last executing test programs: 4m50.685381746s ago: executing program 4 (id=937): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002900)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 4m50.603590123s ago: executing program 4 (id=938): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) flock(0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m50.272661741s ago: executing program 4 (id=940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 4m49.415374052s ago: executing program 4 (id=944): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002900)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (fail_nth: 2) 4m49.272867441s ago: executing program 4 (id=945): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000003000000000200000057d70000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) move_mount(r4, &(0x7f0000000000)='\x00', r2, &(0x7f0000000000)='\x00', 0x44) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) syz_emit_ethernet(0x56, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x0, 0x8, 0x48, 0x66, 0x2, 0x0, 0x11, 0x0, @remote, @private, {[@generic={0x0, 0xa, "3a199299d7c7e93e"}, @lsrr={0x83, 0x3, 0x6d}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x6, [{@empty, 0x9}, {@remote}]}]}}, {0x4e21, 0x4e22, 0x8}}}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4m47.90856106s ago: executing program 4 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f000009de40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x1, 0x0, 0xfffffffd, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x14, &(0x7f00000001c0)={0x40, 0x8, 0x69, {0x69, 0x31, "a008bb8e97b95690dc09bf41941761cf367f078c30d2c264b6d0333c493e932ad908a4b5a11efc2ae49f58f2e0f17ca03d783b3923b9ab03b102968f013fdf58d8e56d490fbaaaf4cb7d2e63a3d1eb0e4a2e91a34c6a16c83fda988f8ed57fb481120b4c6b8f0d"}}, &(0x7f0000000900)={0x0, 0x3, 0x94, @string={0x94, 0x3, "0be263cc2f21009007cb67d46ebb6bf21fd6f0f77b4432ee6473fb25400f49e6c9803b52907b67cee8536dfffa0740f6086f9a7dcf49b3dd4774fbf30ff8b663ce26b6413b7649b17affd99ac83169749f405aa801790f249bfa22998f34587a3ddff8692156909c62b4fa441224800b01049fb70a3cfef0119636155a4680fe0ec66a223fed7fdbd1bbb03eccb51b264bca"}}, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x48, 0x1, {0x22, 0x9fb}}}}, &(0x7f0000000700)={0x18, &(0x7f00000008c0)=ANY=[@ANYRES16=r4], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000680)={0x20, 0x1, 0x8, "c42a009867e3d34a"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x7}}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2000000000000183, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d57bdfa200000000040000008510"], &(0x7f0000000300)='GPL\x00', 0xe, 0xff8, &(0x7f0000000cc0)=""/4088, 0x41085, 0x5b}, 0x94) listns(&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000040)=[0x0], 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r5, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}, 0xc03e0000}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ef17a3600000090000010902240003000921fdff08012223000905810340000c08fb00"/54], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0xc) 4m32.779068301s ago: executing program 32 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f000009de40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x1, 0x0, 0xfffffffd, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x14, &(0x7f00000001c0)={0x40, 0x8, 0x69, {0x69, 0x31, "a008bb8e97b95690dc09bf41941761cf367f078c30d2c264b6d0333c493e932ad908a4b5a11efc2ae49f58f2e0f17ca03d783b3923b9ab03b102968f013fdf58d8e56d490fbaaaf4cb7d2e63a3d1eb0e4a2e91a34c6a16c83fda988f8ed57fb481120b4c6b8f0d"}}, &(0x7f0000000900)={0x0, 0x3, 0x94, @string={0x94, 0x3, "0be263cc2f21009007cb67d46ebb6bf21fd6f0f77b4432ee6473fb25400f49e6c9803b52907b67cee8536dfffa0740f6086f9a7dcf49b3dd4774fbf30ff8b663ce26b6413b7649b17affd99ac83169749f405aa801790f249bfa22998f34587a3ddff8692156909c62b4fa441224800b01049fb70a3cfef0119636155a4680fe0ec66a223fed7fdbd1bbb03eccb51b264bca"}}, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x48, 0x1, {0x22, 0x9fb}}}}, &(0x7f0000000700)={0x18, &(0x7f00000008c0)=ANY=[@ANYRES16=r4], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000680)={0x20, 0x1, 0x8, "c42a009867e3d34a"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x7}}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2000000000000183, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d57bdfa200000000040000008510"], &(0x7f0000000300)='GPL\x00', 0xe, 0xff8, &(0x7f0000000cc0)=""/4088, 0x41085, 0x5b}, 0x94) listns(&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000040)=[0x0], 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r5, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}, 0xc03e0000}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ef17a3600000090000010902240003000921fdff08012223000905810340000c08fb00"/54], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0xc) 11.876521855s ago: executing program 0 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x8000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00 \x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 11.438687189s ago: executing program 0 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01f70068000000e0e4c112c2bedbcb"], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="f0268fdc023f00000000003f0000180012800b0001006772657461700000080002800400120008000a00c675fb4c21ead8f38075333c895350f3dbb22f3a55729de09f2afb6fb35f5812d30f300099", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f727400003d2cf156e5009ce161817c7642fbb08d0fbf2b"], 0x60}}, 0x0) r8 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMWRITEOOB64(r8, 0xc0184d15, &(0x7f0000000500)={0x5, 0x0, 0x58, &(0x7f0000000480)="1179d1515d247e94689cdd04a87b34531238ae0e31db9c76b7aa057d5b73b1740e243f06162a9162dbc898a99989e47790392217db4ee2ff901d2531c5eec86f11d1bb04ded2ffbd5533e47166b8a2294cf7bb7fa4a1ff57"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$unix(0x1, 0x3, 0x0) close(r10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r11, &(0x7f00000003c0)={0x2c, 0x18, r13}, 0x10) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.245947538s ago: executing program 0 (id=2341): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendto(r1, &(0x7f0000000000)="2c0000000314050000000000000000000900020073797a30000000000800410072786500070033006c6f0000", 0x2c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xff}, {}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x40}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) listen(r2, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) accept4(r2, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0xc}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYRESOCT=r8], 0x2c}, 0x1, 0x0, 0x0, 0x4044011}, 0x400004c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0xf20, 0x54, 0x0) r10 = socket(0x2b, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.861661532s ago: executing program 0 (id=2345): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect(0x0, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0100008a35aa7cf9b8340b1a5857b67a1d31d5eb57abc31a249a0d0000003219bfe87611a590259c70fd8b0be2ae5c0225dbe14fe3de41172bbcefb971b5fe029adeb5815632c43457", @ANYRES16=r3, @ANYBLOB="050000000046000000001300000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) syz_usb_connect(0x3, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040d0104080662"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xad, 0x91, 0x8d, 0x20, 0xb57, 0x89b6, 0xc8fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x0, 0x4, "", [{{0x9, 0x4, 0x25, 0x8, 0x0, 0x3, 0x1, 0x2, 0x14}}]}}]}}, 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001a40)={&(0x7f00000019c0)=[{0x52, 0x7400, 0x0, 0x0}], 0x1}) syz_open_dev$loop(&(0x7f0000000040), 0x800, 0x2000) 8.753322798s ago: executing program 2 (id=2346): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x20000, 0x10080, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) fcntl$getown(r0, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 7.295130467s ago: executing program 2 (id=2353): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r0, r0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 6.828606052s ago: executing program 2 (id=2355): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendto(r1, &(0x7f0000000000)="2c0000000314050000000000000000000900020073797a30000000000800410072786500070033006c6f0000", 0x2c, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xff}, {}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x40}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) listen(r2, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) accept4(r2, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0xc}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYRESOCT=r8], 0x2c}, 0x1, 0x0, 0x0, 0x4044011}, 0x400004c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0xf20, 0x54, 0x0) r10 = socket(0x2b, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.184482511s ago: executing program 1 (id=2359): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x9, 0xd4, 0x8, 0x800, 0xffffffffffffffff}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xc15, 0x1, 0x400, 0xff6, 0x2, 0x6, 0x5445, 0xe26, 0x8, 0x0, 0x10001, 0x4, 0x1, 0x2, 0x666, 0x6], 0x0, 0x83002}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x8, 0x857, {{0x22, 0x4, 0x2, 0xf, 0x88, 0x66, 0x0, 0x2, 0x2f, 0x0, @empty, @empty, {[@noop, @cipso={0x86, 0xf, 0x3, [{0x5, 0x4, "dbe9"}, {0x6, 0x5, "1eb038"}]}, @end, @timestamp_addr={0x44, 0x54, 0x80, 0x1, 0xd, [{@rand_addr=0x64010101, 0x7}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xee4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@loopback, 0x800}, {@loopback, 0x1d}, {@empty, 0xffff}, {@remote, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010100, 0x1}]}, @lsrr={0x83, 0xf, 0xb3, [@empty, @empty, @rand_addr=0x64010101]}]}}}}}) (async, rerun: 64) r5 = syz_clone(0x800000, &(0x7f0000000300)="edd819694ba2d97e543ebef913fb5b916065b010f2ae36314b7b7f978e15f448322f5a06c20210cb40afc9fbcec143c18f24fc96b604e3654e08edff", 0x3c, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="81d605e2a7ce6fba56f43065268fb4813e6efae475b79508b3ac5559d2555c29cdaed65fd1de170357b60979556b28651eb697f3e0b6e5fbbf00793b5e1c00be4ee0983d644d01ff6b59d031dc19f6b90b08b971e287890e991488ff5525b940961e67c047bc52da3aa04a4efbc424e640b991ab9288fc52a81021ab3305512f109e542a7804dbb7c0155755d2a5258bdb6428ab756be639edded42ad39718591bda393acab58607c7c2a03fc3bf198c94ca345a22c440db2001e5316c6f1ca70dd653bec06e0dd580e2e94dd2d5f843b11c5cab86b61f") (rerun: 64) sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10001200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@bridge_setlink={0x84, 0x13, 0x20, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x61722, 0x401}, [@IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_PROMISCUITY={0x8}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_TTL={0x5, 0x8, 0x7}, @IFLA_GRE_TTL={0x5, 0x8, 0x7}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_TOS={0x5, 0x9, 0x8}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) process_vm_writev(r5, &(0x7f0000000980)=[{&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f00000007c0)=""/133, 0x85}, {&(0x7f0000000880)=""/211, 0xd3}], 0x4, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/140, 0x8c}, {&(0x7f0000000a80)=""/82, 0x52}], 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000b40)={"205101dd9251e14df5aed9f68934a174a76dc858aa86155e5314f64b39f8599711a1a258b9d363026e871ca9faa8b52a0b6ba473aeb0c1f5fc7350c3ea43364bc2e7c0e9c25be3411ad3d709ef586472082768396779146fe6b6cbaa87b37a05eecf53655626be0bf2e96bdc1d6674ba01d8a41c27ae543384b5c781911afc9dbe8d608f6e6d8613a72a62b905f0b7205a4f9ffb8729686074a25b3dcfd1b78677690ef401cc3ac4f2e89c700c296bef3209aefe5ab6da46c26cec811578cc3a8eed2d7f455650f1ade21a7362b7b88e8d584b8ea0a13dde5ff4c7f4c7aa58a80963925cf4747bebdd2a5d80233779260d4feef7dc21056e5153f51af10971fe15a0fd6dc94218a296b172b788c45562178670b77485329733f16dd970c592be7466bca8f0e8ea6260527f501b6ad4728ecbacaa122ab6eb8b7c213031fafedae34c02c3db6ff77e47d6adf10d383ffa6fa928797a6eed6b3e6c7be72a9b8c69c33838078d91f1184b9d77e001dc851f2b7aabb88e029c2af12bd64ab1483a0cd35af47f5561780aba8b7d8921d0debcb74a212ac3c98f4b54834a649e375c263d015c764e45ead66d4a223d271ca48d7fba1b2b51ac53f0e43d40d5c61f2a1313325ff7c0f75dc7db770b8afa9272dbc0b0d03bc09ed7a210f29d293e92c271ea2c0485d9850026a142076c6c8f60c052c177867d4f1bc0aecfe1492c195687797a49402113f1c324a11ef267940949374cb32562b42df8ac3fd379a51b83ec6ae496edf8bc2e227bc26b0f4319a21fcffa544e7c0d575a69ec4651a2b2c4a22217ace83ac9e6002df918d0cfdab2740ba23fe40a9feea5994856f8f204275f4b7186baca5bbce3191863051ccc1033d78c90e28da2f0452d41e9b0d85b7397c0ced3648bf2040ab10ed4d1f26672457877cea22f1757757d0a4f67cd581ca0a37733e485a70baa1e2b8c3abd03a9644ea53ac4ef62b5d08d39f5aaf0a122935cd220725110b845da4f1a5e3c3ad92bebb84e86a5142ae17da3f99ca4f62f3068203f3ea846b17ecd73aba319f5b31cc08a288bae41e575c8fc7fd63e2416d82a61b57952b7140ea84a3fed73970989902779a3f7fc5ab42f1123336b33cf973664ccf97cb3a6dadbc7b335305ea91144b572368f369a8d1642b633ba9bc2ab82615648c2f7f93584c76d6a881bd9d1f2110e89094038385422130ada41d8c715090f0927224285560b00dfbc48663ee5bb29fb40fdf2efd587f1d4cbaf8a8599933481cb78055097ac91041badcd02626c79e58f42dd9086d33e06cbf04155927a3ba91227969e4b2bfc5da00c528c4acbf0ad5373134a179a12b7d6496d6c9d86adc855e07b006e0419f68676c04e0d078aae74ed3aaa70b09acba67647ad86df38a4e71e1ee56dfa2d1b6d82b3e67b8a4b03083891060117d74ada751cf0"}) iopl(0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001140)={0xc, &(0x7f0000000f40)={0x40, 0x23, 0xe6, {0xe6, 0x30, "f0f1c8f3cf933d483a4cbc905d3bcf1dae23c21b5c146cfae8d398deb8a70466109a84dea2524c3b52309cfb035dda72157a9fe38a0f14c82e72be541beec52985a6fa4034d0237ca921b76f1f6db1409735ed6dce5a7feee2b18f22d36e3dddfe34b7df4ff0190f55b3af76420a899fa40ee07e654cf7d25e454801cd2fe7a223ee62c76c9efdd086bb090f572d627a9f2f83e77c45f82d693a6a4525a84257b5f252fa0d811ce06c16a078f7ecb845828d3219bcbf25558268bc3e939cf0bd61fb738923565daf6fd1ab13e2b0318e52944e83da6a9658e2efd9876aa68cb4952a4816"}}, &(0x7f0000001040)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "de17deeb824965485c41e6c996d50a75c44ec63640d925d74014f50f77b1884549d249d22329781c0ae67b10901d66d4e98ea10525384ff4ec48d8f3877622743b8aacec61f2445483318d673379c5de492cf7af336ffda680ad6e7bc074e0c1ab25652ef6b6785fb604a451788595b2385851fc35b0677351d1af1851bcd537a4a888575736aa48865091b0420227995ff3e8ae972d9caa7e4fb8467a5607db85688b87233ae781e036c806525a26cbc7b8fbff2cb5534e6ade0e6c16d92dae34b37096bd55d45cd09f20fc70ed95c6fc587e097ebff64c4d7e736f4e3960ff948f52dddfc7ec1b0108c6156d224e5dc345be5df9"}}}, &(0x7f0000001380)={0x24, &(0x7f0000001180)={0x0, 0x15, 0x11, "5587d8aba6ab1ca108648317f2612ccc51"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001240)={0x20, 0x81, 0x3, "e26dab"}, &(0x7f0000001280)={0x20, 0x82, 0x2, "45c3"}, &(0x7f00000012c0)={0x20, 0x83, 0x1, "fd"}, &(0x7f0000001300)={0x20, 0x84, 0x1, 'O'}, &(0x7f0000001340)={0x20, 0x85, 0x3, "f68002"}}) (async) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000013c0)={[0x1, 0x3]}, &(0x7f0000001400), &(0x7f00000014c0)={r8, r9+10000000}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001500)) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r10, r4, 0x25, 0x0, @val=@netfilter={0x5, 0x1, 0x10001}}, 0x20) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, r11, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x15}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) io_uring_enter(r10, 0x1408, 0x9a39, 0x0, &(0x7f0000001740)={[0x7, 0x5]}, 0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x1404b24a9d871138) io_uring_register$IORING_REGISTER_FILES2(r10, 0xd, &(0x7f0000001c00)={0x5, 0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001880)=""/9, 0x9}, {&(0x7f00000018c0)=""/133, 0x85}, {&(0x7f0000001980)=""/196, 0xc4}, {&(0x7f0000001a80)=""/154, 0x9a}, {&(0x7f0000001b40)=""/4, 0x4}], &(0x7f0000001bc0)=[0x8, 0x7]}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000001c40)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r10, &(0x7f0000001e00)={&(0x7f0000001c80)={0x1d, r13, 0x3, {0x1, 0xff}, 0xff}, 0x18, &(0x7f0000001dc0)={&(0x7f0000001cc0)="be390970c362d2c8a113c35452d87d71d916548d31fb14b3539e8d31381d121f77162a806180af43fd38ee03eed677dd8118a48e06bd7a56d1877c9d0b7be4544188963614f5be5e5fc5a8b773cc69d35c46a8c8dd0cb5c6f82725c33e4763c822c79bb2ae930229e7d1ce824114da3bea8ddbf63fbceb776c0e428b0ff73df837add75adfa4f1a5d9463682325210e91273d23b2c170593ed37123119ce7ce7833ed15ac06621a70c34ec73eb5303ef49f6c1d63b745ae499c0a01c2180b8a16250a85d2f19", 0xc6}, 0x1, 0x0, 0x0, 0x80}, 0x4000050) 5.805028784s ago: executing program 5 (id=2362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01f70068000000e0e4c112c2bedbcb"], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="f0268fdc023f00000000003f0000180012800b0001006772657461700000080002800400120008000a00c675fb4c21ead8f38075333c895350f3dbb22f3a55729de09f2afb6fb35f5812d30f300099", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f727400003d2cf156e5009ce161817c7642fbb08d0fbf2b"], 0x60}}, 0x0) r8 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMWRITEOOB64(r8, 0xc0184d15, &(0x7f0000000500)={0x5, 0x0, 0x58, &(0x7f0000000480)="1179d1515d247e94689cdd04a87b34531238ae0e31db9c76b7aa057d5b73b1740e243f06162a9162dbc898a99989e47790392217db4ee2ff901d2531c5eec86f11d1bb04ded2ffbd5533e47166b8a2294cf7bb7fa4a1ff57"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$unix(0x1, 0x3, 0x0) close(r10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.630940239s ago: executing program 0 (id=2363): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0xfffffffffffffd60) lseek(r0, 0xfffffffffffffff5, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000200)={0x65, 0x4}) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8001) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) 5.606402218s ago: executing program 2 (id=2364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000044) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x94) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r6) execve(0x0, 0x0, 0x0) madvise(&(0x7f00006cf000/0x4000)=nil, 0x4000, 0x12) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) 4.877152142s ago: executing program 3 (id=2366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a31000000002c0000000b0a010400000000000000000a0000020900010073797a31000000000c0010400400000000000002140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 4.875150648s ago: executing program 5 (id=2367): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000300)=""/110, 0x6e) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x2f, &(0x7f00000000c0)={@empty, @multicast, @void, {@generic={0xf8, "ffb58e3eba6f53f4667791612dc68ea40a595ed0e0731d5cfba2f7a59e1611bde4"}}}, &(0x7f0000000100)={0x1, 0x1, [0x802, 0x1e4, 0x3ae, 0xf7e]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) 4.502248791s ago: executing program 3 (id=2368): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000300)=""/110, 0x6e) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x2f, &(0x7f00000000c0)={@empty, @multicast, @void, {@generic={0xf8, "ffb58e3eba6f53f4667791612dc68ea40a595ed0e0731d5cfba2f7a59e1611bde4"}}}, &(0x7f0000000100)={0x1, 0x1, [0x802, 0x1e4, 0x3ae, 0xf7e]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) 3.748651052s ago: executing program 1 (id=2369): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x14) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x27) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.674218479s ago: executing program 5 (id=2370): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x14) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000000200)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffc) unshare(0x2010a00) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, 0x0) r3 = socket$inet(0x2, 0x4, 0x340) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000000)="fc61e39b1cc74241599709b7d54d58fda4170e63b1821c7c9ba95ee1823a1c90bbd02493fced640681d1f15cc604fb07f202", 0x32) sendfile(r1, r1, 0x0, 0x20000005) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) readlinkat(r5, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', &(0x7f00000000c0)=""/36, 0x24) syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) sendfile(r4, r1, 0x0, 0x1002000ff) r6 = openat$cgroup_int(r0, &(0x7f0000000980)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x27) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x801, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) 3.364630674s ago: executing program 3 (id=2371): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002440)={r0, 0x58, &(0x7f00000023c0)}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x1, 0x5, 0x5, &(0x7f0000000040)={0xe, "810556c721000000000000000000fd0000000068c08c8e00"}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000002280)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0245720, &(0x7f0000000180)) ioctl$KVM_GET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000200)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xfffffffffffffffd}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "8dee0d9a28ba4be6579b1dffff6a1d73f2000000ffffffead88b2e9c00"}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r10, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r10, 0x29, 0x6, &(0x7f0000000000)=""/19, &(0x7f0000000240)=0x13) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xffffff4f, @loopback, 0x9ed}, r9}}, 0x30) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x36}, 0x94) write(r2, &(0x7f00000022c0)="ef6bceb377a43ad14e5c4763545d0fad074f2fb34440f383f56c4b7e85f9a5da93b2b8a134489fc29625763cb6e70ee37a288f903f1a7e2750a1ffe2bb613727e93283ceed32be3b1d1a3ddee9a58f4d7207fb7d8c0850e4bbeced954e6026cefa79f52f857edb84aba1efb3686657de197a7ce7b4dd214fcfcf4e474322ee408d5cd507d2129fddd49c40043a7550db977028e4ec8106549f9140d56de121cfe80b095eed82811c1171c6ba59a36970d55d94aaa1fa78c95a1264fc0d81d580a56783c2e8f4fa281cc0724f2916b1774b77086042fddbebe70cf2b5533e056fb8d558e05aa7b97220a6a7d12182f5304ac55d", 0xf3) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.490729586s ago: executing program 1 (id=2372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x1f, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) 2.264737377s ago: executing program 0 (id=2373): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect(0x0, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0100008a35aa7cf9b8340b1a5857b67a1d31d5eb57abc31a249a0d0000003219bfe87611a590259c70fd8b0be2ae5c0225dbe14fe3de41172bbcefb971b5fe029adeb5815632c43457", @ANYRES16=r3, @ANYBLOB="050000000046000000001300000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) syz_usb_connect(0x3, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040d0104080662"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xad, 0x91, 0x8d, 0x20, 0xb57, 0x89b6, 0xc8fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x0, 0x4, "", [{{0x9, 0x4, 0x25, 0x8, 0x0, 0x3, 0x1, 0x2, 0x14}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000001a40)={&(0x7f00000019c0)=[{0x52, 0x7400, 0x0, 0x0}], 0x1}) syz_open_dev$loop(&(0x7f0000000040), 0x800, 0x2000) 1.900397162s ago: executing program 5 (id=2374): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb82a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x1, 0x0, 0x0, 0x3, 0x8000000000000000, 0x80000000}) r3 = openat$audio(0xffffff9c, &(0x7f0000000200), 0xc0082, 0x0) read$snapshot(r0, &(0x7f0000000240)=""/34, 0x22) clock_gettime(0x5, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x80}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffff6f17}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000880) r6 = getpgid(0xffffffffffffffff) prlimit64(r6, 0xe, &(0x7f0000000440)={0xffff, 0x3ff}, &(0x7f0000000480)) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10080, 0x30) syz_open_dev$vim2m(&(0x7f00000014c0), 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001500)) r8 = openat$fuse(0xffffff9c, &(0x7f0000001540), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001580)={0x2020}, 0x2020) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003640)={'ip6tnl0\x00', &(0x7f00000035c0)={'syztnl1\x00', 0x0, 0x9f3fe4dc37064011, 0xf8, 0x8, 0x2, 0x28, @remote, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000, 0x1, 0x79ac, 0x1f2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000003740)={'tunl0\x00', &(0x7f0000003680)={'ip_vti0\x00', r10, 0x10, 0x7, 0x8, 0x8, {{0x27, 0x4, 0x0, 0x2c, 0x9c, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @local, {[@generic={0x4f, 0xb, "ca1dee23fe4f412fa3"}, @end, @cipso={0x86, 0x47, 0x1, [{0x7, 0x8, "1483ab43e886"}, {0x0, 0x6, "b2e2d4e1"}, {0x5, 0xe, "b20ccb13e7bd89901565b71e"}, {0x6, 0x8, "fc136764eb75"}, {0x1, 0x9, "4e66238da682d6"}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x6, "73cef868"}, {0x0, 0x5, '47N'}, {0x1, 0x5, "2ea574"}]}, @generic={0x7, 0xc, "81b667af393ce7f9df29"}, @noop, @ssrr={0x89, 0xf, 0xfc, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2]}, @timestamp={0x44, 0x18, 0x5e, 0x0, 0x9, [0xfffffff7, 0x4, 0xe3c, 0x2, 0xfffffffd]}]}}}}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4038587a, &(0x7f0000003900)={{r8, &(0x7f0000003780)='nl80211\x00', 0x107081, &(0x7f00000037c0)={@align=0xfff, {0xf, 0xd, 0x7, 0x1da}}, 0x4, &(0x7f0000003800)={@_ha_fsid}, &(0x7f0000003840)=0xfffffff8}, {[0x80000000, 0x7, 0x2, 0x5]}, 0x7, 0x7e, &(0x7f0000003880)=""/126}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81e8943c, &(0x7f0000003940)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000003b40)={{r11}, r12, 0x0, @unused=[0x8, 0x8000000000000001, 0x0, 0x1], @subvolid=0x1}) fcntl$notify(r0, 0x402, 0xe) ioctl$PPPIOCDISCONN(r7, 0x7439) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000004b40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004c00)) fsetxattr$trusted_overlay_opaque(r11, &(0x7f0000004c40), &(0x7f0000004c80), 0x2, 0x3) mq_timedsend(r1, &(0x7f0000004cc0)="a57804baa0b2fe7e439c95d6ccc7aec05ee919e983346b1adf037cd093e7f01f1effe3d4e489e005e598b268838e5e1ae9849feba046fa58939b8b4bf6ad2a336bedd6677cad14f195bdf6a1abc43f8094e4b0ece6db8738c35727b9d76165094ceea581d755ecf3843080a03541e94330fdee1ac7bfc056d862de9c7577607bfdcc9cef326e12d433a3a55bee11260fc56b350d182be1bcd35e26961c17837c3d236174eb1dc937bdd6616942535373", 0xb0, 0xd, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.493001143s ago: executing program 1 (id=2375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) accept4(r3, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000fedbdf25000000000800076dfdadca007ac13f9d7d5a0591da49aa1f91dd415e2d19d0fa86d4c8554a2cd16c7436a74f1c37a2226a68beefc98e4b776662b3d3a15a0dbbde116b5a8d84d682a0f4b84af08cb0fb472dcebfa20b1a20b96c8659b699bc93e23fe88fb8f3d9ff14eecf148dff906f9f041630d040d88ea3b628c99a5d71a82c622c45ce7ae67efee6e2af12d16e73a10938ca3b7ae9e78bb6286a54ba8732842d2f260e81c6da612dfd19e9ed38137258aad4268ba81137e8bce1709496b9342e7556786b84ba4db6a3da50ee", @ANYRES32=r6, @ANYBLOB="080009000200000008000200010000000c00030000000000000000000800080002000000080009000100000008000500ac1414bb0800080002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xb4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x4000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) write(r2, &(0x7f0000000380)="fccbe45e5c7a65f2d2aeae36", 0xffffffed) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) setxattr$incfs_id(0x0, 0x0, &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r9 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x98223, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r11, 0x8912, &(0x7f0000002c00)=@req={0x20, &(0x7f00000000c0)={'pim6reg0\x00', @ifru_flags=0x8000}}) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) 1.195836831s ago: executing program 2 (id=2376): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x7, &(0x7f00000009c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0042, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x2, {0x1, 0xff, 0x1}, 0x1}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x3, 0x7, 0x4, 0x3, 0x3, "deb6dd19dfad950e223890d8ff56c2c0b23728", 0x3, 0xade}) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0xff1f, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x3e000000) 880.022309ms ago: executing program 3 (id=2377): socket$netlink(0x10, 0x3, 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0x4c000) 876.731054ms ago: executing program 1 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a31000000002c0000000b0a010400000000000000000a0000020900010073797a31000000000c0010400400000000000002140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 820.6372ms ago: executing program 5 (id=2379): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000400)="940000004200010002000000000000000301fffd102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c0002000800030001000000100004e466778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x40000, 0x0, 0x0) 580.096021ms ago: executing program 2 (id=2380): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x2, 0xca01, 0x0, 0x0}], 0x1}) (fail_nth: 2) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 425.269019ms ago: executing program 3 (id=2381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) 372.26394ms ago: executing program 5 (id=2382): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000300)={0xffff5712, 0x3, 0xd}, 0xc) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1afa41) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f", 0x7e, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) gettid() r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r3) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000780)={0x9d8, r9, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x998, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c756a48acf9b2945cc32efb3277a3166c68eb2ac3112795bead06cd1821c10c4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e22f5a32021056eab3214c555aefc7eb7b8447f2c680ff2e9f9eb750d7f915ca"}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc845}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x320, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x240, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x8}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @remote, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe, @remote, 0x3f35}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75eb6500fed04e9c713faa5b4f34fbf254000000000000006af68ee200"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c912f38a286d238054e5d4674c96a731e9dc14abeb9bcee5361280bfdaec56fb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9886ba422ab3bf0466d9a5d5c978449d3a9cee445480c865d732230c7d1458bd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @empty, 0x130}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffc0}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) 137.422823ms ago: executing program 3 (id=2383): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0xfffffffffffffd60) lseek(r0, 0xfffffffffffffff5, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000200)={0x65, 0x4}) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8001) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) 0s ago: executing program 1 (id=2384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0x4000}], 0x400000000000284, 0xf00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0xfffffffe, 0x1, 0x345}}]}]}}}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): _id[12564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 496.611030][ T5733] usb 4-1: USB disconnect, device number 71 [ 497.236747][T12591] bridge0: port 1(syzkaller0) entered blocking state [ 497.242557][T12591] bridge0: port 1(syzkaller0) entered disabled state [ 497.242680][T12591] syzkaller0: entered allmulticast mode [ 497.270742][T12591] syzkaller0: entered promiscuous mode [ 497.365503][T12590] syzkaller0 (unregistering): left allmulticast mode [ 497.366196][T12590] syzkaller0 (unregistering): left promiscuous mode [ 497.366276][T12590] bridge0: port 1(syzkaller0) entered disabled state [ 497.373533][ T5733] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 497.551175][T12597] dvmrp6: entered allmulticast mode [ 497.558562][T12599] syz_tun: entered allmulticast mode [ 497.564443][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 497.570347][ T5733] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 497.592227][ T5733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.592284][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.617219][ T5733] usb 3-1: config 0 descriptor?? [ 497.651287][ T5733] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 497.769762][T12604] batadv_slave_0: Caught tx_queue_len zero misconfig [ 497.771035][T12604] FAULT_INJECTION: forcing a failure. [ 497.771035][T12604] name failslab, interval 1, probability 0, space 0, times 0 [ 497.771071][T12604] CPU: 1 UID: 0 PID: 12604 Comm: syz.1.1996 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.771103][T12604] Tainted: [L]=SOFTLOCKUP [ 497.771112][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.771126][T12604] Call Trace: [ 497.771137][T12604] [ 497.771150][T12604] dump_stack_lvl+0xe8/0x150 [ 497.771192][T12604] should_fail_ex+0x410/0x560 [ 497.771226][T12604] should_failslab+0xa8/0x100 [ 497.771258][T12604] __kmalloc_cache_noprof+0xa3/0x600 [ 497.771283][T12604] ? tcf_chain_create+0xaf/0x310 [ 497.771400][T12604] ? tcf_chain_create+0xaf/0x310 [ 497.771444][T12604] tcf_chain_create+0xaf/0x310 [ 497.771478][T12604] ? __tcf_chain_get+0xfb/0x3c0 [ 497.771512][T12604] __tcf_chain_get+0x111/0x3c0 [ 497.771548][T12604] tc_new_tfilter+0x804/0x1810 [ 497.771628][T12604] ? __pfx_tc_new_tfilter+0x10/0x10 [ 497.771670][T12604] ? lock_acquire+0x115/0x350 [ 497.771713][T12604] ? __pfx_tc_new_tfilter+0x10/0x10 [ 497.771735][T12604] rtnetlink_rcv_msg+0x802/0xc00 [ 497.771797][T12604] ? netlink_sendmsg+0x5d4/0xb40 [ 497.771824][T12604] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 497.771853][T12604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 497.771884][T12604] ? __lock_acquire+0x747/0x2de0 [ 497.771921][T12604] netlink_rcv_skb+0x226/0x4a0 [ 497.771959][T12604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 497.771992][T12604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.772042][T12604] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.772079][T12604] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.772121][T12604] netlink_unicast+0x7bd/0x940 [ 497.772167][T12604] netlink_sendmsg+0x813/0xb40 [ 497.772199][T12604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.772231][T12604] ? apparmor_socket_sendmsg+0x98/0x360 [ 497.772261][T12604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.772283][T12604] sock_sendmsg_nosec+0x13a/0x180 [ 497.772311][T12604] ____sys_sendmsg+0x54e/0x850 [ 497.772350][T12604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.772401][T12604] ___sys_sendmsg+0x2a5/0x360 [ 497.772431][T12604] ? __lock_acquire+0x747/0x2de0 [ 497.772461][T12604] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.772492][T12604] ? get_pid_task+0x20/0x1f0 [ 497.772515][T12604] ? get_pid_task+0x20/0x1f0 [ 497.772535][T12604] ? get_pid_task+0x20/0x1f0 [ 497.772592][T12604] ? __fget_files+0x2a/0x420 [ 497.772624][T12604] ? __fget_files+0x3a2/0x420 [ 497.772668][T12604] __sys_sendmsg+0x177/0x240 [ 497.772703][T12604] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.772766][T12604] __do_fast_syscall_32+0x27a/0x6a0 [ 497.772800][T12604] ? do_fast_syscall_32+0x33/0x70 [ 497.772831][T12604] ? asm_int80_emulation+0x1a/0x20 [ 497.772853][T12604] ? do_int80_emulation+0x299/0x500 [ 497.772883][T12604] ? trace_irq_disable+0x3b/0x140 [ 497.772911][T12604] do_fast_syscall_32+0x33/0x70 [ 497.772943][T12604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.772971][T12604] RIP: 0023:0xf700f0ec [ 497.772992][T12604] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 497.773013][T12604] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 497.773037][T12604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 497.773053][T12604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.773067][T12604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.773081][T12604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.773096][T12604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.773130][T12604] [ 498.172607][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1991'. [ 498.172683][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 498.172702][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 498.308243][T12594] syz_tun: left allmulticast mode [ 498.454533][ T5733] gspca_vc032x: reg_w err -110 [ 498.454617][ T5733] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 498.653919][T12616] FAULT_INJECTION: forcing a failure. [ 498.653919][T12616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.653963][T12616] CPU: 0 UID: 0 PID: 12616 Comm: syz.3.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.653994][T12616] Tainted: [L]=SOFTLOCKUP [ 498.654003][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.654018][T12616] Call Trace: [ 498.654027][T12616] [ 498.654037][T12616] dump_stack_lvl+0xe8/0x150 [ 498.654077][T12616] should_fail_ex+0x410/0x560 [ 498.654111][T12616] _copy_from_user+0x2d/0xb0 [ 498.654143][T12616] kstrtouint_from_user+0xd6/0x180 [ 498.654173][T12616] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 498.654216][T12616] ? lock_acquire+0x115/0x350 [ 498.654247][T12616] proc_fail_nth_write+0x8e/0x210 [ 498.654271][T12616] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 498.654304][T12616] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 498.654326][T12616] vfs_write+0x296/0xba0 [ 498.654370][T12616] ? __pfx_vfs_write+0x10/0x10 [ 498.654407][T12616] ? __fget_files+0x2a/0x420 [ 498.654442][T12616] ? __fget_files+0x3a2/0x420 [ 498.654471][T12616] ? __fget_files+0x2a/0x420 [ 498.654510][T12616] ksys_write+0x150/0x270 [ 498.654553][T12616] ? __pfx_ksys_write+0x10/0x10 [ 498.654582][T12616] ? asm_int80_emulation+0x1a/0x20 [ 498.654602][T12616] do_int80_emulation+0x198/0x500 [ 498.654625][T12616] ? trace_irq_disable+0x3b/0x140 [ 498.654641][T12616] ? asm_int80_emulation+0x1a/0x20 [ 498.654657][T12616] ? clear_bhb_loop+0x70/0xc0 [ 498.654672][T12616] ? clear_bhb_loop+0x70/0xc0 [ 498.654693][T12616] asm_int80_emulation+0x1a/0x20 [ 498.654710][T12616] RIP: 0023:0xf71875ab [ 498.654724][T12616] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 498.654738][T12616] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 498.654756][T12616] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f54465d0 [ 498.654768][T12616] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.654800][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.654814][T12616] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 498.654828][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.654861][T12616] [ 499.559703][ T32] audit: type=1326 audit(1790277607.795:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12634 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 499.559848][ T32] audit: type=1326 audit(1790277607.795:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12634 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 499.614736][ T32] audit: type=1326 audit(1790277607.835:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12634 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 499.614779][ T32] audit: type=1326 audit(1790277607.835:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12634 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 499.900393][T12646] sctp: [Deprecated]: syz.0.2009 (pid 12646) Use of int in maxseg socket option. [ 499.900393][T12646] Use struct sctp_assoc_value instead [ 500.015979][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 500.016000][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 500.429496][ T9961] usb 3-1: USB disconnect, device number 54 [ 500.796459][T12662] FAULT_INJECTION: forcing a failure. [ 500.796459][T12662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.796499][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.796530][T12662] Tainted: [L]=SOFTLOCKUP [ 500.796540][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.796554][T12662] Call Trace: [ 500.796564][T12662] [ 500.796575][T12662] dump_stack_lvl+0xe8/0x150 [ 500.796614][T12662] should_fail_ex+0x410/0x560 [ 500.796647][T12662] copy_fpstate_to_sigframe+0xa12/0xd20 [ 500.796693][T12662] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 500.796733][T12662] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 500.796766][T12662] ? ktime_get+0x45/0x220 [ 500.796793][T12662] ? ktime_get+0x45/0x220 [ 500.796816][T12662] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 500.796853][T12662] ? __pfx_clockevents_program_event+0x10/0x10 [ 500.796900][T12662] ? fpu__alloc_mathframe+0xac/0x130 [ 500.796935][T12662] get_sigframe+0x603/0x830 [ 500.796997][T12662] ? __pfx_get_sigframe+0x10/0x10 [ 500.797043][T12662] ia32_setup_rt_frame+0x110/0xae0 [ 500.797072][T12662] ? _raw_spin_unlock_irq+0x29/0x50 [ 500.797102][T12662] ? _raw_spin_unlock_irq+0x2e/0x50 [ 500.797126][T12662] ? get_signal+0x10dd/0x12c0 [ 500.797169][T12662] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 500.797207][T12662] arch_do_signal_or_restart+0x48e/0x860 [ 500.797245][T12662] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.797278][T12662] ? ksys_write+0x1de/0x270 [ 500.797320][T12662] ? ksys_write+0x242/0x270 [ 500.797361][T12662] exit_to_user_mode_loop+0x10e/0x770 [ 500.797386][T12662] ? rcu_is_watching+0x16/0xb0 [ 500.797410][T12662] ? asm_int80_emulation+0x1a/0x20 [ 500.797433][T12662] ? asm_int80_emulation+0x1a/0x20 [ 500.797455][T12662] do_int80_emulation+0x314/0x500 [ 500.797486][T12662] ? asm_int80_emulation+0x1a/0x20 [ 500.797508][T12662] ? clear_bhb_loop+0x70/0xc0 [ 500.797531][T12662] ? clear_bhb_loop+0x70/0xc0 [ 500.797560][T12662] asm_int80_emulation+0x1a/0x20 [ 500.797582][T12662] RIP: 0023:0xf71e75ab [ 500.797603][T12662] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 500.797623][T12662] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 500.797648][T12662] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00000000f549d5c0 [ 500.797672][T12662] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.797687][T12662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.797700][T12662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.797714][T12662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.797747][T12662] [ 501.465075][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.465874][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.753931][ T5733] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 501.916470][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 501.918801][ T5733] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 501.920195][ T5733] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.920230][ T5733] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 501.920249][ T5733] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 501.920268][ T5733] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.960403][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.960496][ T5733] usb 3-1: Product: syz [ 501.960537][ T5733] usb 3-1: Manufacturer: syz [ 501.960578][ T5733] usb 3-1: SerialNumber: syz [ 502.011606][T12670] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.011716][T12670] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.204776][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 502.320969][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.321345][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.638662][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 502.665479][ T5733] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.665517][ T5733] usb 3-1: MIDIStreaming interface descriptor not found [ 502.689526][T12687] openvswitch: netlink: Key type 13574 is out of range max 32 [ 502.906789][ T5733] usb 3-1: USB disconnect, device number 55 [ 502.988697][ T9268] udevd[9268]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.430895][T12706] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 503.640489][T12713] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2030'. [ 503.640518][T12713] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2030'. [ 503.676638][T12713] netlink: 'syz.3.2030': attribute type 5 has an invalid length. [ 503.723426][ T9979] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 503.853050][ T9958] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 503.873763][ T9979] usb 2-1: Using ep0 maxpacket: 32 [ 503.877981][ T9979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 503.878029][ T9979] usb 2-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 503.879993][ T9979] usb 2-1: config 6 has an invalid interface number: 253 but max is 0 [ 503.880017][ T9979] usb 2-1: config 6 has no interface number 0 [ 503.880044][ T9979] usb 2-1: config 6 interface 253 has no altsetting 0 [ 503.929441][ T9979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.929461][ T9979] usb 2-1: Product: syz [ 503.929472][ T9979] usb 2-1: Manufacturer: syz [ 503.929484][ T9979] usb 2-1: SerialNumber: syz [ 504.026448][ T9958] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.034720][ T9958] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 504.034813][ T9958] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 504.034897][ T9958] usb 3-1: config 0 interface 0 has no altsetting 0 [ 504.081345][ T9958] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.081374][ T9958] usb 3-1: Product: syz [ 504.081390][ T9958] usb 3-1: Manufacturer: syz [ 504.081408][ T9958] usb 3-1: SerialNumber: syz [ 504.111578][ T9958] usb 3-1: config 0 descriptor?? [ 504.149938][ T9958] usb 3-1: selecting invalid altsetting 0 [ 504.248426][T12709] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 504.281790][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.303842][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.327862][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.332687][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.356971][ T9979] usb-storage 2-1:6.253: USB Mass Storage device detected [ 504.393473][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.401541][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.462607][ T9979] usb-storage 2-1:6.253: Quirks match for vid 0781 pid 0001: 1 [ 504.487724][ T9958] usb 3-1: USB disconnect, device number 56 [ 504.589579][ T9289] udevd[9289]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.615965][ T9979] usb 2-1: USB disconnect, device number 71 [ 505.211881][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'. [ 505.497267][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'. [ 505.558650][T12740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2038'. [ 508.421347][T12805] FAULT_INJECTION: forcing a failure. [ 508.421347][T12805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.421378][T12805] CPU: 0 UID: 0 PID: 12805 Comm: syz.5.2059 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.421400][T12805] Tainted: [L]=SOFTLOCKUP [ 508.421407][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.421420][T12805] Call Trace: [ 508.421426][T12805] [ 508.421434][T12805] dump_stack_lvl+0xe8/0x150 [ 508.421462][T12805] should_fail_ex+0x410/0x560 [ 508.421485][T12805] _copy_from_iter+0x1d3/0x1660 [ 508.421509][T12805] ? _copy_from_iter+0x21b/0x1660 [ 508.421528][T12805] ? __pfx__copy_from_iter+0x10/0x10 [ 508.421551][T12805] ? __pfx__copy_from_iter+0x10/0x10 [ 508.421574][T12805] copy_page_from_iter+0x219/0x2d0 [ 508.421614][T12805] skb_copy_datagram_from_iter+0x2f4/0x720 [ 508.421788][T12805] unix_stream_sendmsg+0x5ce/0xde0 [ 508.421903][T12805] ? aa_file_perm+0x18b/0x15f0 [ 508.421953][T12805] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 508.421992][T12805] ? aa_sock_msg_perm+0x129/0x210 [ 508.422026][T12805] ? apparmor_socket_sendmsg+0x98/0x360 [ 508.422056][T12805] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 508.422090][T12805] sock_sendmsg_nosec+0x13a/0x180 [ 508.422118][T12805] sock_write_iter+0x2de/0x3e0 [ 508.422144][T12805] ? __pfx_sock_write_iter+0x10/0x10 [ 508.422175][T12805] ? bpf_lsm_file_permission+0x9/0x20 [ 508.422207][T12805] ? security_file_permission+0x75/0x260 [ 508.422239][T12805] vfs_write+0x612/0xba0 [ 508.422284][T12805] ? __pfx_vfs_write+0x10/0x10 [ 508.422330][T12805] ? __fget_files+0x2a/0x420 [ 508.422371][T12805] ksys_write+0x150/0x270 [ 508.422408][T12805] ? __pfx_ksys_write+0x10/0x10 [ 508.422453][T12805] __do_fast_syscall_32+0x27a/0x6a0 [ 508.422486][T12805] ? do_fast_syscall_32+0x33/0x70 [ 508.422516][T12805] ? asm_int80_emulation+0x1a/0x20 [ 508.422539][T12805] ? do_int80_emulation+0x299/0x500 [ 508.422569][T12805] ? trace_irq_disable+0x3b/0x140 [ 508.422598][T12805] do_fast_syscall_32+0x33/0x70 [ 508.422630][T12805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.422658][T12805] RIP: 0023:0xf709f0ec [ 508.422679][T12805] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 508.422699][T12805] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 508.422724][T12805] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 508.422741][T12805] RDX: 00000000ffffff4a RSI: 0000000000000000 RDI: 0000000000000000 [ 508.422755][T12805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.422769][T12805] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 508.422784][T12805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.422817][T12805] [ 508.465904][ T9978] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 508.619417][ T9978] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 508.625257][ T9978] usb 4-1: config 0 has no interfaces? [ 508.625296][ T9978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.758863][ T9978] usb 4-1: config 0 descriptor?? [ 508.804198][T12808] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 509.001207][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.001530][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.047401][ T9961] usb 4-1: USB disconnect, device number 72 [ 509.263740][ T9978] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 509.371077][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 509.382406][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 509.395978][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 509.399107][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 509.400820][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 509.424439][ T9978] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 509.450893][ T9978] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 509.450929][ T9978] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 509.450958][ T9978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.497132][ T9978] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 509.497155][ T9978] usb 2-1: Product: syz [ 509.497166][ T9978] usb 2-1: Manufacturer: syz [ 509.497177][ T9978] usb 2-1: SerialNumber: syz [ 509.529884][ T9978] usb 2-1: config 0 descriptor?? [ 509.564358][ T9978] usb 2-1: selecting invalid altsetting 0 [ 509.576893][ T9961] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 509.757038][ T9961] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 509.761631][ T9961] usb 4-1: config index 0 descriptor too short (expected 551, got 45) [ 509.761653][ T9961] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 509.804827][ T9961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.804848][ T9961] usb 4-1: Product: syz [ 509.804859][ T9961] usb 4-1: Manufacturer: syz [ 509.804871][ T9961] usb 4-1: SerialNumber: syz [ 509.874118][ T9961] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 509.916929][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.922032][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.934052][ T5733] usb 2-1: USB disconnect, device number 72 [ 510.492940][ T32] audit: type=1326 audit(1790277618.725:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709f0ec code=0x0 [ 510.689398][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.689725][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.706518][ T9961] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 510.714381][ T9961] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 510.714538][ T9961] usb 4-1: media controller created [ 510.718060][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.742642][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.772693][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.784013][ T5733] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 510.784432][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.815168][ T9961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.933056][ T5733] usb 6-1: Using ep0 maxpacket: 8 [ 510.933826][ T5733] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 510.967142][ T5733] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 510.967172][ T5733] usb 6-1: config 0 has no interface number 1 [ 510.967224][ T5733] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.967248][ T5733] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 510.967276][ T5733] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 510.967296][ T5733] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 510.967315][ T5733] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.967343][ T5733] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 510.967361][ T5733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 510.967377][ T5733] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 510.991327][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.991510][ T5733] usb 6-1: Product: syz [ 510.991553][ T5733] usb 6-1: Manufacturer: syz [ 510.991595][ T5733] usb 6-1: SerialNumber: syz [ 511.041117][ T5733] usb 6-1: config 0 descriptor?? [ 511.053482][T12829] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 511.166252][ T5733] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.180773][ T5733] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.229893][ T9961] usb 4-1: USB disconnect, device number 73 [ 511.395112][ T5733] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 512.339771][T12853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2075'. [ 512.339791][T12853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.882252][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 513.451505][ T9978] usb 6-1: USB disconnect, device number 38 [ 514.116504][ T5733] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 514.208627][T12875] team0: Port device vxlan1 added [ 514.218331][ T7123] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.218414][ T7118] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.218463][ T7118] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.218500][ T7118] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.264087][ T5733] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 514.266203][ T5733] usb 2-1: config 0 has no interfaces? [ 514.266229][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.272133][ T5733] usb 2-1: config 0 descriptor?? [ 514.440932][T12881] FAULT_INJECTION: forcing a failure. [ 514.440932][T12881] name failslab, interval 1, probability 0, space 0, times 0 [ 514.440961][T12881] CPU: 1 UID: 0 PID: 12881 Comm: syz.5.2085 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.440984][T12881] Tainted: [L]=SOFTLOCKUP [ 514.440990][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.441001][T12881] Call Trace: [ 514.441008][T12881] [ 514.441015][T12881] dump_stack_lvl+0xe8/0x150 [ 514.441044][T12881] should_fail_ex+0x410/0x560 [ 514.441067][T12881] should_failslab+0xa8/0x100 [ 514.441089][T12881] __kmalloc_cache_noprof+0xa3/0x600 [ 514.441106][T12881] ? __kmalloc_cache_noprof+0x14d/0x600 [ 514.441121][T12881] ? sctp_add_bind_addr+0x8c/0x370 [ 514.441146][T12881] ? sctp_add_bind_addr+0x8c/0x370 [ 514.441175][T12881] sctp_add_bind_addr+0x8c/0x370 [ 514.441203][T12881] sctp_copy_local_addr_list+0x31a/0x4e0 [ 514.441231][T12881] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 514.441256][T12881] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 514.441284][T12881] ? sctp_v6_is_any+0x64/0x80 [ 514.441447][T12881] ? sctp_copy_one_addr+0x93/0x360 [ 514.441488][T12881] sctp_bind_addr_copy+0xb3/0x3c0 [ 514.441524][T12881] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 514.441551][T12881] sctp_connect_new_asoc+0x2ff/0x6b0 [ 514.441574][T12881] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 514.441599][T12881] ? __local_bh_enable_ip+0xd6/0x140 [ 514.441621][T12881] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 514.441644][T12881] ? security_sctp_bind_connect+0x7e/0x2c0 [ 514.441664][T12881] sctp_sendmsg+0x159b/0x2d00 [ 514.441693][T12881] ? __pfx_sctp_sendmsg+0x10/0x10 [ 514.441713][T12881] ? __lock_acquire+0x747/0x2de0 [ 514.441738][T12881] ? lock_acquire+0x115/0x350 [ 514.441756][T12881] ? aa_sock_msg_perm+0xf5/0x210 [ 514.441776][T12881] ? sock_rps_record_flow+0x19/0x350 [ 514.441796][T12881] ? inet_sendmsg+0x298/0x320 [ 514.441814][T12881] ? __pfx_inet_sendmsg+0x10/0x10 [ 514.441829][T12881] sock_sendmsg_nosec+0x10e/0x180 [ 514.441849][T12881] ____sys_sendmsg+0x54e/0x850 [ 514.441876][T12881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.441918][T12881] ___sys_sendmsg+0x2a5/0x360 [ 514.441940][T12881] ? __lock_acquire+0x747/0x2de0 [ 514.441959][T12881] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.441986][T12881] ? kstrtoull+0x137/0x1d0 [ 514.442033][T12881] ? __fget_files+0x2a/0x420 [ 514.442055][T12881] ? __fget_files+0x3a2/0x420 [ 514.442085][T12881] __sys_sendmmsg+0x2de/0x4d0 [ 514.442113][T12881] ? __pfx___sys_sendmmsg+0x10/0x10 [ 514.442157][T12881] ? fput+0xa0/0xd0 [ 514.442177][T12881] ? ksys_write+0x242/0x270 [ 514.442207][T12881] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 514.442226][T12881] __do_fast_syscall_32+0x27a/0x6a0 [ 514.442249][T12881] ? do_fast_syscall_32+0x33/0x70 [ 514.442270][T12881] ? asm_int80_emulation+0x1a/0x20 [ 514.442285][T12881] ? do_int80_emulation+0x299/0x500 [ 514.442306][T12881] ? trace_irq_disable+0x3b/0x140 [ 514.442326][T12881] do_fast_syscall_32+0x33/0x70 [ 514.442348][T12881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.442367][T12881] RIP: 0023:0xf709f0ec [ 514.442382][T12881] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 514.442397][T12881] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 514.442416][T12881] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80 [ 514.442428][T12881] RDX: 0000000000000001 RSI: 000000000004c040 RDI: 0000000000000000 [ 514.442438][T12881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.442447][T12881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 514.442457][T12881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.442480][T12881] [ 514.685839][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.686205][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.725161][ T5733] usb 2-1: USB disconnect, device number 73 [ 515.030030][T12888] program syz.5.2086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.266209][ T5733] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 515.401326][ T7123] IPVS: starting estimator thread 0... [ 515.414410][ T5733] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 515.418272][ T5733] usb 2-1: config index 0 descriptor too short (expected 551, got 45) [ 515.418297][ T5733] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 515.442792][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.443787][ T5733] usb 2-1: Product: syz [ 515.443807][ T5733] usb 2-1: Manufacturer: syz [ 515.443824][ T5733] usb 2-1: SerialNumber: syz [ 515.484024][T12892] IPVS: using max 32 ests per chain, 76800 per kthread [ 515.514789][ T5733] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 515.952004][ T5733] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.952408][ T5733] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 515.952458][ T5733] usb 2-1: media controller created [ 516.049969][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.671809][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.672149][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.685548][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.687925][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.706908][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.710452][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.203355][T12933] syz_tun: entered allmulticast mode [ 517.903513][ T5693] usb 2-1: USB disconnect, device number 74 [ 518.129021][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2097'. [ 518.732051][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 519.870245][T12959] bond3: entered allmulticast mode [ 519.870561][T12959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.178623][T12968] binder: 12966:12968 ioctl c0306201 0 returned -14 [ 520.433045][ T9978] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 520.463238][ T9961] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 520.594120][ T9978] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 520.598178][ T9978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.598208][ T9978] usb 3-1: Product: syz [ 520.598219][ T9978] usb 3-1: Manufacturer: syz [ 520.598230][ T9978] usb 3-1: SerialNumber: syz [ 520.613468][ T9961] usb 2-1: Using ep0 maxpacket: 32 [ 520.644127][ T9961] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 520.652451][ T9961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.695134][ T9961] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 520.885761][ T9961] gspca_nw80x: reg_w err -71 [ 520.885928][ T9961] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 520.911085][ T9961] usb 2-1: USB disconnect, device number 75 [ 521.054858][ T9979] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 521.055092][ T9978] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 521.055379][ T9978] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 521.188022][T12987] vxlan0: entered promiscuous mode [ 521.190987][T12987] team0: Port device vxlan0 added [ 521.205794][ T27] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.205858][ T27] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.205896][ T27] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.205933][ T27] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.263852][ T9979] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 521.264412][ T9979] usb 4-1: config 0 has no interfaces? [ 521.264447][ T9979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.272334][ T9979] usb 4-1: config 0 descriptor?? [ 521.509331][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.520842][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.531107][ T9961] usb 4-1: USB disconnect, device number 74 [ 521.830245][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 521.961408][T13001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.981180][T13001] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.983796][ T5693] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 522.145566][ T5693] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 522.149933][ T5693] usb 4-1: config index 0 descriptor too short (expected 551, got 45) [ 522.149960][ T5693] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 522.183640][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.183669][ T5693] usb 4-1: Product: syz [ 522.183685][ T5693] usb 4-1: Manufacturer: syz [ 522.183702][ T5693] usb 4-1: SerialNumber: syz [ 522.247708][ T5693] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 522.281786][ T9978] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 522.341284][T13001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.341322][T13001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.441293][T13001] veth1_vlan: left promiscuous mode [ 522.457803][T13001] veth0_vlan: left promiscuous mode [ 522.514908][T13001] veth0_vlan: entered promiscuous mode [ 522.552116][T13001] veth1_vlan: entered promiscuous mode [ 522.649769][T13001] veth1_macvtap: left promiscuous mode [ 522.661955][T13001] veth0_macvtap: left promiscuous mode [ 522.671854][T13001] veth0_macvtap: entered promiscuous mode [ 522.681822][T13001] veth1_macvtap: entered promiscuous mode [ 522.694774][ T5693] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 522.695180][ T5693] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 522.695214][ T5693] usb 4-1: media controller created [ 522.769043][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.786647][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.801125][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.812628][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.819751][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.003899][T13001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.030187][T13001] A link change request failed with some changes committed already. Interface vlan9 may have been left with an inconsistent configuration, please check. [ 523.281697][T11002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.290916][T11002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.292039][T11002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.292157][T11002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.429374][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.440626][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.503205][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.515091][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.548454][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.565576][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.757361][ T9978] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 523.757424][ T9978] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 523.816049][ T9978] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 523.821886][ T9978] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 523.857180][ T9978] usb 3-1: USB disconnect, device number 57 [ 523.956974][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2121'. [ 524.118818][T13018] syz_tun: entered allmulticast mode [ 524.572984][ T9980] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 524.628911][ T9958] usb 4-1: USB disconnect, device number 75 [ 524.723521][ T5693] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 524.732991][ T9980] usb 2-1: Using ep0 maxpacket: 32 [ 524.752649][ T9980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 524.752701][ T9980] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 524.771223][ T9980] usb 2-1: config 165 has an invalid interface number: 162 but max is 0 [ 524.771252][ T9980] usb 2-1: config 165 has no interface number 0 [ 524.771292][ T9980] usb 2-1: config 165 interface 162 has no altsetting 0 [ 524.798280][ T9980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.798309][ T9980] usb 2-1: Product: syz [ 524.798324][ T9980] usb 2-1: Manufacturer: syz [ 524.798341][ T9980] usb 2-1: SerialNumber: syz [ 524.875183][ T5693] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 524.876377][ T5693] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.876406][ T5693] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.876448][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.090248][T13036] netlink: 'syz.3.2129': attribute type 8 has an invalid length. [ 525.109134][ T5693] usb 3-1: usb_control_msg returned -32 [ 525.109191][ T5693] usbtmc 3-1:16.0: can't read capabilities [ 525.129013][T13038] netlink: 'syz.1.2124': attribute type 21 has an invalid length. [ 525.129323][T13038] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2124'. [ 525.389466][T13041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.423225][ T5693] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 525.449605][T13041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.452361][T13041] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 525.573710][ T5693] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 525.575365][ T5693] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 525.575391][ T5693] usb 1-1: config 1 has no interface number 0 [ 525.575442][ T5693] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 525.575470][ T5693] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 8 [ 525.575499][ T5693] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 525.578632][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.578659][ T5693] usb 1-1: Product: syz [ 525.578675][ T5693] usb 1-1: Manufacturer: syz [ 525.578690][ T5693] usb 1-1: SerialNumber: syz [ 525.594336][T13033] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 525.594519][T13033] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 525.736063][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'. [ 525.820193][ T9980] usb 2-1: USB disconnect, device number 76 [ 526.315296][ T9980] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 526.443355][ T5693] usb 1-1: Error in usbnet_get_endpoints (-71) [ 526.484833][ T9980] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 526.486051][ T9980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.486722][ T5693] usb 1-1: USB disconnect, device number 70 [ 526.533717][ T9980] pegasus 6-1:254.0: Missing or invalid endpoints [ 526.765645][ T9978] usb 6-1: USB disconnect, device number 39 [ 527.083808][ T9980] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 527.253801][ T9980] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 527.254703][ T9980] usb 2-1: config 0 has no interfaces? [ 527.254756][ T9980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.257928][ T9980] usb 2-1: config 0 descriptor?? [ 527.451308][ T5693] usb 3-1: USB disconnect, device number 58 [ 527.494341][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.498689][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.500020][ T9980] usb 2-1: USB disconnect, device number 77 [ 527.754092][T13074] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 528.005427][ T9980] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 528.178302][ T9980] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 528.179467][ T9980] usb 2-1: config index 0 descriptor too short (expected 551, got 45) [ 528.179487][ T9980] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 528.212530][ T9980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.212559][ T9980] usb 2-1: Product: syz [ 528.212575][ T9980] usb 2-1: Manufacturer: syz [ 528.212592][ T9980] usb 2-1: SerialNumber: syz [ 528.248876][ T9980] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 529.078936][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.081139][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.081630][ T9980] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.112359][ T9980] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 529.112417][ T9980] usb 2-1: media controller created [ 529.134767][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.142171][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.175815][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.186431][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.201355][ T9980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.423829][ T9980] usb 2-1: USB disconnect, device number 78 [ 529.746794][T13099] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 530.060493][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2143'. [ 530.237317][ T9980] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 530.334090][ T9979] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 530.387614][T13115] netlink: 'syz.5.2146': attribute type 1 has an invalid length. [ 530.394120][ T9980] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 530.394655][ T9980] usb 3-1: config 0 has no interfaces? [ 530.394688][ T9980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.419007][ T9980] usb 3-1: config 0 descriptor?? [ 530.498622][ T9979] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 530.499949][ T9979] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 530.499984][ T9979] usb 2-1: config 1 has no interface number 0 [ 530.500023][ T9979] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 530.500055][ T9979] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 8 [ 530.500072][ T9979] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 530.565827][ T9979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.565859][ T9979] usb 2-1: Product: syz [ 530.565876][ T9979] usb 2-1: Manufacturer: syz [ 530.565891][ T9979] usb 2-1: SerialNumber: syz [ 530.614148][T13105] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 530.614303][T13105] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 530.643972][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.644504][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.645832][ T5693] usb 3-1: USB disconnect, device number 59 [ 530.719882][T13125] FAULT_INJECTION: forcing a failure. [ 530.719882][T13125] name failslab, interval 1, probability 0, space 0, times 0 [ 530.719921][T13125] CPU: 1 UID: 0 PID: 13125 Comm: syz.3.2148 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.719955][T13125] Tainted: [L]=SOFTLOCKUP [ 530.719964][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.719979][T13125] Call Trace: [ 530.719988][T13125] [ 530.719998][T13125] dump_stack_lvl+0xe8/0x150 [ 530.720037][T13125] should_fail_ex+0x410/0x560 [ 530.720069][T13125] should_failslab+0xa8/0x100 [ 530.720097][T13125] ? skb_clone+0x212/0x3a0 [ 530.720132][T13125] kmem_cache_alloc_noprof+0xa1/0x600 [ 530.720171][T13125] ? skb_clone+0x212/0x3a0 [ 530.720211][T13125] skb_clone+0x212/0x3a0 [ 530.720248][T13125] __netlink_deliver_tap+0x413/0x860 [ 530.720297][T13125] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.720334][T13125] netlink_deliver_tap+0x19c/0x1b0 [ 530.720372][T13125] netlink_unicast+0x781/0x940 [ 530.720417][T13125] netlink_sendmsg+0x813/0xb40 [ 530.720449][T13125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.720481][T13125] ? apparmor_socket_sendmsg+0x98/0x360 [ 530.720510][T13125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.720532][T13125] sock_sendmsg_nosec+0x13a/0x180 [ 530.720562][T13125] ____sys_sendmsg+0x54e/0x850 [ 530.720608][T13125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.720658][T13125] ___sys_sendmsg+0x2a5/0x360 [ 530.720689][T13125] ? __lock_acquire+0x747/0x2de0 [ 530.720718][T13125] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.720747][T13125] ? get_pid_task+0x20/0x1f0 [ 530.720767][T13125] ? get_pid_task+0x20/0x1f0 [ 530.720784][T13125] ? get_pid_task+0x20/0x1f0 [ 530.720837][T13125] ? __fget_files+0x2a/0x420 [ 530.720868][T13125] ? __fget_files+0x3a2/0x420 [ 530.720909][T13125] __sys_sendmsg+0x177/0x240 [ 530.720943][T13125] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.720997][T13125] __do_fast_syscall_32+0x27a/0x6a0 [ 530.721031][T13125] ? do_fast_syscall_32+0x33/0x70 [ 530.721061][T13125] ? asm_int80_emulation+0x1a/0x20 [ 530.721083][T13125] ? do_int80_emulation+0x299/0x500 [ 530.721112][T13125] ? trace_irq_disable+0x3b/0x140 [ 530.721142][T13125] do_fast_syscall_32+0x33/0x70 [ 530.721174][T13125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.721203][T13125] RIP: 0023:0xf7f860ec [ 530.721224][T13125] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 530.721244][T13125] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 530.721269][T13125] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 530.721286][T13125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.721300][T13125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.721314][T13125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 530.721327][T13125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.721360][T13125] [ 530.721512][T13125] netlink: 'syz.3.2148': attribute type 8 has an invalid length. [ 531.082757][T13119] bond1: (slave gretap1): making interface the new active one [ 531.097124][T13119] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 531.126316][T13120] vlan3: entered allmulticast mode [ 531.126340][T13120] bond1: entered allmulticast mode [ 531.126355][T13120] gretap1: entered allmulticast mode [ 531.127632][T13120] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 531.183809][ T9980] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 531.337449][ T9980] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 531.338846][ T9980] usb 3-1: config index 0 descriptor too short (expected 551, got 45) [ 531.338873][ T9980] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 531.343357][ T9980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.343497][ T9980] usb 3-1: Product: syz [ 531.343555][ T9980] usb 3-1: Manufacturer: syz [ 531.343600][ T9980] usb 3-1: SerialNumber: syz [ 531.409031][ T9980] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 531.663186][ T9978] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 531.767519][ T9979] usb 2-1: Error in usbnet_get_endpoints (-71) [ 531.825915][ T9978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.829089][ T9978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.829120][ T9978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.829192][ T9978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.843834][ T9979] usb 2-1: USB disconnect, device number 79 [ 531.958780][T13145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.097042][T13147] netlink: 'syz.5.2153': attribute type 10 has an invalid length. [ 532.098086][T13147] team0: Device bond0 is up. Set it down before adding it as a team port [ 532.102057][T13153] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2156'. [ 532.160291][ T9978] usb 4-1: usb_control_msg returned -32 [ 532.160356][ T9978] usbtmc 4-1:16.0: can't read capabilities [ 532.230417][ T9980] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 532.230821][ T9980] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 532.230877][ T9980] usb 3-1: media controller created [ 532.276376][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.284340][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.308723][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.309223][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.333458][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.333963][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.375781][ T9980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 532.591490][T13169] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2158'. [ 532.806104][T13174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2160'. [ 532.881998][ T9980] usb 3-1: USB disconnect, device number 60 [ 533.039998][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'. [ 533.118110][T13174] bond4 (unregistering): Released all slaves [ 533.610161][T13191] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 533.802250][T13196] bond3: (slave gretap1): making interface the new active one [ 533.820818][T13196] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 533.883804][T13191] vlan10: entered allmulticast mode [ 533.883860][T13191] bond3: entered allmulticast mode [ 533.883876][T13191] gretap1: entered allmulticast mode [ 533.888646][T13191] bond3: (slave vlan10): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 534.412536][ T5693] usb 4-1: USB disconnect, device number 76 [ 534.558832][T13227] FAULT_INJECTION: forcing a failure. [ 534.558832][T13227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.558871][T13227] CPU: 1 UID: 0 PID: 13227 Comm: syz.0.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.558901][T13227] Tainted: [L]=SOFTLOCKUP [ 534.558909][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.558923][T13227] Call Trace: [ 534.558932][T13227] [ 534.558947][T13227] dump_stack_lvl+0xe8/0x150 [ 534.558984][T13227] should_fail_ex+0x410/0x560 [ 534.559016][T13227] _copy_from_user+0x2d/0xb0 [ 534.559046][T13227] get_compat_msghdr+0xb3/0x4c0 [ 534.559085][T13227] ? __pfx_get_compat_msghdr+0x10/0x10 [ 534.559123][T13227] ? kfree+0x4d/0x650 [ 534.559162][T13227] ___sys_recvmsg+0x1db/0x5a0 [ 534.559216][T13227] ? __pfx____sys_recvmsg+0x10/0x10 [ 534.559253][T13227] ? lock_acquire+0x115/0x350 [ 534.559307][T13227] do_recvmmsg+0x38b/0x7f0 [ 534.559349][T13227] ? __pfx_do_recvmmsg+0x10/0x10 [ 534.559394][T13227] ? __mutex_unlock_slowpath+0x731/0x900 [ 534.559438][T13227] __sys_recvmmsg+0x1a5/0x290 [ 534.559473][T13227] ? __pfx___sys_recvmmsg+0x10/0x10 [ 534.559507][T13227] ? ksys_write+0x242/0x270 [ 534.559548][T13227] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 534.559576][T13227] __do_fast_syscall_32+0x27a/0x6a0 [ 534.559607][T13227] ? do_fast_syscall_32+0x33/0x70 [ 534.559636][T13227] ? asm_int80_emulation+0x1a/0x20 [ 534.559658][T13227] ? do_int80_emulation+0x299/0x500 [ 534.559692][T13227] do_fast_syscall_32+0x33/0x70 [ 534.559723][T13227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.559749][T13227] RIP: 0023:0xf7ff50ec [ 534.559769][T13227] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 534.559788][T13227] RSP: 002b:00000000f549550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 534.559812][T13227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 534.559828][T13227] RDX: 0000000000000414 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.559842][T13227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.559856][T13227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.559869][T13227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.559901][T13227] [ 534.891235][T13222] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 534.959441][T13222] bond2 (unregistering): Released all slaves [ 535.917284][T13265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2174'. [ 535.973582][ T9961] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 536.123858][ T9961] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 536.124436][ T9961] usb 3-1: config 0 has no interfaces? [ 536.124462][ T9961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.127824][ T9961] usb 3-1: config 0 descriptor?? [ 536.358938][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.379247][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.405283][ T9980] usb 3-1: USB disconnect, device number 61 [ 536.863110][ T9961] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 537.044309][ T9961] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 537.045839][ T9961] usb 3-1: config index 0 descriptor too short (expected 551, got 45) [ 537.045866][ T9961] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 537.082233][ T9961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.082266][ T9961] usb 3-1: Product: syz [ 537.082282][ T9961] usb 3-1: Manufacturer: syz [ 537.082297][ T9961] usb 3-1: SerialNumber: syz [ 537.150800][ T9961] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 537.565607][ T9961] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 537.565903][ T9961] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 537.565939][ T9961] usb 3-1: media controller created [ 537.640002][ T9961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.725607][T13283] netlink: 'syz.3.2178': attribute type 1 has an invalid length. [ 538.008752][T13286] bond3: (slave gretap2): making interface the new active one [ 538.022623][T13286] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 538.132300][T13288] vlan1: entered allmulticast mode [ 538.132324][T13288] bond3: entered allmulticast mode [ 538.132340][T13288] gretap2: entered allmulticast mode [ 538.151758][T13288] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 538.328894][T13295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.330975][T13295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.361290][T13295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.361623][T13295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.405386][T13295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.405724][T13295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.405914][ T9961] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 539.544348][ T9980] usb 3-1: USB disconnect, device number 62 [ 539.583754][ T9961] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.585415][ T9961] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.585444][ T9961] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.585487][ T9961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.794335][ T9961] usb 4-1: usb_control_msg returned -32 [ 539.794389][ T9961] usbtmc 4-1:16.0: can't read capabilities [ 539.936628][T13329] binder: 13328:13329 ioctl c018620c 80000080 returned -22 [ 540.013213][ T5693] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 540.165224][ T5693] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 540.171879][ T5693] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 540.171918][ T5693] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 540.171962][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.221841][T13325] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 540.245434][ T5693] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.552175][ T5693] usb 6-1: USB disconnect, device number 40 [ 541.691130][T13353] netlink: 'syz.1.2196': attribute type 1 has an invalid length. [ 541.745300][T13357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2196'. [ 541.848865][T13353] vlan11: entered allmulticast mode [ 541.848889][T13353] bond2: entered allmulticast mode [ 542.029012][ T5693] usb 4-1: USB disconnect, device number 77 [ 542.574730][ T5693] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 542.613388][ T9961] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 542.733908][ T5693] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 542.735106][ T5693] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 542.735135][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.735158][ T5693] usb 4-1: config 0 has no interface number 0 [ 542.735208][ T5693] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 542.735237][ T5693] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 542.735261][ T5693] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.738517][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.738544][ T5693] usb 4-1: Product: syz [ 542.738561][ T5693] usb 4-1: Manufacturer: syz [ 542.738577][ T5693] usb 4-1: SerialNumber: syz [ 542.817846][ T5693] usb 4-1: config 0 descriptor?? [ 542.840782][ T9961] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.856652][ T9961] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.856684][ T9961] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.856727][ T9961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.121194][ T9961] usb 2-1: usb_control_msg returned -32 [ 543.121247][ T9961] usbtmc 2-1:16.0: can't read capabilities [ 543.512533][T13361] binder: 13360:13361 ioctl c0306201 80000080 returned -14 [ 543.521441][T13361] binder: 13360:13361 ioctl c0306201 800003c0 returned -14 [ 543.548877][T13361] binder: 13360:13361 ioctl 800454e0 800000c0 returned -22 [ 543.561763][ T5693] usb 4-1: USB disconnect, device number 78 [ 544.414900][T13396] netlink: 'syz.5.2210': attribute type 1 has an invalid length. [ 544.471880][T13400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2210'. [ 544.498834][T13401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.559845][T13396] vlan3: entered allmulticast mode [ 544.559863][T13396] bond2: entered allmulticast mode [ 544.903582][ T9979] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 545.056461][ T9979] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 545.057112][ T9979] usb 4-1: config 0 has no interfaces? [ 545.057150][ T9979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.060099][ T9979] usb 4-1: config 0 descriptor?? [ 545.083468][ T9980] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 545.227177][ T9979] usb 2-1: USB disconnect, device number 80 [ 545.235889][ T9980] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 545.246205][ T9980] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 545.246290][ T9980] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 545.246401][ T9980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.309466][T13405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.309789][T13405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.377140][ T9978] usb 4-1: USB disconnect, device number 79 [ 545.381803][T13407] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 545.430125][ T9980] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.698032][ T9980] usb 1-1: USB disconnect, device number 71 [ 545.867226][ T9978] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 546.024000][ T9978] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 546.025234][ T9978] usb 4-1: config index 0 descriptor too short (expected 551, got 45) [ 546.025261][ T9978] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 546.027560][ T9978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.027585][ T9978] usb 4-1: Product: syz [ 546.027601][ T9978] usb 4-1: Manufacturer: syz [ 546.027617][ T9978] usb 4-1: SerialNumber: syz [ 546.092638][ T9978] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 546.370031][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 546.470983][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 546.493623][ T9978] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 546.494032][ T9978] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 546.494084][ T9978] usb 4-1: media controller created [ 546.540907][ T9978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.555218][ T5693] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 546.704075][ T5693] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 546.706403][ T5693] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 546.706448][ T5693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.706504][ T5693] usb 6-1: config 0 has no interface number 0 [ 546.706580][ T5693] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 546.706629][ T5693] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 546.706671][ T5693] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.712396][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.712441][ T5693] usb 6-1: Product: syz [ 546.712464][ T5693] usb 6-1: Manufacturer: syz [ 546.712493][ T5693] usb 6-1: SerialNumber: syz [ 546.812009][ T5693] usb 6-1: config 0 descriptor?? [ 546.948021][T13442] input: syz0 as /devices/virtual/input/input41 [ 547.272646][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.277634][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.300594][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.300912][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.324737][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.325070][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.532547][T13421] binder: 13419:13421 ioctl c0306201 80000080 returned -14 [ 547.578479][T13421] binder: 13419:13421 ioctl c0306201 800003c0 returned -14 [ 547.612084][T13421] binder: 13419:13421 ioctl 800454e0 800000c0 returned -22 [ 547.652677][ T9980] usb 6-1: USB disconnect, device number 41 [ 548.114890][ T5693] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 548.276330][ T5693] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.278051][ T5693] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.278083][ T5693] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.278139][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.534459][ T9980] usb 4-1: USB disconnect, device number 80 [ 548.556561][ T5693] usb 2-1: usb_control_msg returned -32 [ 548.556609][ T5693] usbtmc 2-1:16.0: can't read capabilities [ 548.835947][T13466] loop4: detected capacity change from 0 to 7 [ 548.874904][T13466] Dev loop4: unable to read RDB block 7 [ 548.874952][T13466] loop4: unable to read partition table [ 548.875184][T13466] loop4: partition table beyond EOD, truncated [ 548.875241][T13466] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 549.411410][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'. [ 549.668158][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'. [ 549.762442][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'. [ 549.874354][ T5693] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 550.035977][ T5693] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.037107][ T5693] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.037143][ T5693] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.037184][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.088423][T13481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 550.111081][ T5693] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.456908][ T5693] usb 3-1: USB disconnect, device number 63 [ 550.821031][ T9978] usb 2-1: USB disconnect, device number 81 [ 551.203105][ T9978] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 551.354871][ T9978] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 551.355426][ T9978] usb 2-1: config 0 has no interfaces? [ 551.355462][ T9978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.391303][ T9978] usb 2-1: config 0 descriptor?? [ 551.612064][T13498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.623252][T13498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.627950][ T9978] usb 2-1: USB disconnect, device number 82 [ 552.082972][ T9978] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 552.235251][ T9978] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 552.236453][ T9978] usb 2-1: config index 0 descriptor too short (expected 551, got 45) [ 552.236480][ T9978] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 552.239191][ T9978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.239219][ T9978] usb 2-1: Product: syz [ 552.239231][ T9978] usb 2-1: Manufacturer: syz [ 552.239242][ T9978] usb 2-1: SerialNumber: syz [ 552.287646][ T9978] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 552.570057][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2244'. [ 552.690040][ T9978] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 552.711130][ T9978] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 552.711190][ T9978] usb 2-1: media controller created [ 552.770892][ T9978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.480993][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.481527][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.548390][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.548716][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.614714][T13544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.615036][T13544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.035111][T13552] loop4: detected capacity change from 0 to 7 [ 554.040344][T13552] Dev loop4: unable to read RDB block 7 [ 554.040374][T13552] loop4: unable to read partition table [ 554.040563][T13552] loop4: partition table beyond EOD, truncated [ 554.040590][T13552] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.703188][ T5693] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 554.825820][ T9980] usb 2-1: USB disconnect, device number 83 [ 554.864992][ T5693] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.870392][ T5693] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 554.870438][ T5693] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.870489][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.142618][ T5693] usb 1-1: usb_control_msg returned -32 [ 555.142669][ T5693] usbtmc 1-1:16.0: can't read capabilities [ 555.258511][T13564] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 555.283203][ T9980] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 555.405052][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2251'. [ 555.434206][ T9980] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 555.435116][ T9980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.435134][ T9980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.438404][ T9980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.438423][ T9980] usb 4-1: Product: syz [ 555.438435][ T9980] usb 4-1: Manufacturer: syz [ 555.438446][ T9980] usb 4-1: SerialNumber: syz [ 555.745921][ T9980] usb 4-1: 0:1 : does not exist [ 555.745982][ T9980] usb 4-1: unit 4 not found! [ 555.765795][ T9980] usb 4-1: unit 0 not found! [ 555.911383][ T9980] usb 4-1: USB disconnect, device number 81 [ 555.979003][T10257] udevd[10257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.980521][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 556.176483][T13579] input: syz0 as /devices/virtual/input/input42 [ 556.416461][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'. [ 556.474362][ T9980] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 556.518781][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'. [ 556.628583][ T9980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 556.629580][ T9980] usb 2-1: not running at top speed; connect to a high speed hub [ 556.629605][ T9980] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a34, bcdDevice=48.37 [ 556.637984][ T9980] usb 2-1: config 5 has an invalid interface number: 83 but max is 0 [ 556.638043][ T9980] usb 2-1: config 5 has no interface number 0 [ 556.638128][ T9980] usb 2-1: config 5 interface 83 has no altsetting 0 [ 556.672016][ T9980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.672099][ T9980] usb 2-1: Product: syz [ 556.672141][ T9980] usb 2-1: Manufacturer: syz [ 556.672178][ T9980] usb 2-1: SerialNumber: syz [ 556.804031][T13587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 556.969253][ T9980] rndis_host 2-1:5.83: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 556.997456][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 556.998831][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 557.014422][ T9980] usb 2-1: USB disconnect, device number 84 [ 557.372553][ T9958] usb 1-1: USB disconnect, device number 72 [ 557.815076][T13616] netlink: 'syz.0.2263': attribute type 11 has an invalid length. [ 557.904211][ T9958] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 558.069046][ T9958] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 558.070339][ T9958] usb 2-1: config 0 has no interfaces? [ 558.070381][ T9958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.126199][ T9958] usb 2-1: config 0 descriptor?? [ 558.398631][T13613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.398966][T13613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.441043][ T9958] usb 2-1: USB disconnect, device number 85 [ 558.937131][ T9978] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 559.104210][ T9978] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 559.105689][ T9978] usb 2-1: config index 0 descriptor too short (expected 551, got 45) [ 559.105721][ T9978] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 559.108426][ T9978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.108452][ T9978] usb 2-1: Product: syz [ 559.108464][ T9978] usb 2-1: Manufacturer: syz [ 559.108475][ T9978] usb 2-1: SerialNumber: syz [ 559.179840][ T9978] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 559.731168][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 559.891718][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 559.995817][ T9978] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 560.001622][ T9978] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 560.001662][ T9978] usb 2-1: media controller created [ 560.039558][T13613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.040809][T13613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.061692][T13613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.065166][T13613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.080925][ T9978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.109673][T13613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.131383][T13613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.467520][ T9978] usb 2-1: USB disconnect, device number 86 [ 560.524642][ T9980] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 560.679737][ T9980] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.680988][ T9980] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.681030][ T9980] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.681075][ T9980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.933825][ T9980] usb 4-1: usb_control_msg returned -32 [ 560.933883][ T9980] usbtmc 4-1:16.0: can't read capabilities [ 561.846388][T13699] netlink: 'syz.5.2284': attribute type 1 has an invalid length. [ 561.895824][T13701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2284'. [ 561.979871][T13703] FAULT_INJECTION: forcing a failure. [ 561.979871][T13703] name failslab, interval 1, probability 0, space 0, times 0 [ 561.979915][T13703] CPU: 1 UID: 0 PID: 13703 Comm: syz.2.2285 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.979946][T13703] Tainted: [L]=SOFTLOCKUP [ 561.979955][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.979969][T13703] Call Trace: [ 561.979978][T13703] [ 561.979990][T13703] dump_stack_lvl+0xe8/0x150 [ 561.980031][T13703] should_fail_ex+0x410/0x560 [ 561.980067][T13703] should_failslab+0xa8/0x100 [ 561.980101][T13703] __kmalloc_cache_noprof+0xa3/0x600 [ 561.980126][T13703] ? __kmalloc_cache_noprof+0x14d/0x600 [ 561.980149][T13703] ? sctp_add_bind_addr+0x8c/0x370 [ 561.980185][T13703] ? sctp_add_bind_addr+0x8c/0x370 [ 561.980229][T13703] sctp_add_bind_addr+0x8c/0x370 [ 561.980270][T13703] sctp_copy_local_addr_list+0x31a/0x4e0 [ 561.980309][T13703] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 561.980347][T13703] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 561.980389][T13703] ? sctp_v4_is_any+0x35/0x60 [ 561.980413][T13703] ? sctp_copy_one_addr+0x93/0x360 [ 561.980452][T13703] sctp_bind_addr_copy+0xb3/0x3c0 [ 561.980490][T13703] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 561.980527][T13703] sctp_connect_new_asoc+0x2ff/0x6b0 [ 561.980560][T13703] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 561.980597][T13703] ? __local_bh_enable_ip+0xd6/0x140 [ 561.980627][T13703] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 561.980660][T13703] ? security_sctp_bind_connect+0x7e/0x2c0 [ 561.980689][T13703] sctp_sendmsg+0x159b/0x2d00 [ 561.980734][T13703] ? __pfx_sctp_sendmsg+0x10/0x10 [ 561.980778][T13703] ? lock_acquire+0x115/0x350 [ 561.980815][T13703] ? aa_sock_msg_perm+0xfc/0x210 [ 561.980852][T13703] ? sock_rps_record_flow+0x19/0x350 [ 561.980882][T13703] ? inet_sendmsg+0x298/0x320 [ 561.980908][T13703] ? __pfx_inet_sendmsg+0x10/0x10 [ 561.980930][T13703] sock_sendmsg_nosec+0x10e/0x180 [ 561.980960][T13703] ____sys_sendmsg+0x54e/0x850 [ 561.980998][T13703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.981048][T13703] ___sys_sendmsg+0x2a5/0x360 [ 561.981079][T13703] ? __lock_acquire+0x747/0x2de0 [ 561.981109][T13703] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.981139][T13703] ? get_pid_task+0x20/0x1f0 [ 561.981162][T13703] ? get_pid_task+0x20/0x1f0 [ 561.981182][T13703] ? get_pid_task+0x20/0x1f0 [ 561.981236][T13703] ? __fget_files+0x2a/0x420 [ 561.981268][T13703] ? __fget_files+0x3a2/0x420 [ 561.981309][T13703] __sys_sendmsg+0x177/0x240 [ 561.981342][T13703] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.981393][T13703] __do_fast_syscall_32+0x27a/0x6a0 [ 561.981429][T13703] ? do_fast_syscall_32+0x33/0x70 [ 561.981459][T13703] ? asm_int80_emulation+0x1a/0x20 [ 561.981482][T13703] ? do_int80_emulation+0x299/0x500 [ 561.981511][T13703] ? trace_irq_disable+0x3b/0x140 [ 561.981538][T13703] do_fast_syscall_32+0x33/0x70 [ 561.981569][T13703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.981597][T13703] RIP: 0023:0xf70af0ec [ 561.981618][T13703] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 561.981637][T13703] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 561.981662][T13703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 561.981678][T13703] RDX: 000000000004c0e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.981693][T13703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.981705][T13703] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 561.981720][T13703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.981754][T13703] [ 562.177901][T13699] vlan3: entered allmulticast mode [ 562.177963][T13699] bond3: entered allmulticast mode [ 562.904745][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.904805][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.998340][T13713] syzkaller0: entered promiscuous mode [ 562.998365][T13713] syzkaller0: entered allmulticast mode [ 563.255720][ T5693] usb 4-1: USB disconnect, device number 82 [ 563.283701][ T9958] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 563.347180][T13733] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 563.402319][T13736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2298'. [ 563.444473][ T9958] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 563.445044][ T9958] usb 1-1: config 0 has no interfaces? [ 563.445080][ T9958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.485802][ T9958] usb 1-1: config 0 descriptor?? [ 563.611468][T13739] vlan10: entered allmulticast mode [ 563.611492][T13739] bond5: entered allmulticast mode [ 563.710374][T13719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.717861][T13719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.738619][ T5693] usb 1-1: USB disconnect, device number 73 [ 564.253123][ T9958] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 564.286030][T13759] bond6: entered promiscuous mode [ 564.427571][ T9958] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 564.428820][ T9958] usb 1-1: config index 0 descriptor too short (expected 551, got 45) [ 564.428861][ T9958] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 564.440748][ T9958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.440822][ T9958] usb 1-1: Product: syz [ 564.440872][ T9958] usb 1-1: Manufacturer: syz [ 564.440913][ T9958] usb 1-1: SerialNumber: syz [ 564.509102][ T9958] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 564.945189][ T5693] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 564.990706][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'. [ 565.113681][ T5693] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.116163][ T5693] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.116195][ T5693] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.116240][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.321728][T13719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.345512][T13719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.362304][ T9958] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 565.362636][ T9958] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 565.362687][ T9958] usb 1-1: media controller created [ 565.375744][T13719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.381980][T13719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.410987][ T5693] usb 3-1: usb_control_msg returned -32 [ 565.411037][ T5693] usbtmc 3-1:16.0: can't read capabilities [ 565.431295][T13719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.431755][T13719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.466967][ T9958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.650651][ T9958] usb 1-1: USB disconnect, device number 74 [ 565.827084][T13786] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2314'. [ 566.403026][ T5693] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 566.565372][ T5693] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 566.566180][ T5693] usb 6-1: config 0 has no interfaces? [ 566.566217][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.571704][ T5693] usb 6-1: config 0 descriptor?? [ 566.763299][T13815] netlink: 'syz.3.2322': attribute type 1 has an invalid length. [ 566.797929][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.807301][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.829112][ T9980] usb 6-1: USB disconnect, device number 42 [ 566.831723][T13817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2322'. [ 566.904019][T13819] vlan1: entered allmulticast mode [ 566.904046][T13819] bond4: entered allmulticast mode [ 567.087861][T13822] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 567.192976][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'. [ 567.264430][ T9980] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 567.395012][T13834] FAULT_INJECTION: forcing a failure. [ 567.395012][T13834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.395056][T13834] CPU: 1 UID: 0 PID: 13834 Comm: syz.0.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.395078][T13834] Tainted: [L]=SOFTLOCKUP [ 567.395084][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.395094][T13834] Call Trace: [ 567.395102][T13834] [ 567.395109][T13834] dump_stack_lvl+0xe8/0x150 [ 567.395137][T13834] should_fail_ex+0x410/0x560 [ 567.395159][T13834] _copy_from_user+0x2d/0xb0 [ 567.395182][T13834] get_compat_msghdr+0xb3/0x4c0 [ 567.395211][T13834] ? __pfx_get_compat_msghdr+0x10/0x10 [ 567.395238][T13834] ? kfree+0x4d/0x650 [ 567.395265][T13834] ___sys_recvmsg+0x1db/0x5a0 [ 567.395292][T13834] ? __pfx____sys_recvmsg+0x10/0x10 [ 567.395317][T13834] ? lock_acquire+0x115/0x350 [ 567.395354][T13834] do_recvmmsg+0x38b/0x7f0 [ 567.395390][T13834] ? __pfx_do_recvmmsg+0x10/0x10 [ 567.395422][T13834] ? __mutex_unlock_slowpath+0x731/0x900 [ 567.395453][T13834] __sys_recvmmsg+0x1a5/0x290 [ 567.395477][T13834] ? __pfx___sys_recvmmsg+0x10/0x10 [ 567.395500][T13834] ? ksys_write+0x242/0x270 [ 567.395528][T13834] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 567.395548][T13834] __do_fast_syscall_32+0x27a/0x6a0 [ 567.395569][T13834] ? do_fast_syscall_32+0x33/0x70 [ 567.395589][T13834] ? asm_int80_emulation+0x1a/0x20 [ 567.395604][T13834] ? do_int80_emulation+0x299/0x500 [ 567.395646][T13834] ? trace_irq_disable+0x3b/0x140 [ 567.395675][T13834] do_fast_syscall_32+0x33/0x70 [ 567.395705][T13834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.395732][T13834] RIP: 0023:0xf7ff50ec [ 567.395753][T13834] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 567.395774][T13834] RSP: 002b:00000000f549550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 567.395792][T13834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 567.395803][T13834] RDX: 0000000000000220 RSI: 0000000000000100 RDI: 0000000000000000 [ 567.395813][T13834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.395823][T13834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 567.395832][T13834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.395854][T13834] [ 567.417615][ T9980] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 567.437142][ T9980] usb 6-1: config index 0 descriptor too short (expected 551, got 45) [ 567.437228][ T9980] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 567.502153][ T9980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.502236][ T9980] usb 6-1: Product: syz [ 567.502279][ T9980] usb 6-1: Manufacturer: syz [ 567.502323][ T9980] usb 6-1: SerialNumber: syz [ 567.666408][T13827] binder: 13826:13827 ioctl c0306201 0 returned -14 [ 567.668466][ T9980] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 567.722442][ T5693] usb 3-1: USB disconnect, device number 64 [ 567.821432][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2329'. [ 567.821456][T13838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2329'. [ 568.203225][ T5693] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 568.308149][T13845] FAULT_INJECTION: forcing a failure. [ 568.308149][T13845] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.308178][T13845] CPU: 0 UID: 0 PID: 13845 Comm: syz.1.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.308200][T13845] Tainted: [L]=SOFTLOCKUP [ 568.308206][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.308216][T13845] Call Trace: [ 568.308243][T13845] [ 568.308256][T13845] dump_stack_lvl+0xe8/0x150 [ 568.308295][T13845] should_fail_ex+0x410/0x560 [ 568.308318][T13845] prepare_alloc_pages+0x223/0x600 [ 568.308343][T13845] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 568.308365][T13845] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 568.308387][T13845] ? __pfx_policy_nodemask+0x10/0x10 [ 568.308415][T13845] alloc_pages_mpol+0x21e/0x390 [ 568.308440][T13845] folio_alloc_mpol_noprof+0x39/0x160 [ 568.308463][T13845] shmem_alloc_and_add_folio+0x43e/0xf60 [ 568.308487][T13845] ? filemap_get_entry+0xcd/0x3f0 [ 568.308516][T13845] ? __pfx_filemap_get_entry+0x10/0x10 [ 568.308537][T13845] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 568.308564][T13845] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 568.308589][T13845] shmem_get_folio_gfp+0x5da/0x16d0 [ 568.308623][T13845] shmem_fault+0x179/0x390 [ 568.308651][T13845] __do_fault+0x138/0x2a0 [ 568.308669][T13845] do_pte_missing+0x684/0x34b0 [ 568.308692][T13845] ? handle_mm_fault+0xf1/0x3750 [ 568.308718][T13845] handle_mm_fault+0x1a53/0x3750 [ 568.308749][T13845] ? handle_mm_fault+0xf1/0x3750 [ 568.308779][T13845] ? __pfx_handle_mm_fault+0x10/0x10 [ 568.308803][T13845] ? follow_page_pte+0x748/0xf10 [ 568.308836][T13845] ? __pfx_follow_page_pte+0x10/0x10 [ 568.308867][T13845] __get_user_pages+0x1675/0x2750 [ 568.308912][T13845] __gup_longterm_locked+0x115b/0x15c0 [ 568.308945][T13845] ? lock_acquire+0x115/0x350 [ 568.308965][T13845] pin_user_pages_remote+0xdc/0x130 [ 568.308990][T13845] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 568.309014][T13845] ? down_read+0x2be/0x330 [ 568.309037][T13845] ? mm_access+0x188/0x2c0 [ 568.309060][T13845] process_vm_rw+0x650/0xba0 [ 568.309091][T13845] ? __pfx_process_vm_rw+0x10/0x10 [ 568.309146][T13845] ? __fget_files+0x3a2/0x420 [ 568.309177][T13845] ? ksys_write+0x242/0x270 [ 568.309206][T13845] __ia32_sys_process_vm_writev+0xdf/0x100 [ 568.309235][T13845] __do_fast_syscall_32+0x27a/0x6a0 [ 568.309258][T13845] ? do_fast_syscall_32+0x33/0x70 [ 568.309280][T13845] ? asm_int80_emulation+0x1a/0x20 [ 568.309296][T13845] ? do_int80_emulation+0x299/0x500 [ 568.309317][T13845] ? trace_irq_disable+0x3b/0x140 [ 568.309340][T13845] do_fast_syscall_32+0x33/0x70 [ 568.309362][T13845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.309383][T13845] RIP: 0023:0xf700f0ec [ 568.309398][T13845] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 568.309412][T13845] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000015c [ 568.309430][T13845] RAX: ffffffffffffffda RBX: 00000000000005b8 RCX: 0000000080c22000 [ 568.309442][T13845] RDX: 000000000000002b RSI: 0000000080c22fa0 RDI: 0000000000000001 [ 568.309452][T13845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.309462][T13845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 568.309471][T13845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.309495][T13845] [ 568.445837][ T5693] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.476470][ T5693] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 568.476507][ T5693] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 568.476538][ T5693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.544993][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 568.545024][ T5693] usb 3-1: Product: syz [ 568.545041][ T5693] usb 3-1: Manufacturer: syz [ 568.545057][ T5693] usb 3-1: SerialNumber: syz [ 568.561495][ T9980] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 568.562730][ T9980] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 568.568704][ T9980] usb 6-1: media controller created [ 568.726901][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.753284][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.755546][ T5693] usb 3-1: config 0 descriptor?? [ 568.778514][ T5693] usb 3-1: selecting invalid altsetting 0 [ 568.798567][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.801936][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.829812][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.830170][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.844531][ T9980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.968304][T13840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.987816][T13840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.094366][ T5693] usb 3-1: USB disconnect, device number 65 [ 569.241539][ T9268] udevd[9268]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.415457][ T9980] usb 6-1: USB disconnect, device number 43 [ 569.773385][ T5693] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 569.823128][T13862] syzkaller0: entered promiscuous mode [ 569.823165][T13862] syzkaller0: entered allmulticast mode [ 570.032921][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 570.037309][ T5693] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 570.061800][ T5693] usb 2-1: config index 0 descriptor too short (expected 55442, got 36) [ 570.061823][ T5693] usb 2-1: config 6 has too many interfaces: 246, using maximum allowed: 32 [ 570.061839][ T5693] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 570.061853][ T5693] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 246 [ 570.061881][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.321722][T13866] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 570.391406][T13868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2336'. [ 570.655638][T13869] vlan5: entered allmulticast mode [ 570.655662][T13869] bond4: entered allmulticast mode [ 571.209964][T13880] netlink: 'syz.2.2340': attribute type 28 has an invalid length. [ 571.295518][ T9978] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 571.422029][T13880] bridge8: port 1(erspan0) entered disabled state [ 571.443828][ T9978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.446679][ T9978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.446713][ T9978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.446760][ T9978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.745885][ T9978] usb 4-1: usb_control_msg returned -32 [ 571.745937][ T9978] usbtmc 4-1:16.0: can't read capabilities [ 572.005832][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2344'. [ 572.024960][T13891] FAULT_INJECTION: forcing a failure. [ 572.024960][T13891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.040928][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.2.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.040963][T13891] Tainted: [L]=SOFTLOCKUP [ 572.040971][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.040983][T13891] Call Trace: [ 572.040992][T13891] [ 572.041002][T13891] dump_stack_lvl+0xe8/0x150 [ 572.041039][T13891] should_fail_ex+0x410/0x560 [ 572.041069][T13891] prepare_alloc_pages+0x223/0x600 [ 572.041097][T13891] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 572.041120][T13891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.041144][T13891] ? __pfx_policy_nodemask+0x10/0x10 [ 572.041167][T13891] ? try_to_migrate+0x33d/0x400 [ 572.041187][T13891] ? __pfx_try_to_migrate+0x10/0x10 [ 572.041210][T13891] alloc_pages_mpol+0x21e/0x390 [ 572.041241][T13891] folio_alloc_mpol_noprof+0x39/0x160 [ 572.041269][T13891] migrate_pages_batch+0xb1f/0x4f50 [ 572.041315][T13891] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 572.041346][T13891] ? __pfx_migrate_pages_batch+0x10/0x10 [ 572.041375][T13891] ? __kernel_text_address+0xd/0x30 [ 572.041398][T13891] ? unwind_get_return_address+0x4d/0x90 [ 572.041427][T13891] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 572.041450][T13891] ? arch_stack_walk+0xfb/0x150 [ 572.041474][T13891] ? __css_rstat_updated+0x237/0x540 [ 572.041550][T13891] ? __lock_acquire+0x747/0x2de0 [ 572.041591][T13891] ? update_se+0x90/0xff0 [ 572.041632][T13891] migrate_pages+0x1b9f/0x2920 [ 572.041680][T13891] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 572.041724][T13891] ? __pfx_migrate_pages+0x10/0x10 [ 572.041760][T13891] ? wake_up_q+0x99/0xd0 [ 572.041808][T13891] __se_sys_mbind+0xe82/0x10e0 [ 572.041840][T13891] ? __pfx___se_sys_mbind+0x10/0x10 [ 572.041880][T13891] ? fput+0xa0/0xd0 [ 572.041902][T13891] ? ksys_write+0x242/0x270 [ 572.041936][T13891] ? __ia32_sys_mbind+0x21/0xf0 [ 572.041962][T13891] __do_fast_syscall_32+0x27a/0x6a0 [ 572.041992][T13891] ? do_fast_syscall_32+0x33/0x70 [ 572.042018][T13891] ? asm_int80_emulation+0x1a/0x20 [ 572.042039][T13891] ? do_int80_emulation+0x299/0x500 [ 572.042065][T13891] ? trace_irq_disable+0x3b/0x140 [ 572.042091][T13891] do_fast_syscall_32+0x33/0x70 [ 572.042116][T13891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.042140][T13891] RIP: 0023:0xf70af0ec [ 572.042160][T13891] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 572.042177][T13891] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 572.042202][T13891] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000800000 [ 572.042218][T13891] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000007 [ 572.042232][T13891] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 572.042246][T13891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 572.042260][T13891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.042292][T13891] [ 573.012164][ T5693] usb 2-1: string descriptor 0 read error: -71 [ 573.034418][ T5693] usb 2-1: USB disconnect, device number 87 [ 573.094004][ T9958] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 573.123180][ T9978] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 573.175533][T13908] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2349'. [ 573.245652][ T9958] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 573.246508][ T9958] usb 1-1: config 0 has no interfaces? [ 573.246534][ T9958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.250167][ T9958] usb 1-1: config 0 descriptor?? [ 573.284037][ T9978] usb 3-1: Using ep0 maxpacket: 32 [ 573.287909][ T9978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 573.287961][ T9978] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 573.289124][ T9978] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 573.289150][ T9978] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 573.289173][ T9978] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 573.289195][ T9978] usb 3-1: config 128 has no interface number 0 [ 573.289237][ T9978] usb 3-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.289267][ T9978] usb 3-1: config 128 interface 127 has no altsetting 0 [ 573.345813][ T9978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.345843][ T9978] usb 3-1: Product: syz [ 573.345860][ T9978] usb 3-1: Manufacturer: syz [ 573.345876][ T9978] usb 3-1: SerialNumber: syz [ 573.467894][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.471841][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.480421][ T9961] usb 1-1: USB disconnect, device number 75 [ 573.552937][ T5693] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 573.645865][ T9978] usb 3-1: USB disconnect, device number 66 [ 573.668420][T10257] udevd[10257]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.694328][ T9958] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 573.723708][ T5693] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 573.724797][ T5693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.726601][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.726619][ T5693] usb 2-1: Product: syz [ 573.726630][ T5693] usb 2-1: Manufacturer: syz [ 573.726642][ T5693] usb 2-1: SerialNumber: syz [ 573.756405][ T5693] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 573.864826][ T9958] usb 6-1: Using ep0 maxpacket: 32 [ 573.866282][ T9958] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 573.867384][ T9958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.870476][ T9958] usb 6-1: config 0 descriptor?? [ 573.925240][ T9966] usb 4-1: USB disconnect, device number 83 [ 573.967712][ T9961] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 574.008628][T13914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2352'. [ 574.075667][ T9958] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 574.079601][ T9958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 574.082135][ T9958] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 574.082173][ T9958] usb 6-1: media controller created [ 574.133144][ T9958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.153805][ T9961] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 574.155110][ T9961] usb 1-1: config index 0 descriptor too short (expected 551, got 45) [ 574.155140][ T9961] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 574.161483][ T9961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.161510][ T9961] usb 1-1: Product: syz [ 574.161555][ T9961] usb 1-1: Manufacturer: syz [ 574.161573][ T9961] usb 1-1: SerialNumber: syz [ 574.247961][ T9961] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 574.301535][T13917] FAULT_INJECTION: forcing a failure. [ 574.301535][T13917] name failslab, interval 1, probability 0, space 0, times 0 [ 574.301627][T13917] CPU: 1 UID: 0 PID: 13917 Comm: syz.2.2353 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.301658][T13917] Tainted: [L]=SOFTLOCKUP [ 574.301668][T13917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.301682][T13917] Call Trace: [ 574.301692][T13917] [ 574.301702][T13917] dump_stack_lvl+0xe8/0x150 [ 574.301744][T13917] should_fail_ex+0x410/0x560 [ 574.301777][T13917] should_failslab+0xa8/0x100 [ 574.301808][T13917] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 574.301846][T13917] ? __d_alloc+0x37/0x6f0 [ 574.301877][T13917] ? __d_alloc+0x37/0x6f0 [ 574.301924][T13917] __d_alloc+0x37/0x6f0 [ 574.301964][T13917] path_from_stashed+0x35c/0x580 [ 574.302008][T13917] pidfs_alloc_file+0xff/0x290 [ 574.302044][T13917] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 574.302086][T13917] pidfd_prepare+0xfd/0x170 [ 574.302120][T13917] copy_process+0x24a2/0x4400 [ 574.302150][T13917] ? __lock_acquire+0x747/0x2de0 [ 574.302185][T13917] ? copy_process+0xd16/0x4400 [ 574.302233][T13917] ? __pfx_copy_process+0x10/0x10 [ 574.302261][T13917] ? kernel_clone+0x1d7/0x940 [ 574.302296][T13917] ? kasan_check_range+0xb/0x2c0 [ 574.302335][T13917] kernel_clone+0x2d7/0x940 [ 574.302373][T13917] ? __pfx_kernel_clone+0x10/0x10 [ 574.302404][T13917] ? __seccomp_filter+0x1ca3/0x1de0 [ 574.302453][T13917] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 574.302481][T13917] ? __fget_files+0x2a/0x420 [ 574.302513][T13917] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 574.302563][T13917] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 574.302597][T13917] __do_fast_syscall_32+0x27a/0x6a0 [ 574.302630][T13917] ? do_fast_syscall_32+0x33/0x70 [ 574.302661][T13917] ? asm_int80_emulation+0x1a/0x20 [ 574.302683][T13917] ? do_int80_emulation+0x299/0x500 [ 574.302718][T13917] do_fast_syscall_32+0x33/0x70 [ 574.302750][T13917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.302778][T13917] RIP: 0023:0xf70af0ec [ 574.302799][T13917] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 574.302817][T13917] RSP: 002b:00000000f549d4bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 574.302841][T13917] RAX: ffffffffffffffda RBX: 0000000000001000 RCX: 0000000000000000 [ 574.302857][T13917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.302871][T13917] RBP: 00000000f74a4f80 R08: 0000000000000000 R09: 0000000000000000 [ 574.302893][T13917] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 574.302907][T13917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.302940][T13917] [ 574.381894][ T5693] gspca_mr97310a: reg write [19] error -71 [ 574.381982][ T5693] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 574.612062][ T5693] usb 2-1: USB disconnect, device number 88 [ 574.642604][ T9958] az6027: usb out operation failed. (-71) [ 574.650391][ T9958] az6027: usb out operation failed. (-71) [ 574.650437][ T9958] stb0899_attach: Driver disabled by Kconfig [ 574.650529][ T9958] az6027: no front-end attached [ 574.650529][ T9958] [ 574.651017][ T9958] az6027: usb out operation failed. (-71) [ 574.651033][ T9958] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 574.693391][ T9958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 574.735877][ T9958] dvb-usb: schedule remote query interval to 400 msecs. [ 574.735903][ T9958] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 574.764277][ T9958] usb 6-1: USB disconnect, device number 44 [ 574.875961][ T9958] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 575.136595][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.138292][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.141238][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.142326][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.182010][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.191940][ T9961] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 575.192618][ T9961] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 575.192671][ T9961] usb 1-1: media controller created [ 575.217301][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.217643][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 575.249609][ T9961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.370416][ T9961] usb 1-1: USB disconnect, device number 76 [ 575.775957][T13952] netlink: 'syz.5.2362': attribute type 1 has an invalid length. [ 575.837374][T13958] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2362'. [ 575.983202][T13960] vlan3: entered allmulticast mode [ 575.983228][T13960] bond4: entered allmulticast mode [ 576.281010][T13971] FAULT_INJECTION: forcing a failure. [ 576.281010][T13971] name failslab, interval 1, probability 0, space 0, times 0 [ 576.281054][T13971] CPU: 1 UID: 0 PID: 13971 Comm: syz.3.2365 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.281086][T13971] Tainted: [L]=SOFTLOCKUP [ 576.281095][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.281110][T13971] Call Trace: [ 576.281120][T13971] [ 576.281131][T13971] dump_stack_lvl+0xe8/0x150 [ 576.281170][T13971] should_fail_ex+0x410/0x560 [ 576.281204][T13971] should_failslab+0xa8/0x100 [ 576.281233][T13971] ? flock_lock_inode+0x22a/0x1310 [ 576.281290][T13971] kmem_cache_alloc_noprof+0xa1/0x600 [ 576.281327][T13971] ? rcu_is_watching+0x16/0xb0 [ 576.281356][T13971] ? flock_lock_inode+0x22a/0x1310 [ 576.281389][T13971] flock_lock_inode+0x22a/0x1310 [ 576.281428][T13971] ? __pfx_flock_lock_inode+0x10/0x10 [ 576.281452][T13971] ? schedule+0x90/0x2b0 [ 576.281483][T13971] ? schedule+0x16e/0x2b0 [ 576.281511][T13971] locks_lock_inode_wait+0x114/0x470 [ 576.281539][T13971] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 576.281563][T13971] ? __pfx_autoremove_wake_function+0x10/0x10 [ 576.281594][T13971] ? __fget_files+0x2a/0x420 [ 576.281633][T13971] ? common_file_perm+0x20e/0x2b0 [ 576.281670][T13971] __se_sys_flock+0x4c9/0x650 [ 576.281695][T13971] ? __pfx___se_sys_flock+0x10/0x10 [ 576.281716][T13971] ? __mutex_unlock_slowpath+0x731/0x900 [ 576.281769][T13971] ? ksys_write+0x242/0x270 [ 576.281816][T13971] __do_fast_syscall_32+0x27a/0x6a0 [ 576.281857][T13971] ? do_fast_syscall_32+0x33/0x70 [ 576.281888][T13971] ? asm_int80_emulation+0x1a/0x20 [ 576.281911][T13971] ? do_int80_emulation+0x299/0x500 [ 576.281939][T13971] ? trace_irq_disable+0x3b/0x140 [ 576.281968][T13971] do_fast_syscall_32+0x33/0x70 [ 576.281999][T13971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.282026][T13971] RIP: 0023:0xf7f860ec [ 576.282047][T13971] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 576.282067][T13971] RSP: 002b:00000000f542550c EFLAGS: 00000206 ORIG_RAX: 000000000000008f [ 576.282092][T13971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 576.282108][T13971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.282123][T13971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.282137][T13971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 576.282151][T13971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.282183][T13971] [ 576.456695][ T9958] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 576.650532][ T9958] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.677084][ T9958] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.677128][ T9958] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.677177][ T9958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.928981][ T9958] usb 1-1: usb_control_msg returned -32 [ 576.929064][ T9958] usbtmc 1-1:16.0: can't read capabilities [ 578.683639][ T5693] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 578.837060][ T5693] usb 4-1: Using ep0 maxpacket: 32 [ 578.840180][ T5693] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 578.859315][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.871837][ T5693] usb 4-1: config 0 descriptor?? [ 579.108061][ T5693] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 579.136247][ T5693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.158425][ T5693] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 579.158488][ T5693] usb 4-1: media controller created [ 579.162349][ T9980] usb 1-1: USB disconnect, device number 77 [ 579.214673][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.451302][ T5693] az6027: usb out operation failed. (-71) [ 579.459827][ T5693] az6027: usb out operation failed. (-71) [ 579.459845][ T5693] stb0899_attach: Driver disabled by Kconfig [ 579.459856][ T5693] az6027: no front-end attached [ 579.459856][ T5693] [ 579.461684][ T5693] az6027: usb out operation failed. (-71) [ 579.461702][ T5693] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 579.507229][ T5693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 579.536863][ T5693] dvb-usb: schedule remote query interval to 400 msecs. [ 579.536888][ T5693] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 579.542765][ T5693] usb 4-1: USB disconnect, device number 84 [ 579.793723][ T9980] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 579.926269][ T5693] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 579.944133][ T9980] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 579.945084][ T9980] usb 1-1: config 0 has no interfaces? [ 579.945171][ T9980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.982461][ T9980] usb 1-1: config 0 descriptor?? [ 580.237026][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.238385][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.242149][ T9980] usb 1-1: USB disconnect, device number 78 [ 580.717343][ T9980] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 580.845268][T14011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.854477][T14012] openvswitch: netlink: Key type 9220 is out of range max 32 [ 580.874962][ T9980] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 580.876821][ T9980] usb 1-1: config index 0 descriptor too short (expected 551, got 45) [ 580.876848][ T9980] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 580.881631][ T9980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.881657][ T9980] usb 1-1: Product: syz [ 580.881675][ T9980] usb 1-1: Manufacturer: syz [ 580.881692][ T9980] usb 1-1: SerialNumber: syz [ 580.958478][ T9980] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 581.402927][ T5693] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 581.554134][ T5693] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 581.557724][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.557755][ T5693] usb 3-1: Product: syz [ 581.557772][ T5693] usb 3-1: Manufacturer: syz [ 581.557790][ T5693] usb 3-1: SerialNumber: syz [ 581.560995][ T5693] usb 3-1: config 0 descriptor?? [ 581.648616][ T5693] hub 3-1:0.0: bad descriptor, ignoring hub [ 581.648646][ T5693] hub 3-1:0.0: probe with driver hub failed with error -5 [ 581.648831][ T9980] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.649241][ T9980] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 581.649289][ T9980] usb 1-1: media controller created [ 581.744126][ T9980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.763548][ T5693] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 581.770264][ T5693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 581.819596][ T5693] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 581.819656][ T5693] usb 3-1: media controller created [ 581.873128][ T9978] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 581.873879][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.950398][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.952571][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.974973][T14016] FAULT_INJECTION: forcing a failure. [ 581.974973][T14016] name failslab, interval 1, probability 0, space 0, times 0 [ 581.975011][T14016] CPU: 0 UID: 0 PID: 14016 Comm: syz.2.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.975043][T14016] Tainted: [L]=SOFTLOCKUP [ 581.975052][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.975066][T14016] Call Trace: [ 581.975075][T14016] [ 581.975085][T14016] dump_stack_lvl+0xe8/0x150 [ 581.975124][T14016] should_fail_ex+0x410/0x560 [ 581.975157][T14016] should_failslab+0xa8/0x100 [ 581.975189][T14016] __kmalloc_noprof+0xfe/0x720 [ 581.975213][T14016] ? tomoyo_encode+0x2ad/0x570 [ 581.975244][T14016] ? tomoyo_encode+0x2ad/0x570 [ 581.975282][T14016] tomoyo_encode+0x2ad/0x570 [ 581.975320][T14016] tomoyo_realpath_from_path+0x5fa/0x640 [ 581.975371][T14016] ? tomoyo_path_number_perm+0x219/0x5f0 [ 581.975398][T14016] tomoyo_path_number_perm+0x246/0x5f0 [ 581.975426][T14016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.975452][T14016] ? __lock_acquire+0x747/0x2de0 [ 581.975492][T14016] ? hook_file_ioctl_compat+0x1f2/0x600 [ 581.975545][T14016] ? __fget_files+0x2a/0x420 [ 581.975582][T14016] ? __fget_files+0x3a2/0x420 [ 581.975613][T14016] ? __fget_files+0x2a/0x420 [ 581.975649][T14016] security_file_ioctl_compat+0xc3/0x2a0 [ 581.975678][T14016] __ia32_compat_sys_ioctl+0x139/0x950 [ 581.975708][T14016] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 581.975736][T14016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 581.975769][T14016] ? __fget_files+0x3a2/0x420 [ 581.975808][T14016] ? fput+0xa0/0xd0 [ 581.975836][T14016] ? ksys_write+0x242/0x270 [ 581.975884][T14016] __do_fast_syscall_32+0x27a/0x6a0 [ 581.975917][T14016] ? do_fast_syscall_32+0x33/0x70 [ 581.975947][T14016] ? asm_int80_emulation+0x1a/0x20 [ 581.975969][T14016] ? do_int80_emulation+0x299/0x500 [ 581.975999][T14016] ? trace_irq_disable+0x3b/0x140 [ 581.976028][T14016] do_fast_syscall_32+0x33/0x70 [ 581.976059][T14016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.976087][T14016] RIP: 0023:0xf70af0ec [ 581.976109][T14016] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 581.976128][T14016] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 581.976153][T14016] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 581.976169][T14016] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.976184][T14016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.976198][T14016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.976212][T14016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.976246][T14016] [ 581.976270][T14016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 581.978571][T14016] ------------[ cut here ]------------ [ 581.978586][T14016] usb 1-1: BOGUS control dir, pipe 80004f80 doesn't match bRequestType c0 [ 581.978610][T14016] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.2.2380/14016 [ 582.083250][ T5693] DVB: Unable to find symbol dib7000p_attach() [ 582.083295][ T5693] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 582.163974][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.165268][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.322305][T14016] Modules linked in: [ 582.327000][T14016] CPU: 0 UID: 0 PID: 14016 Comm: syz.2.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.338012][T14016] Tainted: [L]=SOFTLOCKUP [ 582.342343][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.352596][T14016] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 582.358301][T14016] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 582.378548][T14016] RSP: 0018:ffffc90004dcf6f8 EFLAGS: 00010246 [ 582.384817][T14016] RAX: 0000000000000000 RBX: ffff888073940200 RCX: 0000000080004f80 [ 582.392926][T14016] RDX: ffff8880757da600 RSI: ffffffff8cc52ca0 RDI: ffffffff90880680 [ 582.400933][T14016] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 582.409133][T14016] R10: ffffc90004dcf7e0 R11: fffff520009b9f08 R12: 1ffff1100fe0306c [ 582.417448][T14016] R13: ffff88807f018360 R14: ffff8880757da600 R15: 0000000080004f80 [ 582.425550][T14016] FS: 0000000000000000(0000) GS:ffff888124ccb000(0063) knlGS:00000000f549db40 [ 582.434620][T14016] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 582.441234][T14016] CR2: 00007f0af52a2d90 CR3: 0000000055c90000 CR4: 00000000003526f0 [ 582.449279][T14016] Call Trace: [ 582.452566][T14016] [ 582.455553][T14016] usb_start_wait_urb+0x13f/0x5b0 [ 582.460594][T14016] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 582.466225][T14016] usb_control_msg+0x234/0x3e0 [ 582.471031][T14016] gl861_ctrl_msg+0x207/0x420 [ 582.475944][T14016] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 582.481167][T14016] gl861_i2c_master_xfer+0x439/0x6a0 [ 582.486536][T14016] __i2c_transfer+0x7bf/0x1fe0 [ 582.491374][T14016] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 582.497276][T14016] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 582.503310][T14016] ? rt_mutex_lock_nested+0x156/0x1c0 [ 582.508705][T14016] ? i2c_transfer+0xc7/0x2d0 [ 582.513523][T14016] i2c_transfer+0x1cb/0x2d0 [ 582.518040][T14016] i2cdev_ioctl_rdwr+0x460/0x740 [ 582.523179][T14016] compat_i2cdev_ioctl+0x59f/0x5c0 [ 582.528308][T14016] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 582.534005][T14016] ? __fget_files+0x3a2/0x420 [ 582.538695][T14016] ? __fget_files+0x2a/0x420 [ 582.543353][T14016] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 582.548919][T14016] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 582.554457][T14016] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 582.560484][T14016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 582.566539][T14016] ? __fget_files+0x3a2/0x420 [ 582.571250][T14016] ? fput+0xa0/0xd0 [ 582.575144][T14016] ? ksys_write+0x242/0x270 [ 582.579675][T14016] __do_fast_syscall_32+0x27a/0x6a0 [ 582.585030][T14016] ? do_fast_syscall_32+0x33/0x70 [ 582.590096][T14016] ? asm_int80_emulation+0x1a/0x20 [ 582.595287][T14016] ? do_int80_emulation+0x299/0x500 [ 582.600502][T14016] ? trace_irq_disable+0x3b/0x140 [ 582.605564][T14016] do_fast_syscall_32+0x33/0x70 [ 582.610429][T14016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.616816][T14016] RIP: 0023:0xf70af0ec [ 582.620890][T14016] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 582.641151][T14016] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 582.650306][T14016] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 582.658540][T14016] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.667285][T14016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.675679][T14016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 582.683983][T14016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.692063][T14016] [ 582.695158][T14016] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 582.702461][T14016] CPU: 0 UID: 0 PID: 14016 Comm: syz.2.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.713401][T14016] Tainted: [L]=SOFTLOCKUP [ 582.717724][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.727778][T14016] Call Trace: [ 582.731060][T14016] [ 582.734029][T14016] vpanic+0x56d/0xa60 [ 582.738053][T14016] ? __pfx__printk+0x10/0x10 [ 582.742654][T14016] ? __pfx_vpanic+0x10/0x10 [ 582.747164][T14016] ? is_bpf_text_address+0x292/0x2b0 [ 582.752457][T14016] ? is_bpf_text_address+0x26/0x2b0 [ 582.757683][T14016] panic+0xc5/0xd0 [ 582.761449][T14016] ? __pfx_panic+0x10/0x10 [ 582.765896][T14016] __warn+0x315/0x4c0 [ 582.769899][T14016] ? usb_submit_urb+0x1057/0x18b0 [ 582.774932][T14016] ? usb_submit_urb+0x1057/0x18b0 [ 582.779984][T14016] __report_bug+0x276/0x570 [ 582.784582][T14016] ? usb_submit_urb+0x1057/0x18b0 [ 582.789613][T14016] ? __pfx___report_bug+0x10/0x10 [ 582.794651][T14016] ? usb_submit_urb+0x1057/0x18b0 [ 582.799682][T14016] report_bug_entry+0x19b/0x290 [ 582.804545][T14016] ? usb_submit_urb+0x1100/0x18b0 [ 582.809575][T14016] ? usb_submit_urb+0x1105/0x18b0 [ 582.814604][T14016] handle_bug+0xce/0x200 [ 582.818856][T14016] exc_invalid_op+0x1a/0x50 [ 582.823368][T14016] asm_exc_invalid_op+0x1a/0x20 [ 582.828223][T14016] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 582.833923][T14016] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 582.853567][T14016] RSP: 0018:ffffc90004dcf6f8 EFLAGS: 00010246 [ 582.859670][T14016] RAX: 0000000000000000 RBX: ffff888073940200 RCX: 0000000080004f80 [ 582.867645][T14016] RDX: ffff8880757da600 RSI: ffffffff8cc52ca0 RDI: ffffffff90880680 [ 582.875622][T14016] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 582.883606][T14016] R10: ffffc90004dcf7e0 R11: fffff520009b9f08 R12: 1ffff1100fe0306c [ 582.891591][T14016] R13: ffff88807f018360 R14: ffff8880757da600 R15: 0000000080004f80 [ 582.899783][T14016] ? usb_submit_urb+0x1091/0x18b0 [ 582.904840][T14016] usb_start_wait_urb+0x13f/0x5b0 [ 582.909893][T14016] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 582.915472][T14016] usb_control_msg+0x234/0x3e0 [ 582.920279][T14016] gl861_ctrl_msg+0x207/0x420 [ 582.924979][T14016] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 582.930211][T14016] gl861_i2c_master_xfer+0x439/0x6a0 [ 582.935539][T14016] __i2c_transfer+0x7bf/0x1fe0 [ 582.940324][T14016] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 582.946139][T14016] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 582.951964][T14016] ? rt_mutex_lock_nested+0x156/0x1c0 [ 582.957348][T14016] ? i2c_transfer+0xc7/0x2d0 [ 582.961947][T14016] i2c_transfer+0x1cb/0x2d0 [ 582.966457][T14016] i2cdev_ioctl_rdwr+0x460/0x740 [ 582.971408][T14016] compat_i2cdev_ioctl+0x59f/0x5c0 [ 582.976551][T14016] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 582.982193][T14016] ? __fget_files+0x3a2/0x420 [ 582.986897][T14016] ? __fget_files+0x2a/0x420 [ 582.991492][T14016] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 582.997056][T14016] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 583.002623][T14016] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 583.008663][T14016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.014664][T14016] ? __fget_files+0x3a2/0x420 [ 583.019378][T14016] ? fput+0xa0/0xd0 [ 583.023192][T14016] ? ksys_write+0x242/0x270 [ 583.027716][T14016] __do_fast_syscall_32+0x27a/0x6a0 [ 583.032941][T14016] ? do_fast_syscall_32+0x33/0x70 [ 583.037985][T14016] ? asm_int80_emulation+0x1a/0x20 [ 583.043186][T14016] ? do_int80_emulation+0x299/0x500 [ 583.048404][T14016] ? trace_irq_disable+0x3b/0x140 [ 583.053440][T14016] do_fast_syscall_32+0x33/0x70 [ 583.058347][T14016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 583.064687][T14016] RIP: 0023:0xf70af0ec [ 583.068754][T14016] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 583.088375][T14016] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 583.096816][T14016] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 583.104885][T14016] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.112884][T14016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.120866][T14016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 583.128838][T14016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.136824][T14016] [ 583.140025][T14016] Kernel Offset: disabled [ 583.144362][T14016] Rebooting in 86400 seconds..