last executing test programs: 1m59.611868515s ago: executing program 4 (id=11099): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2000, 0xf, 0x2, 0x0, 0x4}, 0x30, 0x0) landlock_restrict_self(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x0, 0x120}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x81c0, 0xa) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffffff, &(0x7f0000000280)='./file1/../file0\x00', 0xc00, 0x1ea) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000400)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1m59.033212187s ago: executing program 4 (id=11100): syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000d2b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000596000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b2b000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 1m57.223958037s ago: executing program 4 (id=11106): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010101}, 0x10) socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0xb, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000980)='/sys/kernel/vmcoreinfo', 0x240000, 0xa0) syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe}) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000780)="276a1f9834406d9ba599e71fe6a9c94c2c731f7bcfb0cb7d25975a4d0e314aa95306fc8df318fd22bbb68b1714b03229df6325b4b87aba4ca1297d7a989351838c370f607421c488a99af02d05df2434f2c12e87698017e6320a93bec1280024eda38710b543c0271c8c1305de91f084c24e18660e2dcb85787127274a03a6ddecdbf9bbe9c9fa1c48dd461b64518796e6224e35839e5e5f4732ae7167fb709c9f394771d20de907f8e9a862bf6732486421ab2b236dcc371f797f7e39c7678c74a4ec79", 0xc4}, {&(0x7f00000004c0)="364228096513c421ba252d28a958e1cd6481d95d8d9e868bdcbf1aeffeed3756e18eeebb677589386a91b4f37c0481def3cbf4ee1dac49bc3fb831723d9bdbff09cfee02df27d37be6c276af09495d4fe55e36790766d85b685f08bef97c8eaefd7fa8cfe1d4ca17dc08f1b5783f06217c5eda460c1b8ba211ba3fffa2a7efe0", 0x80}, {&(0x7f0000000540)="e8965d850f059aecd411a551780ce33c0d583a6c59e5ffedf82747d067e19c8e5980bab313148e0ea30ead851d7fb3d59f41bf383c7a1d7d857459e60d857098e14b1f408bea066c6afead50ca8818471d2a5bb0f54edb67", 0x58}, {&(0x7f00000005c0)="18d8b0a0c95f4cef81bc9dd6e1a9ee1e124219fed308bb68eab8e9ee8a5c2ff0e050aa2cbb0489bd4063d7f6b1d5c479d29c4bb0cbda5a56a4f8b3b28e65ec31dd4b39db3ecf7b519c210335d7d72fd4dbe197247034a11e4bf6cdcfe6570ade9a0bf71b3f85764d4f950c86bfacd59643643b01ea94340f0a5f12010522", 0x7e}, {&(0x7f0000000640)="3c86e18a3ff15d3d8ba9590f039420e72bbe790bda5b5cb3c2f6f78c801434fbe341a0e7fdb1eedce15cfb7202ade3cc5b1177cc013625fe4a376fba85095213ed1ea5ca5bf40103b885581e69c8d7134e8d79f6dc67b2055d671a8a9b9726aaa7d8353eedb4f2f2611bdd42323eee1333aeafed137adf71c4172216ccdf1f72d974230874220a", 0x87}], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = getpgid(0x0) sched_getscheduler(r4) close(0x3) 1m56.223634297s ago: executing program 4 (id=11110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x692, 0x7d, 0x80006, 0x4000000010000e51, 0x102, 0x547a, 0x103d, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0xfffffffffffff9de, 0x1, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0x6000, 0x194110}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x38}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000014) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, r4, 0x1, 0x41006, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="11002cbd700008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44824) 1m55.567536834s ago: executing program 4 (id=11114): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x12) 1m55.423314231s ago: executing program 4 (id=11116): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xc8, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = semget$private(0x0, 0x3, 0x611) semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000000c0)=""/216) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2fd, 0xea94, 0x6, 0xa, 0x4, 0xc091}, [@TCA_NETEM_RATE={0xf, 0x6, {0x8ae, 0x8, 0xffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc074b6db8bfb5ea7}]}}}]}, 0x78}}, 0x40844) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000b40)=ANY=[@ANYBLOB="01000000e38de1470aa0de636d5babcd0e8191090fbe29e61a3b38c062c1c71ae4dc8121a97de3167480d779ffef03db10fb7d49e78663d10ef358167dd75e2722aa2760b42aa968c4d6f3e31a7f0530a9", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x44}, 0x40c0) (rerun: 32) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r6, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18) (async) pipe2(&(0x7f0000000440), 0x80000) (async, rerun: 64) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYBLOB="49931647cc99b0806bcf05dc9f3a95fa89a0499c66acd761279c7c0695b4105cac3d1f514bd1114d715acba336918c7df237dd113ed4a8e43e061069a7dd9be418db2d3dfe4fbd22ec4829de300d3cbba7c026ab050b09d3c34b2d8401c7dd4a5bffe616"], 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0019"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x8001) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="58001000000000000000000000e7922cff000000bcf9283579b023a35ad77e27091bb97fb847520b578abf469371c4735d5dd051063a41d412621c179b22a2978809cb72aa11a7efd66620ae364a5a34b4252fca85a15b52bfca6589c5923341535d54ff64d2b55d1fdedd9f9240a8994e94f4005b5eac85e48e019a0aa1246726d90862631657e297dfad7295e9576ee2cef496c091438e1a14f9d75bb02b12125025c75e3d9763e7560a65a9c8a85db07ade71a5ad2a596ba8af5b9d68b1a3b01c217a51df1b535bf311d7d8320dd70926ecdbbbf87f88c21fce278b2de54690c9971bb16787b71e833f0f4a3473ec7d1b481c4156766808035294db79412dae6aef15e05c9e", @ANYRES32=0x0, @ANYBLOB="feb0857dbdb5f31a24001280110001006272696467655f736c617665000000000c00058005000a0001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x2404c054}, 0x4040) 1m40.11754071s ago: executing program 32 (id=11116): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xc8, 0x288, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = semget$private(0x0, 0x3, 0x611) semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000000c0)=""/216) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2fd, 0xea94, 0x6, 0xa, 0x4, 0xc091}, [@TCA_NETEM_RATE={0xf, 0x6, {0x8ae, 0x8, 0xffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc074b6db8bfb5ea7}]}}}]}, 0x78}}, 0x40844) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000b40)=ANY=[@ANYBLOB="01000000e38de1470aa0de636d5babcd0e8191090fbe29e61a3b38c062c1c71ae4dc8121a97de3167480d779ffef03db10fb7d49e78663d10ef358167dd75e2722aa2760b42aa968c4d6f3e31a7f0530a9", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x44}, 0x40c0) (rerun: 32) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r6, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18) (async) pipe2(&(0x7f0000000440), 0x80000) (async, rerun: 64) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYBLOB="49931647cc99b0806bcf05dc9f3a95fa89a0499c66acd761279c7c0695b4105cac3d1f514bd1114d715acba336918c7df237dd113ed4a8e43e061069a7dd9be418db2d3dfe4fbd22ec4829de300d3cbba7c026ab050b09d3c34b2d8401c7dd4a5bffe616"], 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0019"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x8001) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="feb0857dbdb5f31a24001280110001006272696467655f736c617665000000000c00058005000a0001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x2404c054}, 0x4040) 11.357769318s ago: executing program 3 (id=11520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r5, r4}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, 0x0, r4}, &(0x7f00000002c0)=""/28, 0x1c, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="fee4f8adad87813cbe", 0x9}) munlockall() timer_create(0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) close(0xffffffffffffffff) 9.619301025s ago: executing program 3 (id=11528): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09043900027afa712c09058202200007050209050c02ff03030c09712f1874a4733aed1300ac15a67e867a88b02d559a8b4358626009783ff89e0ce2b604c20764996761b7457f0f2ced0f6142274890730876d0cbadb6b3e0dabdbef59597f1f259edc52a2869cfd35abe9f26c9bf7f15b39e9213d047ff10ae897b1c46ed627ddc23bf2957ccf79c27dc7a5c843f14d57df11ec0e4234ecdbdd8b2030e6437c33b2b3192b629bd449a4a2005ede78d39cff8ce2df4839898e44b68cd3c34789393048feb80b55f48b3ee1b67d4ee8a4b863fa51d56fcd61be0c4a283985f9d34790a5673b8e972ffa3ebe91e7240"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000d2b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000596000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b2b000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x40050) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/340], 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.691083624s ago: executing program 3 (id=11539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r2, 0x0, 0x0) write$char_usb(r3, &(0x7f0000006800)="10", 0x20) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x1, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x800) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4e27d787900c42221a609015900b9900d0000b8fe40c6e067f3ae0f30c4e1fa2c13f2260f22200f01c9b805000000b9754b00000f01c1", 0x37}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.303717942s ago: executing program 0 (id=11542): syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd201020301"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000d2b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000596000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b2b000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 5.341187504s ago: executing program 5 (id=11551): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) dup3(r10, r10, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r13 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r13, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r13, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2840, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7fffff}, 0xd0, 0x9}}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 5.103694571s ago: executing program 5 (id=11552): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x54b401, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r6, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) syz_usb_connect(0x3, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007"], 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0x5d6, 0x4) 4.246784311s ago: executing program 0 (id=11555): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) r9 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) unshare(0x6020400) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, 0x0, 0x8040) pwrite64(r9, 0x0, 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x110) r10 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@wrmsr={0x65, 0x20, {0x40000010, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 4.158426479s ago: executing program 2 (id=11556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x0, 0x1, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1}, 0x20000810) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x170, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "277dfa7309b5724b6593bb94f0b6fcc1a6747102929d5eb62f21d1754705cfda69c5fc10554b2f1cd34b85016cf8beae5fdde25ab27e9b82a6e623e2537176f50b376f10426b4a1bd8869cdd0a"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "92be80682e6533f8a5318ca574ead60742dc7020fbe1b03041819d0f7a6f"}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x26}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd74}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8080}, 0xc000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x22008090}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@getqdisc={0x30, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2, 0x7}, {0x8, 0x74072deff33828f4}, {0x7, 0x8}}, [{0x4}, {0x4}, {0x4}]}, 0x82}}, 0x20004050) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001200050104000000fbdb9f2528001a00ac1414aa0000000000000000000000000a01010000000000000000000000769abd0dd8"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x3e, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14008700", @ANYRES16=0x0, @ANYBLOB="00032ebd7000fedbdf2512000000"], 0x14}}, 0x400c810) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.927492773s ago: executing program 3 (id=11557): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (fail_nth: 4) 3.848389576s ago: executing program 2 (id=11558): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8e", 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x7ff, 0x0, 0x1, 0x2, 0x9, 0x2}}, {0x8, 0x2, [0xdf, 0x5]}}, {{0x1c, 0x1, {0xfe, 0x3, 0x6, 0x2, 0x0, 0x1, 0xc0, 0x7}}, {0x12, 0x2, [0x0, 0x5, 0x5, 0x4, 0xa632, 0x9, 0xb]}}, {{0x1c, 0x1, {0xd, 0x1, 0x4, 0x2, 0x0, 0x4a95, 0xb, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}, {{0x1c, 0x1, {0xdb, 0x6, 0x7, 0xfffffffe, 0x1, 0xf, 0xb0}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x9, 0x5, 0xa, 0x2, 0x5, 0x8, 0x5}}, {0xe, 0x2, [0xfc, 0x6e, 0x4, 0xe92, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0xe4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0xef000000, "a84a6b5ef185b47e5d3ae539479fcd5c"}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d5201947248f3be521657487af06c412ba8", 0x13}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000300)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a104778dfee46de940b1ed004060d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0xfffffcaf}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.794804659s ago: executing program 3 (id=11559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r5, r4}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, 0x0, r4}, &(0x7f00000002c0)=""/28, 0x1c, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="fee4f8adad87813cbe", 0x9}) munlockall() timer_create(0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) close(0xffffffffffffffff) 3.612870291s ago: executing program 0 (id=11560): timer_create(0x0, &(0x7f00000000c0)={0x0, 0xa1, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x8040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = semget$private(0x0, 0x1, 0x1b2) semctl$SETVAL(r5, 0x1, 0x10, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.500757308s ago: executing program 2 (id=11561): syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0x9b, 0x1, 0xf}]}}, {0xa002, 0x880b, 0x8}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x1f, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x40}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0xdc, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ID={0x58, 0x3, "121de0501444c58ea676cfea28db8cfd808c2b1c3ccdcfdc5fc965593694d9e3a2ad86aad27714618a72886aef98050dbf0cb9e1e1e80024cfa4a20d06867f817ee8316f2db2cf437d4d28659cd603825d863ca7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x48800}, 0x4000080) 3.425404884s ago: executing program 1 (id=11562): read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(0x4) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8040) syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) syz_usb_connect$uac3(0x3, 0x97, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x6, 0x0, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x22, 0x30, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x5, 0x80, {0xa, 0x25, 0x25, 0x8, 0x8, 0xf001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x81, 0x2, 0xd, 0x1002, 0x10, 0x2, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0xc, 0x2, {0xa, 0x25, 0x25, 0x5a2, 0x9, 0x8}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0xa9, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.582718725s ago: executing program 0 (id=11563): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x40002022) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x2, 0xeb, 0x7, 0x10001}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) mq_open(&(0x7f0000000080)='+\x00', 0x2, 0x40, &(0x7f0000000200)={0x9, 0xd4, 0x4, 0x9}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getgroups(0x1, &(0x7f0000001080)=[0xee01]) 2.253663881s ago: executing program 0 (id=11564): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x100200000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.963321878s ago: executing program 3 (id=11565): syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd201020301"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000d2b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000596000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b2b000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 1.855527299s ago: executing program 2 (id=11566): r0 = socket$inet_sctp(0x2, 0x1, 0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x5, 0x10ffff, 0xfffffffd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) io_setup(0xc67a, 0x0) r2 = eventfd2(0x1, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x2, 0x8) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538be09000000000000000000007400a391000000baffda6e4a4d8300"/64], 0x40) r5 = fsopen(&(0x7f0000000700)='bpf\x00', 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000480)='mode\x00E5\xf6\xc5\xce\xce\xf7\xcd\x94;\xa4\xcb\xc1\a\xccx\xdc\x00\xb6', &(0x7f0000000140)='7', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_init(0x200, 0x0) r8 = eventfd2(0x2, 0x801) io_submit(0x0, 0x9, &(0x7f0000001cc0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x80f94666296dc04f, 0x4, r0, &(0x7f00000001c0)="44df8f5c2b691a4c45047d09d2747b2328712144da8f297e086c26977759d20efcf73fa01f849199997b398923ea9fb749379424a2a9e19edf834089fddd3a825974d47e58189812278af0eba8c8c7bbd74c1aa7c3f76df85252fbf8188e8e10caf643f3bcb58b7ee9b873e355780d12ac16bc72b85cceb9d9ca3396e754e6846339777db0fb64d1c4b3feac480e63a76f18653d17912f0534a75f72264c3d1357d1a3", 0xa3, 0x0, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f00000003c0)="7e4b2ee82862037e33277c66ef1d40f28df1b4bb81e8a8a01adceac76717f9bcf95cece64f23180867f67a6579842c88edbef673b75745fabb3370ccf7d20787268b9e8f6e444ec42a8902bfdf52de4fcaf0f537cbe4e031d4a946eef7f965d527b384a55973523400eef9aa6ef12aea0d8b1cec50b7aa9bae84b493a386db9b427ca887ee69233f50cdb2951f9970bf0926788083052bca21ccdcc33c5f026340100367e9373f4b263bd7057d3c3ec513924e162bb31a8e43d1864029e5e083a85ac1ac9f791dece182f9725eff3bd7b3", 0xd1, 0x5, 0x0, 0x3, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f0000000500)="e591200f54efad495965819e520967b32eaf5f0d66db43ae92d588e992ed147bad8031578c7845d5649e342d3f8e1c4ae0246e62d590aed65803816a56e97fc3c62e9d05a84f85bdc7aea26e821c3086e6bd62c72e0b4772281cec6dcfb5ab", 0x5f, 0x80000001, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000740)="f93cb49f9883a3e99e5170cf9ed6ae38b8822bd56154def612b547b74cd24e5f504a3abc52326e9abd4db30a7d5aaa2bc99c2aba3c7e64558118fc6f210cf6509881944b885051c0e6db2f292d6f301e7ebce9a2353739a4acd417a82e6ccf607f54189cb0c070f02a415c450b981e8e2700293b1d1e18415fdae81e224431ad4b06018b80e464291331d219daf0f7a0393059aa5352933eaf378b34d8b8fbb0db4884113112e1e04b3370069ff42bce634b324b68cbd192d51a88b4b717c4812674ecce4b18af48c0e0fa5587ad62455cdffac06a67b8b0cc6900171735401aaa7dea6cd57168", 0xe7, 0x3}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x800, r0, &(0x7f0000000880)="77827a72d574affa3b0b8b44ef69fe6ec54807a494d04e88c9d02619158dcda89d8eaadf5907ad514947b636b0f7403f8a3a57c6d93e82254558fb38bf11fd300664dfa663c36dcd79c169ca22b72b90c0588bbac408d457ebb0fdfc05f1ac9021e1fcf9a69d2170e4f7fa527f34e90b9e4567aaebc6ec230ab9852ecb4bc1036eaaa883fdc9be925e4cbb6b1895a330e823bad38529332d31b26e56a130a6f7b38e4bea1f00916e02056affebaaa93eff80", 0xb2, 0x10, 0x0, 0x3, r3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000009c0)="0c07b6b595d6374f50f4de0b767b3e296d3b7b199f27ee7e81e7d500fa8e21fa9faaf8bc3111c16a16d3b71785ebdb95feb2db5cf4186d04fc93f2183e8e99ad7734f70a6865305a7fc3b6ff9e3c0e839654996acfb9cc29217b2c9f81f884ed9ac4e719b0b32e34ae12e83e9e24cc75f7243d68f172a95c809cd2b42965124cb65d4e849433262baf4624ce933955d901b9dd5961a970bec3028876778aa09865e502611f3fab5bbcdd770fe53bb27c6f4224d6e91a0960db9bc5d24e24b39c31802259a53d421aad986cba0b2993171d6511355cdbe4af1ed6bded42361975c4c9fcc48fbccb8a492d", 0xea, 0x100000000, 0x0, 0x1, r4}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x9, 0x1, r0, &(0x7f0000000b00)="4fbce6a499470664923d2654de2e97a8d5a2acf011bcb94380e449624149319b4a67930b0e6f68d98419f51ae39379eedd5bd6e36b00de73cb10b242f12ed9f233ba009f9310c07d732a11d707eb31837953abe4f9c266edf3b4379ffa26ae614bf45a11d6443dbc363dad9f81bc239e54ff1ac098bb6bce0f1cf38e51ce", 0x7e, 0xfffffffffffffffe, 0x0, 0x0, r6}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x81, r0, &(0x7f0000000bc0)="2d95335413afac988b8c200c46875cbd96680d1f18e2bc0acd4855d862c2b2f30548a2c5e3905116c1ff2ae3aa593d1de0570c44688a2268e5b34bd3c8d64b90326b94", 0x43, 0x6, 0x0, 0x1, r7}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000c80)="e51e5c098e4d278b517c886addf559aadf4ec5b8fa5c8e222b133a581e6ecdaa459aa821da6a88621f8938e3120fa2a7441947858939284054243882140cb063834e1f1e15d6dc45e11dbfa62f36d97cd163afca00805425dc03f93e1910440cc9bc02c85be936e8b0bf0f69e02434bbd80d6ca95bc6c78a1a4c551de19283e90ef91010018d43c4222288e824d9fff3a5c8d8cdb091f98dee2f429da162ce603042a8b98b215a8368dde57be0ff5c4ac206e38af290b458050d5999c177d6a65bf77691dbaee379157237a8ee4aea596b0bdc2a4b0c4413c7f2dd637f64d3c2a8fbff4192b910af3c17873cea8e509e6fac13273f45dbd0cb2459985e3111a3c718815c3619677ce8b4885cf4bc5c1fb6752fbf6a89c9bdd901d833a9f11f4eb4bca23f964252faf6c34a0dfd313db8535b62b29771533a0d517d0654dd3e9003a1162cfd6ed03e5524279a139b7248c7a3a73dd0db18308fc8ccc89690c31be2cb105e8633f09cceca46bb90ee06f8d29c29fed84d6c673fd9dde4f23341aa30466bf3caf53299cf69a00062a6162fa0edec32b180d932e6569aaa3293621cac6b077de4eb9266eb790cf6aedc8238cdfc53c810d881849e5bc733b90bf1fde82af5e28a2f201448bf6792a9b06b22e03462073f9c782b90428a450325f5fb42ce5c93335a7784eae69f0f98fc505817f0e43eaf2879fb36057a20070bad0bcf306d17204109af6d26e099d57e440a0e0559bd777a007c4d1dad3f5aecbe98b3ec4fbd7e28574f54eddc208836e69b8bb590e542d00fafa380852dab4356ab2b5aa03453921129cbdf8007763c45b34eef1f91fa60d803fc069c0bceebac586623ac368bf76769ad1833aabdef3aa36aa8840aba14561bb00923652a5d994b937abe046960af8bf178bdeff394db85c478cbf42df23586be08ebb50d12099a7ebf0c02098dc6bb50a5fdcae00c0f347f5c3507fe39116f69e5b72607f3e94bf5cfc5afb246c13143adc4a757eec6ca0a55d351a952b93b619edd48242c99791cf144649583619a4d182aae1f02199bc41a9b0c252ce765b32c834171675d819bc0aa6f5f0aabe1d91b815a1f63567011b3ba60a8d59a0ebcc7bfa111ac249f028496346c5af415ef84c59b8a44462aa38f169bcac23b1e4231505c855cf88e978af7229f527f4cc62abd6fbbfbe2c5583f81e07a2e62dc4d2577df3888e00dccd04c55ab61ddc0b7856391c72a0a62ce95e216bf54b4416b864bdc9cdd3eef600de71b4d0d0e4cdffa1620966815eca7f52c5575bd9bbddd6e7e12cc3225de26daa4c863fe318baae5a3ff50805bd03d25fddcdd21be56831c6d935aa327f20090babb3aefd5e039b0a148150decbbe81ece9dfd1fae000b2191b7db9998f61076489d46dceb89a4029f3fee3b5c39660823f6e56eb547f0e8c25c42811ec506cb9880f8b893d3dfc023321df39f2a7def89ba48e18f4a3da04f3a6511613f9a0795458fc9e9e3cd245968527ccf05d3658bd6d0e486845779c9c8c17f4089f8002349f641462604e141e958d6b4107e7cc9a74b184eb551404ac47b6906b1f6c557a22283ddd0022dbe4d5d7c93ee13258ec4d0abde2add65c5be7e86c3be4e1e53603f16a4092e47a7d4128278c9a4f0f229eb5cbcb2cd6428c164ed134147472a7fe786e6679c5e75f54e12e673ce466c9f293b022d9247f171ebfcd8c1f4e95b89d3458b6c6eb6c62b839446919b849a75d0910b86e95c16cca6ae597f35a72237feacab9f78c911854cb61f5d6edb6a76907b63aa9290b7ac52f8d5daf9720a2c84ac2906eceeb2a36852b59e213cd297b90927fdb897e72a25063f94fa429e3b010913d3f70147a6282cdb6c946d583f9749044b82ab6c7d95ebf6ebf618ca2059317ed39d8228e9cbda1b05a3940c4976dda7fa538823b350b65750d029eb28b1f7fa27d1d29b6a28d1d91865b125ff77bc919a97c2cfcffa811c9672aa59fb1ec5c1cdaea3004f02c4b0674e65b91d237b35e63b7fa42c300b1010549c13927c6ba883dc8ad4e3bd46b36b81c827a4ae4a63348c143dad7d2e20b2441b9c170006fcbab3f6d8b89bf55ea757d6001bde8886f6f2ba926308c183a79e839fe782dfddea80007dac34bb9a007462fc98f4996a890df6dbdeb77195463713a4cd75c1070e90358f072dadc91300f64ee84e4203ac2259820d469045b52edcf80d868fea60ae5adffc3811c128b3c9e09c5bb00a1ff489b9223fc122ebe2dd0b9e1b83d3a84d21ea5bb9f2245cf31a0fb08f0f786fbc60de6b6ae9a021d03c1505010ab186ba76ba41a7f0e1d54059e3340a414137c7200d017b8910731ffbf7b4c8619f5fbef02b214cc987f0fcfe802adfa5491947786cc2cf434da96772afaf5f6aa13ac87c68fd03e51b8f8c1d435eaacb21fac4274f504cc3f8aa31d86b4a278c1a65614b629a2a111c33d7d2df6dc3df31da1f78b4563f5fb4adc5aa373f328291b53e9a8ea5e5818b289791ad8b433f91ab4fa8c1e19a48fde2489fe1e41fdb0106e783ec29f19de5638ca3b2ce0977ef995581a67b03056fbdfc5c80222ed9af7163e98405a28d22e03ac951c89e9215d3bdc42685ab9191f7cfd500de48074f82e8050e05d85f1e91c74d539b1a7e2e653904ce3d538fcd1dcffe47935db815645e6f0347bd2088c15da3d3ce0f28076a1ea1a1df48e685db18df95e53e1d1438390fc7362d57f6a5e1773a8ffeccac220a2b6ec10c42b57d09c71eda5c5e78e79b7061379cea48f13e74bb258d0664f4c2eb2fb9b35a35ebb87846f555a5f2f3cc5f92782126dc5d5b56d8e206b927b128311b5c1c47a78fdd31cdfe3284ace07d20c7b71befc603137fc85bba6769cc34e3c7beb0f591e0", 0x800, 0x8, 0x0, 0x1, r8}]) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x8000, &(0x7f00000002c0)="d752d1fd92fc4e902f3c7e330d9401869050fb129ac9aba125b40d50e9f591ab4af99d65128704cb1dea5b3a4b67a7f48fae080f777bcdd2af203a0a81c57898d79bcc1f0402eede16a48e7141b769a5fc923ee1ab57fd", 0x57, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000640)="8d36048f0c703367f85fab25b7f293f7adf741856b0c0ef8474032ac55316af81088aac3757abb3b5055be9302314f74f93cf8ee0d1efcc0e8f73d20ccb7e9c2046dbc96bf7cb45cae6bbcf3b64aaeca808af3358aef191347c52bebac07") r10 = dup3(0xffffffffffffffff, r9, 0x0) dup(r9) ioctl$KVM_X86_SET_MSR_FILTER(r10, 0x4188aec6, &(0x7f0000005680)={0x1, [{0x2, 0x8000, 0x6, &(0x7f0000001d80)="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"}, {0x1, 0x750, 0x9, &(0x7f0000002d80)="fb667967652ecfb399dd1f42e4f729e77e48b00919569b02e388e63a10beb5b9b1019e25772d463116320fdf8d36d8fb45402adf26629dfeb8f8e3b27d4c55c4dbf0db7e956bd22a292903527b5599b486205d67a356b7475ff76ea9c6978113f5bfde69986c81b55567770649418ec50ce4e16f529a0bc16b4d6fd8f24532ca7ae50a8f275e79d37affe1f97807ca7911d6a9ebf0e1c9723f66ce538d18e4423de7b9587ee9de37d330c67e9468ca041ecf4de6594bb6664607014140ee999778970a4fdac655b98f97ce9c4ee7b566bc5837945f287d34fa70207b5675ee4b2ab7a22764cc264cdf8f"}, {0x1, 0x4f0, 0x8, &(0x7f0000002e80)="17daa9414a499f383f8510bb1cea9f398e9f1d3587541f2ef0e23c28bf201a0e19fbfdb97de1e7f475da382b56c8189db8e39e51adf06e61f3377cb2f4d8ccfe18be47d0ccb531c543f7609f4c73c4379bde3e7c7c4e7875e1e51a15ce43b49c8ee443c6c2f597d542edc07334c44bb943859a9e858950d87d4529ed3e31df45fb96903edf880ecceadc9c0a3ea8466e81ad7f88cfb683cf9c8c24226574"}, {0x2, 0x7a0, 0x4, &(0x7f0000002f40)="2d5f6f409659c8498573a2e1da0cf96b05deb4fae977cfa7ef116eca522e46900a79a7f12991b26e9d2fce7773d7737f4541d1df7967b7cb757890a36dda34376d23911ba07a89e3900d7253aff031e664d3217fb7ace396d123cc4c9a03a2c21a76f6449c74019b446913c20dfe80dd03379eeaaad6b61c4024bea3192cea0c2a5f380c50043b8b37614af20a37376ce4f0ede42e6b12e8c5fdd1dc1d7e228b8dd6c45b0983fa6a58f874f92f451170ee77e9235ec8c4c939e3f6b6dda3b199b4f3ee859994b7ccc10f73ffb02bdeefa3fc1aff5c78f83e4c9f23aec705c3773f1f4e116d7cd492d57e0968352e88da5503225a"}, {0x0, 0x1f8, 0x6, &(0x7f0000003040)="45510c79478eafc06d55ba432b0694b3d4f3de1cec3a08fc58e97fe36fc37ce982395e9fd15147f94422cb57803131dc4b217b944fa4a776d4f1e4a8b85fcc"}, {0x0, 0x500, 0x100, &(0x7f0000003080)="142076e7b5a170b2a5e6b90808217737858a0e9814db74639cd354396d9a063b39918b1dd9995c530342a91e079b7fb462c5f287b5ee047257d65d834c73217e004c2b9cf2b23edf1bffff15da51876273e32c3cb4a298ad39b455cc8dd91622b1fee5f9508e0224a6bfe0d958d40dfc9f9592714aa2f767758b6409466c14b8b740174aeb3c0e84a2ff82766b18ec4d292bc3a45e8ab0ceab2c8f2727c8c759"}, {0x2, 0x3c8, 0xffffffff, &(0x7f0000003140)="61c8952a8abf707beef24d9bb6dabb44733ce2c0c8f9894446a49f570191ee4c4c9f0509fb2bf674ac6e55416fb5a36b92cafb76811543d206e615883e7101e53fc358a1d7cb03d5476e8e8418e4c766f8236bc3e1ec77c481af13a1c937f9abc8e353e73a1053997a3f7a7fa2f15d0095693dca2e37791742"}, {0x3, 0x7e0, 0xfffffff6, &(0x7f00000031c0)="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"}, {0x1, 0x8000, 0x400, &(0x7f00000032c0)="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"}, {0x3, 0x558, 0x2, &(0x7f00000042c0)="0c03021c39b3ef5c858a2ba053bad102e335c5624fab1b6c50c38a7a75ab99292515d271b25bd516b01ff0d7e91756d1a1e5c47d5b49816302db7d835d85490e384a7c98f9079cf134bddf3730cfa908bf207f739842d164e7fa22df4987c313ff0cbfd7b734e694099c2ae57717b943c2b1af5ad7614c5c3bb514ab6d2d3f22dc93ff48dfab2347e763a830f720a51d44b976018501a43226e826fb4f21e68c887f6a3170fbfc1d3e3d24"}, {0x2, 0x428, 0x1, &(0x7f0000004380)="ab2034b31d63657bf93a8466ed8b566a210469f50f08e9ebf2cd5ce2104e883e46c655bf5acac340825649ca779390afeefc1c9d957d1585446e9942bd50da4fe5d2aceeac4f75b2516f4278bf3047716589a54ccaddd829c08501a5a7ee70b7b6301502b0b1ec9a7f6c7c0b601f36c52989ae8f0d95371a5fd2775826ba1ef79d69fe11e1"}, {0x2, 0x8000, 0x51d, &(0x7f0000004440)="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"}, {0x1, 0x700, 0x18000, &(0x7f0000005440)="e5074327afd692cd1811bacf5e7c5cb12896f77ffee96f5e329eb0473c7c911a21977c6b6a0fb4ea7dd86521e8fde63712e9df656c14bee382b089ac7a875bc08191f53807090e516a450604f6b1cb8b497bf4918ccd73ad03262666ea8778746b320c914fd1dc8f267d4f8fdc63e580f37dc25ce5a96650b70805e9dd41813014acd14614aeb9749b941d8ae8b613917455caddeb74ba08ea3a14dec07f56c143954dcab4a8faf25a86883f9214dad4299d07325dbc5ec2c9a0c4f6a8f04cabbfcb3b42508bb0b13cca873aa3f64d95d0c794e0f8180664d9147d436b051278"}, {0x2, 0x510, 0x1400000, &(0x7f0000005540)="14ab9bc2f8770ea01bacad6b5a0c8cefe5a5bec1e889c144ae941b48955933a14911caff83fd6770980749f679be55877647db74cd9e4fa541ed3cdca3e0bb398dd2abd67d99673f6dc27a985bbee96f983d58e2558cd0583b784089e4bc39bb0227d8b3af71e13636ae88b3ab54c36c7e5e4bd301c00dddcd37387edee7ed4281f0ecb1cb31f36bb16f50e4909eb18ff94cee65411c407e0c46709777dab8717d20"}, {0x1, 0x48, 0xe, &(0x7f0000005600)="f0dd6d806df0906233"}, {0x1, 0x68, 0x5, &(0x7f0000005640)="672a2a7d34e0cf7dce1d9def6b"}]}) 1.73183568s ago: executing program 0 (id=11567): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x191, 0x1, 0x0, 0xdd9f84, 0x1, 0x9, 0x100f3, 0xfffffffe, 0x5, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0x82}}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) 1.442508115s ago: executing program 5 (id=11568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000600)={0x0, 0x8d, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4044001}, 0x24004049) 1.080961019s ago: executing program 5 (id=11569): socket$packet(0x11, 0x3, 0x300) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7b}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2c}]}}]}, 0x48}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 859.230931ms ago: executing program 1 (id=11570): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) r9 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) unshare(0x6020400) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, 0x0, 0x8040) pwrite64(r9, 0x0, 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x110) r10 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@wrmsr={0x65, 0x20, {0x40000010, 0x3}}], 0x20}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 858.908882ms ago: executing program 5 (id=11571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8e", 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x7ff, 0x0, 0x1, 0x2, 0x9, 0x2}}, {0x8, 0x2, [0xdf, 0x5]}}, {{0x1c, 0x1, {0xfe, 0x3, 0x6, 0x2, 0x0, 0x1, 0xc0, 0x7}}, {0x12, 0x2, [0x0, 0x5, 0x5, 0x4, 0xa632, 0x9, 0xb]}}, {{0x1c, 0x1, {0xd, 0x1, 0x4, 0x2, 0x0, 0x4a95, 0xb, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}, {{0x1c, 0x1, {0xdb, 0x6, 0x7, 0xfffffffe, 0x1, 0xf, 0xb0}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x9, 0x5, 0xa, 0x2, 0x5, 0x8, 0x5}}, {0xe, 0x2, [0xfc, 0x6e, 0x4, 0xe92, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0xe4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0xef000000, "a84a6b5ef185b47e5d3ae539479fcd5c"}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d5201947248f3be521657487af06c412ba8", 0x13}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000300)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a104778dfee46de940b1ed004060d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0xfffffcaf}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 802.000339ms ago: executing program 2 (id=11572): socket(0x2b, 0x80801, 0x1) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 601.008022ms ago: executing program 5 (id=11573): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000127bd700010dcdf253b00000008000000", @ANYRES32=0x0, @ANYBLOB="0c009900f4ffffff260000000a00cd0009000300070000000800570080110000080057002903000005001901080000000800a10004000000080027000200000008009f00010000000500190106000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r5, &(0x7f00000000c0)=""/173, 0x17) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) 453.459748ms ago: executing program 1 (id=11574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 318.037244ms ago: executing program 2 (id=11575): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x7, &(0x7f0000000080)=[{0x206, 0x5, 0x7, 0x7ffc0001}, {0x3ff, 0x17, 0x1, 0x4}, {0x8001, 0x9a, 0xf8, 0xf591}, {0x0, 0x1, 0xb, 0x2}, {0x5, 0x7, 0x2, 0xc}, {0x200, 0x6, 0xfd, 0x8}, {0x8db6, 0x32, 0x8, 0x400}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000100)) unshare(0x60000600) 281.167102ms ago: executing program 1 (id=11576): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000040)={&(0x7f00000002c0)={0x38, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 158.643497ms ago: executing program 1 (id=11577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000500)={0x0, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 0s ago: executing program 1 (id=11578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x28b, 0xfff, 0xa}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1602, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r4, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) r5 = fcntl$dupfd(r0, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) kernel console output (not intermixed with test programs): r_hwframe+0x77/0x7f [ 1955.046422][ T8236] RIP: 0033:0x7f7c2539de59 [ 1955.046442][ T8236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.046461][ T8236] RSP: 002b:00007f7c235f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1955.046484][ T8236] RAX: ffffffffffffffda RBX: 00007f7c25625fa0 RCX: 00007f7c2539de59 [ 1955.046498][ T8236] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1955.046512][ T8236] RBP: 00007f7c235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.046525][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.046537][ T8236] R13: 00007f7c25626038 R14: 00007f7c25625fa0 R15: 00007f7c2574fa48 [ 1955.046570][ T8236] [ 1955.315214][ T5741] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1955.467470][ T5741] usb 1-1: device descriptor read/64, error -71 [ 1955.707499][ T5741] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1955.784163][ T8243] veth4: left promiscuous mode [ 1955.791727][ T8243] veth4: left allmulticast mode [ 1955.805435][ T8243] veth6: left promiscuous mode [ 1955.818522][ T8243] veth6: left allmulticast mode [ 1955.832992][ T8243] veth8: left promiscuous mode [ 1955.846926][ T8243] veth8: left allmulticast mode [ 1955.852211][ T5741] usb 1-1: device descriptor read/64, error -71 [ 1955.969234][ T5741] usb usb1-port1: attempt power cycle [ 1956.054859][ T5365] usb 6-1: USB disconnect, device number 2 [ 1956.308142][ T5741] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1956.341227][ T5741] usb 1-1: device descriptor read/8, error -71 [ 1956.588179][ T5741] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1956.634063][ T5741] usb 1-1: device descriptor read/8, error -71 [ 1956.661866][ T8257] IPv6: NLM_F_CREATE should be specified when creating new route [ 1956.757899][ T5741] usb usb1-port1: unable to enumerate USB device [ 1956.772982][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1956.815684][ T8263] FAULT_INJECTION: forcing a failure. [ 1956.815684][ T8263] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 1956.864806][ T8263] CPU: 1 UID: 0 PID: 8263 Comm: syz.1.11232 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.864829][ T8263] Tainted: [L]=SOFTLOCKUP [ 1956.864834][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1956.864841][ T8263] Call Trace: [ 1956.864847][ T8263] [ 1956.864854][ T8263] dump_stack_lvl+0xe8/0x150 [ 1956.864878][ T8263] should_fail_ex+0x40c/0x560 [ 1956.864896][ T8263] iommufd_get_object+0x78/0x4b0 [ 1956.864999][ T8263] ? __pfx_iommufd_get_object+0x10/0x10 [ 1956.865018][ T8263] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1956.865040][ T8263] iommufd_hwpt_alloc+0x275/0xc20 [ 1956.865058][ T8263] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 1956.865079][ T8263] iommufd_fops_ioctl+0x465/0x600 [ 1956.865101][ T8263] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1956.865122][ T8263] ? __fget_files+0x2a/0x420 [ 1956.865143][ T8263] ? __fget_files+0x2a/0x420 [ 1956.865159][ T8263] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1956.865174][ T8263] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1956.865195][ T8263] __se_sys_ioctl+0xfc/0x170 [ 1956.865207][ T8263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.865220][ T8263] do_syscall_64+0x174/0x580 [ 1956.865237][ T8263] ? trace_irq_disable+0x3b/0x140 [ 1956.865252][ T8263] ? clear_bhb_loop+0x40/0x90 [ 1956.865267][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.865279][ T8263] RIP: 0033:0x7f7c2539de59 [ 1956.865292][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1956.865303][ T8263] RSP: 002b:00007f7c235f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1956.865318][ T8263] RAX: ffffffffffffffda RBX: 00007f7c25625fa0 RCX: 00007f7c2539de59 [ 1956.865328][ T8263] RDX: 0000200000000200 RSI: 0000000000003b89 RDI: 0000000000000003 [ 1956.865336][ T8263] RBP: 00007f7c235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.865344][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.865351][ T8263] R13: 00007f7c25626038 R14: 00007f7c25625fa0 R15: 00007f7c2574fa48 [ 1956.865370][ T8263] [ 1957.128829][T30557] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1957.470599][T30557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1957.482036][T30557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1957.492050][T30557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1957.503354][T30557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1957.557263][ T5741] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1957.658997][T30557] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1957.692788][T30557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.702375][T30557] usb 3-1: Product: syz [ 1957.707647][T30557] usb 3-1: Manufacturer: syz [ 1957.712319][T30557] usb 3-1: SerialNumber: syz [ 1957.720980][T30557] usb 3-1: config 0 descriptor?? [ 1957.771348][ T5741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.838491][ T5741] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1957.894032][ T5741] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fe4, bcdDevice= 0.40 [ 1957.909433][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.938997][T30557] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1957.961086][ T5741] usb 4-1: Product: syz [ 1957.979316][ T5741] usb 4-1: Manufacturer: syz [ 1957.994204][ T5741] usb 4-1: SerialNumber: syz [ 1958.038820][ T5712] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1958.091338][ T8279] could not allocate digest TFM handle sha1-generic [ 1958.146897][ T9] usb 3-1: USB disconnect, device number 2 [ 1958.233871][ T5712] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1958.246091][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.276127][ T5712] usb 2-1: Product: syz [ 1958.292027][ T5712] usb 2-1: Manufacturer: syz [ 1958.306845][ T5712] usb 2-1: SerialNumber: syz [ 1958.338710][ T5712] usb 2-1: config 0 descriptor?? [ 1958.351230][ T5712] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 065 [ 1958.497752][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1958.543820][ T5741] usb 4-1: USB disconnect, device number 127 [ 1958.657470][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1958.674474][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1958.703618][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.720133][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1958.745193][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1958.758815][ T5712] (null): failure reading functionality [ 1958.776263][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.799302][ T9] usb 3-1: Product: syz [ 1958.808893][ T5712] i2c i2c-1: connected i2c-tiny-usb device [ 1958.814943][ T9] usb 3-1: Manufacturer: syz [ 1958.820184][ T9] usb 3-1: SerialNumber: syz [ 1959.069669][ T9] usb 3-1: 0:1 : does not exist [ 1959.084245][ T9] usb 3-1: unit 5 not found! [ 1959.094644][ T9] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1959.104781][ T9] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1959.116223][ T9] usb 3-1: [2] FU [Headset Playback Volume] ch = 1, val = 0/1/1 [ 1959.134331][ T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1959.231180][ T8291] netlink: 'syz.0.11239': attribute type 1 has an invalid length. [ 1959.295434][ T9] usb 3-1: USB disconnect, device number 3 [ 1959.300649][ T8294] netlink: 'syz.3.11240': attribute type 1 has an invalid length. [ 1959.331041][ T8295] fuse: Bad value for 'fd' [ 1959.355484][ T8296] fuse: Bad value for 'fd' [ 1959.362450][ T8296] FAULT_INJECTION: forcing a failure. [ 1959.362450][ T8296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1959.381330][ T8296] CPU: 0 UID: 0 PID: 8296 Comm: syz.3.11240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1959.381364][ T8296] Tainted: [L]=SOFTLOCKUP [ 1959.381372][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1959.381384][ T8296] Call Trace: [ 1959.381393][ T8296] [ 1959.381402][ T8296] dump_stack_lvl+0xe8/0x150 [ 1959.381436][ T8296] should_fail_ex+0x40c/0x560 [ 1959.381463][ T8296] _copy_from_user+0x2d/0xb0 [ 1959.381490][ T8296] snd_seq_oss_write+0x154/0x950 [ 1959.381584][ T8296] ? get_pid_task+0x20/0x1f0 [ 1959.381613][ T8296] ? get_pid_task+0x20/0x1f0 [ 1959.381648][ T8296] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1959.381668][ T8296] ? __lock_acquire+0x683/0x2cf0 [ 1959.381699][ T8296] ? apparmor_file_permission+0x1f4/0x300 [ 1959.381727][ T8296] ? security_file_permission+0x75/0x260 [ 1959.381757][ T8296] odev_write+0x5a/0x80 [ 1959.381776][ T8296] ? __pfx_odev_write+0x10/0x10 [ 1959.381795][ T8296] vfs_write+0x296/0xba0 [ 1959.381834][ T8296] ? __pfx_vfs_write+0x10/0x10 [ 1959.381861][ T8296] ? __fget_files+0x2a/0x420 [ 1959.381889][ T8296] ? __fget_files+0x2a/0x420 [ 1959.381912][ T8296] ? __fget_files+0x3a2/0x420 [ 1959.381936][ T8296] ? __fget_files+0x2a/0x420 [ 1959.381969][ T8296] ksys_write+0x150/0x270 [ 1959.382002][ T8296] ? __pfx_ksys_write+0x10/0x10 [ 1959.382039][ T8296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.382063][ T8296] do_syscall_64+0x174/0x580 [ 1959.382087][ T8296] ? trace_irq_disable+0x3b/0x140 [ 1959.382110][ T8296] ? clear_bhb_loop+0x40/0x90 [ 1959.382117][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1959.382134][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.382154][ T8296] RIP: 0033:0x7f207839de59 [ 1959.382172][ T8296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1959.382194][ T8296] RSP: 002b:00007f207923d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1959.382214][ T8296] RAX: ffffffffffffffda RBX: 00007f2078626090 RCX: 00007f207839de59 [ 1959.382227][ T8296] RDX: 0000000000000233 RSI: 0000200000000080 RDI: 0000000000000008 [ 1959.382240][ T8296] RBP: 00007f207923d090 R08: 0000000000000000 R09: 0000000000000000 [ 1959.382251][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1959.382262][ T8296] R13: 00007f2078626128 R14: 00007f2078626090 R15: 00007f207874fa48 [ 1959.382292][ T8296] [ 1959.663228][ T8291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1959.715465][ T8299] netlink: 'syz.5.11241': attribute type 1 has an invalid length. [ 1959.805078][ T8300] fuse: Bad value for 'fd' [ 1959.820990][ T8294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1960.052671][ T8308] FAULT_INJECTION: forcing a failure. [ 1960.052671][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1960.081718][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.1.11245 Tainted: G L syzkaller #0 PREEMPT(full) [ 1960.081754][ T8308] Tainted: [L]=SOFTLOCKUP [ 1960.081762][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1960.081775][ T8308] Call Trace: [ 1960.081783][ T8308] [ 1960.081793][ T8308] dump_stack_lvl+0xe8/0x150 [ 1960.081833][ T8308] should_fail_ex+0x40c/0x560 [ 1960.081865][ T8308] _copy_to_user+0x31/0xb0 [ 1960.081898][ T8308] simple_read_from_buffer+0xe1/0x170 [ 1960.081933][ T8308] proc_fail_nth_read+0x1bb/0x230 [ 1960.081966][ T8308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1960.081999][ T8308] ? rw_verify_area+0x24a/0x4c0 [ 1960.082031][ T8308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1960.082058][ T8308] vfs_read+0x213/0xa80 [ 1960.082094][ T8308] ? __pfx___mutex_lock+0x10/0x10 [ 1960.082123][ T8308] ? __pfx_vfs_read+0x10/0x10 [ 1960.082154][ T8308] ? __fget_files+0x2a/0x420 [ 1960.082185][ T8308] ? __fget_files+0x3a2/0x420 [ 1960.082210][ T8308] ? __fget_files+0x2a/0x420 [ 1960.082246][ T8308] ksys_read+0x150/0x270 [ 1960.082280][ T8308] ? __pfx_ksys_read+0x10/0x10 [ 1960.082310][ T8308] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 1960.082340][ T8308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.082364][ T8308] do_syscall_64+0x174/0x580 [ 1960.082391][ T8308] ? trace_irq_disable+0x3b/0x140 [ 1960.082417][ T8308] ? clear_bhb_loop+0x40/0x90 [ 1960.082443][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.082464][ T8308] RIP: 0033:0x7f7c2535e68e [ 1960.082485][ T8308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1960.082503][ T8308] RSP: 002b:00007f7c235f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1960.082527][ T8308] RAX: ffffffffffffffda RBX: 00007f7c235f66c0 RCX: 00007f7c2535e68e [ 1960.082543][ T8308] RDX: 000000000000000f RSI: 00007f7c235f60a0 RDI: 0000000000000006 [ 1960.082556][ T8308] RBP: 00007f7c235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.082568][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.082582][ T8308] R13: 00007f7c25626038 R14: 00007f7c25625fa0 R15: 00007f7c2574fa48 [ 1960.082616][ T8308] [ 1960.567272][ T5712] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1960.720238][ T5712] usb 1-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 1960.744220][ T5712] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 231, using maximum allowed: 30 [ 1960.762787][ T8322] netlink: 766 bytes leftover after parsing attributes in process `syz.2.11250'. [ 1960.772614][ T5712] usb 1-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 1960.799212][ T5712] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1960.820386][ T5712] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 1960.842770][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.874611][ T5712] usb 1-1: config 0 descriptor?? [ 1961.127355][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1961.290328][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.325538][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1961.356316][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1961.388018][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1961.395702][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1961.425043][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.476610][ T9] usb 3-1: SerialNumber: syz [ 1961.782412][ T9] usb 3-1: 0:2 : does not exist [ 1962.002632][ T9] usb 3-1: USB disconnect, device number 4 [ 1962.116267][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1962.140400][ T8345] FAULT_INJECTION: forcing a failure. [ 1962.140400][ T8345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1962.208912][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.5.11256 Tainted: G L syzkaller #0 PREEMPT(full) [ 1962.208946][ T8345] Tainted: [L]=SOFTLOCKUP [ 1962.208953][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1962.208966][ T8345] Call Trace: [ 1962.208974][ T8345] [ 1962.208981][ T8345] dump_stack_lvl+0xe8/0x150 [ 1962.209005][ T8345] should_fail_ex+0x40c/0x560 [ 1962.209024][ T8345] _copy_from_user+0x2d/0xb0 [ 1962.209052][ T8345] video_usercopy+0x359/0x1430 [ 1962.209081][ T8345] ? hook_file_ioctl+0x1f0/0x5f0 [ 1962.209111][ T8345] ? __pfx___video_do_ioctl+0x10/0x10 [ 1962.209131][ T8345] ? __pfx_video_usercopy+0x10/0x10 [ 1962.209150][ T8345] ? __fget_files+0x2a/0x420 [ 1962.209174][ T8345] ? __fget_files+0x2a/0x420 [ 1962.209196][ T8345] ? __fget_files+0x3a2/0x420 [ 1962.209224][ T8345] v4l2_ioctl+0x18d/0x1e0 [ 1962.209245][ T8345] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1962.209265][ T8345] __se_sys_ioctl+0xfc/0x170 [ 1962.209281][ T8345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.209295][ T8345] do_syscall_64+0x174/0x580 [ 1962.209311][ T8345] ? trace_irq_disable+0x3b/0x140 [ 1962.209328][ T8345] ? clear_bhb_loop+0x40/0x90 [ 1962.209353][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.209373][ T8345] RIP: 0033:0x7f64e5d9de59 [ 1962.209391][ T8345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1962.209408][ T8345] RSP: 002b:00007f64e6c10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1962.209428][ T8345] RAX: ffffffffffffffda RBX: 00007f64e6025fa0 RCX: 00007f64e5d9de59 [ 1962.209438][ T8345] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1962.209446][ T8345] RBP: 00007f64e6c10090 R08: 0000000000000000 R09: 0000000000000000 [ 1962.209454][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1962.209461][ T8345] R13: 00007f64e6026038 R14: 00007f64e6025fa0 R15: 00007f64e614fa48 [ 1962.209484][ T8345] [ 1963.337801][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11261'. [ 1964.208601][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1964.254007][ T5712] usb 1-1: string descriptor 0 read error: -71 [ 1964.316183][ T5712] usb 1-1: USB disconnect, device number 13 [ 1964.390450][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1964.409254][ T9] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1964.436821][ T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1964.464428][ T9] usb 6-1: config 220 has no interface number 2 [ 1964.483226][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1964.523534][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1964.541913][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1964.557363][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1964.579582][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1964.594671][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.613093][ T9] usb 6-1: Product: syz [ 1964.625498][ T9] usb 6-1: Manufacturer: syz [ 1964.639874][ T9] usb 6-1: SerialNumber: syz [ 1964.932510][ T8363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1965.049409][ T5712] usb 2-1: USB disconnect, device number 65 [ 1965.382364][ T9] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1965.402084][ T9] uvcvideo 6-1:220.0: No valid video chain found. [ 1965.432519][ T9] usb 6-1: selecting invalid altsetting 0 [ 1965.471888][ T9] usb 6-1: selecting invalid altsetting 0 [ 1965.486420][ T9] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1965.541875][ T9] usb 6-1: USB disconnect, device number 3 [ 1965.797305][T19656] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1965.983170][T19656] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1966.161710][T19656] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.213705][T19656] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1966.250876][T19656] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1966.270403][T19656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.301819][T19656] usb 3-1: Product: syz [ 1966.318640][T19656] usb 3-1: Manufacturer: syz [ 1966.345218][T19656] usb 3-1: SerialNumber: syz [ 1966.431844][T19656] usb 3-1: selecting invalid altsetting 1 [ 1966.452266][T19656] usb 3-1: unit 6 not found! [ 1966.759725][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11272'. [ 1967.077385][ T5741] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1967.217708][ T5712] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1967.250079][ T5741] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1967.272975][ T5741] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1967.327489][ T5741] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1967.366826][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.390875][ T5712] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 1967.424672][ T5712] usb 6-1: config 127 has no interface number 0 [ 1967.434795][ T5712] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1967.460048][ T5712] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1967.480303][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.498855][ T5712] usb 6-1: Product: syz [ 1967.505211][ T8403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1967.532773][ T5712] usb 6-1: Manufacturer: syz [ 1967.556198][ T5712] usb 6-1: SerialNumber: syz [ 1967.584819][ T8406] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1968.229639][ T5712] asix 6-1:127.57: probe with driver asix failed with error -71 [ 1968.269627][ T5712] usb 6-1: USB disconnect, device number 4 [ 1968.994697][T19656] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1969.009565][ T5741] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1969.058252][T19656] usb 3-1: USB disconnect, device number 5 [ 1969.225999][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1969.373610][ T5741] usb 2-1: USB disconnect, device number 66 [ 1970.017314][ T8446] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1970.218381][ T8196] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1970.387986][ T5741] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1970.405817][ T8196] usb 3-1: config 34 has an invalid interface number: 167 but max is 0 [ 1970.427898][ T8196] usb 3-1: config 34 has no interface number 0 [ 1970.445652][ T8196] usb 3-1: config 34 interface 167 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1970.481882][ T8196] usb 3-1: config 34 interface 167 has no altsetting 0 [ 1970.502610][ T8196] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54 [ 1970.529300][ T8196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.555022][ T8196] usb 3-1: Product: syz [ 1970.585166][ T8196] usb 3-1: Manufacturer: syz [ 1970.597886][ T8196] usb 3-1: SerialNumber: syz [ 1970.626322][ T8451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1970.664879][ T5741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.713443][ T5741] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1970.749688][ T5741] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x55, changing to 0x5 [ 1970.789280][ T5741] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1970.824170][ T5741] usb 4-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 1970.834194][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.843431][ T5741] usb 4-1: Product: syz [ 1970.848237][ T5741] usb 4-1: Manufacturer: syz [ 1970.852904][ T5741] usb 4-1: SerialNumber: syz [ 1971.084855][ T8196] usb 3-1: USB disconnect, device number 6 [ 1971.635018][ T8469] FAULT_INJECTION: forcing a failure. [ 1971.635018][ T8469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1971.650446][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.1.11289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1971.650479][ T8469] Tainted: [L]=SOFTLOCKUP [ 1971.650486][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1971.650498][ T8469] Call Trace: [ 1971.650506][ T8469] [ 1971.650514][ T8469] dump_stack_lvl+0xe8/0x150 [ 1971.650539][ T8469] should_fail_ex+0x40c/0x560 [ 1971.650571][ T8469] _copy_from_user+0x2d/0xb0 [ 1971.650610][ T8469] binder_ioctl_write_read+0x161/0xa940 [ 1971.650699][ T8469] ? __kernel_text_address+0xd/0x30 [ 1971.650729][ T8469] ? unwind_get_return_address+0x4d/0x90 [ 1971.650749][ T8469] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1971.650774][ T8469] ? arch_stack_walk+0xfb/0x150 [ 1971.650813][ T8469] ? stack_trace_save+0xa9/0x100 [ 1971.650827][ T8469] ? __pfx_stack_trace_save+0x10/0x10 [ 1971.650843][ T8469] ? stack_depot_save_flags+0x33/0x800 [ 1971.650866][ T8469] ? kasan_save_track+0x4f/0x80 [ 1971.650889][ T8469] ? kasan_save_track+0x3e/0x80 [ 1971.650911][ T8469] ? __kasan_kmalloc+0x93/0xb0 [ 1971.650934][ T8469] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1971.650963][ T8469] ? binder_get_thread+0x1c6/0x6d0 [ 1971.650977][ T8469] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1971.650992][ T8469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.651019][ T8469] ? __lock_acquire+0x683/0x2cf0 [ 1971.651062][ T8469] ? binder_debug+0x155/0x1d0 [ 1971.651091][ T8469] ? __pfx_binder_debug+0x10/0x10 [ 1971.651110][ T8469] ? do_raw_spin_lock+0x12b/0x2f0 [ 1971.651133][ T8469] ? _raw_spin_unlock+0x28/0x50 [ 1971.651147][ T8469] ? binder_get_thread+0x59b/0x6d0 [ 1971.651168][ T8469] binder_ioctl+0x41d/0x1b00 [ 1971.651217][ T8469] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1971.651247][ T8469] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1971.651271][ T8469] ? do_vfs_ioctl+0x116f/0x1530 [ 1971.651284][ T8469] ? __pfx_binder_ioctl+0x10/0x10 [ 1971.651299][ T8469] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1971.651325][ T8469] ? hook_file_ioctl+0x1f0/0x5f0 [ 1971.651382][ T8469] ? __fget_files+0x2a/0x420 [ 1971.651409][ T8469] ? __fget_files+0x2a/0x420 [ 1971.651425][ T8469] ? __fget_files+0x3a2/0x420 [ 1971.651439][ T8469] ? __fget_files+0x2a/0x420 [ 1971.651456][ T8469] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1971.651476][ T8469] ? __pfx_binder_ioctl+0x10/0x10 [ 1971.651501][ T8469] __se_sys_ioctl+0xfc/0x170 [ 1971.651520][ T8469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.651541][ T8469] do_syscall_64+0x174/0x580 [ 1971.651567][ T8469] ? clear_bhb_loop+0x40/0x90 [ 1971.651589][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.651602][ T8469] RIP: 0033:0x7f7c2539de59 [ 1971.651616][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1971.651633][ T8469] RSP: 002b:00007f7c235d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1971.651656][ T8469] RAX: ffffffffffffffda RBX: 00007f7c25626090 RCX: 00007f7c2539de59 [ 1971.651670][ T8469] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1971.651682][ T8469] RBP: 00007f7c235d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1971.651695][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1971.651707][ T8469] R13: 00007f7c25626128 R14: 00007f7c25626090 R15: 00007f7c2574fa48 [ 1971.651729][ T8469] [ 1971.653007][ T8469] binder: 8467:8469 ioctl c0306201 2000000003c0 returned -14 [ 1972.345964][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11292'. [ 1972.503052][ T8479] netlink: 'syz.5.11293': attribute type 1 has an invalid length. [ 1972.542017][ T8479] FAULT_INJECTION: forcing a failure. [ 1972.542017][ T8479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1972.589443][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: syz.5.11293 Tainted: G L syzkaller #0 PREEMPT(full) [ 1972.589476][ T8479] Tainted: [L]=SOFTLOCKUP [ 1972.589485][ T8479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1972.589498][ T8479] Call Trace: [ 1972.589507][ T8479] [ 1972.589516][ T8479] dump_stack_lvl+0xe8/0x150 [ 1972.589555][ T8479] should_fail_ex+0x40c/0x560 [ 1972.589586][ T8479] _copy_from_iter+0x1d3/0x1660 [ 1972.589612][ T8479] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 1972.589639][ T8479] ? rcu_is_watching+0x15/0xb0 [ 1972.589669][ T8479] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1972.589696][ T8479] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1972.589722][ T8479] ? __pfx__copy_from_iter+0x10/0x10 [ 1972.589748][ T8479] ? __alloc_skb+0x276/0x7a0 [ 1972.589774][ T8479] ? __alloc_skb+0x276/0x7a0 [ 1972.589806][ T8479] ? netlink_sendmsg+0x650/0xb40 [ 1972.589826][ T8479] ? skb_put+0x112/0x210 [ 1972.589858][ T8479] netlink_sendmsg+0x6c0/0xb40 [ 1972.589908][ T8479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1972.589932][ T8479] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1972.589959][ T8479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1972.589978][ T8479] sock_sendmsg_nosec+0x13a/0x180 [ 1972.590006][ T8479] ____sys_sendmsg+0x54e/0x850 [ 1972.590044][ T8479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1972.590083][ T8479] ? import_iovec+0x73/0xa0 [ 1972.590120][ T8479] ___sys_sendmsg+0x2a5/0x360 [ 1972.590150][ T8479] ? __lock_acquire+0x683/0x2cf0 [ 1972.590183][ T8479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1972.590249][ T8479] ? __fget_files+0x2a/0x420 [ 1972.590276][ T8479] ? __fget_files+0x3a2/0x420 [ 1972.590312][ T8479] __x64_sys_sendmsg+0x1b1/0x290 [ 1972.590343][ T8479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1972.590397][ T8479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.590421][ T8479] do_syscall_64+0x174/0x580 [ 1972.590450][ T8479] ? trace_irq_disable+0x3b/0x140 [ 1972.590476][ T8479] ? clear_bhb_loop+0x40/0x90 [ 1972.590500][ T8479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.590521][ T8479] RIP: 0033:0x7f64e5d9de59 [ 1972.590541][ T8479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1972.590560][ T8479] RSP: 002b:00007f64e6c10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1972.590583][ T8479] RAX: ffffffffffffffda RBX: 00007f64e6025fa0 RCX: 00007f64e5d9de59 [ 1972.590599][ T8479] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1972.590613][ T8479] RBP: 00007f64e6c10090 R08: 0000000000000000 R09: 0000000000000000 [ 1972.590626][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1972.590638][ T8479] R13: 00007f64e6026038 R14: 00007f64e6025fa0 R15: 00007f64e614fa48 [ 1972.590671][ T8479] [ 1973.807045][ T5741] usb 4-1: unit 4 not found! [ 1973.832365][ T5741] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 1973.953423][ T8495] net_ratelimit: 10 callbacks suppressed [ 1973.965281][ T8495] netlink: zone id is out of range [ 1973.975395][ T8495] netlink: zone id is out of range [ 1973.988625][ T5712] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1973.996347][ T8495] netlink: zone id is out of range [ 1974.003800][ T8495] netlink: zone id is out of range [ 1974.010385][ T8495] netlink: zone id is out of range [ 1974.018387][ T8495] netlink: zone id is out of range [ 1974.025816][ T8495] netlink: zone id is out of range [ 1974.032376][ T8495] netlink: zone id is out of range [ 1974.047377][ T8495] netlink: zone id is out of range [ 1974.054036][ T5741] usb 4-1: USB disconnect, device number 2 [ 1974.061849][ T8495] netlink: zone id is out of range [ 1974.153902][ T5712] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1974.170649][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1974.204548][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.235549][ T5712] usb 2-1: config 0 descriptor?? [ 1974.687274][ T5712] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1974.838363][ T8493] batman_adv: batadv0: Adding interface: macvtap1 [ 1974.846502][ T8493] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.907956][ T8493] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1974.911389][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.946263][ T8493] batman_adv: batadv0: Removing interface: macvtap1 [ 1974.960601][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.012696][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.042394][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.427559][ T8196] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1975.599559][ T8196] usb 4-1: too many configurations: 232, using maximum allowed: 8 [ 1975.632761][ T8196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1975.645896][ T8514] FAULT_INJECTION: forcing a failure. [ 1975.645896][ T8514] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.670906][ T8196] usb 4-1: can't read configurations, error -61 [ 1975.702878][ T8514] CPU: 1 UID: 0 PID: 8514 Comm: syz.2.11303 Tainted: G L syzkaller #0 PREEMPT(full) [ 1975.702914][ T8514] Tainted: [L]=SOFTLOCKUP [ 1975.702923][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1975.702934][ T8514] Call Trace: [ 1975.702943][ T8514] [ 1975.702953][ T8514] dump_stack_lvl+0xe8/0x150 [ 1975.702989][ T8514] should_fail_ex+0x40c/0x560 [ 1975.703018][ T8514] should_failslab+0xa8/0x100 [ 1975.703048][ T8514] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1975.703073][ T8514] ? skb_clone+0x212/0x3a0 [ 1975.703089][ T8514] ? skb_clone+0x212/0x3a0 [ 1975.703103][ T8514] skb_clone+0x212/0x3a0 [ 1975.703117][ T8514] __netlink_deliver_tap+0x413/0x860 [ 1975.703154][ T8514] ? netlink_deliver_tap+0x2e/0x1b0 [ 1975.703185][ T8514] netlink_deliver_tap+0x19c/0x1b0 [ 1975.703215][ T8514] netlink_unicast+0x77f/0x940 [ 1975.703247][ T8514] netlink_sendmsg+0x813/0xb40 [ 1975.703264][ T8514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1975.703279][ T8514] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1975.703302][ T8514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1975.703328][ T8514] sock_sendmsg_nosec+0x13a/0x180 [ 1975.703355][ T8514] __sys_sendto+0x408/0x5a0 [ 1975.703381][ T8514] ? ksys_write+0x1e6/0x270 [ 1975.703404][ T8514] ? __pfx___sys_sendto+0x10/0x10 [ 1975.703418][ T8514] ? __mutex_unlock_slowpath+0x731/0x900 [ 1975.703463][ T8514] ? __pfx_ksys_write+0x10/0x10 [ 1975.703507][ T8514] __x64_sys_sendto+0xde/0x100 [ 1975.703540][ T8514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.703553][ T8514] do_syscall_64+0x174/0x580 [ 1975.703569][ T8514] ? trace_irq_disable+0x3b/0x140 [ 1975.703585][ T8514] ? clear_bhb_loop+0x40/0x90 [ 1975.703607][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.703628][ T8514] RIP: 0033:0x7fe277d5e68e [ 1975.703646][ T8514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1975.703663][ T8514] RSP: 002b:00007fe278cb0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1975.703686][ T8514] RAX: ffffffffffffffda RBX: 00007fe278cb26c0 RCX: 00007fe277d5e68e [ 1975.703697][ T8514] RDX: 0000000000000024 RSI: 00007fe278cb1000 RDI: 0000000000000003 [ 1975.703705][ T8514] RBP: 0000000000000000 R08: 00007fe278cb0f04 R09: 000000000000000c [ 1975.703713][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1975.703720][ T8514] R13: 00007fe278cb0f58 R14: 00007fe278cb1000 R15: 0000000000000000 [ 1975.703739][ T8514] [ 1975.957514][ T8196] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1976.198122][ T8196] usb 4-1: too many configurations: 232, using maximum allowed: 8 [ 1976.220585][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1976.233095][ T8516] FAULT_INJECTION: forcing a failure. [ 1976.233095][ T8516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1976.248882][ T8196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1976.267758][ T8196] usb 4-1: can't read configurations, error -61 [ 1976.274269][ T5712] usb 1-1: no configurations [ 1976.282578][ T5712] usb 1-1: can't read configurations, error -22 [ 1976.292710][ T8196] usb usb4-port1: attempt power cycle [ 1976.297998][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.2.11304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1976.298031][ T8516] Tainted: [L]=SOFTLOCKUP [ 1976.298038][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1976.298049][ T8516] Call Trace: [ 1976.298056][ T8516] [ 1976.298065][ T8516] dump_stack_lvl+0xe8/0x150 [ 1976.298100][ T8516] should_fail_ex+0x40c/0x560 [ 1976.298126][ T8516] _copy_from_iter+0x1d3/0x1660 [ 1976.298148][ T8516] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 1976.298173][ T8516] ? rcu_is_watching+0x15/0xb0 [ 1976.298202][ T8516] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1976.298227][ T8516] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1976.298250][ T8516] ? __pfx__copy_from_iter+0x10/0x10 [ 1976.298274][ T8516] ? __alloc_skb+0x276/0x7a0 [ 1976.298299][ T8516] ? __alloc_skb+0x276/0x7a0 [ 1976.298332][ T8516] ? netlink_sendmsg+0x650/0xb40 [ 1976.298353][ T8516] ? skb_put+0x112/0x210 [ 1976.298383][ T8516] netlink_sendmsg+0x6c0/0xb40 [ 1976.298412][ T8516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1976.298447][ T8516] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1976.298474][ T8516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1976.298493][ T8516] sock_sendmsg_nosec+0x13a/0x180 [ 1976.298520][ T8516] ____sys_sendmsg+0x54e/0x850 [ 1976.298559][ T8516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1976.298599][ T8516] ? import_iovec+0x73/0xa0 [ 1976.298630][ T8516] ___sys_sendmsg+0x2a5/0x360 [ 1976.298659][ T8516] ? __lock_acquire+0x683/0x2cf0 [ 1976.298698][ T8516] ? __pfx____sys_sendmsg+0x10/0x10 [ 1976.298773][ T8516] ? __fget_files+0x2a/0x420 [ 1976.298796][ T8516] ? __fget_files+0x3a2/0x420 [ 1976.298828][ T8516] __x64_sys_sendmsg+0x1b1/0x290 [ 1976.298857][ T8516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1976.298900][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.298921][ T8516] do_syscall_64+0x174/0x580 [ 1976.298946][ T8516] ? trace_irq_disable+0x3b/0x140 [ 1976.298969][ T8516] ? clear_bhb_loop+0x40/0x90 [ 1976.298991][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.299011][ T8516] RIP: 0033:0x7fe277d9de59 [ 1976.299029][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.299044][ T8516] RSP: 002b:00007fe278cb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1976.299066][ T8516] RAX: ffffffffffffffda RBX: 00007fe278025fa0 RCX: 00007fe277d9de59 [ 1976.299080][ T8516] RDX: 0000000024004850 RSI: 0000200000000300 RDI: 0000000000000003 [ 1976.299093][ T8516] RBP: 00007fe278cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.299104][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.299116][ T8516] R13: 00007fe278026038 R14: 00007fe278025fa0 R15: 00007fe27814fa48 [ 1976.299145][ T8516] [ 1976.322458][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.583900][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.649181][T30557] usb 2-1: USB disconnect, device number 67 [ 1976.868411][ T8527] FAULT_INJECTION: forcing a failure. [ 1976.868411][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.882738][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.0.11309 Tainted: G L syzkaller #0 PREEMPT(full) [ 1976.882773][ T8527] Tainted: [L]=SOFTLOCKUP [ 1976.882781][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1976.882794][ T8527] Call Trace: [ 1976.882804][ T8527] [ 1976.882813][ T8527] dump_stack_lvl+0xe8/0x150 [ 1976.882852][ T8527] should_fail_ex+0x40c/0x560 [ 1976.882882][ T8527] should_failslab+0xa8/0x100 [ 1976.882915][ T8527] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1976.882941][ T8527] ? skb_clone+0x212/0x3a0 [ 1976.882959][ T8527] ? skb_clone+0x212/0x3a0 [ 1976.882986][ T8527] skb_clone+0x212/0x3a0 [ 1976.883010][ T8527] __netlink_deliver_tap+0x413/0x860 [ 1976.883055][ T8527] ? netlink_deliver_tap+0x2e/0x1b0 [ 1976.883089][ T8527] netlink_deliver_tap+0x19c/0x1b0 [ 1976.883122][ T8527] netlink_unicast+0x77f/0x940 [ 1976.883160][ T8527] netlink_sendmsg+0x813/0xb40 [ 1976.883189][ T8527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1976.883212][ T8527] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1976.883238][ T8527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1976.883256][ T8527] sock_sendmsg_nosec+0x13a/0x180 [ 1976.883281][ T8527] ____sys_sendmsg+0x54e/0x850 [ 1976.883317][ T8527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1976.883355][ T8527] ? import_iovec+0x73/0xa0 [ 1976.883386][ T8527] ___sys_sendmsg+0x2a5/0x360 [ 1976.883414][ T8527] ? __lock_acquire+0x683/0x2cf0 [ 1976.883454][ T8527] ? __pfx____sys_sendmsg+0x10/0x10 [ 1976.883520][ T8527] ? __fget_files+0x2a/0x420 [ 1976.883544][ T8527] ? __fget_files+0x3a2/0x420 [ 1976.883581][ T8527] __x64_sys_sendmsg+0x1b1/0x290 [ 1976.883612][ T8527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1976.883659][ T8527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.883681][ T8527] do_syscall_64+0x174/0x580 [ 1976.883707][ T8527] ? trace_irq_disable+0x3b/0x140 [ 1976.883732][ T8527] ? clear_bhb_loop+0x40/0x90 [ 1976.883757][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.883777][ T8527] RIP: 0033:0x7fb74c59de59 [ 1976.883796][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.883814][ T8527] RSP: 002b:00007fb74d41d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1976.883836][ T8527] RAX: ffffffffffffffda RBX: 00007fb74c825fa0 RCX: 00007fb74c59de59 [ 1976.883851][ T8527] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1976.883864][ T8527] RBP: 00007fb74d41d090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.883877][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.883889][ T8527] R13: 00007fb74c826038 R14: 00007fb74c825fa0 R15: 00007fb74c94fa48 [ 1976.883921][ T8527] [ 1976.884528][ T8525] netlink: 'syz.2.11308': attribute type 1 has an invalid length. [ 1977.039396][ T8528] vlan2: entered allmulticast mode [ 1977.043172][ T8196] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1977.087625][ T8528] veth0_to_bond: entered allmulticast mode [ 1977.128491][ T8196] usb 4-1: too many configurations: 232, using maximum allowed: 8 [ 1977.247302][T30557] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1977.260432][ T8196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1977.272737][ T8196] usb 4-1: can't read configurations, error -61 [ 1977.408119][T30557] usb 2-1: Using ep0 maxpacket: 8 [ 1977.415615][T30557] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1977.426647][T30557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.447444][ T8196] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1977.479229][ T8196] usb 4-1: too many configurations: 232, using maximum allowed: 8 [ 1977.503080][ T8196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1977.525127][T30557] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1977.535645][ T8196] usb 4-1: can't read configurations, error -61 [ 1977.553724][T30557] pvrusb2: ********** [ 1977.564422][ T8196] usb usb4-port1: unable to enumerate USB device [ 1977.571675][T30557] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1977.638896][T30557] pvrusb2: Important functionality might not be entirely working. [ 1977.694921][T30557] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1977.749493][T30557] pvrusb2: ********** [ 1977.765816][ T8544] FAULT_INJECTION: forcing a failure. [ 1977.765816][ T8544] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.781220][ T2366] pvrusb2: Invalid write control endpoint [ 1977.817359][ T8544] CPU: 1 UID: 0 PID: 8544 Comm: syz.5.11313 Tainted: G L syzkaller #0 PREEMPT(full) [ 1977.817394][ T8544] Tainted: [L]=SOFTLOCKUP [ 1977.817410][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1977.817422][ T8544] Call Trace: [ 1977.817431][ T8544] [ 1977.817441][ T8544] dump_stack_lvl+0xe8/0x150 [ 1977.817477][ T8544] should_fail_ex+0x40c/0x560 [ 1977.817506][ T8544] should_failslab+0xa8/0x100 [ 1977.817539][ T8544] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1977.817569][ T8544] ? dh_data_from_key+0x15e/0x280 [ 1977.817618][ T8544] ? dh_data_from_key+0x15e/0x280 [ 1977.817648][ T8544] kmemdup_noprof+0x2b/0x70 [ 1977.817678][ T8544] dh_data_from_key+0x15e/0x280 [ 1977.817703][ T8544] __keyctl_dh_compute+0x3a7/0xd10 [ 1977.817731][ T8544] ? __lock_acquire+0x683/0x2cf0 [ 1977.817761][ T8544] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1977.817816][ T8544] ? get_pid_task+0x20/0x1f0 [ 1977.817843][ T8544] ? get_pid_task+0x20/0x1f0 [ 1977.817869][ T8544] keyctl_dh_compute+0x124/0x180 [ 1977.817894][ T8544] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1977.817935][ T8544] __se_sys_keyctl+0x44c/0x9d0 [ 1977.818020][ T8544] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1977.818046][ T8544] ? __mutex_unlock_slowpath+0x731/0x900 [ 1977.818080][ T8544] ? __fget_files+0x2a/0x420 [ 1977.818107][ T8544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1977.818135][ T8544] ? __fget_files+0x3a2/0x420 [ 1977.818168][ T8544] ? fput+0xa0/0xd0 [ 1977.818193][ T8544] ? ksys_write+0x242/0x270 [ 1977.818224][ T8544] ? __pfx_ksys_write+0x10/0x10 [ 1977.818259][ T8544] ? __x64_sys_keyctl+0x20/0xc0 [ 1977.818286][ T8544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1977.818306][ T8544] do_syscall_64+0x174/0x580 [ 1977.818331][ T8544] ? trace_irq_disable+0x3b/0x140 [ 1977.818356][ T8544] ? clear_bhb_loop+0x40/0x90 [ 1977.818384][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1977.818413][ T8544] RIP: 0033:0x7f64e5d9de59 [ 1977.818433][ T8544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1977.818449][ T8544] RSP: 002b:00007f64e6c10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1977.818472][ T8544] RAX: ffffffffffffffda RBX: 00007f64e6025fa0 RCX: 00007f64e5d9de59 [ 1977.818487][ T8544] RDX: 00002000000022c0 RSI: 00002000000000c0 RDI: 0000000000000017 [ 1977.818500][ T8544] RBP: 00007f64e6c10090 R08: 0000000000000000 R09: 0000000000000000 [ 1977.818512][ T8544] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.818526][ T8544] R13: 00007f64e6026038 R14: 00007f64e6025fa0 R15: 00007f64e614fa48 [ 1977.818559][ T8544] [ 1978.318045][ T2366] pvrusb2: Invalid write control endpoint [ 1978.407444][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1978.497719][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1978.535986][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1978.585389][ T2366] pvrusb2: Device being rendered inoperable [ 1978.613565][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1978.651652][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1978.704044][ T2366] pvrusb2: Attached sub-driver cx25840 [ 1978.748079][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1978.753783][ T8537] could not allocate digest TFM handle sha1-generic [ 1978.834553][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1979.193012][ T8199] usb 2-1: USB disconnect, device number 68 [ 1980.035786][ T8588] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11324'. [ 1981.981704][ T8595] netlink: 'syz.3.11326': attribute type 10 has an invalid length. [ 1984.861338][ T8590] Set syz1 is full, maxelem 65536 reached [ 1985.575540][ T5365] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1985.737279][ T5365] usb 6-1: Using ep0 maxpacket: 32 [ 1985.848670][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.859564][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.017707][ T5365] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1986.027906][ T5365] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1986.045657][ T5365] usb 6-1: can't read configurations, error -71 [ 1988.301266][ T8595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1988.311210][ T8595] team0: Port device netdevsim1 added [ 1988.508975][ T8620] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11334'. [ 1988.697324][ T5712] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1988.817179][ T5365] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1988.855633][ T5712] usb 2-1: device descriptor read/64, error -71 [ 1988.918716][ T8632] netlink: zone id is out of range [ 1988.928279][ T8632] netlink: zone id is out of range [ 1988.933540][ T8632] netlink: zone id is out of range [ 1988.943627][ T8632] netlink: zone id is out of range [ 1988.955272][ T8632] netlink: zone id is out of range [ 1988.961341][ T8632] netlink: zone id is out of range [ 1988.966523][ T8632] netlink: zone id is out of range [ 1988.971796][ T8632] netlink: zone id is out of range [ 1988.976988][ T8632] netlink: zone id is out of range [ 1988.983951][ T5365] usb 3-1: Using ep0 maxpacket: 32 [ 1989.005212][ T5365] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1989.024734][ T5365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.035057][T19656] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1989.042925][ T5365] usb 3-1: Product: syz [ 1989.047750][ T5365] usb 3-1: Manufacturer: syz [ 1989.052466][ T5365] usb 3-1: SerialNumber: syz [ 1989.065016][ T5365] usb 3-1: config 0 descriptor?? [ 1989.117272][ T5712] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1989.227356][T19656] usb 1-1: Using ep0 maxpacket: 32 [ 1989.269549][ T5712] usb 2-1: device descriptor read/64, error -71 [ 1989.387047][ T8630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.398097][ T5712] usb usb2-port1: attempt power cycle [ 1989.414748][ T8630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.603965][T19656] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1989.625196][T19656] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1989.637278][T19656] usb 1-1: can't read configurations, error -71 [ 1989.757266][ T5712] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1989.777438][ T8199] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1989.780272][ T30] audit: type=1326 audit(1783230751.138:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.2.11336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe277d9de59 code=0x0 [ 1989.786027][ T5712] usb 2-1: device descriptor read/8, error -71 [ 1989.815784][ T8196] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1989.882270][T30557] usb 3-1: USB disconnect, device number 7 [ 1989.961816][ T8199] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1989.972137][ T8196] usb 4-1: Using ep0 maxpacket: 32 [ 1989.977675][ T8199] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1989.992932][ T8196] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1990.005272][ T8196] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1990.014806][ T8199] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1990.024638][ T8196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.033168][ T8199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1990.042596][ T8196] usb 4-1: Product: syz [ 1990.046894][ T8199] usb 6-1: SerialNumber: syz [ 1990.053154][ T8196] usb 4-1: Manufacturer: syz [ 1990.057990][ T5712] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1990.073908][ T8196] usb 4-1: SerialNumber: syz [ 1990.104597][ T8196] usb 4-1: config 0 descriptor?? [ 1990.110766][ T5712] usb 2-1: device descriptor read/8, error -71 [ 1990.123228][ T8196] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1990.148380][ T8196] dvb-usb: bulk message failed: -22 (2/0) [ 1990.159516][ T8196] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1990.180824][ T8196] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1990.197871][ T8196] usb 4-1: media controller created [ 1990.225775][ T8196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1990.237614][ T5712] usb usb2-port1: unable to enumerate USB device [ 1990.274632][ T8196] usb 4-1: selecting invalid altsetting 7 [ 1990.292963][ T8196] cxusb: set interface failed [ 1990.298885][ T8199] usb 6-1: 0:2 : does not exist [ 1990.304684][ T8196] dvb-usb: bulk message failed: -22 (1/0) [ 1990.417612][ T8199] usb 6-1: USB disconnect, device number 7 [ 1990.426277][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11346'. [ 1990.439039][ T8196] DVB: Unable to find symbol lgdt330x_attach() [ 1990.455547][ T8196] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1990.461473][ T8651] netlink: 180 bytes leftover after parsing attributes in process `syz.3.11346'. [ 1990.476033][ T8651] dvb-usb: bulk message failed: -22 (3/0) [ 1990.526100][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1990.587979][ T8196] rc_core: IR keymap rc-dvico-portable not found [ 1990.594550][ T8196] Registered IR keymap rc-empty [ 1990.605932][ T8196] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1990.619223][ T8196] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input193 [ 1990.633584][ T8196] dvb-usb: schedule remote query interval to 100 msecs. [ 1990.641638][ T8196] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1990.653538][ T8196] usb 4-1: USB disconnect, device number 7 [ 1990.727417][T19656] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1990.730641][ T8196] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1990.881616][T19656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1990.893111][T19656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1990.903515][T19656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1990.915004][T19656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1990.928818][T19656] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1990.938142][T19656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.946158][T19656] usb 1-1: Product: syz [ 1990.951100][T19656] usb 1-1: Manufacturer: syz [ 1990.955750][T19656] usb 1-1: SerialNumber: syz [ 1990.964185][T19656] usb 1-1: config 0 descriptor?? [ 1991.178629][T19656] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1991.400672][T19656] usb 1-1: USB disconnect, device number 17 [ 1991.757333][T19656] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1991.792755][ T8665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1991.877444][ T5365] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1991.947294][T19656] usb 1-1: Using ep0 maxpacket: 16 [ 1991.964985][T19656] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1991.997080][T19656] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.029504][T19656] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1992.048085][ T5365] usb 2-1: Using ep0 maxpacket: 32 [ 1992.063017][T19656] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1992.079712][ T5365] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 1992.091827][T19656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.112423][ T5365] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1992.121987][T19656] usb 1-1: Product: syz [ 1992.133701][ T5365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.146838][T19656] usb 1-1: Manufacturer: syz [ 1992.164810][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11354'. [ 1992.175143][T19656] usb 1-1: SerialNumber: syz [ 1992.185811][ T5365] usb 2-1: Product: syz [ 1992.203261][ T5365] usb 2-1: Manufacturer: syz [ 1992.217741][ T5365] usb 2-1: SerialNumber: syz [ 1992.248580][ T5365] usb 2-1: config 0 descriptor?? [ 1992.280621][ T5365] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1992.305009][ T5365] dvb-usb: bulk message failed: -22 (2/0) [ 1992.343195][ T5365] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1992.370607][ T5365] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1992.390863][ T5365] usb 2-1: media controller created [ 1992.425972][T19656] usb 1-1: 0:1 : does not exist [ 1992.447576][T19656] usb 1-1: unit 5 not found! [ 1992.470420][T19656] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1992.483158][ T5365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1992.500068][T19656] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1992.558761][T19656] usb 1-1: [2] FU [Headset Playback Volume] ch = 1, val = 0/1/1 [ 1992.596337][T19656] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1992.602354][ T8685] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11356'. [ 1992.604292][ T5365] usb 2-1: selecting invalid altsetting 7 [ 1992.658295][ T5365] cxusb: set interface failed [ 1992.679675][ T5365] dvb-usb: bulk message failed: -22 (1/0) [ 1992.730248][T19656] usb 1-1: USB disconnect, device number 18 [ 1992.812853][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1992.861273][ T5365] DVB: Unable to find symbol lgdt330x_attach() [ 1992.881302][ T5365] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1993.138115][ T5365] rc_core: IR keymap rc-dvico-portable not found [ 1993.160105][ T5365] Registered IR keymap rc-empty [ 1993.190885][ T5365] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1993.231173][ T5365] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input194 [ 1993.246466][ T5365] dvb-usb: schedule remote query interval to 100 msecs. [ 1993.257328][ T5365] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1993.281616][ T5365] usb 2-1: USB disconnect, device number 73 [ 1993.439698][ T5365] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1993.811465][ T8706] bond4: option mode: invalid value (255) [ 1993.833023][ T8689] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1993.839592][ T8689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1993.858942][ T8706] bond4 (unregistering): Released all slaves [ 1993.865105][T19656] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1993.887459][ T8689] vhci_hcd vhci_hcd.0: Device attached [ 1993.945556][ T8710] vhci_hcd: connection closed [ 1993.945993][ T1283] vhci_hcd vhci_hcd.2: stop threads [ 1993.970552][ T1283] vhci_hcd vhci_hcd.2: release socket [ 1994.007473][ T1283] vhci_hcd vhci_hcd.2: disconnect device [ 1994.017328][T19656] usb 6-1: device descriptor read/64, error -71 [ 1994.068034][ T8199] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1994.277692][T19656] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1994.419195][T19656] usb 6-1: device descriptor read/64, error -71 [ 1994.538032][T19656] usb usb6-port1: attempt power cycle [ 1994.597404][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1994.784183][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1994.802384][ T24] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1994.828159][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.854555][ T24] usb 1-1: config 0 descriptor?? [ 1994.863656][ T8719] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1994.897648][T19656] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1994.931128][T19656] usb 6-1: device descriptor read/8, error -71 [ 1995.074334][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.113036][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.145414][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.197631][T19656] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1995.215942][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.269441][T19656] usb 6-1: device descriptor read/8, error -71 [ 1995.399435][T19656] usb usb6-port1: unable to enumerate USB device [ 1995.483013][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.498837][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.506593][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.520508][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.531460][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.539177][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.546288][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.556135][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.563431][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.572443][ T24] uclogic 0003:5543:0064.003A: unknown main item tag 0x0 [ 1995.601215][ T24] uclogic 0003:5543:0064.003A: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 1995.674844][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.716767][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.735919][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.786636][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.787068][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.799851][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.993093][ T24] usb 1-1: USB disconnect, device number 19 [ 1996.076891][ T8743] FAULT_INJECTION: forcing a failure. [ 1996.076891][ T8743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1996.090939][ T8743] CPU: 1 UID: 0 PID: 8743 Comm: syz.0.11370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1996.090974][ T8743] Tainted: [L]=SOFTLOCKUP [ 1996.090982][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1996.090993][ T8743] Call Trace: [ 1996.091001][ T8743] [ 1996.091010][ T8743] dump_stack_lvl+0xe8/0x150 [ 1996.091052][ T8743] should_fail_ex+0x40c/0x560 [ 1996.091084][ T8743] _copy_to_user+0x31/0xb0 [ 1996.091117][ T8743] simple_read_from_buffer+0xe1/0x170 [ 1996.091155][ T8743] proc_fail_nth_read+0x1bb/0x230 [ 1996.091189][ T8743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1996.091222][ T8743] ? rw_verify_area+0x24a/0x4c0 [ 1996.091258][ T8743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1996.091286][ T8743] vfs_read+0x213/0xa80 [ 1996.091323][ T8743] ? __pfx___mutex_lock+0x10/0x10 [ 1996.091356][ T8743] ? __pfx_vfs_read+0x10/0x10 [ 1996.091389][ T8743] ? __fget_files+0x2a/0x420 [ 1996.091421][ T8743] ? __fget_files+0x3a2/0x420 [ 1996.091446][ T8743] ? __fget_files+0x2a/0x420 [ 1996.091482][ T8743] ksys_read+0x150/0x270 [ 1996.091513][ T8743] ? __pfx_ksys_read+0x10/0x10 [ 1996.091558][ T8743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1996.091584][ T8743] do_syscall_64+0x174/0x580 [ 1996.091611][ T8743] ? trace_irq_disable+0x3b/0x140 [ 1996.091641][ T8743] ? clear_bhb_loop+0x40/0x90 [ 1996.091676][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1996.091698][ T8743] RIP: 0033:0x7fb74c55e68e [ 1996.091720][ T8743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1996.091738][ T8743] RSP: 002b:00007fb74d41cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1996.091762][ T8743] RAX: ffffffffffffffda RBX: 00007fb74d41d6c0 RCX: 00007fb74c55e68e [ 1996.091779][ T8743] RDX: 000000000000000f RSI: 00007fb74d41d0a0 RDI: 000000000000000b [ 1996.091793][ T8743] RBP: 00007fb74d41d090 R08: 0000000000000000 R09: 0000000000000000 [ 1996.091807][ T8743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1996.091821][ T8743] R13: 00007fb74c826038 R14: 00007fb74c825fa0 R15: 00007fb74c94fa48 [ 1996.091855][ T8743] [ 1996.986198][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11380'. [ 1997.353381][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11383'. [ 1997.420749][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11384'. [ 1997.552145][ T8788] FAULT_INJECTION: forcing a failure. [ 1997.552145][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1997.582290][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.3.11386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1997.582325][ T8788] Tainted: [L]=SOFTLOCKUP [ 1997.582333][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1997.582344][ T8788] Call Trace: [ 1997.582353][ T8788] [ 1997.582362][ T8788] dump_stack_lvl+0xe8/0x150 [ 1997.582399][ T8788] should_fail_ex+0x40c/0x560 [ 1997.582429][ T8788] _copy_from_iter+0x1d3/0x1660 [ 1997.582456][ T8788] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 1997.582490][ T8788] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1997.582520][ T8788] ? __pfx__copy_from_iter+0x10/0x10 [ 1997.582543][ T8788] ? __pfx___mutex_lock+0x10/0x10 [ 1997.582572][ T8788] ? alloc_pages_mpol+0x24a/0x380 [ 1997.582602][ T8788] copy_page_from_iter+0x219/0x2d0 [ 1997.582632][ T8788] anon_pipe_write+0x1806/0x1c30 [ 1997.582668][ T8788] ? get_pid_task+0x20/0x1f0 [ 1997.582696][ T8788] ? get_pid_task+0x20/0x1f0 [ 1997.582723][ T8788] ? __pfx_anon_pipe_write+0x10/0x10 [ 1997.582764][ T8788] ? apparmor_file_permission+0x1f4/0x300 [ 1997.582795][ T8788] ? bpf_lsm_file_permission+0x9/0x20 [ 1997.582817][ T8788] ? security_file_permission+0x75/0x260 [ 1997.582847][ T8788] vfs_write+0x612/0xba0 [ 1997.582879][ T8788] ? __pfx_vfs_write+0x10/0x10 [ 1997.582912][ T8788] ? __fget_files+0x2a/0x420 [ 1997.582943][ T8788] ksys_write+0x150/0x270 [ 1997.582973][ T8788] ? __pfx_ksys_write+0x10/0x10 [ 1997.583010][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.583032][ T8788] do_syscall_64+0x174/0x580 [ 1997.583057][ T8788] ? trace_irq_disable+0x3b/0x140 [ 1997.583082][ T8788] ? clear_bhb_loop+0x40/0x90 [ 1997.583106][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.583126][ T8788] RIP: 0033:0x7f207839de59 [ 1997.583146][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1997.583162][ T8788] RSP: 002b:00007f207925e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1997.583184][ T8788] RAX: ffffffffffffffda RBX: 00007f2078625fa0 RCX: 00007f207839de59 [ 1997.583199][ T8788] RDX: 0000000000001001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1997.583211][ T8788] RBP: 00007f207925e090 R08: 0000000000000000 R09: 0000000000000000 [ 1997.583224][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.583236][ T8788] R13: 00007f2078626038 R14: 00007f2078625fa0 R15: 00007f207874fa48 [ 1997.583268][ T8788] [ 1998.037311][ T8196] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1998.187415][ T8199] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1998.207240][ T8196] usb 6-1: Using ep0 maxpacket: 32 [ 1998.225459][ T8196] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1998.253625][ T8196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.278960][ T8196] usb 6-1: Product: syz [ 1998.288295][ T8196] usb 6-1: Manufacturer: syz [ 1998.300598][ T8196] usb 6-1: SerialNumber: syz [ 1998.326213][ T8199] usb 3-1: device descriptor read/64, error -71 [ 1998.334101][ T8196] usb 6-1: config 0 descriptor?? [ 1998.597355][ T8199] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1998.747427][ T8199] usb 3-1: device descriptor read/64, error -71 [ 1998.868007][ T8199] usb usb3-port1: attempt power cycle [ 1999.217260][ T8199] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1999.278291][ T8199] usb 3-1: device descriptor read/8, error -71 [ 1999.349425][ T30] audit: type=1326 audit(1783230760.708:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.5.11385" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64e5d9de59 code=0x0 [ 1999.451262][ T5365] usb 6-1: USB disconnect, device number 12 [ 1999.547845][ T8199] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1999.588095][ T8199] usb 3-1: device descriptor read/8, error -71 [ 1999.722289][ T8199] usb usb3-port1: unable to enumerate USB device [ 1999.905131][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11396'. [ 2000.060259][ T8828] tipc: Started in network mode [ 2000.074089][ T8828] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2000.093317][ T8828] tipc: Enabled bearer , priority 10 [ 2000.197545][ T8830] net_ratelimit: 1 callbacks suppressed [ 2000.197561][ T8830] netlink: zone id is out of range [ 2000.219834][ T8830] netlink: zone id is out of range [ 2000.225709][ T8830] netlink: zone id is out of range [ 2000.232088][ T8830] netlink: zone id is out of range [ 2000.238514][ T8830] netlink: zone id is out of range [ 2000.246909][ T8830] netlink: zone id is out of range [ 2000.255657][ T8830] netlink: zone id is out of range [ 2000.261791][ T8830] netlink: zone id is out of range [ 2000.277032][ T8830] netlink: zone id is out of range [ 2000.289622][ T8830] netlink: zone id is out of range [ 2000.397390][T30557] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2000.518943][ T8832] netlink: 'syz.3.11400': attribute type 1 has an invalid length. [ 2000.571592][T30557] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 2000.592939][ T8835] FAULT_INJECTION: forcing a failure. [ 2000.592939][ T8835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2000.617978][T30557] usb 1-1: config 1 has no interface number 0 [ 2000.628102][T30557] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2000.643375][ T8835] CPU: 0 UID: 0 PID: 8835 Comm: syz.1.11401 Tainted: G L syzkaller #0 PREEMPT(full) [ 2000.643410][ T8835] Tainted: [L]=SOFTLOCKUP [ 2000.643418][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2000.643429][ T8835] Call Trace: [ 2000.643438][ T8835] [ 2000.643447][ T8835] dump_stack_lvl+0xe8/0x150 [ 2000.643484][ T8835] should_fail_ex+0x40c/0x560 [ 2000.643511][ T8835] _copy_from_iter+0x1d3/0x1660 [ 2000.643535][ T8835] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2000.643563][ T8835] ? rcu_is_watching+0x15/0xb0 [ 2000.643596][ T8835] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2000.643619][ T8835] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2000.643652][ T8835] ? __pfx__copy_from_iter+0x10/0x10 [ 2000.643677][ T8835] ? __alloc_skb+0x276/0x7a0 [ 2000.643706][ T8835] ? __alloc_skb+0x276/0x7a0 [ 2000.643738][ T8835] ? netlink_sendmsg+0x650/0xb40 [ 2000.643761][ T8835] ? skb_put+0x112/0x210 [ 2000.643791][ T8835] netlink_sendmsg+0x6c0/0xb40 [ 2000.643821][ T8835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2000.643846][ T8835] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2000.643873][ T8835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2000.643893][ T8835] sock_sendmsg_nosec+0x13a/0x180 [ 2000.643921][ T8835] ____sys_sendmsg+0x54e/0x850 [ 2000.643959][ T8835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2000.644002][ T8835] ? import_iovec+0x73/0xa0 [ 2000.644036][ T8835] ___sys_sendmsg+0x2a5/0x360 [ 2000.644067][ T8835] ? __lock_acquire+0x683/0x2cf0 [ 2000.644100][ T8835] ? __pfx____sys_sendmsg+0x10/0x10 [ 2000.644167][ T8835] ? __fget_files+0x2a/0x420 [ 2000.644194][ T8835] ? __fget_files+0x3a2/0x420 [ 2000.644231][ T8835] __x64_sys_sendmsg+0x1b1/0x290 [ 2000.644265][ T8835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2000.644314][ T8835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.644338][ T8835] do_syscall_64+0x174/0x580 [ 2000.644365][ T8835] ? trace_irq_disable+0x3b/0x140 [ 2000.644395][ T8835] ? clear_bhb_loop+0x40/0x90 [ 2000.644421][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2000.644442][ T8835] RIP: 0033:0x7f7c2539de59 [ 2000.644462][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2000.644479][ T8835] RSP: 002b:00007f7c235f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2000.644503][ T8835] RAX: ffffffffffffffda RBX: 00007f7c25625fa0 RCX: 00007f7c2539de59 [ 2000.644519][ T8835] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 2000.644534][ T8835] RBP: 00007f7c235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2000.644547][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2000.644560][ T8835] R13: 00007f7c25626038 R14: 00007f7c25625fa0 R15: 00007f7c2574fa48 [ 2000.644595][ T8835] [ 2000.959534][T30557] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2001.001554][T30557] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2001.010733][T30557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.018773][T30557] usb 1-1: Product: syz [ 2001.022942][T30557] usb 1-1: Manufacturer: syz [ 2001.027774][T30557] usb 1-1: SerialNumber: syz [ 2001.037120][ T8828] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2001.046024][ T8828] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2001.074359][T30557] usb 1-1: Expected 3 endpoints, found: 2 [ 2001.079806][ T8839] FAULT_INJECTION: forcing a failure. [ 2001.079806][ T8839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2001.143645][ T8839] CPU: 1 UID: 0 PID: 8839 Comm: syz.2.11402 Tainted: G L syzkaller #0 PREEMPT(full) [ 2001.143668][ T8839] Tainted: [L]=SOFTLOCKUP [ 2001.143674][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2001.143681][ T8839] Call Trace: [ 2001.143687][ T8839] [ 2001.143693][ T8839] dump_stack_lvl+0xe8/0x150 [ 2001.143716][ T8839] should_fail_ex+0x40c/0x560 [ 2001.143734][ T8839] _copy_from_iter+0x1d3/0x1660 [ 2001.143750][ T8839] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2001.143767][ T8839] ? rcu_is_watching+0x15/0xb0 [ 2001.143785][ T8839] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2001.143800][ T8839] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2001.143815][ T8839] ? __pfx__copy_from_iter+0x10/0x10 [ 2001.143829][ T8839] ? __alloc_skb+0x276/0x7a0 [ 2001.143845][ T8839] ? __alloc_skb+0x276/0x7a0 [ 2001.143863][ T8839] ? netlink_sendmsg+0x650/0xb40 [ 2001.143875][ T8839] ? skb_put+0x112/0x210 [ 2001.143892][ T8839] netlink_sendmsg+0x6c0/0xb40 [ 2001.143909][ T8839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2001.143928][ T8839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2001.143939][ T8839] sock_sendmsg_nosec+0x13a/0x180 [ 2001.143955][ T8839] ____sys_sendmsg+0x54e/0x850 [ 2001.143976][ T8839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2001.143999][ T8839] ? import_iovec+0x73/0xa0 [ 2001.144018][ T8839] ___sys_sendmsg+0x2a5/0x360 [ 2001.144035][ T8839] ? __lock_acquire+0x683/0x2cf0 [ 2001.144053][ T8839] ? __pfx____sys_sendmsg+0x10/0x10 [ 2001.144102][ T8839] ? __fget_files+0x2a/0x420 [ 2001.144117][ T8839] ? __fget_files+0x3a2/0x420 [ 2001.144138][ T8839] __x64_sys_sendmsg+0x1b1/0x290 [ 2001.144157][ T8839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2001.144186][ T8839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.144199][ T8839] do_syscall_64+0x174/0x580 [ 2001.144215][ T8839] ? trace_irq_disable+0x3b/0x140 [ 2001.144231][ T8839] ? clear_bhb_loop+0x40/0x90 [ 2001.144246][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.144258][ T8839] RIP: 0033:0x7fe277d9de59 [ 2001.144271][ T8839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2001.144281][ T8839] RSP: 002b:00007fe278cb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.144296][ T8839] RAX: ffffffffffffffda RBX: 00007fe278025fa0 RCX: 00007fe277d9de59 [ 2001.144306][ T8839] RDX: 0000000000008800 RSI: 0000200000000000 RDI: 0000000000000004 [ 2001.144314][ T8839] RBP: 00007fe278cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 2001.144321][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2001.144328][ T8839] R13: 00007fe278026038 R14: 00007fe278025fa0 R15: 00007fe27814fa48 [ 2001.144347][ T8839] [ 2001.197627][T30557] tipc: Node number set to 11578026 [ 2001.611380][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11408'. [ 2001.820501][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.847059][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2002.915917][ T8875] IPv6: NLM_F_CREATE should be specified when creating new route [ 2003.057483][ T5365] usb 1-1: USB disconnect, device number 20 [ 2003.077315][T30557] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 2003.217306][T30557] usb 6-1: device descriptor read/64, error -71 [ 2003.487336][T30557] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 2003.584615][ T8884] syzkaller1: entered promiscuous mode [ 2003.598524][ T8884] syzkaller1: entered allmulticast mode [ 2003.627296][T30557] usb 6-1: device descriptor read/64, error -71 [ 2003.748614][T30557] usb usb6-port1: attempt power cycle [ 2003.867329][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2003.941427][ T8890] syzkaller0: entered promiscuous mode [ 2003.952421][ T8890] syzkaller0: entered allmulticast mode [ 2004.056748][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2004.119114][T30557] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 2004.165936][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2004.179734][T30557] usb 6-1: device descriptor read/8, error -71 [ 2004.206343][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2004.237944][ T24] usb 1-1: Product: syz [ 2004.253360][ T24] usb 1-1: Manufacturer: syz [ 2004.279308][ T24] usb 1-1: SerialNumber: syz [ 2004.286185][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11419'. [ 2004.449811][T30557] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 2004.488055][T30557] usb 6-1: device descriptor read/8, error -71 [ 2004.544253][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2004.599391][T30557] usb usb6-port1: unable to enumerate USB device [ 2004.747336][T30557] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2004.872559][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.907232][T30557] usb 4-1: Using ep0 maxpacket: 32 [ 2004.913588][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.918375][T30557] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2004.941500][T30557] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2004.956458][T30557] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.980344][T30557] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2004.999747][T30557] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2005.011737][T30557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.023672][T30557] usb 4-1: Product: syz [ 2005.033728][T30557] usb 4-1: Manufacturer: syz [ 2005.046489][T30557] usb 4-1: SerialNumber: syz [ 2005.117916][ T8199] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2005.293166][ T8199] usb 2-1: Using ep0 maxpacket: 16 [ 2005.300019][T30557] usb 4-1: 0:2 : does not exist [ 2005.314015][ T8199] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2005.336915][ T8199] usb 2-1: config 16 has an invalid interface number: 44 but max is 0 [ 2005.348723][ T8199] usb 2-1: config 16 has no interface number 0 [ 2005.358734][ T8199] usb 2-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 2005.398590][ T8199] usb 2-1: config 16 interface 44 has no altsetting 0 [ 2005.429134][ T8199] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 2005.440054][T30557] usb 4-1: USB disconnect, device number 8 [ 2005.445979][ T8199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.475792][ T8199] usb 2-1: Product: ࠄ [ 2005.491995][ T8199] usb 2-1: Manufacturer: 行᪀臟기ⓓ뉷㕄Ƶ鱬笃誒좌ȥ괟ᙶ⛴끍뻯莏㓯笢眵ᴋ쪌۰杀ᷟ⠛鿳൥꜏쯍礉훃͖駟颁曫褁狭뽖ᵗ괅ꜝ缱ꢾᯊ겠튤曄낓챖⟊绠⾃樶೵䞯徔龴鯘蛧㷅컲뙏⸁곆걞杇尩㝅ߌ︗ㄏ묳蠍ᄗᗴ蕱齱㗤샽t顓씓␆䇱핓퐜羕⤔剩㎧賂쬌↋쑈༊큧탭桡ﴀࣵﵑ飋校봙鄕 [ 2005.580428][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2005.619004][ T8199] usb 2-1: SerialNumber: 셏럒⃎ᦤ猀༽氦ꈮ뽬协ⓝ缄䒾ᅚ䌦琺켇塆䩱ᨨ豺皸䎊猹芯㱎茥⍂룗䍲毥킶ꨃ㕆뎤붹鲟嵧瀞菷댓ⱸ碟ᥳ;㾒ꈤﵦ쨿钧暈术闪쑛줚秎鳆ខ蟘䯅㧮ᑩ壘㲳 [ 2005.703268][ T8907] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2005.933592][ T8199] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now attached [ 2006.004289][ T8199] usb 2-1: USB disconnect, device number 74 [ 2006.046207][ T8199] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now disconnected [ 2006.310830][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11428'. [ 2006.554233][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11429'. [ 2006.689287][ T8918] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11428'. [ 2006.863243][ T8930] FAULT_INJECTION: forcing a failure. [ 2006.863243][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.908078][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.1.11430 Tainted: G L syzkaller #0 PREEMPT(full) [ 2006.908114][ T8930] Tainted: [L]=SOFTLOCKUP [ 2006.908122][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2006.908134][ T8930] Call Trace: [ 2006.908142][ T8930] [ 2006.908151][ T8930] dump_stack_lvl+0xe8/0x150 [ 2006.908190][ T8930] should_fail_ex+0x40c/0x560 [ 2006.908220][ T8930] should_failslab+0xa8/0x100 [ 2006.908253][ T8930] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2006.908279][ T8930] ? alloc_empty_file+0x5b/0x1d0 [ 2006.908303][ T8930] ? alloc_empty_file+0x5b/0x1d0 [ 2006.908335][ T8930] alloc_empty_file+0x5b/0x1d0 [ 2006.908364][ T8930] alloc_file_pseudo+0x115/0x1e0 [ 2006.908393][ T8930] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2006.908416][ T8930] ? security_inode_alloc+0xd5/0x310 [ 2006.908442][ T8930] ? inode_init_always_gfp+0x994/0xd30 [ 2006.908473][ T8930] sock_alloc_file+0xb8/0x2e0 [ 2006.908512][ T8930] do_accept+0x3a0/0x750 [ 2006.908543][ T8930] ? __pfx_do_accept+0x10/0x10 [ 2006.908592][ T8930] __sys_accept4+0x139/0x230 [ 2006.908623][ T8930] ? __pfx___sys_accept4+0x10/0x10 [ 2006.908650][ T8930] ? __pfx_ksys_write+0x10/0x10 [ 2006.908687][ T8930] __x64_sys_accept4+0x9a/0xb0 [ 2006.908713][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.908735][ T8930] do_syscall_64+0x174/0x580 [ 2006.908763][ T8930] ? trace_irq_disable+0x3b/0x140 [ 2006.908789][ T8930] ? clear_bhb_loop+0x40/0x90 [ 2006.908814][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.908835][ T8930] RIP: 0033:0x7f7c2539de59 [ 2006.908856][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2006.908874][ T8930] RSP: 002b:00007f7c235f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 2006.908896][ T8930] RAX: ffffffffffffffda RBX: 00007f7c25625fa0 RCX: 00007f7c2539de59 [ 2006.908912][ T8930] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2006.908925][ T8930] RBP: 00007f7c235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2006.908938][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2006.908950][ T8930] R13: 00007f7c25626038 R14: 00007f7c25625fa0 R15: 00007f7c2574fa48 [ 2006.908982][ T8930] [ 2007.621116][ T8199] usb 1-1: USB disconnect, device number 21 [ 2007.634108][ T8199] usblp0: removed [ 2007.971174][ T8935] could not allocate digest TFM handle sha1-generic [ 2008.458578][ T5365] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 2008.617375][ T5365] usb 4-1: device descriptor read/64, error -71 [ 2008.877390][ T5365] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 2009.028877][ T5365] usb 4-1: device descriptor read/64, error -71 [ 2009.159953][ T5365] usb usb4-port1: attempt power cycle [ 2009.220998][ T8943] could not allocate digest TFM handle sha1-generic [ 2009.447293][T19656] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2009.517301][ T5365] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 2009.549707][ T5365] usb 4-1: device descriptor read/8, error -71 [ 2009.610745][T19656] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.636907][T19656] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2009.663858][T19656] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2009.681543][T19656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2009.702316][T19656] usb 2-1: SerialNumber: syz [ 2009.797310][ T5365] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 2009.842957][ T5365] usb 4-1: device descriptor read/8, error -71 [ 2009.946209][T19656] usb 2-1: 0:2 : does not exist [ 2009.968410][ T5365] usb usb4-port1: unable to enumerate USB device [ 2010.035566][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11439'. [ 2010.089184][ T6627] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2010.115748][ T6627] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2010.136306][ T6627] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2010.171288][T19656] usb 2-1: USB disconnect, device number 75 [ 2010.173234][ T6627] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2010.377444][ T8969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.406743][ T8969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2010.453524][ T8973] tipc: Started in network mode [ 2010.459972][ T8973] tipc: Node identity 2, cluster identity 4711 [ 2010.466236][ T8973] tipc: Node number set to 2 [ 2010.476002][ T8973] tipc: Cannot configure node identity twice [ 2011.774987][ T9005] blktrace: Concurrent blktraces are not allowed on sg0 [ 2013.044193][ T9018] netlink: 220 bytes leftover after parsing attributes in process `syz.5.11455'. [ 2013.069180][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11456'. [ 2013.447260][ T8196] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2013.475362][ T9027] net_ratelimit: 11 callbacks suppressed [ 2013.475383][ T9027] netlink: zone id is out of range [ 2013.521043][ T9027] netlink: zone id is out of range [ 2013.527675][ T9027] netlink: zone id is out of range [ 2013.543703][ T9027] netlink: zone id is out of range [ 2013.553776][ T9027] netlink: zone id is out of range [ 2013.562519][ T9027] netlink: zone id is out of range [ 2013.572579][ T9027] netlink: zone id is out of range [ 2013.581192][ T9027] netlink: zone id is out of range [ 2013.602684][ T9027] netlink: zone id is out of range [ 2013.610019][ T9027] netlink: zone id is out of range [ 2013.626350][ T8196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.647259][T30557] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2013.655025][ T8196] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2013.684880][ T8196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.718401][ T8196] usb 6-1: config 0 descriptor?? [ 2013.797309][T30557] usb 2-1: device descriptor read/64, error -71 [ 2013.962839][ T8196] usbhid 6-1:0.0: can't add hid device: -71 [ 2013.973182][ T9032] blktrace: Concurrent blktraces are not allowed on sg0 [ 2013.982690][ T8196] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2014.016235][ T8196] usb 6-1: USB disconnect, device number 17 [ 2014.062511][T30557] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 2014.197359][T30557] usb 2-1: device descriptor read/64, error -71 [ 2014.308312][T30557] usb usb2-port1: attempt power cycle [ 2014.647241][T30557] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 2014.678457][T30557] usb 2-1: device descriptor read/8, error -71 [ 2014.927449][T30557] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 2014.937257][ T5365] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2014.959407][T30557] usb 2-1: device descriptor read/8, error -71 [ 2015.004118][ T9058] loop5: detected capacity change from 0 to 7 [ 2015.029618][ T8196] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2015.059901][ T9058] loop5: [ 2015.067041][ T9058] loop5: partition table partially beyond EOD, [ 2015.067817][T30557] usb usb2-port1: unable to enumerate USB device [ 2015.081844][ T9058] truncated [ 2015.147508][ T5365] usb 4-1: Using ep0 maxpacket: 8 [ 2015.172511][ T5365] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.195070][ T5365] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2015.198038][ T8196] usb 6-1: Using ep0 maxpacket: 32 [ 2015.204538][ T5365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.228884][ T5365] usb 4-1: config 0 descriptor?? [ 2015.251390][ T5365] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2015.260593][ T8196] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2015.283583][ T8196] usb 6-1: config 0 has no interface number 0 [ 2015.303806][ T8196] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2015.328401][ T8196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.350473][ T8196] usb 6-1: Product: syz [ 2015.354981][ T8196] usb 6-1: Manufacturer: syz [ 2015.360138][ T8196] usb 6-1: SerialNumber: syz [ 2015.377875][ T8196] usb 6-1: config 0 descriptor?? [ 2015.389081][ T8196] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2015.632901][ T8196] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2015.677518][ T8196] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2015.827714][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.869112][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.904756][ T9054] fuse: Bad value for 'group_id' [ 2015.924286][ T9054] fuse: Bad value for 'group_id' [ 2016.219172][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2016.227264][ T8196] usb 6-1: USB disconnect, device number 18 [ 2016.240972][ T8196] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2016.315837][ T8196] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2016.355339][ T8196] quatech2 6-1:0.51: device disconnected [ 2016.625654][ T5365] gspca_vc032x: reg_r err -71 [ 2016.650070][ T5365] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 2016.724620][ T5365] usb 4-1: USB disconnect, device number 13 [ 2017.473883][ T9088] syzkaller0: entered promiscuous mode [ 2017.491552][ T9088] syzkaller0: entered allmulticast mode [ 2017.627726][ T8196] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2017.807460][ T8196] usb 6-1: Using ep0 maxpacket: 8 [ 2017.824323][ T8196] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2017.853128][ T8196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.881727][ T8196] usb 6-1: Product: syz [ 2017.896293][ T8196] usb 6-1: Manufacturer: syz [ 2017.903793][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11481'. [ 2017.941505][ T8196] usb 6-1: SerialNumber: syz [ 2017.981388][ T8196] usb 6-1: config 0 descriptor?? [ 2018.224816][ T8196] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2018.417441][ T9092] netlink: 'syz.2.11480': attribute type 1 has an invalid length. [ 2018.470701][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11480'. [ 2018.737410][ T8199] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 2018.910955][ T8199] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 2018.931217][ T8199] usb 4-1: config 127 has no interface number 0 [ 2018.942975][ T8199] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2018.947858][T19656] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 2018.967857][ T8199] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 2018.987566][ T8199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.007656][ T8199] usb 4-1: Product: syz [ 2019.012960][ T8199] usb 4-1: Manufacturer: syz [ 2019.021337][ T8199] usb 4-1: SerialNumber: syz [ 2019.038125][ T9106] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2019.132191][T19656] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2019.148964][T19656] usb 1-1: not running at top speed; connect to a high speed hub [ 2019.163232][T19656] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 2019.177752][T19656] usb 1-1: config 0 has no interface number 0 [ 2019.185663][T19656] usb 1-1: config 0 interface 175 has no altsetting 0 [ 2019.208063][T19656] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 2019.218110][T19656] usb 1-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 2019.226660][T19656] usb 1-1: Product: syz [ 2019.231725][T19656] usb 1-1: Manufacturer: syz [ 2019.236441][T19656] usb 1-1: SerialNumber: syz [ 2019.249636][T19656] usb 1-1: config 0 descriptor?? [ 2019.460627][ T9131] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2019.462577][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.489640][ T9131] block device autoloading is deprecated and will be removed. [ 2019.509015][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2019.559096][T19656] usb-storage 1-1:0.175: USB Mass Storage device detected [ 2019.651868][ T8196] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2019.657943][T19656] usb 1-1: USB disconnect, device number 23 [ 2019.745173][ T8199] asix 4-1:127.57: probe with driver asix failed with error -71 [ 2019.761982][ T8199] usb 4-1: USB disconnect, device number 14 [ 2019.857552][ T9136] No such timeout policy "syz0" [ 2019.862675][ T8196] usb 6-1: USB disconnect, device number 19 [ 2020.343372][ T9146] FAULT_INJECTION: forcing a failure. [ 2020.343372][ T9146] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.376179][ T9146] CPU: 1 UID: 0 PID: 9146 Comm: syz.3.11496 Tainted: G L syzkaller #0 PREEMPT(full) [ 2020.376216][ T9146] Tainted: [L]=SOFTLOCKUP [ 2020.376224][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2020.376237][ T9146] Call Trace: [ 2020.376246][ T9146] [ 2020.376255][ T9146] dump_stack_lvl+0xe8/0x150 [ 2020.376294][ T9146] should_fail_ex+0x40c/0x560 [ 2020.376324][ T9146] should_failslab+0xa8/0x100 [ 2020.376366][ T9146] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2020.376393][ T9146] ? skb_clone+0x212/0x3a0 [ 2020.376412][ T9146] ? skb_clone+0x212/0x3a0 [ 2020.376439][ T9146] skb_clone+0x212/0x3a0 [ 2020.376463][ T9146] __netlink_deliver_tap+0x413/0x860 [ 2020.376509][ T9146] ? netlink_deliver_tap+0x2e/0x1b0 [ 2020.376543][ T9146] netlink_deliver_tap+0x19c/0x1b0 [ 2020.376577][ T9146] netlink_unicast+0x77f/0x940 [ 2020.376619][ T9146] netlink_sendmsg+0x813/0xb40 [ 2020.376651][ T9146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2020.376677][ T9146] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2020.376705][ T9146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2020.376725][ T9146] sock_sendmsg_nosec+0x13a/0x180 [ 2020.376752][ T9146] ____sys_sendmsg+0x54e/0x850 [ 2020.376791][ T9146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2020.376832][ T9146] ? import_iovec+0x73/0xa0 [ 2020.376866][ T9146] ___sys_sendmsg+0x2a5/0x360 [ 2020.376896][ T9146] ? __lock_acquire+0x683/0x2cf0 [ 2020.376931][ T9146] ? __pfx____sys_sendmsg+0x10/0x10 [ 2020.377001][ T9146] ? __fget_files+0x2a/0x420 [ 2020.377028][ T9146] ? __fget_files+0x3a2/0x420 [ 2020.377067][ T9146] __x64_sys_sendmsg+0x1b1/0x290 [ 2020.377102][ T9146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2020.377154][ T9146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.377176][ T9146] do_syscall_64+0x174/0x580 [ 2020.377203][ T9146] ? trace_irq_disable+0x3b/0x140 [ 2020.377228][ T9146] ? clear_bhb_loop+0x40/0x90 [ 2020.377253][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.377273][ T9146] RIP: 0033:0x7f207839de59 [ 2020.377295][ T9146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2020.377313][ T9146] RSP: 002b:00007f207925e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2020.377345][ T9146] RAX: ffffffffffffffda RBX: 00007f2078625fa0 RCX: 00007f207839de59 [ 2020.377360][ T9146] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2020.377374][ T9146] RBP: 00007f207925e090 R08: 0000000000000000 R09: 0000000000000000 [ 2020.377387][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2020.377400][ T9146] R13: 00007f2078626038 R14: 00007f2078625fa0 R15: 00007f207874fa48 [ 2020.377435][ T9146] [ 2022.068328][ T9158] could not allocate digest TFM handle sha1-generic [ 2022.346626][ T9178] could not allocate digest TFM handle sha1-generic [ 2022.597263][ T8199] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 2022.779378][ T8199] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 2022.789520][ T8199] usb 6-1: config 127 has no interface number 0 [ 2022.821880][ T8199] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2022.874922][ T8199] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 2022.891012][ T8199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.929351][ T8199] usb 6-1: Product: syz [ 2022.937599][ T8199] usb 6-1: Manufacturer: syz [ 2022.947046][ T8199] usb 6-1: SerialNumber: syz [ 2023.049641][ T9186] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2023.718215][ T8199] asix 6-1:127.57: probe with driver asix failed with error -71 [ 2023.767260][ T8196] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2023.781061][ T8199] usb 6-1: USB disconnect, device number 20 [ 2023.937251][ T8196] usb 2-1: Using ep0 maxpacket: 32 [ 2023.965284][ T8196] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2023.990460][ T8196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.017274][ T8196] usb 2-1: Product: syz [ 2024.029337][ T8196] usb 2-1: Manufacturer: syz [ 2024.042462][ T8196] usb 2-1: SerialNumber: syz [ 2024.079601][ T8196] usb 2-1: config 0 descriptor?? [ 2025.918317][ T30] audit: type=1326 audit(1783230787.278:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.1.11508" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2539de59 code=0x0 [ 2025.920510][ T9236] FAULT_INJECTION: forcing a failure. [ 2025.920510][ T9236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2025.960728][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.2.11519 Tainted: G L syzkaller #0 PREEMPT(full) [ 2025.960763][ T9236] Tainted: [L]=SOFTLOCKUP [ 2025.960771][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2025.960783][ T9236] Call Trace: [ 2025.960792][ T9236] [ 2025.960801][ T9236] dump_stack_lvl+0xe8/0x150 [ 2025.960839][ T9236] should_fail_ex+0x40c/0x560 [ 2025.960868][ T9236] _copy_from_iter+0x1d3/0x1660 [ 2025.960893][ T9236] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2025.960921][ T9236] ? rcu_is_watching+0x15/0xb0 [ 2025.960952][ T9236] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2025.960978][ T9236] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2025.961002][ T9236] ? __pfx__copy_from_iter+0x10/0x10 [ 2025.961026][ T9236] ? __alloc_skb+0x276/0x7a0 [ 2025.961052][ T9236] ? __alloc_skb+0x276/0x7a0 [ 2025.961082][ T9236] ? netlink_sendmsg+0x650/0xb40 [ 2025.961102][ T9236] ? skb_put+0x112/0x210 [ 2025.961129][ T9236] netlink_sendmsg+0x6c0/0xb40 [ 2025.961155][ T9236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2025.961177][ T9236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2025.961204][ T9236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2025.961221][ T9236] sock_sendmsg_nosec+0x13a/0x180 [ 2025.961247][ T9236] ____sys_sendmsg+0x54e/0x850 [ 2025.961292][ T9236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2025.961330][ T9236] ? import_iovec+0x73/0xa0 [ 2025.961363][ T9236] ___sys_sendmsg+0x2a5/0x360 [ 2025.961391][ T9236] ? __lock_acquire+0x683/0x2cf0 [ 2025.961424][ T9236] ? __pfx____sys_sendmsg+0x10/0x10 [ 2025.961489][ T9236] ? __fget_files+0x2a/0x420 [ 2025.961514][ T9236] ? __fget_files+0x3a2/0x420 [ 2025.961550][ T9236] __x64_sys_sendmsg+0x1b1/0x290 [ 2025.961583][ T9236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2025.961632][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.961656][ T9236] do_syscall_64+0x174/0x580 [ 2025.961688][ T9236] ? trace_irq_disable+0x3b/0x140 [ 2025.961713][ T9236] ? clear_bhb_loop+0x40/0x90 [ 2025.961739][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.961760][ T9236] RIP: 0033:0x7fe277d9de59 [ 2025.961781][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2025.961798][ T9236] RSP: 002b:00007fe278cb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2025.961820][ T9236] RAX: ffffffffffffffda RBX: 00007fe278025fa0 RCX: 00007fe277d9de59 [ 2025.961837][ T9236] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2025.961851][ T9236] RBP: 00007fe278cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 2025.961865][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2025.961877][ T9236] R13: 00007fe278026038 R14: 00007fe278025fa0 R15: 00007fe27814fa48 [ 2025.961911][ T9236] [ 2026.020367][ T5365] usb 2-1: USB disconnect, device number 80 [ 2026.519015][ T5741] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2026.689716][ T5741] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 2026.699413][ T5741] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.745598][ T5741] usb 3-1: config 127 has no interface number 0 [ 2026.763755][ T5741] usb 3-1: config 127 interface 57 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2026.806019][ T5741] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 2026.821363][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.845304][ T5741] usb 3-1: Product: syz [ 2026.852928][ T9244] could not allocate digest TFM handle sha1-generic [ 2026.861040][ T5741] usb 3-1: Manufacturer: syz [ 2026.865797][ T5741] usb 3-1: SerialNumber: syz [ 2026.884122][ T5741] asix 3-1:127.57: probe with driver asix failed with error -22 [ 2027.493581][ T5741] usb 3-1: USB disconnect, device number 12 [ 2027.776521][ T9269] FAULT_INJECTION: forcing a failure. [ 2027.776521][ T9269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.789934][ T9269] CPU: 0 UID: 0 PID: 9269 Comm: syz.1.11527 Tainted: G L syzkaller #0 PREEMPT(full) [ 2027.789969][ T9269] Tainted: [L]=SOFTLOCKUP [ 2027.789977][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2027.789990][ T9269] Call Trace: [ 2027.790000][ T9269] [ 2027.790009][ T9269] dump_stack_lvl+0xe8/0x150 [ 2027.790048][ T9269] should_fail_ex+0x40c/0x560 [ 2027.790077][ T9269] _copy_from_iter+0x1d3/0x1660 [ 2027.790103][ T9269] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2027.790131][ T9269] ? rcu_is_watching+0x15/0xb0 [ 2027.790164][ T9269] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2027.790191][ T9269] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2027.790216][ T9269] ? __pfx__copy_from_iter+0x10/0x10 [ 2027.790242][ T9269] ? __alloc_skb+0x276/0x7a0 [ 2027.790268][ T9269] ? __alloc_skb+0x276/0x7a0 [ 2027.790301][ T9269] ? netlink_sendmsg+0x650/0xb40 [ 2027.790321][ T9269] ? skb_put+0x112/0x210 [ 2027.790352][ T9269] netlink_sendmsg+0x6c0/0xb40 [ 2027.790392][ T9269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2027.790417][ T9269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2027.790445][ T9269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2027.790463][ T9269] sock_sendmsg_nosec+0x13a/0x180 [ 2027.790491][ T9269] ____sys_sendmsg+0x54e/0x850 [ 2027.790528][ T9269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2027.790568][ T9269] ? import_iovec+0x73/0xa0 [ 2027.790602][ T9269] ___sys_sendmsg+0x2a5/0x360 [ 2027.790631][ T9269] ? __lock_acquire+0x683/0x2cf0 [ 2027.790664][ T9269] ? __pfx____sys_sendmsg+0x10/0x10 [ 2027.790733][ T9269] ? __fget_files+0x2a/0x420 [ 2027.790759][ T9269] ? __fget_files+0x3a2/0x420 [ 2027.790797][ T9269] __x64_sys_sendmsg+0x1b1/0x290 [ 2027.790831][ T9269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2027.790879][ T9269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.790903][ T9269] do_syscall_64+0x174/0x580 [ 2027.790931][ T9269] ? trace_irq_disable+0x3b/0x140 [ 2027.790957][ T9269] ? clear_bhb_loop+0x40/0x90 [ 2027.790983][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.791004][ T9269] RIP: 0033:0x7f7c2539de59 [ 2027.791025][ T9269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2027.791044][ T9269] RSP: 002b:00007f7c235f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2027.791067][ T9269] RAX: ffffffffffffffda RBX: 00007f7c25625fa0 RCX: 00007f7c2539de59 [ 2027.791083][ T9269] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2027.791096][ T9269] RBP: 00007f7c235f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2027.791113][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.791126][ T9269] R13: 00007f7c25626038 R14: 00007f7c25625fa0 R15: 00007f7c2574fa48 [ 2027.791158][ T9269] [ 2028.121386][ T9274] binder: 9271:9274 ioctl c0306201 200000001040 returned -14 [ 2028.130088][ T9274] binder: 9271:9274 ioctl c0306201 2000000001c0 returned -14 [ 2028.140524][ T9274] binder: 9271:9274 ioctl c0306201 200000000d00 returned -14 [ 2028.197316][ T5741] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 2028.349636][ T5741] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 2028.360059][T19656] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2028.390644][ T5741] usb 4-1: config 127 has no interface number 0 [ 2028.412985][ T5741] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2028.444464][ T5741] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 2028.458474][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.476313][ T5741] usb 4-1: Product: syz [ 2028.491289][ T5741] usb 4-1: Manufacturer: syz [ 2028.502948][ T5741] usb 4-1: SerialNumber: syz [ 2028.524520][T19656] usb 2-1: Using ep0 maxpacket: 32 [ 2028.546365][T19656] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2028.564876][ T9273] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2028.575273][T19656] usb 2-1: config 0 has no interface number 0 [ 2028.591098][T19656] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2028.602436][T19656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.622621][T19656] usb 2-1: Product: syz [ 2028.633961][T19656] usb 2-1: Manufacturer: syz [ 2028.647260][T19656] usb 2-1: SerialNumber: syz [ 2028.667990][T19656] usb 2-1: config 0 descriptor?? [ 2028.673193][ T8199] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2028.684988][T19656] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2028.840392][ T8199] usb 6-1: Using ep0 maxpacket: 8 [ 2028.870018][ T8199] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2028.885570][ T8199] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2028.895774][ T8199] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2028.909026][T19656] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2028.917292][ T8199] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2028.935201][ T8199] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2028.951067][T19656] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2028.965100][ T8199] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2028.986048][ T8199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.016307][ T5741] asix 4-1:127.57: probe with driver asix failed with error -71 [ 2029.096366][ T5741] usb 4-1: USB disconnect, device number 15 [ 2029.247477][ T8199] usb 6-1: usb_control_msg returned -32 [ 2029.273838][ T8199] usbtmc 6-1:16.0: can't read capabilities [ 2029.344072][ T8199] usb 6-1: USB disconnect, device number 21 [ 2029.554311][ T9299] program syz.0.11536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2029.570879][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11537'. [ 2029.586482][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2029.594957][T19656] usb 2-1: USB disconnect, device number 81 [ 2029.626066][T19656] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2029.721642][T19656] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2029.788760][T19656] quatech2 2-1:0.51: device disconnected [ 2030.109878][ T5741] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2030.267283][ T8199] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 2030.287525][ T5741] usb 4-1: Using ep0 maxpacket: 32 [ 2030.314439][ T5741] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.356152][ T5741] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2030.405311][ T5741] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2030.434670][ T5741] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2030.451466][ T8199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2030.469910][ T5741] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2030.489391][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.500233][ T8199] usb 1-1: can't read configurations, error -61 [ 2030.539815][ T5741] usb 4-1: Product: syz [ 2030.554170][ T5741] usb 4-1: Manufacturer: syz [ 2030.570892][ T9319] could not allocate digest TFM handle sha1-generic [ 2030.571011][ T5741] usb 4-1: SerialNumber: syz [ 2030.626431][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2030.647251][ T8199] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 2030.694954][ T5741] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input196 [ 2030.800222][ T8199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2030.808318][ T8199] usb 1-1: can't read configurations, error -61 [ 2030.815842][ T8199] usb usb1-port1: attempt power cycle [ 2030.847276][ T5741] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2030.874566][ T5741] (id 0x00) [ 2031.029557][ T5741] rc_core: IR keymap rc-imon-pad not found [ 2031.046994][ T5741] Registered IR keymap rc-empty [ 2031.057010][ T5741] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2031.070805][ T5741] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2031.123531][ T5741] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 2031.149296][ T5741] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input197 [ 2031.157296][ T8199] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 2031.186681][ T5741] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:16> initialized [ 2031.231733][ T8199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2031.254399][ T8199] usb 1-1: can't read configurations, error -61 [ 2031.409015][ T8199] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 2031.443258][ T8199] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2031.451742][ T8199] usb 1-1: can't read configurations, error -61 [ 2031.460196][ T8199] usb usb1-port1: unable to enumerate USB device [ 2031.712610][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11549'. [ 2031.977279][T19656] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2032.008964][ T9353] netlink: 'syz.5.11551': attribute type 1 has an invalid length. [ 2032.036896][ T9353] bond1: entered promiscuous mode [ 2032.042676][ T9353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2032.054854][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11551'. [ 2032.064554][ T9353] bond1: entered allmulticast mode [ 2032.087650][ T9353] bond1: (slave bridge1): making interface the new active one [ 2032.095380][ T9353] bridge1: entered promiscuous mode [ 2032.101152][ T9353] bridge1: entered allmulticast mode [ 2032.111714][ T9353] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 2032.159368][T19656] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 2032.168212][T19656] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.179815][T19656] usb 3-1: config 0 has no interface number 0 [ 2032.186288][T19656] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 2032.197845][T19656] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 255, setting to 64 [ 2032.209440][T19656] usb 3-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2032.225156][T19656] usb 3-1: config 0 interface 11 has no altsetting 0 [ 2032.233090][T19656] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2032.242417][T19656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.258891][T19656] usb 3-1: config 0 descriptor?? [ 2032.270523][ T9348] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2032.283912][T19656] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 2032.292131][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 2032.303479][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 2032.312622][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 2032.323590][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 2032.331743][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 2032.339624][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 2032.347715][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 2032.359147][T19656] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2032.375095][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 2032.389316][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 2032.398171][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 2032.411893][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 2032.421180][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 2032.430556][T19656] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 2032.446665][T19656] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2032.486914][ T9360] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2032.518344][ T9360] net_ratelimit: 1 callbacks suppressed [ 2032.518360][ T9360] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2032.552735][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11549'. [ 2032.579733][ T9] usb 3-1: USB disconnect, device number 13 [ 2032.601332][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2032.632482][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2032.650601][ T9] keyspan 3-1:0.11: device disconnected [ 2032.661616][ T9359] imon:send_packet: packet tx failed (-71) [ 2032.663099][T19656] usb 4-1: USB disconnect, device number 16 [ 2032.692622][ T9359] imon:vfd_write: send packet #4 failed [ 2033.107746][ T5741] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2033.277002][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11556'. [ 2033.311205][ T5741] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2033.344328][ T5741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2033.399661][ T5741] usb 6-1: config 0 has no interface number 0 [ 2033.439315][ T5741] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2033.457081][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.486719][ T5741] usb 6-1: Product: syz [ 2033.523250][ T5741] usb 6-1: Manufacturer: syz [ 2033.549867][ T5741] usb 6-1: SerialNumber: syz [ 2033.580334][ T5741] usb 6-1: config 0 descriptor?? [ 2033.598483][ T9381] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11558'. [ 2033.630015][ T5741] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 2034.116589][ T9394] could not allocate digest TFM handle sha1-generic [ 2034.117275][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2034.241611][ T8199] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2034.290644][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2034.303273][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2034.312472][ T9] usb 3-1: config 0 has no interface number 0 [ 2034.327974][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2034.343865][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.363898][ T9] usb 3-1: Product: syz [ 2034.374001][ T9] usb 3-1: Manufacturer: syz [ 2034.382616][ T9] usb 3-1: SerialNumber: syz [ 2034.399178][ T9] usb 3-1: config 0 descriptor?? [ 2034.416865][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2034.432469][ T8199] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2034.449949][ T8199] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2034.483236][ T8199] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 2034.502153][ T8199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.516806][ T8199] usb 2-1: Product: syz [ 2034.527609][ T8199] usb 2-1: Manufacturer: syz [ 2034.535408][ T8199] usb 2-1: SerialNumber: syz [ 2034.625364][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2034.668964][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2034.825261][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2034.825724][ T5741] usb 3-1: USB disconnect, device number 14 [ 2034.902358][ T5741] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2034.968144][ T5741] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2035.018512][ T5741] quatech2 3-1:0.51: device disconnected [ 2035.738414][ T5741] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2035.771460][ T8199] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2035.786185][ T9] usb 6-1: USB disconnect, device number 22 [ 2035.818790][ T8199] usb 2-1: cannot setup if 2: error -71 [ 2035.913642][ T5741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2035.934999][ T8199] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 2035.947419][T19656] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2035.952951][ T8199] usb 2-1: USB disconnect, device number 82 [ 2035.960624][ T5741] usb 4-1: can't read configurations, error -61 [ 2036.006887][T24297] udevd[24297]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2036.107954][ T5741] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 2036.137271][T19656] usb 1-1: Using ep0 maxpacket: 8 [ 2036.153602][T19656] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2036.166770][T19656] usb 1-1: config 140 has an invalid interface number: 182 but max is 1 [ 2036.178053][T19656] usb 1-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.200949][T19656] usb 1-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 2036.221894][T19656] usb 1-1: config 140 has no interface number 0 [ 2036.244277][T19656] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 2036.261501][T19656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.271666][T19656] usb 1-1: Product: syz [ 2036.288936][ T5741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2036.304326][T19656] usb 1-1: Manufacturer: syz [ 2036.317228][ T5741] usb 4-1: can't read configurations, error -61 [ 2036.329995][T19656] usb 1-1: SerialNumber: syz [ 2036.335371][ T5741] usb usb4-port1: attempt power cycle [ 2036.534977][ T9424] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11571'. [ 2036.687278][ T5741] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 2036.720682][ T5741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2036.729666][ T5741] usb 4-1: can't read configurations, error -61 [ 2036.877582][ T5741] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 2036.918009][ T5741] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2036.943485][ T5741] usb 4-1: can't read configurations, error -61 [ 2036.974954][ T5741] usb usb4-port1: unable to enumerate USB device [ 2037.087986][ T9435] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11567'. [ 2037.103356][ T9444] openvswitch: netlink: IPv6 tunnel dst address is zero [ 2037.353509][T19656] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 2037.379381][ T5741] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 2037.390195][T19656] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 2037.408942][ T5741] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 2037.424696][T19656] usb 1-1: USB disconnect, device number 28 [ 2037.486262][ T5741] ------------[ cut here ]------------ [ 2037.492317][ T5741] !atomic_read(&kn->count) [ 2037.492330][ T5741] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#1: kworker/1:7/5741 [ 2037.507982][ T5741] Modules linked in: [ 2037.513957][ T5741] CPU: 1 UID: 0 PID: 5741 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 2037.525090][ T5741] Tainted: [L]=SOFTLOCKUP [ 2037.529449][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2037.540182][ T5741] Workqueue: events request_firmware_work_func [ 2037.546808][ T5741] RIP: 0010:kernfs_get+0x72/0x90 [ 2037.551968][ T5741] Code: e8 63 90 52 ff 48 89 df be 04 00 00 00 e8 66 1d c0 ff f0 ff 03 eb 05 e8 4c 90 52 ff 5b 5d c3 cc cc cc cc cc e8 3f 90 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 2037.572059][ T5741] RSP: 0018:ffffc900043676b0 EFLAGS: 00010293 [ 2037.578707][ T5741] RAX: ffffffff8273e201 RBX: ffff888026aaeb40 RCX: ffff88803097dd00 [ 2037.586982][ T5741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2037.595357][ T5741] RBP: 0000000000000000 R08: ffff888026aaeb43 R09: 1ffff11004d55d68 [ 2037.603628][ T5741] R10: dffffc0000000000 R11: ffffed1004d55d69 R12: 1ffff11006667375 [ 2037.611727][ T5741] R13: 1ffff11006667376 R14: ffff888033339bb0 R15: ffff888033339ba8 [ 2037.619785][ T5741] FS: 0000000000000000(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 [ 2037.628864][ T5741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2037.635486][ T5741] CR2: 0000200000090000 CR3: 00000000600f6000 CR4: 00000000003526f0 [ 2037.643673][ T5741] Call Trace: [ 2037.647001][ T5741] [ 2037.650037][ T5741] kobject_add_internal+0x6b9/0xcd0 [ 2037.655289][ T5741] kobject_add+0x163/0x240 [ 2037.659918][ T5741] ? rcu_is_watching+0x15/0xb0 [ 2037.664742][ T5741] ? __pfx_kobject_add+0x10/0x10 [ 2037.669953][ T5741] ? __kmalloc_cache_noprof+0x150/0x660 [ 2037.675547][ T5741] ? kobject_init+0x7f/0x1e0 [ 2037.680185][ T5741] get_device_parent+0x316/0x3a0 [ 2037.685205][ T5741] device_add+0x2d4/0xb80 [ 2037.689584][ T5741] firmware_fallback_sysfs+0x2dd/0xa40 [ 2037.695054][ T5741] ? kfree+0x1c5/0x640 [ 2037.699177][ T5741] _request_firmware+0x1049/0x1780 [ 2037.704314][ T5741] ? __pfx__request_firmware+0x10/0x10 [ 2037.709822][ T5741] ? process_scheduled_works+0xa20/0x14e0 [ 2037.715561][ T5741] ? process_scheduled_works+0xa20/0x14e0 [ 2037.721520][ T5741] request_firmware_work_func+0xac/0x2d0 [ 2037.727199][ T5741] ? rcu_is_watching+0x15/0xb0 [ 2037.731991][ T5741] ? process_scheduled_works+0xa20/0x14e0 [ 2037.737769][ T5741] process_scheduled_works+0xa8e/0x14e0 [ 2037.743387][ T5741] ? __pfx_process_scheduled_works+0x10/0x10 [ 2037.751094][ T5741] ? assign_work+0x3cf/0x5d0 [ 2037.756032][ T5741] worker_thread+0xa47/0xfb0 [ 2037.760677][ T5741] ? __kthread_parkme+0x71/0x1f0 [ 2037.765641][ T5741] kthread+0x388/0x470 [ 2037.769761][ T5741] ? __pfx_worker_thread+0x10/0x10 [ 2037.774896][ T5741] ? __pfx_kthread+0x10/0x10 [ 2037.779578][ T5741] ret_from_fork+0x514/0xb70 [ 2037.784180][ T5741] ? __pfx_ret_from_fork+0x10/0x10 [ 2037.789320][ T5741] ? __switch_to+0xc89/0x1420 [ 2037.794002][ T5741] ? __pfx_kthread+0x10/0x10 [ 2037.798646][ T5741] ret_from_fork_asm+0x1a/0x30 [ 2037.803446][ T5741] [ 2037.806465][ T5741] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2037.813782][ T5741] CPU: 1 UID: 0 PID: 5741 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 2037.824728][ T5741] Tainted: [L]=SOFTLOCKUP [ 2037.829081][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2037.839141][ T5741] Workqueue: events request_firmware_work_func [ 2037.845346][ T5741] Call Trace: [ 2037.848643][ T5741] [ 2037.851674][ T5741] vpanic+0x56c/0xa60 [ 2037.855679][ T5741] ? __pfx__printk+0x10/0x10 [ 2037.860276][ T5741] ? __pfx_vpanic+0x10/0x10 [ 2037.864783][ T5741] ? is_bpf_text_address+0x292/0x2b0 [ 2037.870243][ T5741] ? is_bpf_text_address+0x26/0x2b0 [ 2037.875456][ T5741] panic+0xc5/0xd0 [ 2037.879184][ T5741] ? __pfx_panic+0x10/0x10 [ 2037.883631][ T5741] ? ret_from_fork_asm+0x1a/0x30 [ 2037.888572][ T5741] __warn+0x315/0x4c0 [ 2037.892656][ T5741] ? kernfs_get+0x72/0x90 [ 2037.897008][ T5741] ? kernfs_get+0x72/0x90 [ 2037.901372][ T5741] __report_bug+0x331/0x530 [ 2037.905883][ T5741] ? kernfs_get+0x72/0x90 [ 2037.910235][ T5741] ? __pfx___report_bug+0x10/0x10 [ 2037.915377][ T5741] ? kernfs_add_one+0x480/0x5e0 [ 2037.920243][ T5741] ? up_write+0x19f/0x4a0 [ 2037.924586][ T5741] ? kernfs_add_one+0x480/0x5e0 [ 2037.929454][ T5741] ? kernfs_get+0x72/0x90 [ 2037.933897][ T5741] report_bug+0x16a/0x220 [ 2037.939117][ T5741] ? kernfs_get+0x72/0x90 [ 2037.943453][ T5741] ? kernfs_get+0x74/0x90 [ 2037.947783][ T5741] handle_bug+0x9c/0x200 [ 2037.952051][ T5741] exc_invalid_op+0x1a/0x50 [ 2037.956617][ T5741] asm_exc_invalid_op+0x1a/0x20 [ 2037.961495][ T5741] RIP: 0010:kernfs_get+0x72/0x90 [ 2037.966459][ T5741] Code: e8 63 90 52 ff 48 89 df be 04 00 00 00 e8 66 1d c0 ff f0 ff 03 eb 05 e8 4c 90 52 ff 5b 5d c3 cc cc cc cc cc e8 3f 90 52 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 65 [ 2037.986079][ T5741] RSP: 0018:ffffc900043676b0 EFLAGS: 00010293 [ 2037.992187][ T5741] RAX: ffffffff8273e201 RBX: ffff888026aaeb40 RCX: ffff88803097dd00 [ 2038.000179][ T5741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2038.008157][ T5741] RBP: 0000000000000000 R08: ffff888026aaeb43 R09: 1ffff11004d55d68 [ 2038.016155][ T5741] R10: dffffc0000000000 R11: ffffed1004d55d69 R12: 1ffff11006667375 [ 2038.024154][ T5741] R13: 1ffff11006667376 R14: ffff888033339bb0 R15: ffff888033339ba8 [ 2038.032155][ T5741] ? kernfs_get+0x71/0x90 [ 2038.036527][ T5741] kobject_add_internal+0x6b9/0xcd0 [ 2038.041744][ T5741] kobject_add+0x163/0x240 [ 2038.046169][ T5741] ? rcu_is_watching+0x15/0xb0 [ 2038.050938][ T5741] ? __pfx_kobject_add+0x10/0x10 [ 2038.055875][ T5741] ? __kmalloc_cache_noprof+0x150/0x660 [ 2038.061600][ T5741] ? kobject_init+0x7f/0x1e0 [ 2038.066197][ T5741] get_device_parent+0x316/0x3a0 [ 2038.071158][ T5741] device_add+0x2d4/0xb80 [ 2038.075527][ T5741] firmware_fallback_sysfs+0x2dd/0xa40 [ 2038.080989][ T5741] ? kfree+0x1c5/0x640 [ 2038.085061][ T5741] _request_firmware+0x1049/0x1780 [ 2038.090190][ T5741] ? __pfx__request_firmware+0x10/0x10 [ 2038.095664][ T5741] ? process_scheduled_works+0xa20/0x14e0 [ 2038.101379][ T5741] ? process_scheduled_works+0xa20/0x14e0 [ 2038.107101][ T5741] request_firmware_work_func+0xac/0x2d0 [ 2038.112857][ T5741] ? rcu_is_watching+0x15/0xb0 [ 2038.117628][ T5741] ? process_scheduled_works+0xa20/0x14e0 [ 2038.123345][ T5741] process_scheduled_works+0xa8e/0x14e0 [ 2038.128911][ T5741] ? __pfx_process_scheduled_works+0x10/0x10 [ 2038.134891][ T5741] ? assign_work+0x3cf/0x5d0 [ 2038.139480][ T5741] worker_thread+0xa47/0xfb0 [ 2038.144090][ T5741] ? __kthread_parkme+0x71/0x1f0 [ 2038.149055][ T5741] kthread+0x388/0x470 [ 2038.153137][ T5741] ? __pfx_worker_thread+0x10/0x10 [ 2038.158251][ T5741] ? __pfx_kthread+0x10/0x10 [ 2038.162861][ T5741] ret_from_fork+0x514/0xb70 [ 2038.167454][ T5741] ? __pfx_ret_from_fork+0x10/0x10 [ 2038.172566][ T5741] ? __switch_to+0xc89/0x1420 [ 2038.177253][ T5741] ? __pfx_kthread+0x10/0x10 [ 2038.181867][ T5741] ret_from_fork_asm+0x1a/0x30 [ 2038.186655][ T5741] [ 2038.189974][ T5741] Kernel Offset: disabled [ 2038.194315][ T5741] Rebooting in 86400 seconds..