30.110061064s ago: executing program 1 (id=2345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffefd, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x10, 0x62, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.685205876s ago: executing program 1 (id=2346): setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc2e83000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x1, 0x200}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r3, 0x369a, 0x0, 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) read$FUSE(r4, &(0x7f0000001680)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 29.500588272s ago: executing program 3 (id=2347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001000010001000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="850b0101009804000aa2e4bc54cc76ea388900010f1a7b53cbaf2fb5e409092ea25cdad14de6fb29d597ee8c16b1d5e25df023c4f41eb8ff23450f51f1b46ed2b1bfebf53b5cdd663c0cbeec3d8859a418184d4083843c5c372664b0123739be2e7567ca76e91b26be0accab776a46ba5caf17cb37d2469342f64f4d892539a89089a28d9f51eb"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 29.348331267s ago: executing program 3 (id=2348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x7c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x5d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x49a4, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0x6, {0x5, 0x53, 0x1, "5a5ec3"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0x93, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x1f, 0x2107}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 29.149712648s ago: executing program 3 (id=2349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001ac0)=""/4106, 0x100a}, {&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/162, 0xa2}, {&(0x7f0000003900)=""/146, 0x92}, {&(0x7f0000000080)=""/97, 0x61}], 0x7}, 0x9}], 0x4, 0x0, 0x0) io_setup(0x2dd8, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x5, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2016}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe89, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x700}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000400)={0x11, 0x0, r7, 0x0}, 0x14) write(r8, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000000)={0xffffffff, 0x4, 0x401, 0x6, 0x2, 0x0, 0x100000000}) 27.091995493s ago: executing program 1 (id=2350): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "53759ee99b593f8407fa2fdb526d4766a407aaf570ad4ffd62bbf01510656e0d3be2f94fd47e4c652d3072c0191f73c3ec26d08c6705d678e08cc111bf6ca083", 0x2e}, 0x48, 0xfffffffffffffffb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="09bf54514f0f4d4300000000fddbdf25020000000900000312001a0008351c05128e114d469d190d000600f8"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000400000c00028008000300ac1e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x7, 0x1000000}) r3 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) close(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x126, 0x0) 27.043333841s ago: executing program 4 (id=2351): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}}, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x51, 0x0) (async) prctl$PR_SET_THP_DISABLE(0x51, 0x0) io_setup(0x9, &(0x7f0000000080)) (async) io_setup(0x9, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x400, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1c, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}}, 0x84) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xffffffff) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000001980)) (async) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000001980)) memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97O\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) (async) r8 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97O\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0) 26.997154675s ago: executing program 2 (id=2352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000499a954868100081ff27bd7000fbdbdf25000000003b6f6364a1f42fc751dfd54ff8018a293b3314bae2fea37c69e71efc302f270ec440708fd3", @ANYRES32=r1, @ANYBLOB="151d010000000000df3c60774c"], 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') (async) statfs(&(0x7f0000000080)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200008000000010902120001000000000904"], 0x0) 0s ago: executing program 32 (id=2339): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x40, 0x4, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffff0b7) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f0000000000000000"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0xfffffffffffffde3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) kernel console output (not intermixed with test programs): in process `syz.1.2102'. [ 538.198639][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 538.205973][ T5720] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 538.214094][ T5720] usb 4-1: config 0 has no interface number 0 [ 538.222515][ T5720] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 538.231793][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.240223][ T5720] usb 4-1: Product: syz [ 538.244545][ T5720] usb 4-1: Manufacturer: syz [ 538.249427][ T5720] usb 4-1: SerialNumber: syz [ 538.263289][ T5720] usb 4-1: config 0 descriptor?? [ 538.275571][ T5720] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 538.338839][ T5681] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 538.412765][ T46] usb 1-1: USB disconnect, device number 40 [ 538.483532][ T5720] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 538.501187][ T5720] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 538.516332][ T5681] usb 5-1: Using ep0 maxpacket: 16 [ 538.532198][ T5681] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.556770][ T187] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 538.564597][ T5681] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.586252][ T5681] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 538.605744][ T5681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.624134][ T5681] usb 5-1: config 0 descriptor?? [ 538.713100][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.724652][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.738064][ T187] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 538.750682][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.770725][ T187] usb 2-1: config 0 descriptor?? [ 538.846742][T11219] usbhid 3-1:0.0: can't add hid device: -71 [ 538.853895][T12595] TCP: TCP_TX_DELAY enabled [ 538.867675][T11219] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 538.889845][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 538.889977][T11219] usb 3-1: USB disconnect, device number 40 [ 538.958639][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.967967][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.990098][ T187] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 538.999602][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 539.000163][ T9] usb 4-1: USB disconnect, device number 57 [ 539.022655][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 539.043594][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 539.057650][ T9] quatech2 4-1:0.51: device disconnected [ 539.190722][ T187] [drm:udl_init] *ERROR* Selecting channel failed [ 539.208971][ T187] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 539.216125][ T187] [drm] Initialized udl on minor 2 [ 539.222836][ T187] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 539.232803][ T187] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 539.242451][ T5697] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 539.253949][ T187] usb 2-1: USB disconnect, device number 22 [ 539.261217][ T5697] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 539.339763][ T5681] usbhid 5-1:0.0: can't add hid device: -71 [ 539.348707][ T5681] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 539.360122][ T5681] usb 5-1: USB disconnect, device number 45 [ 539.449909][T12599] netlink: 'syz.2.2106': attribute type 6 has an invalid length. [ 539.632403][T12610] bridge4: entered promiscuous mode [ 539.846000][ T5681] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 540.006056][ T5681] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 540.020466][ T5681] usb 4-1: config 1 has no interface number 0 [ 540.036210][ T46] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 540.037649][ T5681] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 540.077003][ T5681] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 540.096582][ T5681] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.120138][ T5681] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 540.131425][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.153283][ T5681] usb 4-1: Product: syz [ 540.160575][ T5681] usb 4-1: Manufacturer: syz [ 540.175501][ T5681] usb 4-1: SerialNumber: syz [ 540.186966][T12608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.187448][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.217420][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.235946][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.252939][ T46] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 540.294022][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.305779][ T46] usb 2-1: config 0 descriptor?? [ 540.418070][T12608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.516005][ T187] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 540.603203][ T29] audit: type=1326 audit(1785198665.609:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.630726][ T29] audit: type=1326 audit(1785198665.609:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.655414][ T29] audit: type=1326 audit(1785198665.609:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.691558][ T29] audit: type=1326 audit(1785198665.609:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.723253][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 540.728229][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 540.745753][ T29] audit: type=1326 audit(1785198665.609:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.778283][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 540.792885][ T46] usb 2-1: USB disconnect, device number 23 [ 540.812266][ T187] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 540.820385][ T29] audit: type=1326 audit(1785198665.609:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.826347][ T5681] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 540.868513][ T29] audit: type=1326 audit(1785198665.609:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.870688][ T187] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 540.896161][ T29] audit: type=1326 audit(1785198665.639:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.929549][ T29] audit: type=1326 audit(1785198665.639:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 540.929886][ T187] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.975960][ T187] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 540.993488][ T187] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 541.001332][ T29] audit: type=1326 audit(1785198665.669:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.4.2117" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 541.002706][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.044131][ T187] usb 3-1: Product: syz [ 541.048849][ T187] usb 3-1: Manufacturer: syz [ 541.054068][ T187] usb 3-1: SerialNumber: syz [ 541.070674][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 541.084120][ T187] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input73 [ 541.125070][ T5681] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 541.137845][ T5681] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 541.154508][ T5681] usb 4-1: USB disconnect, device number 58 [ 541.167108][ T5681] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 541.206277][ T5681] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 541.286026][ T187] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 541.295942][ T5719] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 541.316134][ T187] (id 0x00) [ 541.386149][ T187] rc_core: IR keymap rc-imon-pad not found [ 541.392126][ T187] Registered IR keymap rc-empty [ 541.398565][ T187] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 541.409182][ T187] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 541.445980][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 541.454505][ T5719] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 541.463770][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.473129][ T5719] usb 1-1: Product: syz [ 541.477553][ T5719] usb 1-1: Manufacturer: syz [ 541.482171][ T5719] usb 1-1: SerialNumber: syz [ 541.488703][ T5719] usb 1-1: config 0 descriptor?? [ 541.502265][ T5719] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 541.515049][ T187] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 541.541582][ T187] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input74 [ 541.563051][ T187] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:41> initialized [ 541.596167][ T5720] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 541.772445][ T5720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.794744][ T5720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.829557][ T5720] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 541.844661][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 541.853914][ T5720] usb 2-1: SerialNumber: syz [ 541.884327][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 542.069276][ T5720] usb 2-1: 0:2 : does not exist [ 542.111400][ T5720] usb 2-1: USB disconnect, device number 24 [ 542.145413][ T7524] udevd[7524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.235919][ T187] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 542.388819][ T187] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 542.401431][ T187] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 542.414778][ T187] usb 5-1: config 0 interface 0 has no altsetting 0 [ 542.425273][ T187] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 542.442608][ T187] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 542.451421][ T187] usb 5-1: Product: syz [ 542.455658][ T187] usb 5-1: Manufacturer: syz [ 542.460893][ T187] usb 5-1: SerialNumber: syz [ 542.491798][ T187] usb 5-1: config 0 descriptor?? [ 542.508932][ T187] usb 5-1: selecting invalid altsetting 0 [ 542.633971][ T187] usb 3-1: USB disconnect, device number 41 [ 542.647739][T12649] imon:send_packet: packet tx failed (-71) [ 542.695995][T12649] imon:vfd_write: send packet #2 failed [ 542.830920][ T5720] usb 5-1: USB disconnect, device number 46 [ 542.926394][ T5719] gspca_sonixj: i2c_w8 err -71 [ 542.958723][T12654] bridge5: entered promiscuous mode [ 542.976661][ T5719] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 542.996312][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 543.008153][ T5719] usb 1-1: USB disconnect, device number 41 [ 543.207440][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 543.216569][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.231539][ T9] usb 2-1: config 0 descriptor?? [ 543.356036][ T5737] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 543.450464][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 543.507408][ T5737] usb 4-1: Using ep0 maxpacket: 16 [ 543.521108][ T5737] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.536700][ T5737] usb 4-1: config 0 interface 0 has no altsetting 0 [ 543.543424][ T5737] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 543.552842][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.567762][ T5737] usb 4-1: config 0 descriptor?? [ 543.651493][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 543.681556][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 543.691014][T12664] netlink: 'syz.0.2128': attribute type 1 has an invalid length. [ 543.707126][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 543.714950][ T9] [drm] Initialized udl on minor 2 [ 543.726175][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 543.750133][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 543.758126][ T187] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 543.777050][ T9] usb 2-1: USB disconnect, device number 25 [ 543.777781][T12668] netlink: 'syz.4.2129': attribute type 3 has an invalid length. [ 543.790517][ T187] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 543.792592][T12667] netlink: 'syz.4.2129': attribute type 3 has an invalid length. [ 543.828014][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.839978][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.860477][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.888452][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.045977][ T5720] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 544.155919][ T5719] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 544.179425][ T5720] usb 5-1: device descriptor read/64, error -71 [ 544.240978][ T5737] usbhid 4-1:0.0: can't add hid device: -71 [ 544.258037][ T5737] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 544.273542][ T5737] usb 4-1: USB disconnect, device number 59 [ 544.290285][ T5719] usb 1-1: device descriptor read/64, error -71 [ 544.455956][ T5720] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 544.525998][ T46] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 544.535932][ T5719] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 544.586017][ T5720] usb 5-1: device descriptor read/64, error -71 [ 544.665971][ T5719] usb 1-1: device descriptor read/64, error -71 [ 544.679679][ T46] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 544.689109][ T46] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 544.697665][ T5720] usb usb5-port1: attempt power cycle [ 544.703530][ T46] usb 2-1: Product: syz [ 544.708706][ T46] usb 2-1: Manufacturer: syz [ 544.713526][ T46] usb 2-1: SerialNumber: syz [ 544.721334][ T46] usb 2-1: config 0 descriptor?? [ 544.777034][ T5719] usb usb1-port1: attempt power cycle [ 544.895778][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 544.904813][T12683] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 544.966247][ T187] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 545.014449][ T5633] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 545.023275][ T46] usb 2-1: USB disconnect, device number 26 [ 545.046477][ T5720] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 545.086548][ T5720] usb 5-1: device descriptor read/8, error -71 [ 545.115969][ T5719] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 545.130150][T12681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.139111][ T5719] usb 1-1: device descriptor read/8, error -71 [ 545.148194][T12681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.238730][ T187] usb 3-1: unable to get BOS descriptor or descriptor too short [ 545.251626][ T187] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 545.265619][ T187] usb 3-1: can't read configurations, error -71 [ 545.326368][ T5720] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 545.346600][ T5720] usb 5-1: device descriptor read/8, error -71 [ 545.386071][ T5719] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 545.416649][ T5719] usb 1-1: device descriptor read/8, error -71 [ 545.456540][ T5720] usb usb5-port1: unable to enumerate USB device [ 545.536661][ T5719] usb usb1-port1: unable to enumerate USB device [ 545.668378][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 545.693491][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'. [ 545.791119][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'. [ 545.815289][T12697] FAULT_INJECTION: forcing a failure. [ 545.815289][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 545.846946][T12697] CPU: 0 UID: 0 PID: 12697 Comm: syz.1.2139 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.846972][T12697] Tainted: [L]=SOFTLOCKUP [ 545.846976][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 545.846983][T12697] Call Trace: [ 545.846988][T12697] [ 545.846994][T12697] dump_stack_lvl+0xe8/0x150 [ 545.847016][T12697] should_fail_ex+0x40c/0x560 [ 545.847033][T12697] should_failslab+0xa8/0x100 [ 545.847051][T12697] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 545.847064][T12697] ? local_lock_release+0x9c/0x160 [ 545.847076][T12697] ? __alloc_skb+0x1d7/0x7a0 [ 545.847085][T12697] ? __alloc_skb+0x1d7/0x7a0 [ 545.847099][T12697] __alloc_skb+0x1d7/0x7a0 [ 545.847111][T12697] rtnl_fdb_notify+0x9b/0x1b0 [ 545.847126][T12697] rtnl_fdb_del+0x9fd/0xc20 [ 545.847138][T12697] ? trace_contention_end+0x3d/0x140 [ 545.847153][T12697] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 545.847180][T12697] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 545.847193][T12697] rtnetlink_rcv_msg+0x7b9/0xc00 [ 545.847205][T12697] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 545.847216][T12697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.847225][T12697] ? ref_tracker_free+0x689/0x830 [ 545.847241][T12697] ? __pfx_ref_tracker_free+0x10/0x10 [ 545.847255][T12697] ? __asan_memcpy+0x40/0x70 [ 545.847267][T12697] ? __skb_clone+0x5c/0x6c0 [ 545.847282][T12697] netlink_rcv_skb+0x226/0x4a0 [ 545.847296][T12697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.847307][T12697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.847325][T12697] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.847338][T12697] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.847352][T12697] netlink_unicast+0x7bb/0x940 [ 545.847369][T12697] netlink_sendmsg+0x813/0xb40 [ 545.847386][T12697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.847400][T12697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.847418][T12697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.847439][T12697] sock_sendmsg_nosec+0x13a/0x180 [ 545.847468][T12697] ____sys_sendmsg+0x54e/0x850 [ 545.847495][T12697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.847533][T12697] ___sys_sendmsg+0x2a5/0x360 [ 545.847554][T12697] ? __lock_acquire+0x683/0x2cf0 [ 545.847580][T12697] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.847591][T12697] ? get_pid_task+0x20/0x1f0 [ 545.847606][T12697] ? get_pid_task+0x20/0x1f0 [ 545.847620][T12697] ? get_pid_task+0x20/0x1f0 [ 545.847649][T12697] ? __fget_files+0x2a/0x420 [ 545.847664][T12697] ? __fget_files+0x3a2/0x420 [ 545.847689][T12697] __sys_sendmsg+0x177/0x240 [ 545.847705][T12697] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.847726][T12697] __do_fast_syscall_32+0x23e/0x6f0 [ 545.847741][T12697] ? do_fast_syscall_32+0x33/0x70 [ 545.847752][T12697] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.847764][T12697] ? asm_int80_emulation+0x1a/0x20 [ 545.847774][T12697] ? do_int80_emulation+0x29f/0x550 [ 545.847786][T12697] ? trace_irq_disable+0x3b/0x140 [ 545.847802][T12697] do_fast_syscall_32+0x33/0x70 [ 545.847815][T12697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.847827][T12697] RIP: 0023:0xf7ff30ec [ 545.847838][T12697] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 545.847847][T12697] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 545.847858][T12697] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000200 [ 545.847866][T12697] RDX: 000000004736598c RSI: 0000000000000000 RDI: 0000000000000000 [ 545.847873][T12697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.847879][T12697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 545.847885][T12697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.847899][T12697] [ 546.735954][ T187] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 546.982272][ T187] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 547.030305][ T187] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 547.053940][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 547.150332][ T187] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.169051][ T187] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 547.178462][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 547.194007][ T5697] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 547.241810][T12707] netlink: 'syz.1.2152': attribute type 1 has an invalid length. [ 547.300605][ T187] usb 3-1: Product: syz [ 547.363869][ T187] usb 3-1: Manufacturer: syz [ 547.369607][ T187] usb 3-1: SerialNumber: syz [ 547.377871][ T187] usb 3-1: config 0 descriptor?? [ 547.395062][ T187] usb 3-1: selecting invalid altsetting 0 [ 547.468108][ T5697] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 547.479648][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2144'. [ 547.493776][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.559734][ T5697] usb 5-1: config 0 descriptor?? [ 547.622482][T12718] 8021q: VLANs not supported on ip6gre0 [ 547.662803][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 547.678785][ T187] usb 3-1: USB disconnect, device number 43 [ 547.804464][ T5697] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 547.886076][ T5719] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 547.932960][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 547.942435][T12723] netlink: 'syz.0.2146': attribute type 1 has an invalid length. [ 548.005048][ T5697] [drm:udl_init] *ERROR* Selecting channel failed [ 548.050261][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 548.054387][ T5697] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 548.067892][ T5719] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 548.089994][ T5719] usb 2-1: config 0 has no interface number 0 [ 548.091932][ T5697] [drm] Initialized udl on minor 2 [ 548.115251][ T5697] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 548.141157][ T5697] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 548.142140][ T5719] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 548.171475][ T187] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 548.174531][T12726] trusted_key: syz.0.2147 sent an empty control message without MSG_MORE. [ 548.184862][ T5697] usb 5-1: USB disconnect, device number 51 [ 548.201935][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.208980][ T187] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 548.219186][ T5719] usb 2-1: Product: syz [ 548.246285][ T5719] usb 2-1: Manufacturer: syz [ 548.252535][ T5719] usb 2-1: SerialNumber: syz [ 548.279500][ T5719] usb 2-1: config 0 descriptor?? [ 548.299618][ T5719] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 548.360600][T12730] loop5: detected capacity change from 0 to 7 [ 548.373459][T12734] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 548.380181][T12734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.391938][T12734] vhci_hcd vhci_hcd.0: Device attached [ 548.423593][T12730] Dev loop5: unable to read RDB block 7 [ 548.432929][T12730] loop5: AHDI p1 [ 548.437309][T12730] loop5: partition table partially beyond EOD, truncated [ 548.453035][T12731] Dev loop5: unable to read RDB block 7 [ 548.458898][T12731] loop5: AHDI p1 [ 548.462577][T12731] loop5: partition table partially beyond EOD, truncated [ 548.527134][ T5719] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 548.554852][ T5719] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 548.585366][T12739] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 548.591917][T12739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.614879][T12739] vhci_hcd vhci_hcd.0: Device attached [ 548.626024][ T5720] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 548.637690][ T46] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 548.789007][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.800943][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 548.809307][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.817934][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 548.827279][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.838052][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.851441][ T46] usb 1-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 548.860672][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.865949][ T187] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 548.868803][ T46] usb 1-1: Product: syz [ 548.881010][ T46] usb 1-1: Manufacturer: syz [ 548.885651][ T46] usb 1-1: SerialNumber: syz [ 548.896147][ T5697] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 549.015944][T12307] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 549.041486][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.050460][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.062611][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 549.068624][ T5697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.070419][ T5719] usb 2-1: USB disconnect, device number 27 [ 549.089986][ T5697] usb 4-1: not running at top speed; connect to a high speed hub [ 549.092068][ T5719] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 549.104609][ T5697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.113508][ T5719] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 549.127188][ T5697] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.139337][T12734] FAULT_INJECTION: forcing a failure. [ 549.139337][T12734] name failslab, interval 1, probability 0, space 0, times 0 [ 549.142864][ T5697] usb 4-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 549.153765][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.0.2150 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.153794][T12734] Tainted: [L]=SOFTLOCKUP [ 549.153801][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 549.153812][T12734] Call Trace: [ 549.153820][T12734] [ 549.153829][T12734] dump_stack_lvl+0xe8/0x150 [ 549.153861][T12734] should_fail_ex+0x40c/0x560 [ 549.153888][T12734] should_failslab+0xa8/0x100 [ 549.153919][T12734] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 549.153949][T12734] ? do_getname+0x2e/0x250 [ 549.153971][T12734] ? do_getname+0x2e/0x250 [ 549.153998][T12734] do_getname+0x2e/0x250 [ 549.154018][T12734] ? getname_flags+0x11/0x20 [ 549.154043][T12734] do_sys_openat2+0xcc/0x200 [ 549.154071][T12734] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.154096][T12734] ? ksys_write+0x242/0x270 [ 549.154116][T12734] ? __pfx_ksys_write+0x10/0x10 [ 549.154138][T12734] __ia32_compat_sys_openat+0x131/0x160 [ 549.154168][T12734] do_int80_emulation+0x19a/0x550 [ 549.154191][T12734] ? trace_irq_disable+0x3b/0x140 [ 549.154214][T12734] ? asm_int80_emulation+0x1a/0x20 [ 549.154231][T12734] ? clear_bhb_loop+0x40/0x90 [ 549.154250][T12734] ? clear_bhb_loop+0x40/0x90 [ 549.154271][T12734] asm_int80_emulation+0x1a/0x20 [ 549.154289][T12734] RIP: 0023:0xf71f72eb [ 549.154306][T12734] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 549.154322][T12734] RSP: 002b:00000000f54ad03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 549.154342][T12734] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54ad100 [ 549.154356][T12734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.154366][T12734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.154377][T12734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 549.154388][T12734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.154416][T12734] [ 549.156342][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.172452][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.174289][ T5719] quatech2 2-1:0.51: device disconnected [ 549.181069][ T5697] usb 4-1: Product: syz [ 549.188967][T12307] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 549.191302][ T5697] usb 4-1: Manufacturer: syz [ 549.193640][T12307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.213205][ T5697] usb 4-1: SerialNumber: syz [ 549.220191][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.439403][T12307] usb 3-1: config 0 descriptor?? [ 549.464450][T12736] vhci_hcd: connection reset by peer [ 549.474794][ T46] usb 1-1: USB disconnect, device number 46 [ 549.485518][T10551] vhci_hcd vhci_hcd.0: stop threads [ 549.492063][T10551] vhci_hcd vhci_hcd.0: release socket [ 549.500483][T10551] vhci_hcd vhci_hcd.0: disconnect device [ 549.652503][T12307] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 549.675450][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.678759][T12748] syzkaller1: entered promiscuous mode [ 549.691468][T12748] syzkaller1: entered allmulticast mode [ 549.699754][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.737419][T12740] vhci_hcd: connection reset by peer [ 549.746508][ T5697] usb 4-1: USB disconnect, device number 60 [ 549.763722][ T1092] vhci_hcd vhci_hcd.3: stop threads [ 549.770088][ T1092] vhci_hcd vhci_hcd.3: release socket [ 549.776245][ T1092] vhci_hcd vhci_hcd.3: disconnect device [ 549.854757][T12307] [drm:udl_init] *ERROR* Selecting channel failed [ 549.885544][T12307] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 549.904675][T12307] [drm] Initialized udl on minor 2 [ 549.918361][T12307] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.950268][T12307] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 549.958269][ T46] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.979511][ T46] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 549.987436][T12307] usb 3-1: USB disconnect, device number 44 [ 550.125564][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 550.134996][T12754] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 550.346251][ T5719] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 550.401552][T12767] trusted_key: encrypted_key: insufficient parameters specified [ 550.508315][ T5719] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 550.521421][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.540609][ T5719] usb 1-1: config 0 descriptor?? [ 550.556060][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 550.656021][ T46] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 550.728116][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.738754][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.750157][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.760796][ T9] usb 2-1: config 0 descriptor?? [ 550.775102][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 550.815989][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 550.822969][ T46] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 550.831856][ T46] usb 4-1: config 2 has no interface number 0 [ 550.838520][ T46] usb 4-1: config 2 interface 31 has no altsetting 0 [ 550.848464][ T46] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 550.858357][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.867567][ T46] usb 4-1: Product: syz [ 550.871860][ T46] usb 4-1: Manufacturer: syz [ 550.876818][ T46] usb 4-1: SerialNumber: syz [ 550.925969][ T5737] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 550.953963][ T5719] ath6kl: Failed to submit usb control message: -71 [ 550.964748][ T5719] ath6kl: unable to send the bmi data to the device: -71 [ 550.980013][ T5719] ath6kl: Unable to send get target info: -71 [ 550.987702][ T5719] ath6kl: Failed to init ath6kl core: -71 [ 551.007268][ T5719] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 551.030907][ T5719] usb 1-1: USB disconnect, device number 47 [ 551.081488][ T5737] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 551.097804][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.105989][ T5737] usb 3-1: Product: syz [ 551.110860][ T5737] usb 3-1: Manufacturer: syz [ 551.115517][ T5737] usb 3-1: SerialNumber: syz [ 551.123670][ T5737] usb 3-1: config 0 descriptor?? [ 551.132094][ T5737] usbsevseg 3-1:0.0: USB 7 Segment device now attached [ 551.184195][T12764] program syz.1.2162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.198433][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 551.205750][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 551.213355][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 551.224436][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 551.234451][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 551.242729][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 551.338682][T12774] fuse: Bad value for 'group_id' [ 551.343778][T12774] fuse: Bad value for 'group_id' [ 551.353712][ T5719] usb 3-1: USB disconnect, device number 45 [ 551.363366][ T5719] usbsevseg 3-1:0.0: USB 7 Segment now disconnected [ 551.457443][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 551.465307][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 551.472253][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 551.479214][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 551.486057][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 551.492865][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 551.500050][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 551.507485][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 551.514342][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 551.514590][ T46] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 551.526161][ T9] pwc: Registered as video103. [ 551.533942][ T5737] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 551.542845][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input75 [ 551.570218][ T46] usb 4-1: USB disconnect, device number 61 [ 551.596801][ T9] usb 2-1: USB disconnect, device number 28 [ 551.633750][ T7524] udevd[7524]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 551.690032][ T5737] usb 5-1: device descriptor read/64, error -71 [ 551.728467][T12779] FAULT_INJECTION: forcing a failure. [ 551.728467][T12779] name failslab, interval 1, probability 0, space 0, times 0 [ 551.743568][T12779] CPU: 0 UID: 0 PID: 12779 Comm: syz.0.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.743597][T12779] Tainted: [L]=SOFTLOCKUP [ 551.743604][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 551.743615][T12779] Call Trace: [ 551.743623][T12779] [ 551.743631][T12779] dump_stack_lvl+0xe8/0x150 [ 551.743664][T12779] should_fail_ex+0x40c/0x560 [ 551.743692][T12779] should_failslab+0xa8/0x100 [ 551.743723][T12779] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 551.743747][T12779] ? skb_clone+0x212/0x3a0 [ 551.743768][T12779] ? skb_clone+0x212/0x3a0 [ 551.743796][T12779] skb_clone+0x212/0x3a0 [ 551.743820][T12779] __netlink_deliver_tap+0x413/0x860 [ 551.743853][T12779] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.743877][T12779] netlink_deliver_tap+0x19c/0x1b0 [ 551.743898][T12779] netlink_unicast+0x77f/0x940 [ 551.743928][T12779] netlink_sendmsg+0x813/0xb40 [ 551.743960][T12779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.743986][T12779] ? aa_sock_msg_perm+0xf1/0x1b0 [ 551.744013][T12779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.744035][T12779] sock_sendmsg_nosec+0x13a/0x180 [ 551.744064][T12779] ____sys_sendmsg+0x54e/0x850 [ 551.744092][T12779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.744130][T12779] ___sys_sendmsg+0x2a5/0x360 [ 551.744151][T12779] ? __lock_acquire+0x683/0x2cf0 [ 551.744191][T12779] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.744213][T12779] ? get_pid_task+0x20/0x1f0 [ 551.744239][T12779] ? get_pid_task+0x20/0x1f0 [ 551.744263][T12779] ? get_pid_task+0x20/0x1f0 [ 551.744317][T12779] ? __fget_files+0x2a/0x420 [ 551.744341][T12779] ? __fget_files+0x3a2/0x420 [ 551.744376][T12779] __sys_sendmsg+0x177/0x240 [ 551.744399][T12779] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.744439][T12779] __do_fast_syscall_32+0x23e/0x6f0 [ 551.744463][T12779] ? do_fast_syscall_32+0x33/0x70 [ 551.744485][T12779] ? lockdep_hardirqs_on+0x7a/0x110 [ 551.744505][T12779] ? asm_int80_emulation+0x1a/0x20 [ 551.744523][T12779] ? do_int80_emulation+0x29f/0x550 [ 551.744545][T12779] ? trace_irq_disable+0x3b/0x140 [ 551.744571][T12779] do_fast_syscall_32+0x33/0x70 [ 551.744600][T12779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.744623][T12779] RIP: 0023:0xf70bf0ec [ 551.744641][T12779] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 551.744658][T12779] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 551.744678][T12779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 551.744692][T12779] RDX: 0000000004001084 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.744704][T12779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.744716][T12779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.744728][T12779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.744757][T12779] [ 552.166683][ T5737] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 552.168332][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 552.189511][T12783] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 552.305966][ T5737] usb 5-1: device descriptor read/64, error -71 [ 552.361077][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2169'. [ 552.538041][ T5737] usb usb5-port1: attempt power cycle [ 552.564787][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2172'. [ 552.665971][ T5681] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 552.816929][ T5681] usb 4-1: Using ep0 maxpacket: 16 [ 552.823500][ T5681] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.835107][ T5681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 552.842287][ T5681] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 552.851698][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.862438][ T5681] usb 4-1: config 0 descriptor?? [ 552.885951][ T5737] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 552.906398][ T5737] usb 5-1: device descriptor read/8, error -71 [ 552.990329][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2177'. [ 553.003279][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 553.046853][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 553.147659][ T5737] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 553.177295][ T5737] usb 5-1: device descriptor read/8, error -71 [ 553.207865][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 553.215164][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 553.223554][ T9] usb 1-1: config 0 has no interface number 0 [ 553.229746][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 553.241862][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 553.251111][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.259354][ T9] usb 1-1: Product: syz [ 553.263582][ T9] usb 1-1: Manufacturer: syz [ 553.268255][ T9] usb 1-1: SerialNumber: syz [ 553.276483][ T9] usb 1-1: config 0 descriptor?? [ 553.285285][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 553.295235][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 553.296395][ T5737] usb usb5-port1: unable to enumerate USB device [ 553.309477][ T5719] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 553.465904][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 553.472749][ T5719] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 553.487150][ T5719] usb 3-1: config 0 has no interface number 0 [ 553.495441][ T5719] usb 3-1: config 0 interface 12 has no altsetting 0 [ 553.504890][ T5719] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 553.514263][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.522372][ T5719] usb 3-1: Product: syz [ 553.527783][ T5719] usb 3-1: Manufacturer: syz [ 553.545760][ T5719] usb 3-1: SerialNumber: syz [ 553.560258][ T5719] usb 3-1: config 0 descriptor?? [ 553.603834][ T5681] usbhid 4-1:0.0: can't add hid device: -71 [ 553.613272][ T5681] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 553.624619][ T5681] usb 4-1: USB disconnect, device number 62 [ 553.688157][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 553.786155][ T5720] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 554.015978][ T187] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 554.097845][ T9] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 554.139230][ T9] em28xx 1-1:0.132: board has no eeprom [ 554.278208][T12813] trusted_key: encrypted_key: insufficient parameters specified [ 554.401326][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 554.420155][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 554.427198][T11219] em28xx 1-1:0.132: Registering V4L2 extension [ 554.443347][ T9] usb 1-1: USB disconnect, device number 48 [ 554.458643][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 554.556008][ T5737] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 554.571000][T11219] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 554.582778][T11219] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 554.600471][T11219] em28xx 1-1:0.132: No AC97 audio processor [ 554.626196][T11219] usb 1-1: Decoder not found [ 554.638528][T11219] em28xx 1-1:0.132: failed to create media graph [ 554.661224][T11219] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 554.741101][T11219] em28xx 1-1:0.132: Remote control support is not available for this card. [ 554.749972][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 554.775354][ T5737] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 554.792218][ T5737] usb 4-1: config 2 has no interface number 0 [ 554.801113][ T5737] usb 4-1: config 2 interface 31 has no altsetting 0 [ 554.809164][ T9] em28xx 1-1:0.132: Closing input extension [ 554.821853][ T5737] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 554.858387][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.870846][ T9] em28xx 1-1:0.132: Freeing device [ 554.890420][ T5737] usb 4-1: Product: syz [ 554.898280][ T5737] usb 4-1: Manufacturer: syz [ 554.903001][ T5737] usb 4-1: SerialNumber: syz [ 555.213025][T12825] bridge7: entered promiscuous mode [ 555.518348][T12826] IPVS: set_ctl: invalid protocol: 25647 47.107.118.109:0 [ 555.542283][T12826] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 555.552514][ T5737] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 555.574335][ T5737] usb 4-1: USB disconnect, device number 63 [ 556.381395][T12839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2188'. [ 556.397671][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 556.585931][ T5720] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 556.621927][T12846] fuse: Bad value for 'fd' [ 556.758508][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'. [ 556.768058][ T5737] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 556.775673][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 556.788500][ T5720] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 556.798442][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.808748][ T5720] usb 2-1: Product: syz [ 556.817644][ T5719] f81534 3-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 556.839828][T12846] ipip2: entered promiscuous mode [ 556.844963][ T5720] usb 2-1: Manufacturer: syz [ 556.851907][T12846] ipip2: entered allmulticast mode [ 556.857197][ T5719] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 556.864677][ T5720] usb 2-1: SerialNumber: syz [ 556.870575][ T5719] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 556.878392][ T5719] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 556.890197][ T5719] usb 3-1: USB disconnect, device number 46 [ 556.909735][ T5720] usb 2-1: config 0 descriptor?? [ 556.935984][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 556.942602][ T5720] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 556.955634][ T5737] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 556.964972][ T5737] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 556.978329][ T5720] dvb-usb: bulk message failed: -22 (4/0) [ 557.008394][ T5720] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 557.019903][ T5737] usb 1-1: config 2 has no interface number 0 [ 557.033592][ T5737] usb 1-1: config 2 interface 31 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 557.043965][ T5720] dvb-usb: bulk message failed: -22 (5/0) [ 557.050189][ T5720] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 557.060777][ T5737] usb 1-1: config 2 interface 31 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.093749][ T5737] usb 1-1: config 2 interface 31 has no altsetting 0 [ 557.101475][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 557.116473][ T5737] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 557.129024][ T5720] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 557.141092][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.149876][T12840] ttusb2: i2c wr len=58 too high [ 557.159652][ T5720] usb 2-1: media controller created [ 557.167649][ T5737] usb 1-1: Product: syz [ 557.179574][ T5737] usb 1-1: Manufacturer: syz [ 557.192952][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.203947][ T5737] usb 1-1: SerialNumber: syz [ 557.222186][ T5737] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 557.292966][ T5720] usb 2-1: selecting invalid altsetting 3 [ 557.308709][ T5720] ttusb2: set interface to alts=3 failed [ 557.409045][ T5720] DVB: Unable to find symbol tda10086_attach() [ 557.415370][ T5720] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 557.439579][ T5720] dvb-usb: bulk message failed: -22 (4/0) [ 557.452388][ T5720] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 557.477897][ T5720] dvb-usb: bulk message failed: -22 (5/0) [ 557.490202][ T5720] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 557.520955][ T5720] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 557.549258][ T5720] usb 2-1: USB disconnect, device number 29 [ 557.626752][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 557.630128][ T5720] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 557.788260][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 557.810060][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.832218][ T9] usb 3-1: config 0 descriptor?? [ 558.047525][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 558.211568][T12864] bridge6: entered promiscuous mode [ 558.217659][T12867] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2195'. [ 558.260882][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 558.304234][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 558.317428][ T9] [drm] Initialized udl on minor 2 [ 558.330099][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 558.345475][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 558.366134][T11219] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 558.374804][ T9] usb 3-1: USB disconnect, device number 47 [ 558.384049][T11219] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 558.505007][T12874] trusted_key: encrypted_key: insufficient parameters specified [ 558.715957][T11219] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 558.755968][ T5719] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 558.847490][T12879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.867746][T11219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.885154][T11219] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 558.904691][T11219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.916325][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 558.930311][T11219] usb 5-1: config 0 descriptor?? [ 558.936674][T12885] FAULT_INJECTION: forcing a failure. [ 558.936674][T12885] name failslab, interval 1, probability 0, space 0, times 0 [ 558.950013][ T5719] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 558.959612][T11219] pwc: Askey VC010 type 2 USB webcam detected. [ 558.965040][ T5719] usb 4-1: config 2 has no interface number 0 [ 558.969445][T12885] CPU: 0 UID: 0 PID: 12885 Comm: syz.2.2202 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.969474][T12885] Tainted: [L]=SOFTLOCKUP [ 558.969480][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 558.969494][T12885] Call Trace: [ 558.969502][T12885] [ 558.969510][T12885] dump_stack_lvl+0xe8/0x150 [ 558.969541][T12885] should_fail_ex+0x40c/0x560 [ 558.969571][T12885] should_failslab+0xa8/0x100 [ 558.969601][T12885] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 558.969626][T12885] ? mas_alloc_nodes+0x291/0x350 [ 558.969645][T12885] ? mas_alloc_nodes+0x291/0x350 [ 558.969671][T12885] mas_alloc_nodes+0x291/0x350 [ 558.969696][T12885] mas_preallocate+0x2cf/0x630 [ 558.969720][T12885] ? rcu_is_watching+0x15/0xb0 [ 558.969738][T12885] ? __pfx_mas_preallocate+0x10/0x10 [ 558.969771][T12885] ? __mas_set_range+0x11a/0x3a0 [ 558.969794][T12885] mmap_region+0x13a9/0x2310 [ 558.969830][T12885] ? __pfx_mmap_region+0x10/0x10 [ 558.969848][T12885] ? mas_ascend+0x2f9/0x8b0 [ 558.969881][T12885] ? mas_prev_node+0xbfd/0xe80 [ 558.969961][T12885] ? __lock_acquire+0x683/0x2cf0 [ 558.970020][T12885] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 558.970048][T12885] ? cap_mmap_addr+0xaf/0x100 [ 558.970141][T12885] ? bpf_lsm_mmap_addr+0x9/0x50 [ 558.970163][T12885] ? security_mmap_addr+0x71/0x240 [ 558.970199][T12885] do_mmap+0xc3b/0x10c0 [ 558.970230][T12885] ? __pfx_do_mmap+0x10/0x10 [ 558.970248][T12885] ? down_write_killable+0x180/0x240 [ 558.970275][T12885] ? __pfx_down_write_killable+0x10/0x10 [ 558.970299][T12885] ? apparmor_mmap_file+0x197/0x3e0 [ 558.970352][T12885] ? security_mmap_file+0x4df/0xa20 [ 558.970384][T12885] vm_mmap_pgoff+0x272/0x4e0 [ 558.970419][T12885] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 558.970448][T12885] ? exc_page_fault+0x6a/0xc0 [ 558.970472][T12885] ? ksys_mmap_pgoff+0xf3/0x760 [ 558.970492][T12885] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 558.970516][T12885] __do_fast_syscall_32+0x23e/0x6f0 [ 558.970539][T12885] ? do_fast_syscall_32+0x33/0x70 [ 558.970560][T12885] ? lockdep_hardirqs_on+0x7a/0x110 [ 558.970581][T12885] ? irqentry_exit+0x10f/0x8f0 [ 558.970600][T12885] ? trace_irq_disable+0x3b/0x140 [ 558.970627][T12885] do_fast_syscall_32+0x33/0x70 [ 558.970650][T12885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.970673][T12885] RIP: 0023:0xf7f430ec [ 558.970690][T12885] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 558.970705][T12885] RSP: 002b:00000000f5405210 EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 558.970726][T12885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000200000 [ 558.970739][T12885] RDX: 0000000000000000 RSI: 0000000000000022 RDI: 00000000ffffffff [ 558.970751][T12885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.970763][T12885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 558.970774][T12885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.970802][T12885] [ 559.275914][ T5719] usb 4-1: config 2 interface 31 has no altsetting 0 [ 559.284934][ T5719] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 559.294224][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.302401][ T5719] usb 4-1: Product: syz [ 559.306708][ T5719] usb 4-1: Manufacturer: syz [ 559.311343][ T5719] usb 4-1: SerialNumber: syz [ 559.316468][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 559.369062][T12872] program syz.4.2198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.381297][T11219] pwc: recv_control_msg error -32 req 02 val 2b00 [ 559.390591][T11219] pwc: recv_control_msg error -32 req 02 val 2700 [ 559.399136][T11219] pwc: recv_control_msg error -32 req 02 val 2c00 [ 559.407383][T11219] pwc: recv_control_msg error -32 req 04 val 1000 [ 559.414554][T11219] pwc: recv_control_msg error -32 req 04 val 1300 [ 559.422660][T11219] pwc: recv_control_msg error -32 req 04 val 1400 [ 559.475914][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 559.482983][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.494053][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 559.502659][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 559.512716][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.530296][ T9] usb 2-1: config 0 descriptor?? [ 559.553005][ T5737] usb 1-1: USB disconnect, device number 49 [ 559.633748][T11219] pwc: recv_control_msg error -71 req 02 val 2100 [ 559.647142][T11219] pwc: recv_control_msg error -71 req 04 val 1500 [ 559.654104][T11219] pwc: recv_control_msg error -71 req 02 val 2500 [ 559.661976][T11219] pwc: recv_control_msg error -71 req 02 val 2400 [ 559.669345][T11219] pwc: recv_control_msg error -71 req 02 val 2600 [ 559.677196][T11219] pwc: recv_control_msg error -71 req 02 val 2900 [ 559.684131][T11219] pwc: recv_control_msg error -71 req 02 val 2800 [ 559.691935][T11219] pwc: recv_control_msg error -71 req 04 val 1100 [ 559.699782][T11219] pwc: recv_control_msg error -71 req 04 val 1200 [ 559.721754][T11219] pwc: Registered as video103. [ 559.743000][T11219] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 559.783514][T12894] FAULT_INJECTION: forcing a failure. [ 559.783514][T12894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.806644][T11219] usb 5-1: USB disconnect, device number 56 [ 559.827861][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.0.2205 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.827893][T12894] Tainted: [L]=SOFTLOCKUP [ 559.827900][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 559.827911][T12894] Call Trace: [ 559.827920][T12894] [ 559.827928][T12894] dump_stack_lvl+0xe8/0x150 [ 559.827964][T12894] should_fail_ex+0x40c/0x560 [ 559.827993][T12894] _copy_from_user+0x2d/0xb0 [ 559.828015][T12894] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 559.828061][T12894] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 559.828087][T12894] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 559.828112][T12894] ? rcu_is_watching+0x15/0xb0 [ 559.828130][T12894] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 559.828155][T12894] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 559.828183][T12894] ip_generic_getfrag+0x149/0x2d0 [ 559.828207][T12894] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 559.828225][T12894] ? raw6_getfrag+0x116/0x3a0 [ 559.828247][T12894] ? __alloc_skb+0x4cc/0x7a0 [ 559.828265][T12894] ? skb_put+0x112/0x210 [ 559.828287][T12894] __ip6_append_data+0x3b26/0x40c0 [ 559.828334][T12894] ? __pfx_raw6_getfrag+0x10/0x10 [ 559.828377][T12894] ? __pfx___ip6_append_data+0x10/0x10 [ 559.828405][T12894] ? ip6_setup_cork+0x547/0xf60 [ 559.828433][T12894] ? ip6_append_data+0x1a6/0x270 [ 559.828461][T12894] ip6_append_data+0x108/0x270 [ 559.828497][T12894] ? __pfx_raw6_getfrag+0x10/0x10 [ 559.828520][T12894] rawv6_sendmsg+0x1298/0x18c0 [ 559.828553][T12894] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 559.828603][T12894] ? sock_rps_record_flow+0x19/0x350 [ 559.828625][T12894] ? inet_sendmsg+0x298/0x320 [ 559.828646][T12894] ? __pfx_inet_sendmsg+0x10/0x10 [ 559.828663][T12894] sock_sendmsg_nosec+0x10e/0x180 [ 559.828690][T12894] ____sys_sendmsg+0x54e/0x850 [ 559.828719][T12894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.828756][T12894] ___sys_sendmsg+0x2a5/0x360 [ 559.828776][T12894] ? __lock_acquire+0x683/0x2cf0 [ 559.828807][T12894] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.828828][T12894] ? get_pid_task+0x20/0x1f0 [ 559.828855][T12894] ? get_pid_task+0x20/0x1f0 [ 559.828879][T12894] ? get_pid_task+0x20/0x1f0 [ 559.828933][T12894] ? __fget_files+0x2a/0x420 [ 559.828959][T12894] ? __fget_files+0x3a2/0x420 [ 559.828992][T12894] __sys_sendmsg+0x177/0x240 [ 559.829018][T12894] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.829057][T12894] __do_fast_syscall_32+0x23e/0x6f0 [ 559.829082][T12894] ? do_fast_syscall_32+0x33/0x70 [ 559.829103][T12894] ? lockdep_hardirqs_on+0x7a/0x110 [ 559.829123][T12894] ? asm_int80_emulation+0x1a/0x20 [ 559.829141][T12894] ? do_int80_emulation+0x29f/0x550 [ 559.829163][T12894] ? trace_irq_disable+0x3b/0x140 [ 559.829191][T12894] do_fast_syscall_32+0x33/0x70 [ 559.829213][T12894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.829234][T12894] RIP: 0023:0xf70bf0ec [ 559.829252][T12894] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 559.829269][T12894] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 559.829290][T12894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 559.829303][T12894] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.829314][T12894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.829326][T12894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 559.829337][T12894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.829367][T12894] [ 560.210969][ T5719] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 560.225571][ T5719] usb 4-1: USB disconnect, device number 64 [ 560.300072][T12899] binder: BINDER_SET_CONTEXT_MGR already set [ 560.307558][T12899] binder: 12898:12899 ioctl 4018620d 80004a80 returned -16 [ 560.460603][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 560.468095][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 560.481126][ T9] usb 2-1: USB disconnect, device number 30 [ 560.685975][ T5719] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 560.839721][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.847934][ T5719] usb 3-1: config 0 has no interface number 0 [ 560.854340][ T5719] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 560.865585][ T5719] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.875454][ T5719] usb 3-1: config 0 interface 1 has no altsetting 0 [ 560.882142][ T5719] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 560.891280][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.901304][ T5719] usb 3-1: config 0 descriptor?? [ 561.062806][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 561.072251][T12916] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 561.275930][ T5720] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 561.468823][ T5720] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 561.478734][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.489530][ T5720] usb 2-1: config 0 descriptor?? [ 561.523144][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.526396][T11219] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 561.534009][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.553505][T12909] program syz.2.2210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.569303][ T5719] uclogic 0003:2179:0053.001C: failed retrieving string descriptor #100: -71 [ 561.576507][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 561.585385][ T5719] uclogic 0003:2179:0053.001C: failed retrieving pen parameters: -71 [ 561.594060][ T5719] uclogic 0003:2179:0053.001C: pen probing failed: -71 [ 561.601056][ T5719] uclogic 0003:2179:0053.001C: failed probing parameters: -71 [ 561.610220][ T5719] uclogic 0003:2179:0053.001C: probe with driver uclogic failed with error -71 [ 561.624181][ T5719] usb 3-1: USB disconnect, device number 48 [ 561.687748][T11219] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.701089][T11219] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.701618][ T5720] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 561.712830][T11219] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 561.727721][T11219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.736166][T11219] usb 4-1: SerialNumber: syz [ 561.757205][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 561.764363][ T9] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 561.775163][ T9] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 561.787105][ T9] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 561.798469][ T9] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 561.813929][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 561.824289][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.832398][ T9] usb 1-1: Product: syz [ 561.836907][ T9] usb 1-1: Manufacturer: syz [ 561.841580][ T9] usb 1-1: SerialNumber: syz [ 561.856159][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 561.865706][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input77 [ 561.918589][ T5720] [drm:udl_init] *ERROR* Selecting channel failed [ 561.944250][ T5720] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 561.952310][ T5720] [drm] Initialized udl on minor 2 [ 561.962533][ T5720] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 561.968005][T11219] usb 4-1: 0:2 : does not exist [ 561.977380][ T5720] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 561.987234][ T5719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 562.001355][ T5720] usb 2-1: USB disconnect, device number 31 [ 562.007681][ T5719] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 562.017009][ T5719] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 562.075816][T11219] usb 4-1: USB disconnect, device number 65 [ 562.089072][ T9] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 562.123211][ T9] (id 0x00) [ 562.149878][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.180383][T12943] trusted_key: encrypted_key: insufficient parameters specified [ 562.205944][ T9] rc_core: IR keymap rc-imon-pad not found [ 562.211900][ T9] Registered IR keymap rc-empty [ 562.219350][ T9] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 562.230490][ T9] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 562.287001][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 562.304323][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input78 [ 562.319839][ T9] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:50> initialized [ 562.356852][T12945] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2224'. [ 562.370802][T12945] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2224'. [ 562.426737][ T5719] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 562.580875][T12950] syzkaller0: entered promiscuous mode [ 562.586427][T12950] syzkaller0: entered allmulticast mode [ 562.596287][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 562.603898][ T5719] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 562.612619][ T5719] usb 3-1: config 2 has no interface number 0 [ 562.619176][ T5719] usb 3-1: config 2 interface 31 has no altsetting 0 [ 562.630140][ T5719] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 562.640730][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.649082][ T5719] usb 3-1: Product: syz [ 562.653496][ T5719] usb 3-1: Manufacturer: syz [ 562.658929][ T5719] usb 3-1: SerialNumber: syz [ 562.748338][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.754885][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.821478][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 562.830959][T12953] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 563.282123][T12967] imon:send_packet: packet tx failed (-71) [ 563.282359][ T187] usb 1-1: USB disconnect, device number 50 [ 563.310672][ T5719] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 563.350910][ T5719] usb 3-1: USB disconnect, device number 49 [ 563.359297][T12967] imon:vfd_write: send packet #2 failed [ 563.516354][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 563.575973][T11219] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 563.666101][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 563.672775][ T9] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 563.681023][ T9] usb 5-1: config 2 has no interface number 0 [ 563.685965][ T46] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 563.687175][ T9] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 563.704695][ T9] usb 5-1: config 2 interface 88 has no altsetting 0 [ 563.713915][ T9] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 563.723030][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 563.731237][ T9] usb 5-1: Product: syz [ 563.735490][ T9] usb 5-1: Manufacturer: syz [ 563.740265][ T9] usb 5-1: SerialNumber: syz [ 563.747209][T11219] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 563.756414][T11219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.766218][T12969] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 563.779985][T11219] usb 2-1: config 0 descriptor?? [ 563.788874][T11219] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 563.846213][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 563.853689][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 563.863486][ T46] usb 4-1: config 3 has an invalid interface number: 20 but max is 0 [ 563.871652][ T46] usb 4-1: config 3 has no interface number 0 [ 563.877831][ T46] usb 4-1: config 3 interface 20 has no altsetting 0 [ 563.888193][ T46] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=b6.be [ 563.897850][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.906096][ T46] usb 4-1: Product: syz [ 563.910391][ T46] usb 4-1: Manufacturer: syz [ 563.915019][ T46] usb 4-1: SerialNumber: syz [ 563.978647][T12969] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 564.009795][T11219] gspca_stv06xx: I2C: Read error writing address: -71 [ 564.028796][T11219] usb 2-1: USB disconnect, device number 32 [ 564.140049][ T46] ljca 4-1:3.20: bulk endpoints not found [ 564.159433][ T46] usb 4-1: USB disconnect, device number 66 [ 564.177561][ T187] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 564.215329][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 564.224596][T12983] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 564.339226][ T187] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 564.354136][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.372932][ T187] usb 3-1: config 0 descriptor?? [ 564.589081][ T187] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 564.798532][ T187] [drm:udl_init] *ERROR* Selecting channel failed [ 564.825093][ T187] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 564.833821][ T187] [drm] Initialized udl on minor 2 [ 564.841020][ T187] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 564.850696][ T187] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 564.858931][T11219] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 564.871671][ T187] usb 3-1: USB disconnect, device number 50 [ 564.878077][T11219] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 565.008815][ T9] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 565.027083][ T9] asix 5-1:2.88: probe with driver asix failed with error -61 [ 565.079536][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'. [ 565.265944][T11219] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 565.355944][ T46] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 565.390834][T13017] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2253'. [ 565.415948][T11219] usb 4-1: Using ep0 maxpacket: 8 [ 565.430408][T11219] usb 4-1: unable to get BOS descriptor or descriptor too short [ 565.450116][T11219] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.464072][T11219] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 565.473738][T11219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.482425][T11219] usb 4-1: Product: syz [ 565.486823][T11219] usb 4-1: Manufacturer: syz [ 565.492365][T11219] usb 4-1: SerialNumber: syz [ 565.529657][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.544563][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 565.566063][ T46] usb 2-1: config 160 has an invalid interface number: 187 but max is 0 [ 565.574703][ T46] usb 2-1: config 160 has no interface number 0 [ 565.581899][ T46] usb 2-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 565.594143][ T46] usb 2-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 565.607787][ T46] usb 2-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 565.618993][ T46] usb 2-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 565.630201][ T46] usb 2-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 565.641249][ T46] usb 2-1: config 160 interface 187 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 565.652950][ T46] usb 2-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 565.664923][ T46] usb 2-1: config 160 interface 187 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 565.676297][ T46] usb 2-1: config 160 interface 187 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 565.689605][ T46] usb 2-1: config 160 interface 187 has no altsetting 0 [ 565.698676][ T46] usb 2-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 565.708028][ T5719] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 565.715726][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.727176][ T46] usb 2-1: Product: syz [ 565.731382][ T46] usb 2-1: Manufacturer: syz [ 565.736447][ T46] usb 2-1: SerialNumber: syz [ 565.744746][T13013] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 565.753203][T13013] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 565.760795][T13013] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 565.786277][ T187] usb 5-1: USB disconnect, device number 57 [ 565.796748][T11219] usb 4-1: USB disconnect, device number 67 [ 565.806053][ T9] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 565.865312][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.881786][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 565.891928][ T5719] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 565.900571][ T5719] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 565.911034][ T5719] usb 3-1: config 2 has no interface number 0 [ 565.917741][ T5719] usb 3-1: config 2 interface 31 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.930902][ T5719] usb 3-1: config 2 interface 31 has no altsetting 0 [ 565.940403][ T5719] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 565.950638][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.958802][ T5719] usb 3-1: Product: syz [ 565.962982][ T5719] usb 3-1: Manufacturer: syz [ 565.968398][ T5719] usb 3-1: SerialNumber: syz [ 565.985292][ T5719] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 565.994573][ T46] pl2303 2-1:160.187: pl2303 converter detected [ 566.005223][ T46] pl2303 2-1:160.187: unknown device type, please report to linux-usb@vger.kernel.org [ 566.012930][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.023212][ T46] usb 2-1: USB disconnect, device number 33 [ 566.040315][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.085172][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 566.096730][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 566.104385][ T9] usb 1-1: can't read configurations, error -71 [ 566.215981][ T187] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 566.346001][ T187] usb 5-1: device descriptor read/64, error -71 [ 566.442960][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2262'. [ 566.586427][ T187] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 566.629701][T13046] FAULT_INJECTION: forcing a failure. [ 566.629701][T13046] name failslab, interval 1, probability 0, space 0, times 0 [ 566.643204][T13046] CPU: 1 UID: 0 PID: 13046 Comm: syz.1.2266 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.643235][T13046] Tainted: [L]=SOFTLOCKUP [ 566.643242][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 566.643253][T13046] Call Trace: [ 566.643261][T13046] [ 566.643269][T13046] dump_stack_lvl+0xe8/0x150 [ 566.643302][T13046] should_fail_ex+0x40c/0x560 [ 566.643332][T13046] should_failslab+0xa8/0x100 [ 566.643364][T13046] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 566.643387][T13046] ? __do_fast_syscall_32+0x23e/0x6f0 [ 566.643411][T13046] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.643434][T13046] ? fuse_get_req+0x8ee/0xd40 [ 566.643546][T13046] ? fuse_get_req+0x8ee/0xd40 [ 566.643566][T13046] fuse_get_req+0x8ee/0xd40 [ 566.643582][T13046] ? __pfx_fuse_get_req+0x10/0x10 [ 566.643601][T13046] fuse_chan_send+0x2cf/0x1ac0 [ 566.643614][T13046] ? __kmalloc_noprof+0x396/0x720 [ 566.643628][T13046] ? __kmalloc_noprof+0x1ad/0x720 [ 566.643641][T13046] ? get_create_ext+0x2f5/0xd20 [ 566.643662][T13046] ? from_kgid+0x1c6/0x660 [ 566.643675][T13046] ? __pfx_fuse_chan_send+0x10/0x10 [ 566.643686][T13046] ? __pfx_from_kgid+0x10/0x10 [ 566.643699][T13046] ? get_create_ext+0x8f3/0xd20 [ 566.643715][T13046] ? pid_nr_ns+0xcb/0x140 [ 566.643732][T13046] ? fuse_req_prep+0x5cc/0x9b0 [ 566.643770][T13046] ? __fuse_simple_request+0x7a/0xb0 [ 566.643783][T13046] create_new_entry+0x2c1/0x7c0 [ 566.643802][T13046] ? __pfx_create_new_entry+0x10/0x10 [ 566.643828][T13046] fuse_mknod+0x36e/0x4a0 [ 566.643847][T13046] ? __pfx_fuse_mknod+0x10/0x10 [ 566.643874][T13046] ? bpf_lsm_inode_mknod+0x9/0x20 [ 566.643885][T13046] ? security_inode_mknod+0xc2/0x330 [ 566.643901][T13046] vfs_mknod+0x441/0x600 [ 566.643916][T13046] filename_mknodat+0x3cb/0x660 [ 566.643930][T13046] ? __pfx_filename_mknodat+0x10/0x10 [ 566.643940][T13046] ? strncpy_from_user+0x150/0x2c0 [ 566.643955][T13046] ? do_getname+0x151/0x250 [ 566.643970][T13046] __se_sys_mknodat+0x3b/0x150 [ 566.643983][T13046] __do_fast_syscall_32+0x23e/0x6f0 [ 566.643996][T13046] ? do_fast_syscall_32+0x33/0x70 [ 566.644009][T13046] ? lockdep_hardirqs_on+0x7a/0x110 [ 566.644023][T13046] ? asm_int80_emulation+0x1a/0x20 [ 566.644033][T13046] ? do_int80_emulation+0x29f/0x550 [ 566.644045][T13046] ? trace_irq_disable+0x3b/0x140 [ 566.644061][T13046] do_fast_syscall_32+0x33/0x70 [ 566.644074][T13046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.644086][T13046] RIP: 0023:0xf7ff30ec [ 566.644098][T13046] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 566.644107][T13046] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000129 [ 566.644119][T13046] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 566.644127][T13046] RDX: 00000000ffffc000 RSI: 0000000000000103 RDI: 0000000000000000 [ 566.644133][T13046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.644140][T13046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.644146][T13046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.644161][T13046] [ 566.806059][ T187] usb 5-1: device descriptor read/64, error -71 [ 566.968137][T11219] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 567.086454][ T187] usb usb5-port1: attempt power cycle [ 567.146185][T11219] usb 4-1: Using ep0 maxpacket: 32 [ 567.165546][T11219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.181052][T11219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.192128][T13051] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 567.210076][T11219] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 567.238230][T11219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.264808][T11219] usb 4-1: config 0 descriptor?? [ 567.283179][T11219] hub 4-1:0.0: USB hub found [ 567.449684][ T187] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 567.475331][T11219] hub 4-1:0.0: 1 port detected [ 567.497779][ T187] usb 5-1: device descriptor read/8, error -71 [ 567.524716][T13055] netlink: 'syz.1.2268': attribute type 21 has an invalid length. [ 567.767908][ T187] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 567.776695][ T5719] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 567.796446][ T187] usb 5-1: device descriptor read/8, error -71 [ 567.906670][ T187] usb usb5-port1: unable to enumerate USB device [ 567.926596][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 567.936894][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.950362][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.965499][ T5719] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.985086][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.000902][ T5719] usb 2-1: Product: syz [ 568.010738][ T5719] usb 2-1: Manufacturer: syz [ 568.015369][ T5719] usb 2-1: SerialNumber: syz [ 568.037012][ T5719] usb 2-1: 0:2 : does not exist [ 568.275974][T11219] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 568.426047][T11219] usb 1-1: Using ep0 maxpacket: 32 [ 568.433070][T11219] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 568.442694][T11219] usb 1-1: config 2 has no interface number 0 [ 568.449318][T11219] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 568.459642][T11219] usb 1-1: config 2 interface 88 has no altsetting 0 [ 568.468686][T11219] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 568.477962][T11219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 568.486218][T11219] usb 1-1: Product: syz [ 568.490421][T11219] usb 1-1: Manufacturer: syz [ 568.495026][T11219] usb 1-1: SerialNumber: syz [ 568.502957][ T5737] usb 3-1: USB disconnect, device number 51 [ 568.503129][T13057] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 568.598753][ T5681] hub 4-1:0.0: activate --> -90 [ 568.688216][T13042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.697314][T13042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.708386][T13042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.717404][T13042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.738160][T13057] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 568.865955][ T5737] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 569.026584][ T5737] usb 3-1: Using ep0 maxpacket: 16 [ 569.033932][ T5737] usb 3-1: unable to get BOS descriptor or descriptor too short [ 569.047355][ T46] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 569.065971][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.078425][ T46] usb 4-1: device reset changed ep0 maxpacket size! [ 569.085090][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.101647][ T46] usb 4-1: USB disconnect, device number 68 [ 569.107686][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.128356][ T5737] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 569.149533][ T5737] usb 3-1: string descriptor 0 read error: -22 [ 569.159470][ T5737] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 569.168613][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.285969][ T5720] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 569.388757][T13059] FAULT_INJECTION: forcing a failure. [ 569.388757][T13059] name failslab, interval 1, probability 0, space 0, times 0 [ 569.401599][T13059] CPU: 0 UID: 0 PID: 13059 Comm: syz.2.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.401634][T13059] Tainted: [L]=SOFTLOCKUP [ 569.401641][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 569.401648][T13059] Call Trace: [ 569.401653][T13059] [ 569.401658][T13059] dump_stack_lvl+0xe8/0x150 [ 569.401679][T13059] should_fail_ex+0x40c/0x560 [ 569.401696][T13059] should_failslab+0xa8/0x100 [ 569.401725][T13059] __kmalloc_noprof+0xfe/0x720 [ 569.401750][T13059] ? rcu_is_watching+0x15/0xb0 [ 569.401768][T13059] ? tomoyo_realpath_from_path+0xef/0x640 [ 569.401790][T13059] ? tomoyo_realpath_from_path+0xef/0x640 [ 569.401807][T13059] tomoyo_realpath_from_path+0xef/0x640 [ 569.401828][T13059] tomoyo_check_open_permission+0x229/0x470 [ 569.401857][T13059] ? tomoyo_check_open_permission+0x1d3/0x470 [ 569.401886][T13059] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 569.401916][T13059] ? __asan_memset+0x22/0x50 [ 569.401944][T13059] ? seqcount_lockdep_reader_access+0xea/0x100 [ 569.401987][T13059] security_file_open+0xa9/0x240 [ 569.402008][T13059] do_dentry_open+0x4a0/0x1380 [ 569.402045][T13059] vfs_open+0x3b/0x340 [ 569.402068][T13059] ? path_openat+0x2e2d/0x3830 [ 569.402089][T13059] path_openat+0x2e44/0x3830 [ 569.402104][T13059] ? kasan_save_track+0x3e/0x80 [ 569.402118][T13059] ? do_sys_openat2+0xcc/0x200 [ 569.402132][T13059] ? do_fast_syscall_32+0x33/0x70 [ 569.402145][T13059] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.402185][T13059] do_file_open+0x23e/0x4a0 [ 569.402211][T13059] ? __pfx_do_file_open+0x10/0x10 [ 569.402247][T13059] ? _raw_spin_unlock+0x28/0x50 [ 569.402257][T13059] ? alloc_fd+0x651/0x6c0 [ 569.402276][T13059] do_sys_openat2+0x115/0x200 [ 569.402290][T13059] ? __fget_files+0x3a2/0x420 [ 569.402308][T13059] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.402343][T13059] ? fput+0xa0/0xd0 [ 569.402368][T13059] ? ksys_write+0x242/0x270 [ 569.402391][T13059] __ia32_compat_sys_openat+0x131/0x160 [ 569.402411][T13059] __do_fast_syscall_32+0x23e/0x6f0 [ 569.402424][T13059] ? do_fast_syscall_32+0x33/0x70 [ 569.402436][T13059] ? lockdep_hardirqs_on+0x7a/0x110 [ 569.402447][T13059] ? asm_int80_emulation+0x1a/0x20 [ 569.402460][T13059] ? do_int80_emulation+0x29f/0x550 [ 569.402481][T13059] ? trace_irq_disable+0x3b/0x140 [ 569.402510][T13059] do_fast_syscall_32+0x33/0x70 [ 569.402534][T13059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.402551][T13059] RIP: 0023:0xf7f430ec [ 569.402563][T13059] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 569.402572][T13059] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 569.402584][T13059] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 569.402591][T13059] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.402597][T13059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.402603][T13059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 569.402613][T13059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.402642][T13059] [ 569.402683][T13059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.439789][ T46] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 569.754361][T11219] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 569.757697][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.766988][T11219] asix 1-1:2.88: probe with driver asix failed with error -61 [ 569.775654][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.794029][ T5720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.807843][ T5720] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.817251][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.828193][ T5720] usb 5-1: config 0 descriptor?? [ 569.895958][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 569.903314][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 569.912256][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.922606][ T46] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.933678][ T46] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.944610][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 569.969708][ T46] usb 4-1: string descriptor 0 read error: -22 [ 569.977401][ T46] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 569.986733][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.071702][T13072] FAULT_INJECTION: forcing a failure. [ 570.071702][T13072] name failslab, interval 1, probability 0, space 0, times 0 [ 570.084422][T13072] CPU: 0 UID: 0 PID: 13072 Comm: syz.2.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.084450][T13072] Tainted: [L]=SOFTLOCKUP [ 570.084456][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 570.084468][T13072] Call Trace: [ 570.084477][T13072] [ 570.084485][T13072] dump_stack_lvl+0xe8/0x150 [ 570.084519][T13072] should_fail_ex+0x40c/0x560 [ 570.084549][T13072] should_failslab+0xa8/0x100 [ 570.084576][T13072] __kmalloc_cache_noprof+0xa8/0x660 [ 570.084591][T13072] ? inetdev_init+0x6c/0x4d0 [ 570.084605][T13072] ? inetdev_init+0x6c/0x4d0 [ 570.084622][T13072] inetdev_init+0x6c/0x4d0 [ 570.084650][T13072] inetdev_event+0x24f/0x15e0 [ 570.084684][T13072] ? __pfx_inetdev_event+0x10/0x10 [ 570.084722][T13072] notifier_call_chain+0x1a5/0x3d0 [ 570.084742][T13072] netif_set_mtu_ext+0x5ac/0x830 [ 570.084757][T13072] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 570.084780][T13072] ? validate_linkmsg+0x765/0x950 [ 570.084812][T13072] do_setlink+0xa81/0x4670 [ 570.084832][T13072] ? unwind_get_return_address+0x4d/0x90 [ 570.084867][T13072] ? __pfx_do_setlink+0x10/0x10 [ 570.084889][T13072] ? __lock_acquire+0x683/0x2cf0 [ 570.084917][T13072] ? stack_depot_save_flags+0x33/0x800 [ 570.084935][T13072] ? kasan_save_track+0x4f/0x80 [ 570.084957][T13072] ? kasan_save_track+0x3e/0x80 [ 570.084981][T13072] ? __kasan_kmalloc+0x93/0xb0 [ 570.085006][T13072] ? __kmalloc_cache_noprof+0x32d/0x660 [ 570.085038][T13072] ? __mutex_trylock_common+0x15f/0x270 [ 570.085051][T13072] ? __pfx___mutex_trylock_common+0x10/0x10 [ 570.085063][T13072] ? rcu_is_watching+0x15/0xb0 [ 570.085074][T13072] ? trace_contention_end+0x3d/0x140 [ 570.085086][T13072] ? __mutex_lock+0x30d/0x1550 [ 570.085116][T13072] ? rtnl_newlink+0x8a3/0x1bd0 [ 570.085139][T13072] ? __pfx___mutex_lock+0x10/0x10 [ 570.085171][T13072] ? ns_capable+0x89/0xe0 [ 570.085192][T13072] ? rtnl_link_get_net_capable+0xd3/0x310 [ 570.085206][T13072] rtnl_newlink+0x148e/0x1bd0 [ 570.085222][T13072] ? __pfx_rtnl_newlink+0x10/0x10 [ 570.085232][T13072] ? __do_fast_syscall_32+0x23e/0x6f0 [ 570.085248][T13072] ? do_fast_syscall_32+0x33/0x70 [ 570.085277][T13072] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.085335][T13072] ? kasan_quarantine_put+0xbb/0x1f0 [ 570.085351][T13072] ? lockdep_hardirqs_on+0x7a/0x110 [ 570.085364][T13072] ? nlmon_xmit+0xb0/0x100 [ 570.085493][T13072] ? kmem_cache_free+0x182/0x650 [ 570.085513][T13072] ? __lock_acquire+0x683/0x2cf0 [ 570.085529][T13072] ? __dev_queue_xmit+0x29b/0x3820 [ 570.085546][T13072] ? __local_bh_enable_ip+0xd0/0x130 [ 570.085568][T13072] ? lockdep_hardirqs_on+0x7a/0x110 [ 570.085589][T13072] ? __dev_queue_xmit+0x29b/0x3820 [ 570.085611][T13072] ? __local_bh_enable_ip+0xd0/0x130 [ 570.085633][T13072] ? __dev_queue_xmit+0x29b/0x3820 [ 570.085654][T13072] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 570.085665][T13072] ? __pfx_rtnl_newlink+0x10/0x10 [ 570.085681][T13072] ? __pfx_rtnl_newlink+0x10/0x10 [ 570.085690][T13072] rtnetlink_rcv_msg+0x802/0xc00 [ 570.085709][T13072] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 570.085728][T13072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.085747][T13072] ? ref_tracker_free+0x689/0x830 [ 570.085776][T13072] ? __pfx_ref_tracker_free+0x10/0x10 [ 570.085797][T13072] ? __asan_memcpy+0x40/0x70 [ 570.085809][T13072] ? __skb_clone+0x5c/0x6c0 [ 570.085832][T13072] netlink_rcv_skb+0x226/0x4a0 [ 570.085855][T13072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.085875][T13072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.085906][T13072] ? netlink_deliver_tap+0x2e/0x1b0 [ 570.085925][T13072] ? netlink_deliver_tap+0x2e/0x1b0 [ 570.085950][T13072] netlink_unicast+0x7bb/0x940 [ 570.085979][T13072] netlink_sendmsg+0x813/0xb40 [ 570.086008][T13072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.086033][T13072] ? aa_sock_msg_perm+0xf1/0x1b0 [ 570.086056][T13072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.086077][T13072] sock_sendmsg_nosec+0x13a/0x180 [ 570.086106][T13072] ____sys_sendmsg+0x54e/0x850 [ 570.086132][T13072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.086167][T13072] ___sys_sendmsg+0x2a5/0x360 [ 570.086186][T13072] ? __lock_acquire+0x683/0x2cf0 [ 570.086215][T13072] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.086236][T13072] ? get_pid_task+0x20/0x1f0 [ 570.086270][T13072] ? get_pid_task+0x20/0x1f0 [ 570.086295][T13072] ? get_pid_task+0x20/0x1f0 [ 570.086330][T13072] ? __fget_files+0x2a/0x420 [ 570.086348][T13072] ? __fget_files+0x3a2/0x420 [ 570.086384][T13072] __sys_sendmsg+0x177/0x240 [ 570.086409][T13072] ? __pfx___sys_sendmsg+0x10/0x10 [ 570.086448][T13072] __do_fast_syscall_32+0x23e/0x6f0 [ 570.086461][T13072] ? do_fast_syscall_32+0x33/0x70 [ 570.086473][T13072] ? lockdep_hardirqs_on+0x7a/0x110 [ 570.086484][T13072] ? asm_int80_emulation+0x1a/0x20 [ 570.086494][T13072] ? do_int80_emulation+0x29f/0x550 [ 570.086514][T13072] ? trace_irq_disable+0x3b/0x140 [ 570.086542][T13072] do_fast_syscall_32+0x33/0x70 [ 570.086566][T13072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.086590][T13072] RIP: 0023:0xf7f430ec [ 570.086603][T13072] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 570.086612][T13072] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 570.086624][T13072] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0 [ 570.086632][T13072] RDX: 0000000000000884 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.086638][T13072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.086644][T13072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 570.086650][T13072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.086679][T13072] [ 570.671248][ T5720] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 570.766082][ T5719] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 570.846188][ T5752] usb 1-1: USB disconnect, device number 53 [ 570.919015][T13081] CIFS: bad ip= option (1.7.0.0.1) [ 570.985273][ T5737] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.007426][ T5719] usb 2-1: USB disconnect, device number 34 [ 571.030943][ T5737] usb 3-1: MIDIStreaming interface descriptor not found [ 571.289538][ T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.297878][ T5737] usb 3-1: USB disconnect, device number 52 [ 571.310555][ T46] usb 4-1: MIDIStreaming interface descriptor not found [ 571.327376][T13089] netlink: 'syz.4.2273': attribute type 8 has an invalid length. [ 571.466544][ T46] usb 4-1: USB disconnect, device number 69 [ 571.767095][ T5719] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 571.935942][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 571.941417][ T5737] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 571.946217][T11219] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 571.951614][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 571.970824][ T5719] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 571.980062][ T5719] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 571.988221][ T5719] usb 2-1: Product: syz [ 571.992468][ T5719] usb 2-1: Manufacturer: syz [ 571.997194][ T5719] usb 2-1: SerialNumber: syz [ 572.095965][T11219] usb 1-1: device descriptor read/64, error -71 [ 572.115946][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 572.122902][ T5737] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 572.131217][ T5737] usb 3-1: config 0 has no interface number 0 [ 572.137414][ T5737] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 572.147652][ T5737] usb 3-1: config 0 interface 89 has no altsetting 0 [ 572.156297][ T5737] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 572.165658][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.173751][ T5737] usb 3-1: Product: syz [ 572.178321][ T5737] usb 3-1: Manufacturer: syz [ 572.182943][ T5737] usb 3-1: SerialNumber: syz [ 572.194680][ T5737] usb 3-1: config 0 descriptor?? [ 572.204793][ T5737] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 572.214489][ T5737] em28xx 3-1:0.89: Video interface 89 found: [ 572.227315][ T5719] usb 2-1: Invalid connection information received from device [ 572.366033][T11219] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 572.517559][T11219] usb 1-1: device descriptor read/64, error -71 [ 572.544548][ T5719] usb 2-1: USB disconnect, device number 35 [ 572.637066][T11219] usb usb1-port1: attempt power cycle [ 572.825133][ T5737] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 572.943276][ T5681] usb 5-1: USB disconnect, device number 62 [ 573.006277][T11219] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 573.046463][T11219] usb 1-1: device descriptor read/8, error -71 [ 573.096440][ T46] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 573.264967][ T46] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 573.285447][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 573.308803][T11219] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 573.310290][ T46] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.342016][T13116] trusted_key: encrypted_key: insufficient parameters specified [ 573.351037][T11219] usb 1-1: device descriptor read/8, error -71 [ 573.365061][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 573.386064][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 573.400173][ T46] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 573.408437][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 573.419750][ T46] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.431832][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 573.443266][ T5719] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 573.465461][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 573.486862][T11219] usb usb1-port1: unable to enumerate USB device [ 573.495493][ T46] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 573.509895][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 573.547853][ T46] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.566014][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 573.577394][ T46] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 573.605800][ T46] usb 4-1: string descriptor 0 read error: -22 [ 573.612976][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 573.626720][ T5719] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 573.639009][ T5719] usb 5-1: config 2 has no interface number 0 [ 573.645202][ T46] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 573.654729][ T5719] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 573.666804][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.680584][ T5719] usb 5-1: config 2 interface 88 has no altsetting 0 [ 573.717050][ T5719] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 573.728847][ T46] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 573.736374][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 573.759983][ T5719] usb 5-1: Product: syz [ 573.766095][ T5719] usb 5-1: Manufacturer: syz [ 573.775125][ T5719] usb 5-1: SerialNumber: syz [ 573.790746][T13114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 574.011289][T13114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 574.156483][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 574.156494][ T29] audit: type=1326 audit(1785198699.169:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2280" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf7f430ec code=0x0 [ 574.681200][ T5737] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 574.699997][ T5737] em28xx 3-1:0.89: board has no eeprom [ 574.799105][ T5737] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 574.824689][ T5737] em28xx 3-1:0.89: analog set to bulk mode. [ 574.846634][ T5752] em28xx 3-1:0.89: Registering V4L2 extension [ 575.010388][ T5752] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 575.034789][ T5719] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 575.059780][ T5719] asix 5-1:2.88: probe with driver asix failed with error -61 [ 575.068759][ T5752] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 575.098710][ T5752] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 575.125515][ T5752] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 575.126531][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 575.148348][ T5752] em28xx 3-1:0.89: Config register raw data: 0xfffffffb [ 575.169120][ T5752] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 575.189209][ T5752] em28xx 3-1:0.89: No AC97 audio processor [ 575.249951][ T5752] usb 3-1: Decoder not found [ 575.265116][ T5752] em28xx 3-1:0.89: failed to create media graph [ 575.284741][ T5752] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 575.314333][ T5752] em28xx 3-1:0.89: Registering snapshot button... [ 575.330332][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 575.358259][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.371544][ T5752] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input81 [ 575.413301][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 575.443090][ T5752] em28xx 3-1:0.89: Remote control support is not available for this card. [ 575.461543][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 575.495064][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.529006][ T9] usb 1-1: config 0 descriptor?? [ 575.628521][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2294'. [ 575.642185][ T5752] usb 3-1: USB disconnect, device number 53 [ 575.660886][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2294'. [ 575.673090][ T5752] em28xx 3-1:0.89: Disconnecting em28xx [ 575.682245][ T5752] em28xx 3-1:0.89: Closing input extension [ 575.690630][ T5752] em28xx 3-1:0.89: Deregistering snapshot button [ 575.778725][ T5752] em28xx 3-1:0.89: Freeing device [ 575.820258][ T5719] usb 5-1: USB disconnect, device number 63 [ 575.846038][T13139] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 575.931691][T11219] usb 4-1: USB disconnect, device number 70 [ 576.250833][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 576.275679][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 576.304832][ T9] usb 1-1: USB disconnect, device number 58 [ 576.767948][T13171] bridge5: entered promiscuous mode [ 576.787322][T13171] bridge5: entered allmulticast mode [ 577.529526][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 577.559251][T13182] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 577.706081][ T5719] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 577.897999][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 577.911399][ T5719] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 577.925227][ T5719] usb 2-1: config 2 has no interface number 0 [ 577.933784][ T5719] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 577.936381][ T5697] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 577.946306][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 577.961057][ T5719] usb 2-1: config 2 interface 88 has no altsetting 0 [ 577.975503][T13196] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 577.986996][ T5719] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 577.996680][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 578.005182][ T5719] usb 2-1: Product: syz [ 578.014806][ T5719] usb 2-1: Manufacturer: syz [ 578.023550][ T5719] usb 2-1: SerialNumber: syz [ 578.040066][T13184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 578.140650][ T5697] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 578.149336][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 578.166605][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 578.210116][ T5697] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 578.238942][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 578.269061][T13184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 578.302951][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 578.327484][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 578.342169][ T9] usb 3-1: config 4 has an invalid interface number: 4 but max is 0 [ 578.360810][ T5697] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 578.378572][ T9] usb 3-1: config 4 has no interface number 0 [ 578.388291][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 578.402651][ T9] usb 3-1: config 4 interface 4 altsetting 22 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 578.429109][ T5697] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 578.442673][ T9] usb 3-1: config 4 interface 4 has no altsetting 0 [ 578.471431][ T9] usb 3-1: New USB device found, idVendor=1508, idProduct=1001, bcdDevice=1c.12 [ 578.483358][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 578.503661][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.523795][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 578.546825][ T9] usb 3-1: Product: syz [ 578.552521][ T9] usb 3-1: Manufacturer: syz [ 578.574023][ T9] usb 3-1: SerialNumber: syz [ 578.584543][ T5697] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 578.621663][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 578.650925][ T5697] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 578.664756][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 578.683551][ T5697] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 578.713606][T13200] syzkaller0: entered promiscuous mode [ 578.713636][T13200] syzkaller0: entered allmulticast mode [ 578.728234][ T5697] usb 1-1: string descriptor 0 read error: -22 [ 578.728391][ T5697] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 578.728446][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.754384][ T5697] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 578.837583][ T9] usb 3-1: USB disconnect, device number 54 [ 579.313376][ T5719] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 579.328698][ T5719] asix 2-1:2.88: probe with driver asix failed with error -61 [ 580.082626][ T5719] usb 2-1: USB disconnect, device number 37 [ 580.799650][ T5737] usb 1-1: USB disconnect, device number 59 [ 580.820764][T13236] netlink: 115 bytes leftover after parsing attributes in process `syz.2.2322'. [ 580.862858][T13236] kvm: pic: single mode not supported [ 580.863001][T13236] kvm: pic: level sensitive irq not supported [ 580.870193][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'. [ 580.885619][T13241] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 581.672873][T11219] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 581.834099][T11219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.844544][T11219] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 581.865751][T11219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.889025][T11219] usb 1-1: config 0 descriptor?? [ 581.912571][T11219] pwc: Askey VC010 type 2 USB webcam detected. [ 582.304230][T11219] pwc: recv_control_msg error -32 req 02 val 2b00 [ 582.313969][T11219] pwc: recv_control_msg error -32 req 02 val 2700 [ 582.322190][T11219] pwc: recv_control_msg error -32 req 02 val 2c00 [ 582.329888][T11219] pwc: recv_control_msg error -32 req 04 val 1000 [ 582.337738][T11219] pwc: recv_control_msg error -32 req 04 val 1300 [ 582.344965][T11219] pwc: recv_control_msg error -32 req 04 val 1400 [ 583.160545][T11219] pwc: recv_control_msg error -71 req 02 val 2100 [ 583.178464][T11219] pwc: recv_control_msg error -71 req 04 val 1500 [ 583.193098][T11219] pwc: recv_control_msg error -71 req 02 val 2500 [ 583.217092][T11219] pwc: recv_control_msg error -71 req 02 val 2400 [ 583.247924][T11219] pwc: recv_control_msg error -71 req 02 val 2600 [ 583.276364][T13255] FAULT_INJECTION: forcing a failure. [ 583.276364][T13255] name failslab, interval 1, probability 0, space 0, times 0 [ 583.290865][T13255] CPU: 0 UID: 0 PID: 13255 Comm: syz.1.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.290897][T13255] Tainted: [L]=SOFTLOCKUP [ 583.290904][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 583.290918][T13255] Call Trace: [ 583.290926][T13255] [ 583.290935][T13255] dump_stack_lvl+0xe8/0x150 [ 583.290968][T13255] should_fail_ex+0x40c/0x560 [ 583.290993][T13255] ? traverse+0xf1/0x620 [ 583.291014][T13255] should_failslab+0xa8/0x100 [ 583.291040][T13255] __kvmalloc_node_noprof+0x176/0x860 [ 583.291067][T13255] ? aa_file_perm+0x18b/0x15f0 [ 583.291090][T13255] ? traverse+0xf1/0x620 [ 583.291114][T13255] traverse+0xf1/0x620 [ 583.291132][T13255] ? aa_file_perm+0x18b/0x15f0 [ 583.291153][T13255] ? aa_file_perm+0x4ed/0x15f0 [ 583.291172][T13255] ? __lock_acquire+0x683/0x2cf0 [ 583.291200][T13255] seq_read_iter+0xb6a/0xca0 [ 583.291233][T13255] seq_read+0x367/0x480 [ 583.291261][T13255] ? __pfx_seq_read+0x10/0x10 [ 583.291286][T13255] ? apparmor_file_permission+0x1f4/0x300 [ 583.291320][T13255] ? __pfx_seq_read+0x10/0x10 [ 583.291339][T13255] proc_reg_read+0x1e9/0x2e0 [ 583.291359][T13255] ? __pfx_proc_reg_read+0x10/0x10 [ 583.291384][T13255] vfs_read+0x213/0xa80 [ 583.291406][T13255] ? __pfx_vfs_read+0x10/0x10 [ 583.291425][T13255] ? __fget_files+0x2a/0x420 [ 583.291452][T13255] ? __fget_files+0x2a/0x420 [ 583.291472][T13255] ? __fget_files+0x3a2/0x420 [ 583.291496][T13255] ? __fget_files+0x2a/0x420 [ 583.291525][T13255] ksys_pread64+0x126/0x1c0 [ 583.291545][T13255] ? __pfx_ksys_pread64+0x10/0x10 [ 583.291568][T13255] ? __ia32_sys_ia32_pread64+0x20/0xd0 [ 583.291595][T13255] __do_fast_syscall_32+0x23e/0x6f0 [ 583.291620][T13255] ? do_fast_syscall_32+0x33/0x70 [ 583.291640][T13255] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.291659][T13255] ? asm_int80_emulation+0x1a/0x20 [ 583.291677][T13255] ? do_int80_emulation+0x29f/0x550 [ 583.291698][T13255] ? trace_irq_disable+0x3b/0x140 [ 583.291725][T13255] do_fast_syscall_32+0x33/0x70 [ 583.291747][T13255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 583.291771][T13255] RIP: 0023:0xf7ff30ec [ 583.291788][T13255] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 583.291805][T13255] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4 [ 583.291826][T13255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 583.291839][T13255] RDX: 0000000000000021 RSI: 0000000000000073 RDI: 0000000000000000 [ 583.291850][T13255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.291860][T13255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 583.291870][T13255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.291895][T13255] [ 583.292046][T11219] pwc: recv_control_msg error -71 req 02 val 2900 [ 583.344307][T13258] IPv6: Can't replace route, no match found [ 583.381627][T11219] pwc: recv_control_msg error -71 req 02 val 2800 [ 583.557132][T13261] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2327'. [ 583.646479][T11219] pwc: recv_control_msg error -71 req 04 val 1100 [ 583.653501][T11219] pwc: recv_control_msg error -71 req 04 val 1200 [ 583.664759][T11219] pwc: Registered as video103. [ 583.676796][ T5719] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 583.698221][T11219] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input82 [ 583.748262][T11219] usb 1-1: USB disconnect, device number 60 [ 583.775936][ T5737] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 583.827262][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 583.838359][ T5719] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 583.857237][ T5719] usb 4-1: config 2 has no interface number 0 [ 583.873803][ T5719] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 583.910746][ T5719] usb 4-1: config 2 interface 88 has no altsetting 0 [ 583.943539][ T5719] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 583.953008][ T5737] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 583.966077][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.980099][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 583.990458][ T5737] usb 3-1: config 0 has no interface number 0 [ 583.996974][ T5719] usb 4-1: Product: syz [ 584.001353][ T5719] usb 4-1: Manufacturer: syz [ 584.006494][ T5737] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 584.022235][ T5719] usb 4-1: SerialNumber: syz [ 584.035794][ T5737] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 584.050282][T13260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 584.067374][ T5737] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.098930][ T5737] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 584.118818][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.135890][ T5737] usb 3-1: Product: syz [ 584.146181][ T5737] usb 3-1: Manufacturer: syz [ 584.156172][ T5737] usb 3-1: SerialNumber: syz [ 584.171020][ T5737] usb 3-1: config 0 descriptor?? [ 584.284482][T13260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 584.445584][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2336'. [ 584.638366][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 584.656034][T13282] netlink: 'syz.0.2335': attribute type 1 has an invalid length. [ 584.805457][ T5737] usb 3-1: USB disconnect, device number 55 [ 584.833494][T13290] tipc: Failed to remove unknown binding: 66,0,0/4:2871468973/2871468974 [ 584.872296][T13290] tipc: Failed to remove unknown binding: 66,0,0/4:2871468973/2871468974 [ 584.903807][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2340'. [ 585.166027][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 585.300236][ T5719] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 585.307437][ T9] usb 1-1: device descriptor read/64, error -71 [ 585.317352][ T5719] asix 4-1:2.88: probe with driver asix failed with error -61 [ 585.326593][ T5737] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 585.519936][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 585.527522][ T5737] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 585.544027][ T5737] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 585.561445][ T5737] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 585.573821][ T5737] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 585.589727][ T5737] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 585.599399][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.608133][ T5737] usb 5-1: Product: syz [ 585.612342][ T5737] usb 5-1: Manufacturer: syz [ 585.617438][ T5737] usb 5-1: SerialNumber: syz [ 585.636554][ T5719] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 585.645627][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 585.646066][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 585.667061][ T5737] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input84 [ 585.796340][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 585.796796][ T9] usb 1-1: device descriptor read/64, error -71 [ 585.846710][ T5719] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 585.857889][ T5737] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 585.869436][ T5719] usb 3-1: config 0 has no interface number 0 [ 585.876121][ T5737] (id 0x00) [ 585.881980][ T5719] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 585.891649][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.900498][ T5719] usb 3-1: Product: syz [ 585.906251][ T5719] usb 3-1: Manufacturer: syz [ 585.911537][ T5719] usb 3-1: SerialNumber: syz [ 585.917352][ T9] usb usb1-port1: attempt power cycle [ 585.919955][ T5719] usb 3-1: config 0 descriptor?? [ 585.944749][ T5719] ssu100 3-1:0.3: Quatech SSU-100 USB to Serial Driver converter detected [ 586.036001][ T5737] rc_core: IR keymap rc-imon-pad not found [ 586.058434][ T5737] Registered IR keymap rc-empty [ 586.069015][ T46] usb 4-1: USB disconnect, device number 71 [ 586.093785][ T5737] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 586.121650][ T5737] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 586.141526][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2347'. [ 586.144645][ T5719] ssu100 3-1:0.3: probe with driver ssu100 failed with error -5 [ 586.159908][ T5737] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 586.188971][ T5737] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input85 [ 586.231349][ T5737] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:64> initialized [ 586.278546][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 586.316710][ T9] usb 1-1: device descriptor read/8, error -71 [ 586.379200][ T5737] usb 3-1: USB disconnect, device number 56 [ 586.606099][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 586.626543][ T9] usb 1-1: device descriptor read/8, error -71 [ 588.530578][ T9] usb usb1-port1: unable to enumerate USB device [ 588.556000][ T5697] usb 5-1: USB disconnect, device number 64 [ 720.585850][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 720.592849][ C0] rcu: 1-...!: (1 GPs behind) idle=0cdc/1/0x4000000000000000 softirq=83086/83116 fqs=2 [ 720.603829][ C0] rcu: (detected by 0, t=10502 jiffies, g=103161, q=553 ncpus=2) [ 720.611649][ C0] Sending NMI from CPU 0 to CPUs 1: [ 720.611700][ C1] NMI backtrace for cpu 1 [ 720.611719][ C1] CPU: 1 UID: 0 PID: 12414 Comm: syz.0.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.611743][ C1] Tainted: [L]=SOFTLOCKUP [ 720.611750][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 720.611761][ C1] RIP: 0010:kasan_check_range+0x7/0x2c0 [ 720.611794][ C1] Code: 48 c7 c6 5c 42 4b 8e e8 37 9e f3 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 <41> 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 [ 720.611810][ C1] RSP: 0018:ffffc90000a08c90 EFLAGS: 00000082 [ 720.611826][ C1] RAX: ffff88807e5f0800 RBX: ffff88807e5f2d30 RCX: ffffffff89de2a85 [ 720.611839][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807e5f0880 [ 720.611851][ C1] RBP: 000000007fffffff R08: 0000000000000003 R09: 0000000000000004 [ 720.611862][ C1] R10: dffffc0000000000 R11: fffff52000141190 R12: 0000000000000000 [ 720.611875][ C1] R13: ffff88807e5f0800 R14: 0000000000000000 R15: ffff88807e5f0880 [ 720.611887][ C1] FS: 0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 720.611902][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 720.611914][ C1] CR2: 00000000f7f355b8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 720.611929][ C1] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000007 [ 720.611940][ C1] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 720.611952][ C1] Call Trace: [ 720.611961][ C1] [ 720.611969][ C1] taprio_set_budgets+0x245/0x3a0 [ 720.611998][ C1] advance_sched+0x970/0xc80 [ 720.612027][ C1] ? __pfx_advance_sched+0x10/0x10 [ 720.612049][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 720.612078][ C1] hrtimer_interrupt+0x448/0x910 [ 720.612110][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 720.612131][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 720.612151][ C1] [ 720.612157][ C1] [ 720.612164][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.612183][ C1] RIP: 0010:deref_stack_reg+0x183/0x220 [ 720.612201][ C1] Code: 39 c4 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 4c 39 e0 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 12 07 00 00 49 89 c6 48 8b 5c 24 08 48 89 d8 [ 720.612216][ C1] RSP: 0018:ffffc90003acf4d8 EFLAGS: 00000202 [ 720.612231][ C1] RAX: ffffc90003acfa01 RBX: 1ffff92000759eb9 RCX: 0000000000000001 [ 720.612244][ C1] RDX: ffffc90003acf608 RSI: dffffc0000000000 RDI: ffffc90003acf5d8 [ 720.612257][ C1] RBP: ffffc90003ac8000 R08: ffffc90003acfaf0 R09: 0000000000000000 [ 720.612269][ C1] R10: ffffc90003acf618 R11: fffff52000759ec5 R12: 1ffff92000759eba [ 720.612283][ C1] R13: 1ffff92000759ebb R14: ffffc90003ad0000 R15: ffffc90003acf5c8 [ 720.612308][ C1] unwind_next_frame+0x19bd/0x2550 [ 720.612329][ C1] ? task_work_run+0x1d9/0x270 [ 720.612345][ C1] ? unwind_next_frame+0x8f/0x2550 [ 720.612365][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 720.612388][ C1] arch_stack_walk+0x11b/0x150 [ 720.612409][ C1] ? do_exit+0x73a/0x2360 [ 720.612436][ C1] stack_trace_save+0xa9/0x100 [ 720.612457][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 720.612479][ C1] ? stack_depot_save_flags+0x33/0x800 [ 720.612512][ C1] save_stack+0x122/0x230 [ 720.612536][ C1] ? __pfx_save_stack+0x10/0x10 [ 720.612558][ C1] ? page_ext_get+0x22/0x2e0 [ 720.612578][ C1] ? free_pages_prepare+0x960/0xa60 [ 720.612598][ C1] ? __free_contig_range_common+0x174/0x340 [ 720.612615][ C1] ? free_pages_bulk+0x48/0x120 [ 720.612638][ C1] ? vfree+0x224/0x4a0 [ 720.612656][ C1] ? kcov_close+0x28/0x50 [ 720.612680][ C1] ? __fput+0x418/0xa50 [ 720.612702][ C1] ? task_work_run+0x1d9/0x270 [ 720.612722][ C1] ? page_ext_put+0x97/0xc0 [ 720.612746][ C1] __reset_page_owner+0x71/0x1f0 [ 720.612771][ C1] free_pages_prepare+0x960/0xa60 [ 720.612794][ C1] __free_contig_range_common+0x174/0x340 [ 720.612815][ C1] free_pages_bulk+0x48/0x120 [ 720.612841][ C1] vfree+0x224/0x4a0 [ 720.612861][ C1] ? __pfx_kcov_close+0x10/0x10 [ 720.612882][ C1] kcov_close+0x28/0x50 [ 720.612902][ C1] __fput+0x418/0xa50 [ 720.612928][ C1] task_work_run+0x1d9/0x270 [ 720.612946][ C1] ? __pfx_task_work_run+0x10/0x10 [ 720.612962][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 720.612986][ C1] do_exit+0x73a/0x2360 [ 720.613015][ C1] ? __pfx_do_exit+0x10/0x10 [ 720.613038][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 720.613065][ C1] do_group_exit+0x22d/0x2f0 [ 720.613080][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 720.613099][ C1] get_signal+0x121b/0x12c0 [ 720.613129][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 720.613153][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 720.613175][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 720.613202][ C1] ? __se_sys_clock_nanosleep_time32+0x35d/0x3b0 [ 720.613229][ C1] exit_to_user_mode_loop+0x104/0x730 [ 720.613252][ C1] ? rcu_is_watching+0x15/0xb0 [ 720.613267][ C1] ? asm_int80_emulation+0x1a/0x20 [ 720.613285][ C1] ? asm_int80_emulation+0x1a/0x20 [ 720.613302][ C1] do_int80_emulation+0x31a/0x550 [ 720.613324][ C1] ? trace_irq_disable+0x3b/0x140 [ 720.613345][ C1] ? asm_int80_emulation+0x1a/0x20 [ 720.613361][ C1] ? clear_bhb_loop+0x40/0x90 [ 720.613379][ C1] ? clear_bhb_loop+0x40/0x90 [ 720.613398][ C1] asm_int80_emulation+0x1a/0x20 [ 720.613415][ C1] RIP: 0023:0xf71f72eb [ 720.613429][ C1] Code: Unable to access opcode bytes at 0xf71f72c1. [ 720.613438][ C1] RSP: 002b:00000000f54ad3ac EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 720.613455][ C1] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 720.613467][ C1] RDX: 00000000f54ad444 RSI: 00000000f54ad43c RDI: 0000000000000000 [ 720.613478][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 720.613488][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 720.613499][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 720.613518][ C1] [ 720.613691][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g103161 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 721.207262][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 721.217231][ C0] rcu: RCU grace-period kthread stack dump: [ 721.223116][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 721.236620][ C0] Call Trace: [ 721.239901][ C0] [ 721.242835][ C0] __schedule+0x17d9/0x56c0 [ 721.247351][ C0] ? __lock_acquire+0x683/0x2cf0 [ 721.252343][ C0] ? __pfx___schedule+0x10/0x10 [ 721.257210][ C0] ? schedule+0x90/0x2b0 [ 721.261456][ C0] schedule+0x164/0x2b0 [ 721.265619][ C0] schedule_timeout+0x152/0x2c0 [ 721.270479][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 721.275861][ C0] ? __pfx_process_timeout+0x10/0x10 [ 721.281152][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 721.286963][ C0] ? prepare_to_swait_event+0x322/0x350 [ 721.292519][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 721.297402][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 721.303565][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 721.308859][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 721.314063][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 721.319876][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 721.324477][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 721.329683][ C0] ? __kthread_parkme+0x71/0x1f0 [ 721.334628][ C0] ? __kthread_parkme+0x196/0x1f0 [ 721.339679][ C0] kthread+0x388/0x470 [ 721.343761][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 721.348965][ C0] ? __pfx_kthread+0x10/0x10 [ 721.353567][ C0] ret_from_fork+0x514/0xb70 [ 721.358169][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 721.363295][ C0] ? __switch_to+0xc89/0x1420 [ 721.367980][ C0] ? __pfx_kthread+0x10/0x10 [ 721.372577][ C0] ret_from_fork_asm+0x1a/0x30 [ 721.377355][ C0] [ 721.380369][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 721.386692][ C0] CPU: 0 UID: 0 PID: 8904 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 721.397710][ C0] Tainted: [L]=SOFTLOCKUP [ 721.402031][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 721.412082][ C0] RIP: 0010:smp_call_function_many_cond+0x11e6/0x15f0 [ 721.418852][ C0] Code: c0 75 7a 41 8b 1e 89 de 83 e6 01 31 ff e8 e2 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 8e 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 73 1e 0c [ 721.438456][ C0] RSP: 0000:ffffc9001424f540 EFLAGS: 00000293 [ 721.444525][ C0] RAX: ffffffff81bae58d RBX: dffffc0000000000 RCX: ffff88802abc5d00 [ 721.452493][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 721.460459][ C0] RBP: ffffc9001424f688 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 721.468440][ C0] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 1ffff110170e81d1 [ 721.476473][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 721.484477][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0063) knlGS:00000000567a9480 [ 721.493417][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 721.500014][ C0] CR2: 00000000f7f855b8 CR3: 000000002132a000 CR4: 00000000003526f0 [ 721.507993][ C0] Call Trace: [ 721.511275][ C0] [ 721.514208][ C0] ? smp_call_function_many_cond+0x971/0x15f0 [ 721.520294][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 721.525507][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 721.531856][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 721.537502][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 721.542704][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 721.547823][ C0] flush_tlb_mm_range+0x5c4/0x1090 [ 721.552945][ C0] ? up_write+0x19f/0x4a0 [ 721.557283][ C0] dup_mmap+0x1786/0x1d90 [ 721.561638][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 721.566314][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 721.571354][ C0] ? copy_mm+0x10f/0x480 [ 721.575603][ C0] ? copy_mm+0x10f/0x480 [ 721.579862][ C0] copy_mm+0x11a/0x480 [ 721.583935][ C0] ? copy_process+0xd3c/0x4390 [ 721.588701][ C0] copy_process+0x1e3e/0x4390 [ 721.593384][ C0] ? __lock_acquire+0x683/0x2cf0 [ 721.598334][ C0] ? copy_process+0xd3c/0x4390 [ 721.603115][ C0] ? __pfx_copy_process+0x10/0x10 [ 721.608153][ C0] kernel_clone+0x2d7/0x940 [ 721.612667][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 721.617712][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 721.623620][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 721.630054][ C0] ? exc_page_fault+0x6a/0xc0 [ 721.634744][ C0] __do_fast_syscall_32+0x23e/0x6f0 [ 721.639946][ C0] ? do_fast_syscall_32+0x33/0x70 [ 721.644974][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.650177][ C0] ? irqentry_exit+0x10f/0x8f0 [ 721.654944][ C0] ? trace_irq_disable+0x3b/0x140 [ 721.659975][ C0] do_fast_syscall_32+0x33/0x70 [ 721.664831][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 721.671161][ C0] RIP: 0023:0xf705f0ec [ 721.675234][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 721.694837][ C0] RSP: 002b:00000000f757fc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 721.703255][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 721.711224][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000567a94e8 [ 721.719193][ C0] RBP: 00000000f757fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 721.727177][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 721.735161][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 721.743153][ C0]