last executing test programs: 52.232530274s ago: executing program 2 (id=388): r0 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x4, 0x1}, {0x9, 0x5, 0x3, 0x2, 0x40, 0x7f, 0x9, 0xd6}, {0x9, 0x5, 0x0, 0x3, 0x100, 0xf, 0x5, 0xc}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x1a, 0xd9, {0xd9, 0x3, "058f3b27b83af27a43c3f1947784348d4a008846b5a214700f66f6c88bf67dc28fd7a3bc2e60fa70425b14427e9cfa30cde017182acb168e313464163937fc6fca6027cf5c172d7d5c2f4610901e357accff54f87b9da54dbc19bbdff54e115c2c8132fac0845c5ae991488112da1020d50ddf4c71abe42b05bf269d3a9af26ec2f44568c46193ffc71ab8dd66997103f343a8a14fae09202bd8c244cb1960d445f3d929befd13013ddb9a28c395a490c03120996a25990c1c0f39b8caad946c89fc6bfd33f892b662c5e9f2c82342efda3fac035d99aa"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="201467000000f67c3bfc6507f63f79b97f77fe7f4c7055e4da1b7e0b27db38d502da41cddec74e3155ae19e0f067edb4dda9e7011ccebe161f412f551763f5bdd6997eb183e226c2fe944c9c68f0dfa19f32f61b71209673f2ae90f1f86e2300"/109], &(0x7f0000000400)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000840)={0x21, 0x0, 0x3, "46caa2"}}) (async) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200528"], 0x0, 0x0, 0x0, 0x0}, 0x0) 50.273417133s ago: executing program 3 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) r1 = socket(0x1f, 0x3, 0x991e) syz_emit_ethernet(0x66, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = dup3(r0, r1, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) shmget(0x0, 0x4000, 0x1, &(0x7f00000f3000/0x4000)=nil) (async, rerun: 64) r4 = socket(0x2b, 0x1, 0x1) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xfffffdff}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = fsopen(&(0x7f00000004c0)='hpfs\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10) syz_usb_connect$uac2(0x5, 0xcf, &(0x7f0000000680)=ANY=[@ANYBLOB="1201500900000008732b13004001010000010902bd000301f40006080b0002010020400904000000010120000924010300063f00130f240805050100010000000000010010240206ff0101056f070000000000000724080106030091949bf01e2f9ab20f5b00000006d47f0904010000010220000904010101010220000a2402025200050003030a24020211ff0a005905090501090800030509082501030f0c08000904020000010220000904020101010220000a24020200000d0000b609058209200007ff4c082501810f40050306a2de9fbb1034b84248eb5e0d3f"], &(0x7f00000012c0)={0x0, 0x0, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="0000004207000000000015638a708abc85", @ANYRES32=r4, @ANYBLOB="5ed9dd04a0287ed8108adb0252962034d65e188366a779ca0b39ef4dabe75f5d18a1a9ca49910c46afa4c0188a581e63a273f579d4f39aa86a6cded072256f5f794d0e3c5479f6fd664281a30deaf5b69dbfd9ce8c6ecf43fd0f2b47fea2b8a5378fc6958d5e898f00301bb3ef9938ea2fdef7216e2721ae61fedd7a28e290a847d0dd094fab4ce4c08dfa5dc437d3158ebc6924167768a4a958c6f7298597844a35a0ff184d5a9f538af5136a3457ce362d96a06bedc4c5760ababa57a4bf50a4f544ea936de9d5907c5422b03ad0c2c18b31a530323318ed04734f90ce32", @ANYRES64=r8, @ANYRES32=r3]}) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 48.119014074s ago: executing program 2 (id=399): syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="042fa95d148227192f616ed1efb79c9ac11dcb78a3719fffb02027273c5ce0b34083e91f597a65d7d3c98313dc17204174556f2fc29e74c8277761c414c3ec4f8a67344bd37826053beccc48746ca30c83d89ecd38f39d34bb8850c34e8bcb57d66734b36d6aff77", 0x68, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010000d042dbd7000f9ffff1f00000000", @ANYRES32=0x0, @ANYBLOB="4600060000020100300012800e0001006970366772657461700000001c00028008000c000700000005000b005a000000060002000f00000098967f0db1ea964e083bcc6db962c3478147efbdcfa4c06e863178f81607c77cdb967fe1980588"], 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000010401"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz+ 00000000000000004093'], 0x2a, 0x0) clock_adjtime(0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) fallocate(r7, 0x3a, 0x7f, 0x5) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="409a290b8b233e0da51c4009760de0b9a5b456b128d385350f825c57b61e21ecf889a40a055984ee3ee5c4b795c933c4de743cc3f25139019ce04ccac5d76bde7008d02e5d55309f4179370fdceda6094f00e3c8bc77244a6d27975fc8029c3d207b24c03f4a6a729db7f5f6862342e0016c4a9458760be419a536a093faa87df3555e59", 0x84, r8) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) shutdown(r6, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 47.312770909s ago: executing program 0 (id=401): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) 46.999383203s ago: executing program 1 (id=402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 46.77802009s ago: executing program 1 (id=404): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x474, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x8, 0x1, 0x4, {0x10, 0x1, 0x2020, 0xb, 0x99, 0x2}, {0xcd, 0x2, 0xeb18, 0xa, 0xeba9}, 0xe5, 0x4, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffff88, 0xdb, 0x6, 0x5, 0x0, 0xb86a, 0x1, 0x9, 0x0, 0x7fff, 0x14a, 0x10000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7, 0x3, 0xfffffffa, 0x1, 0x5, 0xe9, 0x856, 0x9445, 0xfffffffd, 0x9, 0x5, 0x2, 0x0, 0x2, 0x9, 0x0, 0xfff, 0x1, 0x0, 0x7, 0x9, 0xfffffffb, 0x1, 0xa8, 0x7, 0x4, 0x6, 0x1, 0x7fff, 0x4f352225, 0xe25, 0x7, 0x3, 0xd58, 0xff, 0x8, 0x0, 0x9, 0x8, 0xb, 0x0, 0x7fff, 0xa, 0x2, 0x3, 0x5, 0xf, 0x1, 0x4, 0x0, 0x1, 0xa09c, 0x8, 0x483, 0x5, 0x79, 0x7, 0x649, 0xcbc3, 0x7, 0x47, 0x7fff, 0xfffffffc, 0xc2, 0x7ff, 0x8, 0xff, 0x1, 0x101, 0xadf, 0xfffff0b9, 0x5, 0x7, 0xe9ff, 0xf, 0x0, 0x5, 0xa5c, 0x3, 0x1, 0x0, 0x7, 0x100, 0xf13, 0x2, 0x3, 0x8001, 0x4, 0xb, 0x1, 0x8, 0x9, 0x57, 0x6, 0x5, 0x7, 0x9, 0x3, 0x5, 0x3, 0x5, 0xffffff36, 0x80000001, 0x9, 0x8, 0xb1e5, 0x68, 0x0, 0x2, 0x4, 0x4, 0x401, 0x80, 0x4, 0xfffffffc, 0x1000, 0x7fff, 0xffffffff, 0x1ff, 0x6, 0x7bc, 0x7, 0x0, 0xff, 0xd, 0x8, 0x5, 0x8001, 0x1ff, 0x8, 0x8, 0x9, 0x4, 0x72, 0x1, 0x40, 0x8, 0x3, 0x800, 0xd31, 0x6, 0x3, 0x2, 0x8, 0x4, 0xd, 0x4, 0x8c, 0x8a25, 0x8, 0x3, 0x81, 0x1, 0x2, 0x200, 0x4, 0x1, 0x8, 0x8000, 0x4, 0xfffffffd, 0x7, 0x3193c001, 0x8001, 0x8, 0x4, 0x1, 0x7ff, 0xfffffff7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x3788003e, 0x0, 0x7d, 0x1, 0x40, 0xc, 0x8, 0x101, 0x80, 0x40, 0x0, 0x7, 0xfffffff6, 0x2, 0xffff, 0x80, 0xa, 0x200, 0x4, 0x6, 0x2, 0xaa, 0x9, 0x7fffffff, 0x689e, 0x0, 0x3, 0x8e9, 0x97, 0x8, 0x7, 0x800, 0x80000001, 0x4, 0x7fffffff, 0xffff7fff, 0x3e3, 0x10000, 0x1ff, 0x0, 0x8, 0x9, 0x3ff, 0x9c, 0x8, 0xe, 0x6, 0x316b, 0x5, 0x9, 0x10, 0x8, 0xffff103c, 0x4, 0xfffffded, 0xfffffffe, 0x4, 0x5]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000ffffff800000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 46.697091889s ago: executing program 1 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb200400e100000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f00000012c0)={0x28, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0x2}) writev(0xffffffffffffffff, &(0x7f0000001200)=[{0x0}], 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 44.732531138s ago: executing program 2 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4000009e, 0x0, 0x7ffc}]}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (rerun: 64) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='15', 0x2}], 0x1) (async, rerun: 32) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0xa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x25}, @remote}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000773000/0x4000)=nil, 0x4000, 0x15) (async, rerun: 64) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) io_setup(0x239f, &(0x7f0000000380)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async, rerun: 32) ftruncate(r5, 0x5) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x8005c}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x102) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r8}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) (async) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) (async, rerun: 32) eventfd2(0x200000, 0x80800) syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x800) (async) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) 44.125671769s ago: executing program 3 (id=407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000010000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd70000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 43.864394064s ago: executing program 0 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7fff, 0x2, 0x2cd, 0x3, r2}, &(0x7f00000000c0)=0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x1, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff9, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fff, 0x1000, &(0x7f0000000000)) io_cancel(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r6, 0x1, 0x2, 0x6, @local}, 0x14) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x400fff, 0x10001, 0x2, 0x9, 0x2}}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 43.65244638s ago: executing program 1 (id=409): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x3b32, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x800) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 42.780506646s ago: executing program 3 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x2f, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) r2 = memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) epoll_create(0x401) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) unshare(0x28000600) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (async) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @remote, 0xff}, 0xc55e5dfc070f85a7) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x0, 0x2, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) epoll_create1(0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) unshare(0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 38.319200401s ago: executing program 3 (id=418): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010600000000000000e4ff0000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 38.284241284s ago: executing program 0 (id=419): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1', 0xa, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00 \x00'}) 37.996574604s ago: executing program 1 (id=420): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 37.957768544s ago: executing program 4 (id=421): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0x10, 0x6}, {0x2, 0x3, 0x10, 0x1}, {0x3, 0x3, 0x5, 0x5}], 0x10, 0x7}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe88000000000000ff8000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000010000000000000000080000000000000000000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000000000000000010100020000000084010500ac141439000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00010000000000000000000000fc02000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000fe8000000000000000000000000000bb000004d43c00000002000000fc0000000000000000000000000000010000000001030000000000000600000000000000ff02000000f3ff000000000000000001000000002b00000002"], 0x23c}}, 0x40044) 37.756931964s ago: executing program 4 (id=422): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 37.684591601s ago: executing program 2 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x400fff, 0x10001, 0x2, 0x9, 0x2}}]}) ioctl$KVM_RUN(r2, 0xae80, 0xf0000000) 37.609680139s ago: executing program 3 (id=424): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$video(&(0x7f0000000940), 0x5a1, 0x2002) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000980)={0x7, 0x0, "d75795124399ead8fc4977534fa0816451c8d675dc38b6d5", {0xfffffffb, 0x9}, 0xd2000000}) syz_usb_control_io$printer(r0, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x40, 0x4, 0xc8, {0xc8, 0xf, "41031e33190b1b0a014222beafd11bfd0510cc2b55bd9604fab25b472e4166b72d7367e942293faba719b1635e1a00b00af5acb2d2fcd0806fc12d991787970de49132c50d9a553b9b00e2fb9e2f2b6e6330a7aad766ab104d753b4212f0040a0734f8d8b0e72cf1924947e7f9ed9efb6a3f7d5d7e6e3634f76ce3b66c1d6bbf92759649c56c9340fa29cee5bef5ca368302941c80fa8c6b993b36efef98f230374b0711c731326ac13d26a8651264d35a54719fe7c8a4e5deea058ccc06f1ef35ece9d92b40"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000900)={0x34, &(0x7f0000000740)={0x40, 0xe, 0x39, "9e82f0d03c11a219f55f12c2b7a887449a76446a62a94b90c77a0c97733be8860357227724522581353b52137ca0360023b9c630db3e649f02"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x0, 0x70, {0x6e, "05957213d58f581105d4b143f0f91ce2c0335d61e2e1621e76010714d680ea251f3364dbeecf29824ce2c728d37795668f53202b007cc03e13513999052e6842882e6a0fd08987fca5ec0e7b403707607f188318d5de2e4d42eef206f47d6271cdd10b9c7a8485f6fa0885aac0f0"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0xe2}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000400)={0x7}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0xffffffffffffffff, 0xfffe}) fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x33, 0x0, 0x0, 0xffbd, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000040)=[@nested_amd_inject_event={0x180, 0x38, {0x0, 0xd6, 0x5, 0x5, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xdaf, 0x9, 0x1}}, @nested_load_code={0x12e, 0x58, {0x0, "c44179d6990b80000066ba6100ed66420fc77000660fc774e108644477000f20c035000000200f22c066b847008ec0410f0392b4000000430f0666b83a008ec8"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x800, 0xd8}}, @cpuid={0x64, 0x18, {0x9}}, @wr_drn={0x68, 0x20, {0x2, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0xffc, 0x55e1}}, @wr_drn={0x68, 0x20, {0x3, 0x8}}, @nested_load_syzos={0x136, 0x168, {0x2, 0x1, [@nested_amd_inject_event={0x180, 0x38, {0x0, 0xe3, 0x6, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0xffffffff, 0xd1df}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x2b, 0x2, 0x401, 0x1}}, @wr_crn={0x67, 0x20, {0x4}}, @cpuid={0x64, 0x18, {0x4}}, @wr_crn={0x67, 0x20, {0x2, 0x3}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x2}}, @wr_crn={0x67, 0x20, {0x4, 0x5}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x55f, 0x10000000000, 0x7, 0x5}}, @nested_load_code={0x12e, 0x77, {0x3, "b9190800000f320f01c3b805000000b9da2b00000f01d966baf80cb8f19f5c8fef66bafc0cb001eef3450fc7b2010000800f01f8c74424007e737255c744240283000000c7442406000000000f011424c422a101f1f0fe8987a219c6f331ec"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xe1, 0x5, 0x23d, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x48, {"470fc77cbb00f3420f52dd0fc71f440f20020f20c035000000200f22c03d4e00000066b82c008ed8f3440fc773aa470f21a02e410fc7f7"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0x5, 0x4, 0x7}}, @out_dx={0x6a, 0x28, {0x16f3, 0x0, 0xffffffffffffff80}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_clgi={0x17f, 0x10}], 0x517}) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0) 37.412465679s ago: executing program 4 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 37.304195368s ago: executing program 4 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000001200000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 37.160598267s ago: executing program 0 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000009000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 36.978800717s ago: executing program 2 (id=428): socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) llistxattr(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)=""/4096, 0x1000) 36.959069579s ago: executing program 0 (id=429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fc0200000000000a0000000000000001fb0200000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 36.784458866s ago: executing program 4 (id=430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x474, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x8, 0x1, 0x4, {0x10, 0x1, 0x2020, 0xb, 0x99, 0x2}, {0xcd, 0x2, 0xeb18, 0xa, 0xeba9}, 0xe5, 0x4, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffff88, 0xdb, 0x6, 0x5, 0x0, 0xb86a, 0x1, 0x9, 0x0, 0x7fff, 0x14a, 0x10000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7, 0x3, 0xfffffffa, 0x1, 0x5, 0xe9, 0x856, 0x9445, 0xfffffffd, 0x9, 0x5, 0x2, 0x0, 0x2, 0x9, 0x0, 0xfff, 0x1, 0x0, 0x7, 0x9, 0xfffffffb, 0x1, 0xa8, 0x7, 0x4, 0x6, 0x1, 0x7fff, 0x4f352225, 0xe25, 0x7, 0x3, 0xd58, 0xff, 0x8, 0x0, 0x9, 0x8, 0xb, 0x0, 0x7fff, 0xa, 0x2, 0x3, 0x5, 0xf, 0x1, 0x4, 0x0, 0x1, 0xa09c, 0x8, 0x483, 0x5, 0x79, 0x7, 0x649, 0xcbc3, 0x7, 0x47, 0x7fff, 0xfffffffc, 0xc2, 0x7ff, 0x8, 0xff, 0x1, 0x101, 0xadf, 0xfffff0b9, 0x5, 0x7, 0xe9ff, 0xf, 0x0, 0x5, 0xa5c, 0x3, 0x1, 0x0, 0x7, 0x100, 0xf13, 0x2, 0x3, 0x8001, 0x4, 0xb, 0x1, 0x8, 0x9, 0x57, 0x6, 0x5, 0x7, 0x9, 0x3, 0x5, 0x3, 0x5, 0xffffff36, 0x80000001, 0x9, 0x8, 0xb1e5, 0x68, 0x0, 0x2, 0x4, 0x4, 0x401, 0x80, 0x4, 0xfffffffc, 0x1000, 0x7fff, 0xffffffff, 0x1ff, 0x6, 0x7bc, 0x7, 0x0, 0xff, 0xd, 0x8, 0x5, 0x8001, 0x1ff, 0x8, 0x8, 0x9, 0x4, 0x72, 0x1, 0x40, 0x8, 0x3, 0x800, 0xd31, 0x6, 0x3, 0x2, 0x8, 0x4, 0xd, 0x4, 0x8c, 0x8a25, 0x8, 0x3, 0x81, 0x1, 0x2, 0x200, 0x4, 0x1, 0x8, 0x8000, 0x4, 0xfffffffd, 0x7, 0x3193c001, 0x8001, 0x8, 0x4, 0x1, 0x7ff, 0xfffffff7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x3788003e, 0x0, 0x7d, 0x1, 0x40, 0xc, 0x8, 0x101, 0x80, 0x40, 0x0, 0x7, 0xfffffff6, 0x2, 0xffff, 0x80, 0xa, 0x200, 0x4, 0x6, 0x2, 0xaa, 0x9, 0x7fffffff, 0x689e, 0x0, 0x3, 0x8e9, 0x97, 0x8, 0x7, 0x800, 0x80000001, 0x4, 0x7fffffff, 0xffff7fff, 0x3e3, 0x10000, 0x1ff, 0x0, 0x8, 0x9, 0x3ff, 0x9c, 0x8, 0xe, 0x6, 0x316b, 0x5, 0x9, 0x10, 0x8, 0xffff103c, 0x4, 0xfffffded, 0xfffffffe, 0x4, 0x5]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000080ffffff0000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 36.645179948s ago: executing program 0 (id=431): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x400, 0x3, 0x2f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa556, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000280)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09040100027afa712c09058202200007050209050c02ff"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 36.342999195s ago: executing program 4 (id=432): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) 35.248337859s ago: executing program 1 (id=433): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000240)=0x4, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x620c41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x8d25b44dcc0592a6, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x2000005) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x7, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) listen(r8, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000540)={{r1}, "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"}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r2, 0x3b90, &(0x7f0000000500)="2800000000000000efbeadde0300000005") 34.116318212s ago: executing program 2 (id=434): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x8, 0xe5de, 0x2, {0xd, @sdr}}) r1 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x44}}, 0x40) getsockname$unix(r1, &(0x7f0000000480), &(0x7f0000000500)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000200)='m', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff) 33.881115563s ago: executing program 3 (id=435): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 0s ago: executing program 32 (id=431): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x400, 0x3, 0x2f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa556, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000280)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09040100027afa712c09058202200007050209050c02ff"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): vsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.139532][ T5630] veth1_macvtap: entered promiscuous mode [ 75.160051][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.164735][ T5626] veth0_macvtap: entered promiscuous mode [ 75.168940][ T5626] veth1_macvtap: entered promiscuous mode [ 75.188208][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.189384][ T82] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.233063][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.260129][ T5628] veth1_vlan: entered promiscuous mode [ 75.294711][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.328999][ T5625] veth0_macvtap: entered promiscuous mode [ 75.334019][ T5625] veth1_macvtap: entered promiscuous mode [ 75.340168][ T1010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.340228][ T1010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.340274][ T1010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.358514][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.358533][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.361905][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.435406][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.435425][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.475589][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.481481][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.511538][ T5628] veth0_macvtap: entered promiscuous mode [ 75.521461][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.550331][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.550350][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.572980][ T5628] veth1_macvtap: entered promiscuous mode [ 75.632688][ T5627] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.676722][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.676742][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.737767][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.781176][ T5710] xt_ipcomp: unknown flags 1D [ 75.792726][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.842610][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.842629][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.847571][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848533][ T82] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848568][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848598][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848628][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848656][ T82] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848686][ T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848716][ T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.970506][ T82] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.975656][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.975803][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.975929][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.019976][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.019994][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.088133][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.088151][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.117469][ T5689] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.203262][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.203295][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.269590][ T5689] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 76.284744][ T5689] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 76.284784][ T5689] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 76.296671][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.296694][ T5689] usb 4-1: Product: syz [ 76.296706][ T5689] usb 4-1: Manufacturer: syz [ 76.296718][ T5689] usb 4-1: SerialNumber: syz [ 76.359917][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.359936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.479077][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 76.486746][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 76.530325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.530369][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.669738][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.671718][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.697900][ T5710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.090460][ T5610] Bluetooth: hci0: command tx timeout [ 77.090495][ T5610] Bluetooth: hci4: command tx timeout [ 77.090611][ T5615] Bluetooth: hci2: command tx timeout [ 77.163125][ T5737] Zero length message leads to an empty skb [ 77.165940][ T4932] Bluetooth: hci3: command tx timeout [ 77.166014][ T5615] Bluetooth: hci1: command tx timeout [ 77.252207][ T5689] usb 4-1: USB disconnect, device number 2 [ 77.470812][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 77.599887][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 77.616246][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 77.780712][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 77.800787][ T5753] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.813342][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 77.839133][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 78.189182][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 79.169938][ T4932] Bluetooth: hci4: command tx timeout [ 79.169981][ T4932] Bluetooth: hci0: command tx timeout [ 79.170029][ T5615] Bluetooth: hci2: command tx timeout [ 79.253471][ T5610] Bluetooth: hci3: command tx timeout [ 79.253519][ T5615] Bluetooth: hci1: command tx timeout [ 80.550243][ T5852] xt_ipcomp: unknown flags 1D [ 80.798347][ T5613] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.962199][ T5613] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 80.968230][ T5613] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 80.968268][ T5613] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 80.977383][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.977406][ T5613] usb 1-1: Product: syz [ 80.977417][ T5613] usb 1-1: Manufacturer: syz [ 80.977429][ T5613] usb 1-1: SerialNumber: syz [ 81.210235][ T5872] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.210455][ T5872] SET target dimension over the limit! [ 81.274323][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.278728][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.488428][ T10] cfg80211: failed to load regulatory.db [ 81.589571][ T5881] FAULT_INJECTION: forcing a failure. [ 81.589571][ T5881] name failslab, interval 1, probability 0, space 0, times 1 [ 81.589612][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.4.77 Not tainted syzkaller #0 PREEMPT(full) [ 81.589632][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.589648][ T5881] Call Trace: [ 81.589658][ T5881] [ 81.589666][ T5881] dump_stack_lvl+0xe8/0x150 [ 81.589699][ T5881] should_fail_ex+0x410/0x560 [ 81.589724][ T5881] should_failslab+0xa8/0x100 [ 81.589746][ T5881] __kmalloc_noprof+0xfe/0x720 [ 81.589762][ T5881] ? rcu_is_watching+0x16/0xb0 [ 81.589783][ T5881] ? tomoyo_realpath_from_path+0xef/0x640 [ 81.589805][ T5881] ? tomoyo_realpath_from_path+0xef/0x640 [ 81.589834][ T5881] tomoyo_realpath_from_path+0xef/0x640 [ 81.589867][ T5881] ? tomoyo_path_number_perm+0x219/0x5f0 [ 81.589886][ T5881] tomoyo_path_number_perm+0x246/0x5f0 [ 81.589908][ T5881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.589927][ T5881] ? __lock_acquire+0x747/0x2de0 [ 81.589968][ T5881] ? hook_file_ioctl+0x1f2/0x600 [ 81.590008][ T5881] ? __fget_files+0x2a/0x420 [ 81.590034][ T5881] ? __fget_files+0x2a/0x420 [ 81.590056][ T5881] ? __fget_files+0x3a2/0x420 [ 81.590076][ T5881] ? __fget_files+0x2a/0x420 [ 81.590100][ T5881] security_file_ioctl+0xc3/0x2a0 [ 81.590119][ T5881] __se_sys_ioctl+0x47/0x170 [ 81.590138][ T5881] do_syscall_64+0x166/0x520 [ 81.590158][ T5881] ? trace_irq_disable+0x3b/0x140 [ 81.590174][ T5881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.590196][ T5881] ? clear_bhb_loop+0x70/0xc0 [ 81.590216][ T5881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.590233][ T5881] RIP: 0033:0x7f6877f9e159 [ 81.590256][ T5881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.590269][ T5881] RSP: 002b:00007f6878ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.590294][ T5881] RAX: ffffffffffffffda RBX: 00007f6878225fa0 RCX: 00007f6877f9e159 [ 81.590307][ T5881] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 81.590317][ T5881] RBP: 00007f6878ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 81.590327][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.590337][ T5881] R13: 00007f6878226038 R14: 00007f6878225fa0 R15: 00007f687834fa48 [ 81.590362][ T5881] [ 81.590369][ T5881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.614734][ T5613] usb 1-1: USB disconnect, device number 2 [ 82.007278][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.656743][ T5681] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.686142][ T5348] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 82.761505][ T5914] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.805089][ T5681] usb 1-1: Using ep0 maxpacket: 16 [ 82.810557][ T5681] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.812258][ T5681] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 32 [ 82.812284][ T5681] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 16 [ 82.812303][ T5681] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 82.812325][ T5681] usb 1-1: config 1 interface 0 has no altsetting 0 [ 82.821651][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.821674][ T5681] usb 1-1: Product: ᓺ皓ç‰íŒ¤ä²»Í˜ä™ê¦â€æ’°ë¶¾ã–€å¢¤å¦¼ë”‘赧漻娬ãƒï…µâ«¦ã²‚䮅⚃ [ 82.821691][ T5681] usb 1-1: Manufacturer: П [ 82.821703][ T5681] usb 1-1: SerialNumber: à°— [ 82.867535][ T5348] usb 4-1: Invalid ep0 maxpacket: 64 [ 82.916708][ T5902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.916857][ T5902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.035233][ T5348] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 83.188463][ T5348] usb 4-1: Invalid ep0 maxpacket: 64 [ 83.189252][ T5923] xt_ipcomp: unknown flags 1D [ 83.192201][ T5348] usb usb4-port1: attempt power cycle [ 83.207936][ T5925] FAULT_INJECTION: forcing a failure. [ 83.207936][ T5925] name failslab, interval 1, probability 0, space 0, times 0 [ 83.207961][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: syz.4.95 Not tainted syzkaller #0 PREEMPT(full) [ 83.207980][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.207990][ T5925] Call Trace: [ 83.207996][ T5925] [ 83.208003][ T5925] dump_stack_lvl+0xe8/0x150 [ 83.208032][ T5925] should_fail_ex+0x410/0x560 [ 83.208054][ T5925] ? __alloc_skb+0x1db/0x7a0 [ 83.208075][ T5925] should_failslab+0xa8/0x100 [ 83.208096][ T5925] ? __alloc_skb+0x1db/0x7a0 [ 83.208114][ T5925] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 83.208143][ T5925] ? __alloc_skb+0x18d/0x7a0 [ 83.208162][ T5925] ? __alloc_skb+0x1db/0x7a0 [ 83.208187][ T5925] __alloc_skb+0x1db/0x7a0 [ 83.208210][ T5925] netlink_sendmsg+0x5d4/0xb40 [ 83.208235][ T5925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.208258][ T5925] ? apparmor_socket_sendmsg+0x98/0x360 [ 83.208279][ T5925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.208294][ T5925] sock_sendmsg_nosec+0x13a/0x180 [ 83.208315][ T5925] ____sys_sendmsg+0x54e/0x850 [ 83.208341][ T5925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.208371][ T5925] ? import_iovec+0x73/0xa0 [ 83.208396][ T5925] ___sys_sendmsg+0x2a5/0x360 [ 83.208416][ T5925] ? __lock_acquire+0x747/0x2de0 [ 83.208437][ T5925] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.208488][ T5925] ? __fget_files+0x2a/0x420 [ 83.208510][ T5925] ? __fget_files+0x3a2/0x420 [ 83.208540][ T5925] __x64_sys_sendmsg+0x1b1/0x290 [ 83.208565][ T5925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 83.208605][ T5925] do_syscall_64+0x166/0x520 [ 83.208625][ T5925] ? trace_irq_disable+0x3b/0x140 [ 83.208641][ T5925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.208659][ T5925] ? clear_bhb_loop+0x70/0xc0 [ 83.208679][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.208696][ T5925] RIP: 0033:0x7f6877f9e159 [ 83.208711][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.208725][ T5925] RSP: 002b:00007f6878ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.208742][ T5925] RAX: ffffffffffffffda RBX: 00007f6878225fa0 RCX: 00007f6877f9e159 [ 83.208754][ T5925] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 83.208764][ T5925] RBP: 00007f6878ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 83.208774][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.208784][ T5925] R13: 00007f6878226038 R14: 00007f6878225fa0 R15: 00007f687834fa48 [ 83.208811][ T5925] [ 83.485466][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.489656][ T5681] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 83.527292][ T5681] usb 1-1: USB disconnect, device number 3 [ 83.563549][ T82] IPVS: starting estimator thread 0... [ 83.635541][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 83.636478][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 83.636514][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 83.638294][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.638313][ T25] usb 3-1: Product: syz [ 83.638325][ T25] usb 3-1: Manufacturer: syz [ 83.638337][ T25] usb 3-1: SerialNumber: syz [ 83.665403][ T5934] IPVS: using max 32 ests per chain, 76800 per kthread [ 83.678238][ T5613] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.745103][ T5348] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 83.765696][ T5348] usb 4-1: Invalid ep0 maxpacket: 64 [ 83.825317][ T5688] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.848927][ T5613] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.849448][ T5613] usb 5-1: not running at top speed; connect to a high speed hub [ 83.849476][ T5613] usb 5-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=da.9f [ 83.850450][ T5613] usb 5-1: config 39 has an invalid interface number: 165 but max is 0 [ 83.850718][ T5613] usb 5-1: config 39 has no interface number 0 [ 83.850757][ T5613] usb 5-1: config 39 interface 165 has no altsetting 0 [ 83.853620][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.853640][ T5613] usb 5-1: Product: syz [ 83.853652][ T5613] usb 5-1: Manufacturer: syz [ 83.853664][ T5613] usb 5-1: SerialNumber: syz [ 83.853952][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.854383][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.857907][ T5923] __nla_validate_parse: 16 callbacks suppressed [ 83.857920][ T5923] netlink: 60 bytes leftover after parsing attributes in process `syz.2.94'. [ 83.953250][ T25] usb 3-1: USB disconnect, device number 2 [ 83.958654][ T5348] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 83.975745][ T5348] usb 4-1: Invalid ep0 maxpacket: 64 [ 83.975989][ T5348] usb usb4-port1: unable to enumerate USB device [ 83.979583][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.980218][ T5688] usb 2-1: not running at top speed; connect to a high speed hub [ 83.980266][ T5688] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 83.980284][ T5688] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 83.981444][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.981496][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.983998][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.984038][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.989735][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.989795][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.991030][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.991067][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.992140][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.992177][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.994665][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.994702][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.000102][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.000139][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.001101][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.001137][ T5688] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.019245][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.019267][ T5688] usb 2-1: Product: syz [ 84.019279][ T5688] usb 2-1: Manufacturer: syz [ 84.019291][ T5688] usb 2-1: SerialNumber: syz [ 84.077409][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.118864][ T5613] usb 5-1: USB disconnect, device number 2 [ 84.269509][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.271678][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.326658][ T5688] usb 2-1: USB disconnect, device number 2 [ 84.545181][ T5348] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.697119][ T5348] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 84.698149][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.739013][ T5348] usb 1-1: config 0 descriptor?? [ 84.864822][ T5956] netlink: 72 bytes leftover after parsing attributes in process `syz.2.105'. [ 84.947530][ T5348] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 85.101002][ T5968] xt_ipcomp: unknown flags 1D [ 85.183340][ T5348] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 85.183420][ T5348] [drm] Initialized udl on minor 1 [ 85.365375][ T5688] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.376132][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 85.520772][ T5688] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 85.521796][ T5688] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 85.521834][ T5688] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 85.534782][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.534804][ T5688] usb 5-1: Product: syz [ 85.534817][ T5688] usb 5-1: Manufacturer: syz [ 85.534829][ T5688] usb 5-1: SerialNumber: syz [ 85.672205][ T5985] loop0: detected capacity change from 0 to 3904 [ 85.698677][ T5985] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 85.698700][ T5985] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 85.698711][ T5985] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 85.698765][ T5985] loop0: [ 85.802019][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.810156][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.821325][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.110'. [ 85.845165][ T5681] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.001552][ T5681] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 86.004851][ T5681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 86.004880][ T5681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 86.004914][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.005966][ T5688] usb 5-1: USB disconnect, device number 3 [ 86.078160][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.105498][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 86.225505][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 86.255792][ T10] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 86.256926][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.256957][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.260539][ T10] usb 2-1: config 0 descriptor?? [ 86.385775][ T5689] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.493066][ T6002] FAULT_INJECTION: forcing a failure. [ 86.493066][ T6002] name failslab, interval 1, probability 0, space 0, times 0 [ 86.493094][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(full) [ 86.493114][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.493123][ T6002] Call Trace: [ 86.493130][ T6002] [ 86.493140][ T6002] dump_stack_lvl+0xe8/0x150 [ 86.493168][ T6002] should_fail_ex+0x410/0x560 [ 86.493192][ T6002] should_failslab+0xa8/0x100 [ 86.493216][ T6002] __kmalloc_noprof+0xfe/0x720 [ 86.493234][ T6002] ? tomoyo_encode+0x2ad/0x570 [ 86.493253][ T6002] ? tomoyo_encode+0x2ad/0x570 [ 86.493279][ T6002] tomoyo_encode+0x2ad/0x570 [ 86.493306][ T6002] tomoyo_realpath_from_path+0x5fa/0x640 [ 86.493338][ T6002] ? tomoyo_path_number_perm+0x219/0x5f0 [ 86.493356][ T6002] tomoyo_path_number_perm+0x246/0x5f0 [ 86.493372][ T6002] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.493388][ T6002] ? __lock_acquire+0x747/0x2de0 [ 86.493414][ T6002] ? hook_file_ioctl+0x1f2/0x600 [ 86.493448][ T6002] ? __fget_files+0x2a/0x420 [ 86.493471][ T6002] ? __fget_files+0x2a/0x420 [ 86.493491][ T6002] ? __fget_files+0x3a2/0x420 [ 86.493511][ T6002] ? __fget_files+0x2a/0x420 [ 86.493535][ T6002] security_file_ioctl+0xc3/0x2a0 [ 86.493552][ T6002] __se_sys_ioctl+0x47/0x170 [ 86.493571][ T6002] do_syscall_64+0x166/0x520 [ 86.493601][ T6002] ? trace_irq_disable+0x3b/0x140 [ 86.493617][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.493634][ T6002] ? clear_bhb_loop+0x70/0xc0 [ 86.493654][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.493669][ T6002] RIP: 0033:0x7f6877f9e159 [ 86.493685][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.493697][ T6002] RSP: 002b:00007f6878ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.493715][ T6002] RAX: ffffffffffffffda RBX: 00007f6878225fa0 RCX: 00007f6877f9e159 [ 86.493725][ T6002] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 86.493735][ T6002] RBP: 00007f6878ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 86.493745][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.493754][ T6002] R13: 00007f6878226038 R14: 00007f6878225fa0 R15: 00007f687834fa48 [ 86.493782][ T6002] [ 86.493925][ T6002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.525201][ T5689] usb 4-1: device descriptor read/64, error -71 [ 86.531913][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.116'. [ 86.531934][ T6005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.116'. [ 86.534831][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.556941][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.680865][ T5983] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 86.750858][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 86.750982][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.754062][ T10] usb 2-1: USB disconnect, device number 3 [ 86.779519][ T5689] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 86.858435][ T5681] pegasus 3-1:1.0: probe with driver pegasus failed with error -71 [ 86.881451][ T5681] usb 3-1: USB disconnect, device number 3 [ 86.925228][ T5689] usb 4-1: device descriptor read/64, error -71 [ 87.037247][ T5689] usb usb4-port1: attempt power cycle [ 87.396287][ T5689] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 87.415881][ T5689] usb 4-1: device descriptor read/8, error -71 [ 87.555114][ T978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.628688][ T59] IPVS: starting estimator thread 0... [ 87.655813][ T5689] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 87.676100][ T5689] usb 4-1: device descriptor read/8, error -71 [ 87.709145][ T978] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 87.713057][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.713072][ T978] usb 2-1: Product: syz [ 87.713079][ T978] usb 2-1: Manufacturer: syz [ 87.713101][ T978] usb 2-1: SerialNumber: syz [ 87.715219][ T6037] IPVS: using max 37 ests per chain, 88800 per kthread [ 87.786353][ T5689] usb usb4-port1: unable to enumerate USB device [ 87.865202][ T5681] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 88.017800][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.019135][ T5681] usb 3-1: not running at top speed; connect to a high speed hub [ 88.019154][ T5681] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 88.019172][ T5681] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 88.021437][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.021505][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.022599][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.022638][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.023823][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.023862][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.027146][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.027857][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.071446][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.071488][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.073404][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.073441][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.079934][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.080026][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.081320][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.081383][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.085661][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.085681][ T5681] usb 3-1: Product: syz [ 88.085692][ T5681] usb 3-1: Manufacturer: syz [ 88.085703][ T5681] usb 3-1: SerialNumber: syz [ 88.125168][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.224258][ T6021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.275225][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 88.285881][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.285924][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 88.311503][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.312304][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.316008][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.325772][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.325794][ T10] usb 5-1: Product: syz [ 88.325807][ T10] usb 5-1: Manufacturer: syz [ 88.325818][ T10] usb 5-1: SerialNumber: syz [ 88.357064][ T978] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 88.357120][ T978] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 88.367292][ T978] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 88.367420][ T978] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 88.368810][ T978] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 88.391857][ T5681] usb 3-1: USB disconnect, device number 4 [ 88.414152][ T978] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 88.443101][ T978] usb 2-1: USB disconnect, device number 4 [ 88.568962][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.572939][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.573000][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.576598][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.014780][ T6053] netlink: 72 bytes leftover after parsing attributes in process `syz.2.141'. [ 89.497174][ T6070] syz.3.147 (6070): /proc/6069/oom_adj is deprecated, please use /proc/6069/oom_score_adj instead. [ 89.656136][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 89.866193][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 89.866216][ T4982] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 89.866227][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 89.866284][ T4982] loop0: [ 90.288237][ T5348] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 90.304099][ T5348] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 90.325769][ T5348] usb 1-1: USB disconnect, device number 4 [ 90.635459][ T978] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 90.708366][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10 [ 90.726079][ T4967] bcm5974 5-1:1.0: could not read from device [ 90.774939][ T10] usb 5-1: USB disconnect, device number 4 [ 90.785270][ T978] usb 4-1: Invalid ep0 maxpacket: 64 [ 90.842650][ T6106] FAULT_INJECTION: forcing a failure. [ 90.842650][ T6106] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.842679][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.1.163 Not tainted syzkaller #0 PREEMPT(full) [ 90.842698][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.842709][ T6106] Call Trace: [ 90.842715][ T6106] [ 90.842723][ T6106] dump_stack_lvl+0xe8/0x150 [ 90.842754][ T6106] should_fail_ex+0x410/0x560 [ 90.842778][ T6106] _copy_from_iter+0x1d3/0x1660 [ 90.842799][ T6106] ? __alloc_skb+0x27a/0x7a0 [ 90.842822][ T6106] ? __alloc_skb+0x27a/0x7a0 [ 90.842842][ T6106] ? __alloc_skb+0x27a/0x7a0 [ 90.842862][ T6106] ? __pfx__copy_from_iter+0x10/0x10 [ 90.842879][ T6106] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 90.842903][ T6106] ? __alloc_skb+0x27a/0x7a0 [ 90.842920][ T6106] ? __alloc_skb+0x27a/0x7a0 [ 90.842943][ T6106] ? netlink_sendmsg+0x650/0xb40 [ 90.842958][ T6106] ? skb_put+0x112/0x210 [ 90.842980][ T6106] netlink_sendmsg+0x6c0/0xb40 [ 90.843004][ T6106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.843026][ T6106] ? apparmor_socket_sendmsg+0x98/0x360 [ 90.843050][ T6106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.843066][ T6106] sock_sendmsg_nosec+0x13a/0x180 [ 90.843086][ T6106] ____sys_sendmsg+0x54e/0x850 [ 90.843119][ T6106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.843157][ T6106] ? import_iovec+0x73/0xa0 [ 90.843181][ T6106] ___sys_sendmsg+0x2a5/0x360 [ 90.843203][ T6106] ? __lock_acquire+0x747/0x2de0 [ 90.843223][ T6106] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.843273][ T6106] ? __fget_files+0x2a/0x420 [ 90.843295][ T6106] ? __fget_files+0x3a2/0x420 [ 90.843324][ T6106] __x64_sys_sendmsg+0x1b1/0x290 [ 90.843348][ T6106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.843389][ T6106] do_syscall_64+0x166/0x520 [ 90.843409][ T6106] ? trace_irq_disable+0x3b/0x140 [ 90.843425][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.843442][ T6106] ? clear_bhb_loop+0x70/0xc0 [ 90.843461][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.843477][ T6106] RIP: 0033:0x7fdb76d9e159 [ 90.843492][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.843505][ T6106] RSP: 002b:00007fdb77c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.843524][ T6106] RAX: ffffffffffffffda RBX: 00007fdb77025fa0 RCX: 00007fdb76d9e159 [ 90.843537][ T6106] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 90.843547][ T6106] RBP: 00007fdb77c72090 R08: 0000000000000000 R09: 0000000000000000 [ 90.843556][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.843566][ T6106] R13: 00007fdb77026038 R14: 00007fdb77025fa0 R15: 00007fdb7714fa48 [ 90.843593][ T6106] [ 90.915132][ T978] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 91.067297][ T978] usb 4-1: Invalid ep0 maxpacket: 64 [ 91.067556][ T978] usb usb4-port1: attempt power cycle [ 91.302206][ T6122] syz.1.169 uses obsolete (PF_INET,SOCK_PACKET) [ 91.405816][ T978] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 91.426350][ T978] usb 4-1: Invalid ep0 maxpacket: 64 [ 91.515086][ T25] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 91.555161][ T978] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 91.558374][ T6128] netlink: 72 bytes leftover after parsing attributes in process `syz.4.173'. [ 91.580640][ T978] usb 4-1: Invalid ep0 maxpacket: 64 [ 91.580871][ T978] usb usb4-port1: unable to enumerate USB device [ 91.677533][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.678009][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 91.678036][ T25] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 91.678066][ T25] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 91.679123][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.679162][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.681651][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.681699][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.683743][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.683781][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.684930][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.684969][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.782853][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.782896][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.843477][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.843521][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.867318][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.867367][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.894923][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.894966][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.921575][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.921598][ T25] usb 3-1: Product: syz [ 91.921611][ T25] usb 3-1: Manufacturer: syz [ 91.921624][ T25] usb 3-1: SerialNumber: syz [ 91.999757][ T6134] sctp: [Deprecated]: syz.4.175 (pid 6134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.999757][ T6134] Use struct sctp_sack_info instead [ 92.005637][ T6134] loop2: detected capacity change from 0 to 7 [ 92.015773][ T6134] Dev loop2: unable to read RDB block 7 [ 92.015812][ T6134] loop2: unable to read partition table [ 92.015987][ T6134] loop2: partition table beyond EOD, truncated [ 92.016001][ T6134] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 92.178059][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.178478][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.275097][ T25] usb 3-1: USB disconnect, device number 5 [ 92.790245][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 92.941016][ T6153] pim6reg: entered allmulticast mode [ 92.954143][ T6160] loop0: detected capacity change from 0 to 3904 [ 93.013206][ T6160] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 93.013230][ T6160] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 93.013241][ T6160] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 93.013296][ T6160] loop0: [ 93.154653][ T6164] netlink: 'syz.0.185': attribute type 21 has an invalid length. [ 93.159113][ T6164] netlink: 156 bytes leftover after parsing attributes in process `syz.0.185'. [ 93.179185][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 93.562778][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 94.052744][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.052987][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.053195][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.053412][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.053631][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.053834][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.054039][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.082273][ T6195] FAULT_INJECTION: forcing a failure. [ 94.082273][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 94.082301][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 94.082320][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.082330][ T6195] Call Trace: [ 94.082336][ T6195] [ 94.082343][ T6195] dump_stack_lvl+0xe8/0x150 [ 94.082372][ T6195] should_fail_ex+0x410/0x560 [ 94.082395][ T6195] should_failslab+0xa8/0x100 [ 94.082416][ T6195] ? skb_clone+0x212/0x3a0 [ 94.082439][ T6195] kmem_cache_alloc_noprof+0xa1/0x600 [ 94.082466][ T6195] ? skb_clone+0x212/0x3a0 [ 94.082495][ T6195] skb_clone+0x212/0x3a0 [ 94.082522][ T6195] __netlink_deliver_tap+0x413/0x860 [ 94.082556][ T6195] ? netlink_deliver_tap+0x2e/0x1b0 [ 94.082582][ T6195] netlink_deliver_tap+0x19c/0x1b0 [ 94.082609][ T6195] netlink_unicast+0x781/0x940 [ 94.082641][ T6195] netlink_sendmsg+0x813/0xb40 [ 94.082665][ T6195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.082689][ T6195] ? apparmor_socket_sendmsg+0x98/0x360 [ 94.082710][ T6195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.082725][ T6195] sock_sendmsg_nosec+0x13a/0x180 [ 94.082745][ T6195] ____sys_sendmsg+0x54e/0x850 [ 94.082772][ T6195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.082803][ T6195] ? import_iovec+0x73/0xa0 [ 94.082836][ T6195] ___sys_sendmsg+0x2a5/0x360 [ 94.082857][ T6195] ? __lock_acquire+0x747/0x2de0 [ 94.082878][ T6195] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.082938][ T6195] ? __fget_files+0x2a/0x420 [ 94.082959][ T6195] ? __fget_files+0x3a2/0x420 [ 94.082993][ T6195] __x64_sys_sendmsg+0x1b1/0x290 [ 94.083018][ T6195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 94.083059][ T6195] do_syscall_64+0x166/0x520 [ 94.083079][ T6195] ? trace_irq_disable+0x3b/0x140 [ 94.083096][ T6195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.083113][ T6195] ? clear_bhb_loop+0x70/0xc0 [ 94.083134][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.083150][ T6195] RIP: 0033:0x7f5254d9e159 [ 94.083165][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.083178][ T6195] RSP: 002b:00007f5255c34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.083195][ T6195] RAX: ffffffffffffffda RBX: 00007f5255025fa0 RCX: 00007f5254d9e159 [ 94.083207][ T6195] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 94.083218][ T6195] RBP: 00007f5255c34090 R08: 0000000000000000 R09: 0000000000000000 [ 94.083228][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.083238][ T6195] R13: 00007f5255026038 R14: 00007f5255025fa0 R15: 00007f525514fa48 [ 94.083264][ T6195] [ 94.217146][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.217359][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.217560][ T6191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 95.295638][ T6241] syzkaller0: entered promiscuous mode [ 95.512275][ T41] IPVS: starting estimator thread 0... [ 95.615108][ T6248] IPVS: using max 30 ests per chain, 72000 per kthread [ 95.758006][ T5613] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 95.803033][ T6256] loop0: detected capacity change from 0 to 3904 [ 95.833615][ T6256] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 95.833639][ T6256] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 95.833650][ T6256] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 95.833701][ T6256] loop0: [ 95.909627][ T5613] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.910135][ T5613] usb 1-1: not running at top speed; connect to a high speed hub [ 95.910162][ T5613] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 95.910214][ T5613] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 95.913823][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.913864][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.914825][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.914863][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.915572][ T5348] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.988528][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.988572][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.034778][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.034825][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.059052][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.059094][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.059990][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.060026][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.060909][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.060948][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.061825][ T5613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.061865][ T5613] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.064014][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.064033][ T5613] usb 1-1: Product: syz [ 96.064045][ T5613] usb 1-1: Manufacturer: syz [ 96.064057][ T5613] usb 1-1: SerialNumber: syz [ 96.068680][ T5348] usb 2-1: Using ep0 maxpacket: 16 [ 96.070269][ T5348] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.076787][ T5348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.076805][ T5348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.092152][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.092176][ T5348] usb 2-1: Product: syz [ 96.092188][ T5348] usb 2-1: Manufacturer: syz [ 96.092200][ T5348] usb 2-1: SerialNumber: syz [ 96.171848][ T5348] usb 2-1: 0:2 : does not exist [ 96.451819][ T5348] usb 2-1: USB disconnect, device number 5 [ 96.468328][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.478484][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.478859][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.554833][ T5613] usb 1-1: USB disconnect, device number 5 [ 96.562598][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.615708][ T10] usb 3-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 96.616906][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.616947][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 96.618183][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.618226][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 96.619240][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.619280][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 96.619316][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.623939][ T10] usb 3-1: config 0 descriptor?? [ 96.634600][ T10] rndis_host 3-1:0.0: rndis: master #0/ffff8880571a4000 slave #1/0000000000000000 [ 96.681182][ T5689] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 96.702767][ T6273] ======================================================= [ 96.702767][ T6273] WARNING: The mand mount option has been deprecated and [ 96.702767][ T6273] and is ignored by this kernel. Remove the mand [ 96.702767][ T6273] option from the mount to silence this warning. [ 96.702767][ T6273] ======================================================= [ 96.831352][ T5348] usb 3-1: USB disconnect, device number 6 [ 96.855742][ T5689] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 96.856820][ T5689] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 96.856862][ T5689] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 96.856884][ T5689] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.856906][ T5689] usb 4-1: config 1 interface 0 has no altsetting 0 [ 96.858764][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.858785][ T5689] usb 4-1: Product: syz [ 96.858797][ T5689] usb 4-1: Manufacturer: syz [ 96.858810][ T5689] usb 4-1: SerialNumber: syz [ 96.874786][ T6267] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.874909][ T6267] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.030366][ T6281] FAULT_INJECTION: forcing a failure. [ 97.030366][ T6281] name failslab, interval 1, probability 0, space 0, times 0 [ 97.030393][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.4.227 Not tainted syzkaller #0 PREEMPT(full) [ 97.030415][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.030425][ T6281] Call Trace: [ 97.030431][ T6281] [ 97.030439][ T6281] dump_stack_lvl+0xe8/0x150 [ 97.030468][ T6281] should_fail_ex+0x410/0x560 [ 97.030494][ T6281] should_failslab+0xa8/0x100 [ 97.030517][ T6281] __kmalloc_noprof+0xfe/0x720 [ 97.030536][ T6281] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 97.030558][ T6281] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 97.030587][ T6281] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 97.030617][ T6281] genl_family_rcv_msg_doit+0xda/0x340 [ 97.030644][ T6281] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 97.030673][ T6281] ? apparmor_capable+0x126/0x170 [ 97.030701][ T6281] ? bpf_lsm_capable+0x9/0x20 [ 97.030716][ T6281] ? security_capable+0x7e/0x2c0 [ 97.030743][ T6281] genl_rcv_msg+0x614/0x7a0 [ 97.030769][ T6281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.030787][ T6281] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 97.030810][ T6281] ? __pfx_nl80211_disassociate+0x10/0x10 [ 97.030828][ T6281] ? __pfx_nl80211_post_doit+0x10/0x10 [ 97.030864][ T6281] netlink_rcv_skb+0x226/0x4a0 [ 97.030891][ T6281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.030913][ T6281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.030949][ T6281] ? down_read+0x2be/0x330 [ 97.030973][ T6281] genl_rcv+0x28/0x40 [ 97.030990][ T6281] netlink_unicast+0x7bd/0x940 [ 97.031019][ T6281] netlink_sendmsg+0x813/0xb40 [ 97.031044][ T6281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.031066][ T6281] ? apparmor_socket_sendmsg+0x98/0x360 [ 97.031093][ T6281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.031109][ T6281] sock_sendmsg_nosec+0x13a/0x180 [ 97.031129][ T6281] ____sys_sendmsg+0x54e/0x850 [ 97.031157][ T6281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.031189][ T6281] ? import_iovec+0x73/0xa0 [ 97.031214][ T6281] ___sys_sendmsg+0x2a5/0x360 [ 97.031235][ T6281] ? __lock_acquire+0x747/0x2de0 [ 97.031255][ T6281] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.031314][ T6281] ? __fget_files+0x2a/0x420 [ 97.031337][ T6281] ? __fget_files+0x3a2/0x420 [ 97.031367][ T6281] __x64_sys_sendmsg+0x1b1/0x290 [ 97.031392][ T6281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.031438][ T6281] do_syscall_64+0x166/0x520 [ 97.031458][ T6281] ? trace_irq_disable+0x3b/0x140 [ 97.031475][ T6281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.031493][ T6281] ? clear_bhb_loop+0x70/0xc0 [ 97.031514][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.031530][ T6281] RIP: 0033:0x7f6877f9e159 [ 97.031547][ T6281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.031560][ T6281] RSP: 002b:00007f6878ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.031579][ T6281] RAX: ffffffffffffffda RBX: 00007f6878225fa0 RCX: 00007f6877f9e159 [ 97.031592][ T6281] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 97.031603][ T6281] RBP: 00007f6878ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 97.031614][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.031624][ T6281] R13: 00007f6878226038 R14: 00007f6878225fa0 R15: 00007f687834fa48 [ 97.031653][ T6281] [ 97.385830][ T5689] rtl8150 4-1:1.0: couldn't find required endpoints [ 97.386062][ T5689] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 97.391739][ T5689] usb 4-1: USB disconnect, device number 15 [ 97.862877][ T978] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.005787][ T978] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 98.010074][ T978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.010098][ T978] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.010134][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.234956][ T978] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 98.248065][ T978] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 98.302053][ T6322] loop0: detected capacity change from 0 to 3904 [ 98.391588][ T6322] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 98.391613][ T6322] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 98.391622][ T6322] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 98.391671][ T6322] loop0: [ 98.440067][ T978] usb 5-1: USB disconnect, device number 5 [ 99.128645][ T6332] __nla_validate_parse: 14 callbacks suppressed [ 99.128663][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 99.292389][ T6340] netlink: 'syz.4.244': attribute type 10 has an invalid length. [ 99.485651][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.492567][ T6340] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.579852][ T6355] binder: 6354:6355 ioctl c0306201 0 returned -14 [ 99.580013][ T6355] binder: 6354:6355 ioctl c0306201 200000000000 returned -14 [ 99.841739][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 99.933032][ T6370] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 99.967085][ T6370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.994502][ T6375] FAULT_INJECTION: forcing a failure. [ 99.994502][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 99.994531][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.4.257 Not tainted syzkaller #0 PREEMPT(full) [ 99.994550][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.994560][ T6375] Call Trace: [ 99.994567][ T6375] [ 99.994574][ T6375] dump_stack_lvl+0xe8/0x150 [ 99.994603][ T6375] should_fail_ex+0x410/0x560 [ 99.994626][ T6375] ? __alloc_skb+0x1db/0x7a0 [ 99.994647][ T6375] should_failslab+0xa8/0x100 [ 99.994669][ T6375] ? __alloc_skb+0x1db/0x7a0 [ 99.994687][ T6375] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 99.994716][ T6375] ? __alloc_skb+0x18d/0x7a0 [ 99.994737][ T6375] ? __alloc_skb+0x1db/0x7a0 [ 99.994763][ T6375] __alloc_skb+0x1db/0x7a0 [ 99.994788][ T6375] netlink_ack+0x136/0xb30 [ 99.994812][ T6375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.994833][ T6375] ? __pfx_nl80211_post_doit+0x10/0x10 [ 99.994870][ T6375] netlink_rcv_skb+0x2a4/0x4a0 [ 99.994895][ T6375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.994916][ T6375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.994959][ T6375] ? down_read+0x2be/0x330 [ 99.994985][ T6375] genl_rcv+0x28/0x40 [ 99.995001][ T6375] netlink_unicast+0x7bd/0x940 [ 99.995031][ T6375] netlink_sendmsg+0x813/0xb40 [ 99.995057][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.995081][ T6375] ? apparmor_socket_sendmsg+0x98/0x360 [ 99.995101][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.995116][ T6375] sock_sendmsg_nosec+0x13a/0x180 [ 99.995136][ T6375] ____sys_sendmsg+0x54e/0x850 [ 99.995164][ T6375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.995193][ T6375] ? import_iovec+0x73/0xa0 [ 99.995218][ T6375] ___sys_sendmsg+0x2a5/0x360 [ 99.995240][ T6375] ? __lock_acquire+0x747/0x2de0 [ 99.995262][ T6375] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.995317][ T6375] ? __fget_files+0x2a/0x420 [ 99.995346][ T6375] ? __fget_files+0x3a2/0x420 [ 99.995379][ T6375] __x64_sys_sendmsg+0x1b1/0x290 [ 99.995405][ T6375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.995448][ T6375] do_syscall_64+0x166/0x520 [ 99.995468][ T6375] ? trace_irq_disable+0x3b/0x140 [ 99.995485][ T6375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.995502][ T6375] ? clear_bhb_loop+0x70/0xc0 [ 99.995527][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.995544][ T6375] RIP: 0033:0x7f6877f9e159 [ 99.995561][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.995574][ T6375] RSP: 002b:00007f6878ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.995593][ T6375] RAX: ffffffffffffffda RBX: 00007f6878225fa0 RCX: 00007f6877f9e159 [ 99.995606][ T6375] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 99.995616][ T6375] RBP: 00007f6878ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 99.995627][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.995637][ T6375] R13: 00007f6878226038 R14: 00007f6878225fa0 R15: 00007f687834fa48 [ 99.995665][ T6375] [ 100.147502][ T5348] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 100.316373][ T5348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.321602][ T5348] usb 3-1: not running at top speed; connect to a high speed hub [ 100.321631][ T5348] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 100.321662][ T5348] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 100.326057][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.326097][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.328792][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.328831][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.330400][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.330438][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.336647][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.336685][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.339513][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.339551][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.340464][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.340499][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.341660][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.341696][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.345829][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.345866][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.354884][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.354906][ T5348] usb 3-1: Product: syz [ 100.354932][ T5348] usb 3-1: Manufacturer: syz [ 100.354944][ T5348] usb 3-1: SerialNumber: syz [ 100.576950][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.583819][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.682225][ T6390] netlink: 72 bytes leftover after parsing attributes in process `syz.4.263'. [ 100.693983][ T5348] usb 3-1: USB disconnect, device number 7 [ 100.721507][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 101.135088][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.154555][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 101.154577][ T4982] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 101.154587][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 101.154641][ T4982] loop0: [ 101.193686][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 101.293776][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.272'. [ 101.302424][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 101.304462][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 101.305743][ T25] usb 5-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 101.305768][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.305796][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.313413][ T25] usb 5-1: config 0 descriptor?? [ 101.723257][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 101.723352][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.735264][ T25] usb 5-1: USB disconnect, device number 6 [ 102.055072][ T5689] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 102.087177][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.148739][ T6438] fuse: Bad value for 'fd' [ 102.206910][ T5689] usb 4-1: Using ep0 maxpacket: 8 [ 102.223970][ T5689] usb 4-1: New USB device found, idVendor=045e, idProduct=0449, bcdDevice=8c.5e [ 102.237581][ T5689] usb 4-1: config 1 has an invalid interface number: 67 but max is 3 [ 102.237597][ T5689] usb 4-1: config 1 has an invalid interface number: 6 but max is 3 [ 102.237606][ T5689] usb 4-1: config 1 has an invalid interface number: 11 but max is 3 [ 102.237616][ T5689] usb 4-1: config 1 has an invalid interface number: 169 but max is 3 [ 102.237625][ T5689] usb 4-1: config 1 has no interface number 0 [ 102.237633][ T5689] usb 4-1: config 1 has no interface number 1 [ 102.237640][ T5689] usb 4-1: config 1 has no interface number 2 [ 102.237646][ T5689] usb 4-1: config 1 has no interface number 3 [ 102.237682][ T5689] usb 4-1: config 1 interface 67 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 102.237700][ T5689] usb 4-1: config 1 interface 6 altsetting 79 endpoint 0x2 has invalid maxpacket 552, setting to 64 [ 102.237711][ T5689] usb 4-1: config 1 interface 6 altsetting 79 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 102.237722][ T5689] usb 4-1: config 1 interface 6 altsetting 79 has an invalid descriptor for endpoint zero, skipping [ 102.237737][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 102.237747][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 102.237755][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 102.237764][ T5689] usb 4-1: config 1 interface 11 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 102.237780][ T5689] usb 4-1: config 1 interface 11 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 102.237791][ T5689] usb 4-1: config 1 interface 11 altsetting 3 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 102.237801][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 102.237811][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 102.237826][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 102.237835][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 102.237845][ T5689] usb 4-1: config 1 interface 11 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 102.237856][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 102.237865][ T5689] usb 4-1: config 1 interface 11 altsetting 3 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 102.237884][ T5689] usb 4-1: config 1 interface 169 altsetting 7 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 102.237895][ T5689] usb 4-1: config 1 interface 169 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 102.237906][ T5689] usb 4-1: config 1 interface 169 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 102.237915][ T5689] usb 4-1: config 1 interface 169 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 102.237925][ T5689] usb 4-1: config 1 interface 169 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 102.237935][ T5689] usb 4-1: config 1 interface 169 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 102.237944][ T5689] usb 4-1: config 1 interface 67 has no altsetting 0 [ 102.237953][ T5689] usb 4-1: config 1 interface 6 has no altsetting 0 [ 102.237960][ T5689] usb 4-1: config 1 interface 11 has no altsetting 0 [ 102.237967][ T5689] usb 4-1: config 1 interface 169 has no altsetting 0 [ 102.268293][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 102.270480][ T44] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 102.274546][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.274572][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.283235][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.283291][ T44] usb 2-1: Product: syz [ 102.283303][ T44] usb 2-1: Manufacturer: syz [ 102.283316][ T44] usb 2-1: SerialNumber: syz [ 102.288595][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.288614][ T5689] usb 4-1: Product: Ѓ [ 102.288626][ T5689] usb 4-1: Manufacturer: К [ 102.362068][ T44] usb 2-1: config 0 descriptor?? [ 102.669387][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 102.900548][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 103.588718][ T44] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 103.940596][ T44] imon:send_packet: packet tx failed (-71) [ 103.976384][ T44] imon 2-1:0.0: panel buttons/knobs setup failed [ 103.991192][ T5689] usb 4-1: USB disconnect, device number 16 [ 104.762560][ T44] rc_core: IR keymap rc-imon-pad not found [ 104.762574][ T44] Registered IR keymap rc-empty [ 104.762635][ T44] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 104.762644][ T44] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 104.770880][ T44] imon:send_packet: packet tx failed (-71) [ 104.797976][ T44] imon 2-1:0.0: remote input dev register failed [ 104.799216][ T44] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 105.091900][ T6475] netlink: 72 bytes leftover after parsing attributes in process `syz.2.292'. [ 105.107840][ T5348] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 105.255207][ T5348] usb 4-1: Using ep0 maxpacket: 16 [ 105.256779][ T5348] usb 4-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa [ 105.257960][ T5348] usb 4-1: config 6 has an invalid interface number: 105 but max is 0 [ 105.257981][ T5348] usb 4-1: config 6 has no interface number 0 [ 105.258006][ T5348] usb 4-1: config 6 interface 105 has no altsetting 0 [ 105.260331][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.260357][ T5348] usb 4-1: Product: syz [ 105.260370][ T5348] usb 4-1: Manufacturer: syz [ 105.260382][ T5348] usb 4-1: SerialNumber: syz [ 105.827753][ T44] imon 2-1:0.0: unable to initialize intf0, err 0 [ 105.827774][ T44] imon:imon_probe: failed to initialize context! [ 105.827784][ T44] imon 2-1:0.0: unable to register, err -19 [ 105.879476][ T44] usb 2-1: USB disconnect, device number 6 [ 105.881933][ T5348] uvcvideo 4-1:6.105: probe with driver uvcvideo failed with error -22 [ 106.050947][ T5348] usb 4-1: USB disconnect, device number 17 [ 106.357206][ T6490] fuse: Invalid rootmode [ 106.550767][ T6495] loop0: detected capacity change from 0 to 3904 [ 106.633365][ T6495] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 106.633389][ T6495] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 106.633399][ T6495] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 106.633450][ T6495] loop0: [ 106.855107][ T5348] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 107.009905][ T5348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.010412][ T5348] usb 3-1: not running at top speed; connect to a high speed hub [ 107.010439][ T5348] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 107.010468][ T5348] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 107.011414][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.011454][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.012351][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.012389][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.013297][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.013334][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.014241][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.014279][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.096745][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.096791][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.182330][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.182375][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.228762][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.228806][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.230019][ T5348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.230057][ T5348] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.294412][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.294436][ T5348] usb 3-1: Product: syz [ 107.294448][ T5348] usb 3-1: Manufacturer: syz [ 107.294460][ T5348] usb 3-1: SerialNumber: syz [ 107.505043][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 107.573670][ T6506] program syz.3.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.605311][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.610926][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.805936][ T5348] usb 3-1: USB disconnect, device number 8 [ 108.626217][ T6534] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.897903][ T6547] FAULT_INJECTION: forcing a failure. [ 108.897903][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 108.897932][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.4.317 Not tainted syzkaller #0 PREEMPT(full) [ 108.897951][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.897961][ T6547] Call Trace: [ 108.897969][ T6547] [ 108.897976][ T6547] dump_stack_lvl+0xe8/0x150 [ 108.898006][ T6547] should_fail_ex+0x410/0x560 [ 108.898032][ T6547] should_failslab+0xa8/0x100 [ 108.898053][ T6547] ? skb_clone+0x212/0x3a0 [ 108.898078][ T6547] kmem_cache_alloc_noprof+0xa1/0x600 [ 108.898107][ T6547] ? skb_clone+0x212/0x3a0 [ 108.898137][ T6547] skb_clone+0x212/0x3a0 [ 108.898164][ T6547] __netlink_deliver_tap+0x413/0x860 [ 108.898209][ T6547] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.898240][ T6547] netlink_deliver_tap+0x19c/0x1b0 [ 108.898268][ T6547] netlink_sendskb+0x68/0x140 [ 108.898294][ T6547] netlink_rcv_skb+0x2a4/0x4a0 [ 108.898321][ T6547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.898343][ T6547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.898384][ T6547] ? down_read+0x2be/0x330 [ 108.898412][ T6547] genl_rcv+0x28/0x40 [ 108.898431][ T6547] netlink_unicast+0x7bd/0x940 [ 108.898465][ T6547] netlink_sendmsg+0x813/0xb40 [ 108.898491][ T6547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.898516][ T6547] ? apparmor_socket_sendmsg+0x98/0x360 [ 108.898554][ T6547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.898570][ T6547] sock_sendmsg_nosec+0x13a/0x180 [ 108.898591][ T6547] ____sys_sendmsg+0x54e/0x850 [ 108.898620][ T6547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.898652][ T6547] ? import_iovec+0x73/0xa0 [ 108.898678][ T6547] ___sys_sendmsg+0x2a5/0x360 [ 108.898700][ T6547] ? __lock_acquire+0x747/0x2de0 [ 108.898723][ T6547] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.898780][ T6547] ? __fget_files+0x2a/0x420 [ 108.898803][ T6547] ? __fget_files+0x3a2/0x420 [ 108.898835][ T6547] __x64_sys_sendmsg+0x1b1/0x290 [ 108.898860][ T6547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.898902][ T6547] do_syscall_64+0x166/0x520 [ 108.898922][ T6547] ? trace_irq_disable+0x3b/0x140 [ 108.898939][ T6547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.898957][ T6547] ? clear_bhb_loop+0x70/0xc0 [ 108.898979][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.898996][ T6547] RIP: 0033:0x7f6877f9e159 [ 108.899013][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.899026][ T6547] RSP: 002b:00007f6878ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.899045][ T6547] RAX: ffffffffffffffda RBX: 00007f6878225fa0 RCX: 00007f6877f9e159 [ 108.899058][ T6547] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 108.899069][ T6547] RBP: 00007f6878ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 108.899080][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.899090][ T6547] R13: 00007f6878226038 R14: 00007f6878225fa0 R15: 00007f687834fa48 [ 108.899119][ T6547] [ 109.118018][ T5348] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 109.285144][ T5348] usb 4-1: device descriptor read/64, error -71 [ 109.545159][ T5348] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 109.675154][ T5348] usb 4-1: device descriptor read/64, error -71 [ 109.762363][ T6559] netlink: 72 bytes leftover after parsing attributes in process `syz.0.321'. [ 109.785475][ T5348] usb usb4-port1: attempt power cycle [ 110.125121][ T5348] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 110.156529][ T5348] usb 4-1: device descriptor read/8, error -71 [ 110.397246][ T5348] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 110.427886][ T5348] usb 4-1: device descriptor read/8, error -71 [ 110.536161][ T5348] usb usb4-port1: unable to enumerate USB device [ 110.600321][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.326'. [ 110.600409][ T6573] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 110.600663][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.326'. [ 110.600680][ T6573] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 110.729935][ T6580] loop0: detected capacity change from 0 to 3904 [ 110.743915][ T30] audit: type=1326 audit(1789893921.378:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.4.326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6877f9e159 code=0x0 [ 110.937387][ T6580] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 110.937412][ T6580] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 110.937422][ T6580] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 110.937480][ T6580] loop0: [ 111.066526][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.125179][ T5348] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.134488][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 111.225208][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 111.226736][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 111.229321][ T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 111.229354][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 111.229389][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 111.229418][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 111.229437][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 111.229459][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.240686][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 111.240708][ T10] usb 1-1: Product: syz [ 111.240720][ T10] usb 1-1: Manufacturer: syz [ 111.240732][ T10] usb 1-1: SerialNumber: syz [ 111.296632][ T5348] usb 3-1: Using ep0 maxpacket: 8 [ 111.308738][ T5348] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.386719][ T10] usb 1-1: config 0 descriptor?? [ 111.413543][ T5348] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 111.413576][ T5348] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 111.413608][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.413631][ T5348] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.413652][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.413672][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.413694][ T5348] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 111.413716][ T5348] usb 3-1: config 168 interface 0 has no altsetting 0 [ 111.463730][ T5348] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 111.463769][ T5348] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 111.463812][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.463835][ T5348] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.463856][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.463878][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.463898][ T5348] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 111.463919][ T5348] usb 3-1: config 168 interface 0 has no altsetting 0 [ 111.551902][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 111.639736][ T5348] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 111.639770][ T5348] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 111.639805][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.639827][ T5348] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.639848][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.639869][ T5348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.639890][ T5348] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 111.639912][ T5348] usb 3-1: config 168 interface 0 has no altsetting 0 [ 111.754085][ T5348] usb 3-1: string descriptor 0 read error: -22 [ 111.754272][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.838156][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 111.884701][ T5348] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 112.091288][ T5348] usb 1-1: USB disconnect, device number 6 [ 112.118102][ T6584] fuse: Unknown parameter '' [ 112.118365][ T6589] fuse: Unknown parameter '' [ 112.118565][ T5348] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 112.215464][ T6589] binder: 6583:6589 ioctl c0306201 200000000040 returned -14 [ 112.220547][ T6589] binder: 6583:6589 ioctl c0306201 0 returned -14 [ 112.247382][ T6589] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 112.352176][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 112.408816][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 112.975067][ T5348] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 113.059502][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 113.149129][ T5348] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 113.150115][ T5348] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.150141][ T5348] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.150159][ T5348] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.150181][ T5348] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.150210][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.153034][ T5348] usb 4-1: config 0 descriptor?? [ 113.206966][ T5681] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.257942][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.258614][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 113.258643][ T10] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 113.258671][ T10] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 113.259959][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.259998][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.261101][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.261139][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.263164][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.263231][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.264679][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.264717][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.466299][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.466344][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.467712][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.467753][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.488963][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.489007][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.564161][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.564204][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.592920][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 113.602582][ T5681] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 113.602618][ T5681] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 113.616341][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.616362][ T10] usb 2-1: Product: syz [ 113.616375][ T10] usb 2-1: Manufacturer: syz [ 113.616387][ T10] usb 2-1: SerialNumber: syz [ 113.655180][ T5681] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 113.655244][ T5681] usb 5-1: can't read configurations, error -61 [ 113.785552][ T5681] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.907395][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.910728][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.957459][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 113.959440][ T5681] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 113.959473][ T5681] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 113.964866][ T5681] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 113.964897][ T5681] usb 5-1: can't read configurations, error -61 [ 113.980415][ T5681] usb usb5-port1: attempt power cycle [ 114.026272][ T5348] usbhid 4-1:0.0: can't add hid device: -71 [ 114.026366][ T5348] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.056227][ T5348] usb 4-1: USB disconnect, device number 22 [ 114.102111][ T10] usb 2-1: USB disconnect, device number 7 [ 114.224247][ T978] usb 3-1: USB disconnect, device number 9 [ 114.356308][ T5681] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.378354][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 114.380758][ T5681] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 114.380796][ T5681] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 114.382178][ T5681] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 114.382209][ T5681] usb 5-1: can't read configurations, error -61 [ 114.515110][ T5681] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.565785][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 114.566324][ T5681] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 114.566357][ T5681] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 114.568328][ T5681] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 114.568358][ T5681] usb 5-1: can't read configurations, error -61 [ 114.569660][ T5681] usb usb5-port1: unable to enumerate USB device [ 114.669266][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.775890][ T6617] input: syz0 as /devices/virtual/input/input14 [ 114.872714][ T6608] netdevsim netdevsim0: Direct firmware load for ýÿÿ failed with error -2 [ 114.872738][ T6608] netdevsim netdevsim0: Falling back to sysfs fallback for: ýÿÿ [ 115.124485][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 115.507509][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.3.350'. [ 115.585181][ T978] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.765766][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 115.768918][ T978] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 115.771732][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.771752][ T978] usb 2-1: config 0 has no interface number 0 [ 115.771786][ T978] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 115.771803][ T978] usb 2-1: config 0 interface 1 has no altsetting 0 [ 115.836592][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.836614][ T978] usb 2-1: Product: syz [ 115.836627][ T978] usb 2-1: Manufacturer: syz [ 115.836639][ T978] usb 2-1: SerialNumber: syz [ 115.890160][ T978] usb 2-1: config 0 descriptor?? [ 116.165763][ T978] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 116.196661][ T978] cx231xx 2-1:0.1: Failed to read PCB config [ 116.196775][ T978] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 116.231948][ T978] usb 2-1: USB disconnect, device number 8 [ 116.278062][ T6644] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 116.545447][ T5681] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 116.632199][ T6655] loop0: detected capacity change from 0 to 3904 [ 116.675525][ T978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.704549][ T6655] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 116.704573][ T6655] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 116.704583][ T6655] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 116.704634][ T6655] loop0: [ 116.759442][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.759484][ T5681] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 116.785561][ T5681] usb 3-1: config 1 has an invalid descriptor of length 50, skipping remainder of the config [ 116.785585][ T5681] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.785635][ T5681] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.846486][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 116.847191][ T978] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 116.848227][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.848247][ T978] usb 2-1: config 0 has no interface number 0 [ 116.848281][ T978] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 116.848298][ T978] usb 2-1: config 0 interface 1 has no altsetting 0 [ 116.851135][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.851156][ T978] usb 2-1: Product: syz [ 116.851169][ T978] usb 2-1: Manufacturer: syz [ 116.851181][ T978] usb 2-1: SerialNumber: syz [ 116.953614][ T5681] usb 3-1: string descriptor 0 read error: -22 [ 116.953739][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.994394][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 117.067039][ T978] usb 2-1: config 0 descriptor?? [ 117.182469][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 117.333846][ T978] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 117.357153][ T978] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 117.469830][ T978] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 117.471876][ T978] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 117.472523][ T978] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 117.472914][ T978] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 117.473303][ T978] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 117.473327][ T978] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 117.532552][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.567726][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.591566][ T5681] usb 3-1: Can't set UAC3 power state to 1 for id 10 [ 117.620640][ T5681] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 117.632440][ T44] usb 4-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 117.659346][ T5681] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 117.659372][ T5681] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 117.659387][ T5681] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 117.723903][ T978] i2c i2c-2: Added multiplexed i2c bus 4 [ 117.752199][ T978] i2c i2c-2: Added multiplexed i2c bus 5 [ 117.754759][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.754814][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.754833][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.782427][ T978] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 117.782448][ T978] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 117.853123][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.853147][ T44] usb 4-1: Product: syz [ 117.853160][ T44] usb 4-1: Manufacturer: syz [ 117.853171][ T44] usb 4-1: SerialNumber: syz [ 117.919198][ T5681] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 117.954293][ T5681] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 117.979952][ T5681] usb 3-1: USB disconnect, device number 10 [ 118.015851][ T978] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 118.064060][ T978] usb 2-1: USB disconnect, device number 9 [ 118.165443][ T5348] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 118.183750][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.295861][ T5348] usb 5-1: device descriptor read/64, error -71 [ 118.339906][ T44] kaweth 4-1:1.0: couldn't find required endpoints [ 118.537660][ T5348] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 118.560014][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.560414][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.637152][ T6668] syzkaller0: entered allmulticast mode [ 118.665127][ T5348] usb 5-1: device descriptor read/64, error -71 [ 118.775334][ T5348] usb usb5-port1: attempt power cycle [ 118.784606][ T5681] usb 4-1: USB disconnect, device number 23 [ 119.125228][ T5348] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 119.149290][ T5348] usb 5-1: device descriptor read/8, error -71 [ 119.187757][ T6679] openvswitch: netlink: Flow key attr not present in new flow. [ 119.395566][ T5348] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 119.419018][ T5348] usb 5-1: device descriptor read/8, error -71 [ 119.457228][ T5681] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.486948][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 119.525518][ T5348] usb usb5-port1: unable to enumerate USB device [ 119.610823][ T5681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.611954][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 119.611993][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.651822][ T5681] usb 3-1: config 0 descriptor?? [ 119.653695][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.654252][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 119.654278][ T10] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 119.654307][ T10] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 119.655101][ T6679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 119.701646][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.701672][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.704919][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.704959][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.816334][ T5348] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 119.819275][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.819318][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.820596][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.820658][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.822309][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.822347][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.823624][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.823662][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.824764][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.824802][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.911238][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.911283][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.038686][ T5348] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 120.039861][ T5348] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 120.039880][ T5348] usb 4-1: config 0 has no interface number 0 [ 120.039914][ T5348] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.039964][ T5348] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.039996][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.043669][ T5348] usb 4-1: config 0 descriptor?? [ 120.106161][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.106182][ T10] usb 1-1: Product: syz [ 120.106194][ T10] usb 1-1: Manufacturer: syz [ 120.106205][ T10] usb 1-1: SerialNumber: syz [ 120.146874][ T6679] netlink: 392 bytes leftover after parsing attributes in process `syz.2.370'. [ 120.196991][ T5681] usbhid 3-1:0.0: can't add hid device: -71 [ 120.197111][ T5681] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.262470][ T5681] usb 3-1: USB disconnect, device number 11 [ 120.349955][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.350559][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.422990][ T10] usb 1-1: USB disconnect, device number 7 [ 120.558696][ T5348] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 120.558734][ T5348] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 120.558759][ T5348] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 120.558783][ T5348] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 120.558807][ T5348] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 120.558831][ T5348] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 120.558855][ T5348] asus 0003:0B05:17E0.0001: unknown main item tag 0x0 [ 120.630787][ T5348] asus 0003:0B05:17E0.0001: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input2 [ 120.785361][ T5681] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 120.801227][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.801643][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.946009][ T5681] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 120.947440][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 120.947481][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.987117][ T5681] usb 3-1: config 0 descriptor?? [ 120.988453][ T6679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 121.216795][ T10] usb 4-1: USB disconnect, device number 24 [ 121.435203][ T5348] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.637770][ T5348] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 121.639932][ T5348] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 121.639954][ T5348] usb 5-1: config 0 has no interface number 0 [ 121.639989][ T5348] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 121.640010][ T5348] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.641946][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.641967][ T5348] usb 5-1: Product: syz [ 121.641979][ T5348] usb 5-1: Manufacturer: syz [ 121.641991][ T5348] usb 5-1: SerialNumber: syz [ 121.728824][ T5348] usb 5-1: config 0 descriptor?? [ 121.729532][ T6699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.750371][ T5348] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 121.791346][ T5348] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 121.853704][ T6708] netlink: 72 bytes leftover after parsing attributes in process `syz.0.378'. [ 121.919363][ T5681] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 121.923996][ T5681] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 121.943107][ T6679] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.957256][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.959366][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.059115][ T6713] warning: `syz.1.381' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.120189][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 122.120247][ T5681] usb 3-1: USB disconnect, device number 12 [ 122.308155][ T6718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.309164][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.322265][ T6718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.348052][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.509325][ T978] usb 5-1: USB disconnect, device number 15 [ 122.554540][ T978] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 122.573448][ T978] cyberjack 5-1:0.69: device disconnected [ 123.259212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.375117][ T978] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 123.445744][ T6735] loop0: detected capacity change from 0 to 3904 [ 123.570110][ T978] usb 3-1: Invalid ep0 maxpacket: 64 [ 123.722502][ T978] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 123.779039][ T6735] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 123.779065][ T6735] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 123.779076][ T6735] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 123.779129][ T6735] loop0: [ 123.823570][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 123.823593][ T4982] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 123.823603][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 123.823658][ T4982] loop0: [ 123.921181][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 124.037098][ T978] usb 3-1: Invalid ep0 maxpacket: 64 [ 124.039462][ T978] usb usb3-port1: attempt power cycle [ 124.385214][ T978] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 124.405938][ T978] usb 3-1: Invalid ep0 maxpacket: 64 [ 124.535411][ T978] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 124.555798][ T978] usb 3-1: Invalid ep0 maxpacket: 64 [ 124.556227][ T978] usb usb3-port1: unable to enumerate USB device [ 127.565882][ T6763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.399'. [ 127.805126][ T978] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 127.957580][ T978] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 127.958589][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 51551, setting to 64 [ 127.958628][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.045214][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 128.050044][ T978] usb 3-1: config 0 descriptor?? [ 128.050844][ T6763] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.212038][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.212747][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 128.212776][ T10] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 128.212807][ T10] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 128.325422][ T6763] trusted_key: encrypted_key: key user:syz+ not found [ 128.327407][ T978] ath6kl: Failed to submit usb control message: -71 [ 128.327454][ T978] ath6kl: unable to send the bmi data to the device: -71 [ 128.327466][ T978] ath6kl: Unable to send get target info: -71 [ 128.357148][ T978] ath6kl: Failed to init ath6kl core: -71 [ 128.399754][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.399799][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.401958][ T978] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 128.413751][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.503564][ T978] usb 3-1: USB disconnect, device number 17 [ 128.513100][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.514396][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.514438][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.201927][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.201974][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.234772][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.234818][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.255865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 129.409151][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.409205][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.573610][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.573654][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.598298][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.598345][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.600616][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.600638][ T10] usb 1-1: Product: syz [ 129.600650][ T10] usb 1-1: Manufacturer: syz [ 129.600662][ T10] usb 1-1: SerialNumber: syz [ 129.979126][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.982675][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.008941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 130.055004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.076486][ T5704] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 130.216145][ T5704] usb 5-1: device descriptor read/64, error -71 [ 130.478786][ T10] usb 1-1: USB disconnect, device number 8 [ 130.645301][ T5704] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 130.785106][ T5704] usb 5-1: device descriptor read/64, error -71 [ 130.900552][ T5704] usb usb5-port1: attempt power cycle [ 131.235128][ T5704] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 131.445082][ T5704] usb 5-1: device not accepting address 18, error -71 [ 131.572661][ T6795] syzkaller0: entered promiscuous mode [ 131.572685][ T6795] syzkaller0: entered allmulticast mode [ 131.635114][ T5681] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 131.785425][ T6805] netlink: 72 bytes leftover after parsing attributes in process `syz.3.407'. [ 131.795088][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 131.812618][ T5681] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 131.858857][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.858883][ T5681] usb 2-1: Product: syz [ 131.858895][ T5681] usb 2-1: Manufacturer: syz [ 131.858908][ T5681] usb 2-1: SerialNumber: syz [ 131.906060][ T5681] usb 2-1: config 0 descriptor?? [ 132.137753][ T5681] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 132.275682][ T6811] process 'syz.3.413' launched '/dev/fd/5' with NULL argv: empty string added [ 132.472976][ T978] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.574774][ T978] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.699373][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699882][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.881276][ T5681] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.882005][ T5681] dvbdev: DVB: registering new adapter (Terratec H7) [ 133.882433][ T5681] usb 2-1: media controller created [ 134.077127][ T5681] usb read operation failed. (-32) [ 134.083732][ T5681] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 136.555985][ T6828] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 136.763139][ T5704] usb 2-1: USB disconnect, device number 10 [ 136.773802][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.800661][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.800731][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.800871][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.886016][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 137.003520][ T6836] loop0: detected capacity change from 0 to 3904 [ 137.297976][ T6836] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 137.298001][ T6836] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 137.298011][ T6836] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 137.298071][ T6836] loop0: [ 137.515140][ T5704] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 137.625119][ T5681] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 137.676177][ T5704] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 137.680428][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.680450][ T5704] usb 2-1: Product: syz [ 137.680464][ T5704] usb 2-1: Manufacturer: syz [ 137.680476][ T5704] usb 2-1: SerialNumber: syz [ 137.787192][ T5681] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 137.794017][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.814368][ T5704] usb 2-1: config 0 descriptor?? [ 137.829269][ T5704] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 137.831557][ T5681] usb 4-1: config 0 descriptor?? [ 138.173957][ T5681] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 138.312865][ T5704] gspca_stk1135: reg_w 0x7 err -71 [ 138.313952][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.313963][ T5704] gspca_stk1135: Sensor write failed [ 138.314016][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.314024][ T5704] gspca_stk1135: Sensor write failed [ 138.314053][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.314061][ T5704] gspca_stk1135: Sensor read failed [ 138.314087][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.314096][ T5704] gspca_stk1135: Sensor read failed [ 138.314103][ T5704] gspca_stk1135: Detected sensor type unknown (0x0) [ 138.314160][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.314169][ T5704] gspca_stk1135: Sensor read failed [ 138.314195][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.314203][ T5704] gspca_stk1135: Sensor read failed [ 138.314230][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.314239][ T5704] gspca_stk1135: Sensor write failed [ 138.314266][ T5704] gspca_stk1135: serial bus timeout: status=0x00 [ 138.314274][ T5704] gspca_stk1135: Sensor write failed [ 138.314366][ T5704] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 138.457491][ T5704] usb 2-1: USB disconnect, device number 11 [ 138.675168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 138.735547][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 138.908775][ T5681] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 138.908799][ T5681] [drm] Initialized udl on minor 1 [ 138.955101][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 138.956029][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.957324][ T10] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 138.957345][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.959849][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.959869][ T10] usb 3-1: Product: syz [ 138.959882][ T10] usb 3-1: Manufacturer: syz [ 138.959924][ T10] usb 3-1: SerialNumber: syz [ 139.031742][ T10] usb 3-1: 0:2 : does not exist [ 139.476194][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 139.521575][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.539805][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.572449][ T5681] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 139.572894][ T5681] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 139.606942][ T978] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.727885][ T5681] usb 4-1: USB disconnect, device number 25 [ 139.771235][ T5704] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 139.774212][ T978] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 139.774574][ T978] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 139.911627][ T12] IPVS: starting estimator thread 0... [ 139.950795][ T5704] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 139.995180][ T6871] IPVS: using max 29 ests per chain, 69600 per kthread [ 140.054740][ T10] usb 3-1: USB disconnect, device number 18 [ 140.072082][ T5704] usb 1-1: config 127 has an invalid interface number: 1 but max is 0 [ 140.072107][ T5704] usb 1-1: config 127 has no interface number 0 [ 140.072147][ T5704] usb 1-1: config 127 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 140.262413][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.262439][ T5704] usb 1-1: Product: syz [ 140.262452][ T5704] usb 1-1: Manufacturer: syz [ 140.262464][ T5704] usb 1-1: SerialNumber: syz [ 140.345084][ T978] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 140.391391][ T6865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.592062][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.603314][ T978] usb 5-1: not running at top speed; connect to a high speed hub [ 140.603370][ T978] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 140.603407][ T978] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 140.795190][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.795237][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.797840][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.797878][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.860334][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.860381][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.927328][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.927956][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.032957][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.128731][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.128806][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.130060][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.130501][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.131691][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.131730][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.133843][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.133887][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.218248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 141.319656][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.319682][ T978] usb 5-1: Product: syz [ 141.319695][ T978] usb 5-1: Manufacturer: syz [ 141.319707][ T978] usb 5-1: SerialNumber: syz [ 141.970556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 142.009615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 142.039563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 142.059574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 147.598887][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.734040][ C0] sched: DL replenish lagged too much [ 162.732194][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.782766][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.801365][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.955738][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.955778][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 196.955802][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 197.102581][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 198.548302][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 315.874950][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 315.881942][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P978/1:b..l P6863/1:b..l P5630/1:b..l P6879/1:b..l P5600/1:b..l P5625/1:b..l [ 315.895501][ C1] rcu: (detected by 1, t=10502 jiffies, g=20669, q=689455 ncpus=2) [ 315.903504][ C1] task:syz-executor state:R running task stack:22344 pid:5625 tgid:5625 ppid:1 task_flags:0x40054c flags:0x00080002 [ 315.917025][ C1] Call Trace: [ 315.920316][ C1] [ 315.923280][ C1] __schedule+0x17db/0x58f0 [ 315.927839][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 315.932890][ C1] ? __pfx___schedule+0x10/0x10 [ 315.937762][ C1] ? irqentry_exit+0x218/0x910 [ 315.942543][ C1] ? trace_irq_disable+0x3b/0x140 [ 315.947584][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 315.952968][ C1] preempt_schedule_common+0x7f/0xd0 [ 315.958275][ C1] preempt_schedule_thunk+0x16/0x40 [ 315.963498][ C1] _raw_spin_unlock+0x41/0x50 [ 315.968188][ C1] __zap_vma_range+0x40e1/0x4f80 [ 315.973182][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 315.978488][ C1] ? mas_find+0x6d6/0xcb0 [ 315.982840][ C1] unmap_vmas+0x390/0x550 [ 315.987198][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 315.992060][ C1] ? mas_next_slot+0xc91/0xd70 [ 315.996868][ C1] exit_mmap+0x293/0x9f0 [ 316.001139][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 316.005953][ C1] ? __pfx_exit_aio+0x10/0x10 [ 316.010663][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 316.015887][ C1] __mmput+0x118/0x420 [ 316.019973][ C1] exit_mm+0x221/0x2d0 [ 316.024055][ C1] do_exit+0x6cd/0x2360 [ 316.028225][ C1] ? __pfx_do_exit+0x10/0x10 [ 316.032828][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 316.037889][ C1] do_group_exit+0x22d/0x2f0 [ 316.042489][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.047706][ C1] get_signal+0x121b/0x12c0 [ 316.052255][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 316.057825][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 316.064025][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 316.069413][ C1] ? rcu_is_watching+0x16/0xb0 [ 316.074197][ C1] do_syscall_64+0x328/0x520 [ 316.078800][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.084897][ C1] ? clear_bhb_loop+0x70/0xc0 [ 316.089584][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.095485][ C1] RIP: 0033:0x7f5254d9c767 [ 316.099916][ C1] RSP: 002b:00007f525514fce8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 316.108339][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5254d9c767 [ 316.116323][ C1] RDX: 0000000000000000 RSI: 00007f525514fcf0 RDI: 0000000000000003 [ 316.124307][ C1] RBP: 00007f525514fdec R08: 0000000000000000 R09: 0000000000000000 [ 316.132287][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000046 [ 316.140270][ C1] R13: 0000000000000000 R14: 00000000000225a1 R15: 00007f525514fe40 [ 316.148287][ C1] [ 316.151321][ C1] task:syz-executor state:R running task stack:22048 pid:5600 tgid:5600 ppid:5599 task_flags:0x400100 flags:0x00080800 [ 316.164817][ C1] Call Trace: [ 316.168116][ C1] [ 316.171056][ C1] __schedule+0x17db/0x58f0 [ 316.175575][ C1] ? rcu_is_watching+0x16/0xb0 [ 316.180359][ C1] ? trace_hrtimer_start+0x82/0x200 [ 316.185597][ C1] ? __pfx___schedule+0x10/0x10 [ 316.190485][ C1] ? __lock_acquire+0x747/0x2de0 [ 316.195455][ C1] preempt_schedule_irq+0x4b/0x90 [ 316.200492][ C1] irqentry_exit+0x14f/0x910 [ 316.205100][ C1] ? trace_irq_disable+0x3b/0x140 [ 316.210145][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.216140][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 316.221189][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 316.240810][ C1] RSP: 0018:ffffc90003ad7560 EFLAGS: 00000246 [ 316.246896][ C1] RAX: 0000000000000000 RBX: ffffc90003ad76b8 RCX: 0000000000000000 [ 316.254878][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003ad76c0 [ 316.262863][ C1] RBP: 1ffffffff222259a R08: ffffc90003ad76c7 R09: 0000000000000000 [ 316.270842][ C1] R10: ffffc90003ad76b8 R11: fffff5200075aed9 R12: dffffc0000000000 [ 316.278832][ C1] R13: ffffffff91112cd0 R14: ffffc90003ad7668 R15: ffffc90003ad76b0 [ 316.286838][ C1] unwind_next_frame+0xd04/0x2550 [ 316.291893][ C1] ? arch_stack_walk+0xe3/0x150 [ 316.296765][ C1] ? unwind_next_frame+0x8f/0x2550 [ 316.301894][ C1] __unwind_start+0x514/0x660 [ 316.306598][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.312765][ C1] arch_stack_walk+0xe3/0x150 [ 316.317467][ C1] ? stack_trace_save+0xa9/0x100 [ 316.322424][ C1] stack_trace_save+0xa9/0x100 [ 316.327211][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 316.332603][ C1] save_stack+0x122/0x230 [ 316.336982][ C1] ? __pfx_save_stack+0x10/0x10 [ 316.341867][ C1] ? page_ext_put+0x97/0xc0 [ 316.346389][ C1] __reset_page_owner+0x71/0x1f0 [ 316.351342][ C1] __free_frozen_pages+0xc93/0xd90 [ 316.356489][ C1] __slab_free+0x274/0x2c0 [ 316.360932][ C1] ? qlist_free_all+0x8e/0x100 [ 316.365725][ C1] qlist_free_all+0x99/0x100 [ 316.370336][ C1] kasan_quarantine_reduce+0x148/0x160 [ 316.375813][ C1] __kasan_slab_alloc+0x22/0x80 [ 316.380690][ C1] kmem_cache_alloc_lru_noprof+0x2a3/0x5f0 [ 316.386530][ C1] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 316.392547][ C1] ? __d_alloc+0x37/0x6f0 [ 316.396899][ C1] ? __d_alloc+0x37/0x6f0 [ 316.401261][ C1] __d_alloc+0x37/0x6f0 [ 316.405452][ C1] d_alloc_pseudo+0x21/0xc0 [ 316.409983][ C1] alloc_path_pseudo+0x107/0x220 [ 316.414936][ C1] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 316.420411][ C1] ? inode_set_ctime_current+0x287/0xb60 [ 316.426068][ C1] alloc_file_pseudo+0xa8/0x1e0 [ 316.430938][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 316.436406][ C1] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 316.441798][ C1] create_pipe_files+0x325/0x7c0 [ 316.446750][ C1] __do_pipe_flags+0x46/0x1f0 [ 316.451439][ C1] do_pipe2+0xaa/0x190 [ 316.455517][ C1] ? __pfx_do_pipe2+0x10/0x10 [ 316.460213][ C1] __x64_sys_pipe2+0x5a/0x70 [ 316.464815][ C1] do_syscall_64+0x166/0x520 [ 316.469419][ C1] ? trace_irq_disable+0x3b/0x140 [ 316.474449][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.480528][ C1] ? clear_bhb_loop+0x70/0xc0 [ 316.485220][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.491121][ C1] RIP: 0033:0x7effbb59d189 [ 316.495542][ C1] RSP: 002b:00007ffd0d9ece98 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 316.503962][ C1] RAX: ffffffffffffffda RBX: 000055558477dea0 RCX: 00007effbb59d189 [ 316.511945][ C1] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007ffd0d9ecea8 [ 316.519919][ C1] RBP: 00007ffd0d9ed480 R08: 00000000000004d0 R09: 0000000000000000 [ 316.527898][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0d9ed2c0 [ 316.535874][ C1] R13: 00005555847874c0 R14: 0000555584782380 R15: 00007ffd0d9ed000 [ 316.543871][ C1] [ 316.546894][ C1] task:kworker/u8:11 state:R running task stack:27856 pid:6879 tgid:6879 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 316.560482][ C1] Call Trace: [ 316.563768][ C1] [ 316.566713][ C1] __schedule+0x17db/0x58f0 [ 316.571262][ C1] ? __lock_acquire+0x747/0x2de0 [ 316.576219][ C1] ? __pfx___schedule+0x10/0x10 [ 316.581087][ C1] ? __lock_acquire+0x747/0x2de0 [ 316.586044][ C1] preempt_schedule_irq+0x4b/0x90 [ 316.591090][ C1] irqentry_exit+0x14f/0x910 [ 316.595691][ C1] ? trace_irq_disable+0x3b/0x140 [ 316.600728][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.606716][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 316.612011][ C1] Code: ff ff ff e8 50 95 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 99 45 0a cc 48 8d 3d 97 58 da [ 316.631623][ C1] RSP: 0018:ffffc900056a75f0 EFLAGS: 00000296 [ 316.637702][ C1] RAX: 961c15c209bcac00 RBX: 0000000000000000 RCX: 0000000000000046 [ 316.645681][ C1] RDX: 0000000010d5a36a RSI: ffffffff8e69d180 RDI: ffffffff8c6da780 [ 316.653655][ C1] RBP: ffff8880323c3e80 R08: ffffffff8243ad02 R09: 0000000000000000 [ 316.661635][ C1] R10: dffffc0000000000 R11: fffff9400021a717 R12: ffffffff8ed5c8e0 [ 316.669617][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 316.677611][ C1] ? page_ext_get+0x22/0x2e0 [ 316.682239][ C1] ? page_ext_get+0x22/0x2e0 [ 316.686856][ C1] page_ext_get+0x3e/0x2e0 [ 316.691286][ C1] ? page_ext_get+0x22/0x2e0 [ 316.695895][ C1] __reset_page_owner+0x28/0x1f0 [ 316.700850][ C1] __free_frozen_pages+0xc93/0xd90 [ 316.705999][ C1] __slab_free+0x274/0x2c0 [ 316.710447][ C1] qlist_free_all+0x99/0x100 [ 316.715052][ C1] kasan_quarantine_reduce+0x148/0x160 [ 316.720524][ C1] __kasan_kmalloc+0x22/0xb0 [ 316.725130][ C1] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 316.731566][ C1] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 316.738173][ C1] ? __kthread_create_on_node+0x1b3/0x3d0 [ 316.743919][ C1] ? __kthread_create_on_node+0x1b3/0x3d0 [ 316.749669][ C1] kvasprintf+0xeb/0x1a0 [ 316.753935][ C1] ? __pfx_kvasprintf+0x10/0x10 [ 316.758811][ C1] ? __kmalloc_cache_noprof+0x14d/0x600 [ 316.764364][ C1] ? __kthread_create_on_node+0x115/0x3d0 [ 316.770105][ C1] ? __kthread_create_on_node+0x115/0x3d0 [ 316.775856][ C1] __kthread_create_on_node+0x1b3/0x3d0 [ 316.781429][ C1] ? __pfx___kthread_create_on_node+0x10/0x10 [ 316.787529][ C1] ? __pfx_worker_thread+0x10/0x10 [ 316.792660][ C1] ? __pfx_worker_thread+0x10/0x10 [ 316.797796][ C1] kthread_create_on_node+0xeb/0x140 [ 316.803109][ C1] ? __pfx_kthread_create_on_node+0x10/0x10 [ 316.809022][ C1] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 316.815016][ C1] ? create_worker+0x112/0x7c0 [ 316.819795][ C1] ? create_worker+0x112/0x7c0 [ 316.824579][ C1] ? format_worker_id+0x170/0x260 [ 316.829625][ C1] create_worker+0x2e3/0x7c0 [ 316.834232][ C1] ? __pfx_create_worker+0x10/0x10 [ 316.839351][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 316.845187][ C1] worker_thread+0x4c9/0xfb0 [ 316.849829][ C1] kthread+0x38b/0x480 [ 316.853913][ C1] ? __pfx_worker_thread+0x10/0x10 [ 316.859046][ C1] ? __pfx_kthread+0x10/0x10 [ 316.863656][ C1] ret_from_fork+0x514/0xb70 [ 316.868261][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 316.873387][ C1] ? __switch_to+0xc89/0x1420 [ 316.878093][ C1] ? __pfx_kthread+0x10/0x10 [ 316.882697][ C1] ret_from_fork_asm+0x1a/0x30 [ 316.887504][ C1] [ 316.890529][ C1] task:syz-executor state:R running task stack:22088 pid:5630 tgid:5630 ppid:5607 task_flags:0x400140 flags:0x00080000 [ 316.904063][ C1] Call Trace: [ 316.907357][ C1] [ 316.910304][ C1] __schedule+0x17db/0x58f0 [ 316.914853][ C1] ? __pfx___schedule+0x10/0x10 [ 316.919716][ C1] ? irqentry_exit+0x218/0x910 [ 316.924494][ C1] ? irqentry_exit+0x218/0x910 [ 316.929270][ C1] ? trace_irq_disable+0x3b/0x140 [ 316.934325][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 316.940598][ C1] preempt_schedule_notrace+0x56/0x90 [ 316.945989][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 316.951913][ C1] rcu_is_watching+0x81/0xb0 [ 316.956524][ C1] lock_release+0x4b/0x3c0 [ 316.960962][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 316.967221][ C1] __update_page_owner_free_handle+0x466/0x4a0 [ 316.974792][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 316.981074][ C1] __reset_page_owner+0x85/0x1f0 [ 316.986047][ C1] __free_frozen_pages+0xc93/0xd90 [ 316.991202][ C1] __slab_free+0x274/0x2c0 [ 316.995643][ C1] ? qlist_free_all+0x8e/0x100 [ 317.000428][ C1] qlist_free_all+0x99/0x100 [ 317.005031][ C1] ? anon_vma_fork+0x88/0x540 [ 317.009721][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 317.015424][ C1] kasan_quarantine_reduce+0x148/0x160 [ 317.020906][ C1] __kasan_slab_alloc+0x22/0x80 [ 317.025777][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 317.031260][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 317.036650][ C1] ? anon_vma_fork+0x88/0x540 [ 317.041346][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 317.047012][ C1] ? anon_vma_fork+0x88/0x540 [ 317.051715][ C1] anon_vma_fork+0x88/0x540 [ 317.056243][ C1] ? anon_vma_name+0x61/0x210 [ 317.060934][ C1] ? dup_userfaultfd+0xa7/0x610 [ 317.065806][ C1] ? dup_mmap+0x875/0x1dc0 [ 317.070258][ C1] dup_mmap+0x954/0x1dc0 [ 317.074547][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 317.079252][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.084317][ C1] ? lock_acquire+0x115/0x350 [ 317.089023][ C1] copy_mm+0x11a/0x480 [ 317.093125][ C1] ? copy_process+0xd3c/0x43e0 [ 317.097908][ C1] copy_process+0x1e75/0x43e0 [ 317.102615][ C1] ? copy_process+0xd3c/0x43e0 [ 317.107415][ C1] ? __pfx_copy_process+0x10/0x10 [ 317.112470][ C1] kernel_clone+0x2d7/0x940 [ 317.117001][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 317.122065][ C1] __x64_sys_clone+0x1b6/0x230 [ 317.126851][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 317.132172][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 317.137477][ C1] do_syscall_64+0x166/0x520 [ 317.142079][ C1] ? trace_irq_disable+0x3b/0x140 [ 317.147110][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.153188][ C1] ? clear_bhb_loop+0x70/0xc0 [ 317.157877][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.165063][ C1] RIP: 0033:0x7f341d7c6bd2 [ 317.169643][ C1] RSP: 002b:00007f341db4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 317.178083][ C1] RAX: ffffffffffffffda RBX: 00007f341db4fc60 RCX: 00007f341d7c6bd2 [ 317.186069][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 317.194052][ C1] RBP: 00007f341db4fdec R08: 0000000000000000 R09: 0000000000000001 [ 317.202043][ C1] R10: 0000555568fb57d0 R11: 0000000000000246 R12: 0000000000000001 [ 317.210028][ C1] R13: 00000000000927c0 R14: 0000000000022364 R15: 00007f341db4fe40 [ 317.218033][ C1] [ 317.221093][ C1] task:syz.0.431 state:R running task stack:25256 pid:6863 tgid:6862 ppid:5625 task_flags:0x40044c flags:0x00080007 [ 317.234600][ C1] Call Trace: [ 317.237891][ C1] [ 317.240837][ C1] __schedule+0x17db/0x58f0 [ 317.245395][ C1] ? __pfx___schedule+0x10/0x10 [ 317.250261][ C1] ? __lock_acquire+0x747/0x2de0 [ 317.255224][ C1] preempt_schedule_irq+0x4b/0x90 [ 317.260265][ C1] irqentry_exit+0x14f/0x910 [ 317.264867][ C1] ? trace_irq_disable+0x3b/0x140 [ 317.269917][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.275912][ C1] RIP: 0010:lock_release+0x44/0x3c0 [ 317.281121][ C1] Code: 8b 05 c8 c0 f1 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 c7 c0 f1 11 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 f4 ee d6 0e <73> 0d e8 25 03 09 00 84 c0 0f 84 9e 02 00 00 83 3d e6 1f d7 0e 00 [ 317.300741][ C1] RSP: 0018:ffffc900055470b8 EFLAGS: 00000297 [ 317.306822][ C1] RAX: 0000000000000001 RBX: ffffc900055471d8 RCX: 8000000000000001 [ 317.314804][ C1] RDX: ffffc90005547201 RSI: ffffffff8177f1df RDI: ffffffff8ed5c8e0 [ 317.322789][ C1] RBP: 1ffffffff223f501 R08: ffffc90005547588 R09: 0000000000000000 [ 317.330771][ C1] R10: ffffc90005547218 R11: fffff52000aa8e45 R12: ffffc90005540000 [ 317.338755][ C1] R13: ffffffff8177f1df R14: ffffffff8ed5c8e0 R15: ffffc90005547598 [ 317.346748][ C1] ? unwind_next_frame+0x8f/0x2550 [ 317.351890][ C1] ? unwind_next_frame+0x8f/0x2550 [ 317.357037][ C1] ? deref_stack_reg+0x18e/0x220 [ 317.361994][ C1] ? unwind_next_frame+0x8f/0x2550 [ 317.367127][ C1] unwind_next_frame+0x1baa/0x2550 [ 317.372264][ C1] ? __slab_free+0x274/0x2c0 [ 317.376876][ C1] ? unwind_next_frame+0x8f/0x2550 [ 317.382011][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.388183][ C1] arch_stack_walk+0x11b/0x150 [ 317.392987][ C1] ? qlist_free_all+0x99/0x100 [ 317.397784][ C1] stack_trace_save+0xa9/0x100 [ 317.402562][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 317.407964][ C1] save_stack+0x122/0x230 [ 317.412356][ C1] ? __pfx_save_stack+0x10/0x10 [ 317.417225][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 317.422533][ C1] ? __slab_free+0x274/0x2c0 [ 317.427148][ C1] ? page_ext_put+0x97/0xc0 [ 317.431673][ C1] __reset_page_owner+0x71/0x1f0 [ 317.436626][ C1] __free_frozen_pages+0xc93/0xd90 [ 317.441770][ C1] __slab_free+0x274/0x2c0 [ 317.446208][ C1] qlist_free_all+0x99/0x100 [ 317.450807][ C1] ? skb_clone+0x212/0x3a0 [ 317.455242][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 317.460894][ C1] kasan_quarantine_reduce+0x148/0x160 [ 317.466367][ C1] __kasan_slab_alloc+0x22/0x80 [ 317.471232][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 317.476715][ C1] ? skb_clone+0x212/0x3a0 [ 317.481154][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 317.486806][ C1] ? skb_clone+0x212/0x3a0 [ 317.491253][ C1] skb_clone+0x212/0x3a0 [ 317.495511][ C1] ? netlink_broadcast_filtered+0x56a/0xea0 [ 317.501430][ C1] netlink_broadcast_filtered+0x578/0xea0 [ 317.507187][ C1] netlink_broadcast+0x37/0x50 [ 317.511973][ C1] kobject_uevent_net_broadcast+0x378/0x560 [ 317.517884][ C1] kobject_uevent_env+0x566/0x9e0 [ 317.522935][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 317.528665][ C1] device_release_driver_internal+0x48b/0x880 [ 317.534760][ C1] driver_detach+0x1f3/0x2d0 [ 317.539369][ C1] bus_remove_driver+0x226/0x320 [ 317.544330][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 317.550074][ C1] raw_release+0xd7/0x260 [ 317.554419][ C1] ? __pfx_raw_release+0x10/0x10 [ 317.559367][ C1] __fput+0x418/0xa50 [ 317.563370][ C1] task_work_run+0x1d9/0x270 [ 317.567977][ C1] ? __pfx_task_work_run+0x10/0x10 [ 317.573103][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 317.578239][ C1] do_exit+0x73a/0x2360 [ 317.582412][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 317.588234][ C1] ? __pfx_do_exit+0x10/0x10 [ 317.592853][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.597909][ C1] do_group_exit+0x22d/0x2f0 [ 317.602516][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.607743][ C1] get_signal+0x121b/0x12c0 [ 317.612305][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 317.617872][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 317.623169][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.629365][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 317.634760][ C1] ? rcu_is_watching+0x16/0xb0 [ 317.639544][ C1] do_syscall_64+0x328/0x520 [ 317.644157][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.650235][ C1] ? clear_bhb_loop+0x70/0xc0 [ 317.654929][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.660833][ C1] RIP: 0033:0x7f5254d9e159 [ 317.665255][ C1] RSP: 002b:00007f5255c33f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 317.673702][ C1] RAX: 0000000000000001 RBX: 0000200000000280 RCX: 00007f5254d9e159 [ 317.681692][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000009 [ 317.689678][ C1] RBP: 0000000000000a6b R08: 0000000000000000 R09: 0000000000000008 [ 317.697661][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000800 [ 317.705653][ C1] R13: 0000200000000808 R14: 0000000000000e26 R15: 0000000000000000 [ 317.713664][ C1] [ 317.716695][ C1] task:kworker/0:2 state:R running task stack:21752 pid:978 tgid:978 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 317.730292][ C1] Workqueue: usb_hub_wq hub_event [ 317.735338][ C1] Call Trace: [ 317.738626][ C1] [ 317.741573][ C1] __schedule+0x17db/0x58f0 [ 317.746116][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 317.751778][ C1] ? __pfx___schedule+0x10/0x10 [ 317.756663][ C1] preempt_schedule_irq+0x4b/0x90 [ 317.761742][ C1] irqentry_exit+0x14f/0x910 [ 317.766348][ C1] ? trace_irq_disable+0x3b/0x140 [ 317.771398][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.777392][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x52/0xa0 [ 317.783745][ C1] Code: 00 0f 41 81 f8 00 01 00 00 41 0f 95 c0 81 fa 00 00 00 10 0f 93 c2 44 08 c2 75 57 83 b9 3c 17 00 00 00 74 4e 8b 91 10 17 00 00 <83> fa 03 75 43 48 8b 91 18 17 00 00 44 8b 89 14 17 00 00 49 c1 e1 [ 317.803364][ C1] RSP: 0018:ffffc90004f2ea38 EFLAGS: 00000246 [ 317.809450][ C1] RAX: ffffffff8241f2fa RBX: dffffc0000000000 RCX: ffff888027123e80 [ 317.817430][ C1] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000001 [ 317.825407][ C1] RBP: ffff88801d56f344 R08: ffff88801d56f307 R09: 1ffff11003aade60 [ 317.833387][ C1] R10: dffffc0000000000 R11: ffffed1003aade61 R12: ffff8880271244c4 [ 317.841373][ C1] R13: 00000000000003d2 R14: 0000000000000001 R15: 0000000000000004 [ 317.849374][ C1] ? __update_page_owner_free_handle+0x28a/0x4a0 [ 317.855744][ C1] __update_page_owner_free_handle+0x28a/0x4a0 [ 317.861940][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 317.868208][ C1] __reset_page_owner+0x85/0x1f0 [ 317.873166][ C1] __free_frozen_pages+0xc93/0xd90 [ 317.878312][ C1] __slab_free+0x274/0x2c0 [ 317.882750][ C1] ? qlist_free_all+0x8e/0x100 [ 317.887534][ C1] qlist_free_all+0x99/0x100 [ 317.892193][ C1] ? __kernfs_new_node+0xe6/0x980 [ 317.897806][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 317.903472][ C1] kasan_quarantine_reduce+0x148/0x160 [ 317.908953][ C1] __kasan_slab_alloc+0x22/0x80 [ 317.914139][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 317.919645][ C1] ? __kernfs_new_node+0xe6/0x980 [ 317.924690][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 317.930370][ C1] ? __kernfs_new_node+0xe6/0x980 [ 317.935419][ C1] __kernfs_new_node+0xe6/0x980 [ 317.940294][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 317.945770][ C1] ? kernfs_root+0x1c/0x230 [ 317.950297][ C1] ? kernfs_root+0x1c/0x230 [ 317.954808][ C1] ? kernfs_root+0x1c/0x230 [ 317.959320][ C1] ? kernfs_root+0x1c/0x230 [ 317.963843][ C1] kernfs_new_node+0xea/0x140 [ 317.968540][ C1] __kernfs_create_file+0x4b/0x2e0 [ 317.973672][ C1] sysfs_add_file_mode_ns+0x237/0x300 [ 317.979077][ C1] internal_create_group+0x679/0x1180 [ 317.984487][ C1] ? kernfs_add_one+0xfc/0x6f0 [ 317.989277][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 317.995116][ C1] ? sysfs_add_file_mode_ns+0x237/0x300 [ 318.000684][ C1] sysfs_create_groups+0x59/0x120 [ 318.005741][ C1] device_add_attrs+0x1b1/0x600 [ 318.010609][ C1] ? __pfx_device_add_attrs+0x10/0x10 [ 318.015995][ C1] ? acpi_device_notify+0x171/0x3f0 [ 318.021208][ C1] ? class_to_subsys+0xb6/0x120 [ 318.026084][ C1] ? device_add_class_symlinks+0xd4/0x240 [ 318.031818][ C1] device_add+0x488/0xb80 [ 318.036162][ C1] usb_set_configuration+0x1ad8/0x2180 [ 318.041660][ C1] usb_generic_driver_probe+0x8d/0x150 [ 318.047140][ C1] usb_probe_device+0x1c3/0x3b0 [ 318.052010][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 318.057400][ C1] really_probe+0x254/0xae0 [ 318.061927][ C1] __driver_probe_device+0x1e8/0x360 [ 318.067230][ C1] driver_probe_device+0x4f/0x240 [ 318.072274][ C1] __device_attach_driver+0x270/0x410 [ 318.077669][ C1] bus_for_each_drv+0x258/0x2f0 [ 318.082553][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 318.088465][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 318.093863][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.099697][ C1] __device_attach+0x2c4/0x450 [ 318.104495][ C1] ? __pfx___device_attach+0x10/0x10 [ 318.109799][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 318.114945][ C1] ? _raw_spin_unlock+0x28/0x50 [ 318.119816][ C1] device_initial_probe+0xa1/0xd0 [ 318.124859][ C1] bus_probe_device+0x12a/0x220 [ 318.129739][ C1] device_add+0x7d7/0xb80 [ 318.134097][ C1] usb_new_device+0x9aa/0x1690 [ 318.138924][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 318.144146][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.149371][ C1] hub_event+0x28e8/0x4d30 [ 318.153854][ C1] ? __pfx_hub_event+0x10/0x10 [ 318.158640][ C1] ? rcu_is_watching+0x16/0xb0 [ 318.163422][ C1] ? process_scheduled_works+0x97a/0x1630 [ 318.169158][ C1] process_scheduled_works+0xc3d/0x1630 [ 318.174757][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.180763][ C1] ? assign_work+0x3cf/0x5d0 [ 318.185380][ C1] worker_thread+0xa47/0xfb0 [ 318.190004][ C1] ? __kthread_parkme+0x71/0x1f0 [ 318.194974][ C1] kthread+0x38b/0x480 [ 318.199067][ C1] ? __pfx_worker_thread+0x10/0x10 [ 318.204195][ C1] ? __pfx_kthread+0x10/0x10 [ 318.208811][ C1] ret_from_fork+0x514/0xb70 [ 318.213416][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 318.218548][ C1] ? __switch_to+0xc89/0x1420 [ 318.223250][ C1] ? __pfx_kthread+0x10/0x10 [ 318.227862][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.232667][ C1] [ 318.235708][ C1] rcu: rcu_preempt kthread starved for 10738 jiffies! g20669 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 318.246734][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 318.256713][ C1] rcu: RCU grace-period kthread stack dump: [ 318.262607][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 318.276109][ C1] Call Trace: [ 318.279394][ C1] [ 318.282332][ C1] __schedule+0x17db/0x58f0 [ 318.286873][ C1] ? __pfx___schedule+0x10/0x10 [ 318.291731][ C1] ? lock_acquire+0x115/0x350 [ 318.296432][ C1] ? schedule+0x90/0x2b0 [ 318.300702][ C1] schedule+0x164/0x2b0 [ 318.304880][ C1] schedule_timeout+0x152/0x2c0 [ 318.309736][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 318.315127][ C1] ? __pfx_process_timeout+0x10/0x10 [ 318.320436][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.326254][ C1] ? prepare_to_swait_event+0x322/0x350 [ 318.331819][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 318.336693][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 318.342863][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 318.348160][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 318.353382][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 318.357984][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.363193][ C1] ? __kthread_parkme+0x71/0x1f0 [ 318.368156][ C1] ? __kthread_parkme+0x199/0x1f0 [ 318.373219][ C1] kthread+0x38b/0x480 [ 318.377305][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.382513][ C1] ? __pfx_kthread+0x10/0x10 [ 318.387121][ C1] ret_from_fork+0x514/0xb70 [ 318.391722][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 318.396844][ C1] ? __switch_to+0xc89/0x1420 [ 318.401542][ C1] ? __pfx_kthread+0x10/0x10 [ 318.406144][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.410939][ C1] [ 318.413960][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 318.420302][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 318.429316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.439384][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 318.445046][ C1] Code: bc 88 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c1 23 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 318.464668][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 318.470757][ C1] RAX: 0000000001b354fd RBX: ffffffff819bb370 RCX: 8000000000000001 [ 318.478740][ C1] RDX: 0000000000000001 RSI: ffffffff8e414979 RDI: ffffffff8c6da780 [ 318.486727][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 318.494714][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 318.502702][ C1] R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 318.510695][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 318.519636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.526234][ C1] CR2: 000055555a9684e8 CR3: 000000007cb9e000 CR4: 00000000003526f0 [ 318.534226][ C1] Call Trace: [ 318.537513][ C1] [ 318.540456][ C1] default_idle+0x9/0x20 [ 318.544715][ C1] default_idle_call+0x72/0xb0 [ 318.549495][ C1] do_idle+0x2e0/0x540 [ 318.553574][ C1] ? __pfx_do_idle+0x10/0x10 [ 318.558176][ C1] cpu_startup_entry+0x43/0x60 [ 318.562950][ C1] start_secondary+0x101/0x110 [ 318.567732][ C1] common_startup_64+0x13e/0x157 [ 318.572705][ C1] [ 320.447326][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.460419][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.837706][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.851169][ T1311] ieee802154 phy1 wpan1: encryption failed: -22