last executing test programs: 1m49.957444575s ago: executing program 0 (id=7280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) unshare(0xe060400) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) nanosleep(0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x10, 0x0, 0x0, 0x0, 0x8, 0xfffffffe}}) (async) unshare(0x42000000) (async) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) (async, rerun: 32) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000300)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r6}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9401079000000083"], 0x0}, 0x0) 1m48.78228954s ago: executing program 0 (id=7291): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = dup2(r0, r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r6 = epoll_create1(0x0) ppoll(&(0x7f0000000040)=[{r6, 0x3f70}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x81, @empty, 0x3}], 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r8 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/200, 0xc8}], 0x1}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0200"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 1m47.752385008s ago: executing program 0 (id=7300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000", 0x1d}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1m47.458650119s ago: executing program 0 (id=7303): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000080), 0x75bb17c2) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) syz_clone(0x1004000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="c2ad5a280ef927ba4e542714cba3359f97e02f") getdents64(r5, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9253900000000000000002868563600", 0x10}) 1m46.876012413s ago: executing program 0 (id=7305): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000005480)=ANY=[]) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r3) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000040000", @ANYBLOB="010100"/14, @ANYRES32, @ANYRES32, @ANYBLOB="050000000300000003000000010000000000000000000000008a58da2201000000f2e106be3411e0b756fc67067fc9cfe2"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m46.646992111s ago: executing program 0 (id=7307): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10100) 1m46.038350713s ago: executing program 32 (id=7307): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10100) 9.812883886s ago: executing program 4 (id=7686): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x0, 0x64, 0x4, 0x0, 0x9, 0xbc3d, 0x1000, 0x7, 0xfff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577206465666e756c7420757365723a73792d0374b0303030307f8930303030303030303430393300"], 0x2a, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x9, 0xfe}, {0x6, 0x1, 0x0, 0x8eb6}]}) write(r5, &(0x7f00000004c0)='t8', 0x2) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) 9.601065986s ago: executing program 1 (id=7688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x3}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5}, 0x8) 9.58426542s ago: executing program 3 (id=7689): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x2b, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x1b, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x9a, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x4, 0x2000079, 0x404, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x10000, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x3, 0x8, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x8000, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x2000000, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) r1 = socket(0x28, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000018c0)={0x3ff, 0x2, 0x0, 'queue0\x00', 0x9c79}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="0100000000000000000011000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmsg(r4, &(0x7f0000001740)={&(0x7f0000001200)=@pptp, 0x80, &(0x7f0000001680)=[{&(0x7f0000001280)=""/9, 0x9}, {&(0x7f00000012c0)=""/68, 0x44}, {&(0x7f0000001340)=""/70, 0x46}, {&(0x7f00000013c0)=""/150, 0x96}, {&(0x7f0000001480)=""/164, 0xa4}, {&(0x7f0000001540)=""/11, 0xb}, {&(0x7f0000001580)=""/235, 0xeb}], 0x7, &(0x7f0000001700)=""/59, 0x3b}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r5 = socket(0x400000000010, 0x4, 0x52) write(r5, &(0x7f0000000040)="2503000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) poll(&(0x7f0000000080)=[{r5, 0x43e4}], 0x1, 0xfffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYBLOB="07b0cf7e2c89cc"], 0x0) socket$unix(0x1, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) epoll_create(0xb398) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xdc44, 0x8, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x73, 0x0, 0x10004}) shutdown(r1, 0x0) sendmsg$tipc(r5, &(0x7f00000011c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x3, 0x0, 0x40000001}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000000c0)="3df6958ecbe5a4118bffedddec80eaac36097a727218864654c9807ab74935dbbb7029d7fde8ffaabf184e70dad71a3f31a46b323009b208f37e5af48516b5b024e82a6dbf4f41a8274c1afef181b39089a01c4b729d2e74cfc6e6131a07ba295305dfbf4eface83b95a7f419833b833b86cb543099b2a4e77f910b30597d8567c968e2633617bb7cefc3a1e906801d03fdcd99623ddaae626376b530a2ddc95d850b66989a968d18acc24eca491ec9d4b55d88628e4da75b00189d4a6c306f483c4f274903d211a68506bfc619afd99129ed4e940f3a384fee6b6de2c3ef65c7d772c8be37b1493fbbe5c333b0e5646ee28e478c932bfd5bd73142d5230e6dd010c824c14044872965923cf3988ec2113c307e2fc19fdea9db62064b1c190c6a4580e029ac4fffecbb5422c058e1e313f2c461a14342afc0e99e18f0c97ee9cda0e90506afe9eae7e4c0a1902afd9b6d3ccb3680167a483db346f0b530fa9f55791ea5e567c767ea08fe42d8a55b0260283dc1165ac380e4bfd078dc55b4b97808f889253830fb1414c144c60f99a9c4cbb349281130c3cab70884e70fe801432f4c0c3ebd32c92216efacf75e249233ce9aef3a66aff4fdc03ddb919b9fa0b08cbd9b8dc38d255ecdd1b77cd293bfa73aecde2cb5572a8309c674566a3a0183d3a98c5618e9735e7334f195e50626707b294db6da71e9335c3e8e4aea54b8f0e963639ab01cbbcd1f56ef5efd52a190147e0a9b3f1ceec8cab6a1bfdb57290ded39af2cace8ada28366a1f83c960f81abc8b231b85701b868348ded7f0cb1c0187aecb93ea8d33cc8891fb5a07f7741d79584bef6d3e42c42f376a26b9a417ad695a7f4da6792f82c9125c8c3ebce0fed2045d77dcc2ca48200a9c77bf316c972c5bd9f96456f826996de264e09a7c3cebc2b89c068c03309b419a6315a9be847728f3e1c2bc3389c56e79cf238e09b44f3f32601947fb58078114d62f0b9c291ba8fced74eeb8aa5b4575edd2edb277be0fe3540786494ffd91200fa580b89101d40044460d40a56abaf8ae6873dff516d1bca20c74bd6c52875a473be63ab8be1b1d85d579a95f5aaf8c759b4297e5e61c5e1d86777cbe5aca14b9f6c9aeddf3bc71e6d40c363df7a7ccb5fb4f852fb2bddae56d5388c0de14975e7926dd7046476f9e30196cdae3b683ec2e36ba44e60077fd53bf4aa7e0b5e32c41e5f9809fc66c4f37dfd49be7fe71f213dab8dab44b57984b9117e6a22ec31d1c0461390cd49e2176db8e808a4d102a95f07198de466f0e2361659108297979537c758bcc3c2cb73ab40b503ab4444a3ccc7d8a38df2a5b85469867f8d1c2897919e69b9fad95aed798e88b3d340b6987560e20052c0ea8268339b6b1e90bd038696d42ff50626763b9c7966449f119a941cd74c59356145082b8b02db92af62e7ca6d3b5dabc8fcf9e952b6622fc3c915f222366b1c288842556ad3c13c94670a64a63be9ef997efdc635ad9d2973ef5f03c5daad687c6587d3cd3a43d0e6f55138cbfc8771f697da33bbc0ff773e8c0e12d8f0422b517bdc34f2fc2c7652837be45507b1fac79c90f904015d5a5b8565ae6416149795d1d246c7f0502fc2664a4b98b75a616262225b94d51c2b18d7e151e1dc42ff02492926112c8692500f6b1f2f846a9da599b572ded2203838171c79aeee3182b99f57c793a87a4dbfdee5379e7e5b72dd1d5b4c8617a545d01455917b9a0fc247271a1e10995d9abcb9af3ed3a7bde2572ff1eaad324934eeb6bb5a65904b8ec69f366e963d7fead07c368c6449cb97519d0840b7e1fa6884e843831f513e73bd6d7caf79dac7af92c472d883dcc629f36763dcfb2f2b2009b33221e0972a2f3001e392c60ebf9e13dbfad813e32ab1bced39922a78e9ceb76e33509a391851a2bdd3b0f8e43693faecefa99ebab22a78b916622a9df4f3d006acfa32c6dda3d33f046ceeb0a2a8e9b820538dafdd22f4e6954626427d2b7f775ead36c48508c8479abe59861e8202ab35b85646434ce203eff6d44c94c555337b0f6d8f8bea72d19e6fe0da3062fc4666a483ab54f676379ca176039f896efd8a62e2d323d507962ec9b6b8f3d727a05a692248d3e1e9b4e00226c56a60441bc0c8bcc81eaed49d365afb2fc9e0da168e0407295306f271dfeb724181c48e9d340f2ff24c715fa5f68eb044fe22f01676bd4d1a2a996126ebf5634d1b8e48082564e8d69da0bc6baaff4819bfe823805a1651e59d50956b9e6d090aadd128a7e8c2147d288bf6c518c494f60b8931af38908be7e4d14e9c9736776b040a5d00df01dff9d6eaa2cb0e7145ebca896ada7b53261cb67712d0f53a1a7bda269848cbf62e3b1859988cba62707a136420d0b02aa9ce467b90a28b467f490d4d0e00ce0ea89871a4b8be38e2e300c2e748d117c0172f8a537713daa2614e349be861f4cabaa832ead8588e6491d63351ffb939132a4d44963729e1c39ec2d40caf08f23c357547d63b12eb012ebd57ca6faf2ae04d2755b4488a10052d2b6801f7e6903cf248bc1ca65a397393ec9f419363d4d27d8b65298ebaf27ca6558ade3755b7f2474cec71b08b450c8ec0e7d847f737090ca6c8f4c0ae465831814e9e9edeeabfa69d6463efcbda349a88e57e4d5f245d0be0048a190f05c0a69f6e9071752257e1ca6b923ecb4c11014f0a96dedfe952eea623ca5206980990711bd44cad0c5bea503be678f673bb48ca19edf28310efd958ecc536c22ee4db5a48cac254214a53b21fe9397453743ab5ecf839edaa5cb96ab2ea5dcf205370e7f4a2fdf5cb4a86f4c35d827b70b95303f72e4408c5727a97cb37c17d9ea4a71ef1b2d94e667fe7af461cedd1e83b49bd44d6b7d4b1588288b229ea2b09bf4dc372acfddabe987fd901c885d6e9f0ef6d8e54585e9b23d8474f224442fbaf8723760e3f1dd6c7b5a1507cbfbd74a9259a3cb28e81ceea3b1b3ed636908d6bc1f9213be418bff3c11b559d82070941780b6218b51ce2f1e909a466d5cfa74c861c4d641b816e544f585164300f9dc615a4b26eb6e8227f621c53ccb92ac0af5e2cdd42aef434c2398c46e025fcf5d01350593f6496b35e4187a0c14217637cc5f6ab3295eb45355d01d4e38a4f96b3eae6e37a6a0ae4bd2238836e75c0aacadf3ec049f908ff8a56804565a55c30664f4b716f7d7958f1673d6be63e77b58b353d3a8f670ffef3bd82e153c48bd01f1eba7312839979004e2e2ae6bf69285784570a42d775e369f0f42d6ad8130dfcc010bacb7e15aac5b7fa2c78ec60795b4f13f976c65d2955cc1b32278ac2a79d85ba8565b77830f104fa4797a69171136bf996ebcb80cdf45f72f179e91191bc2919c390db1f08fd1b26df9e27921c266cd00d6a0f4549e53a95165ac10f333b39156dd0d7f063ebdfb471d01f227c341b9072f9b46eda69bc4e8e04480e275f7045f51539e60d41790271179e7c45376161eee81e4f5669fbb5fb808d2c5bfe05ab64f891ca385125618bfdf280103d53497754ff9c52d6779ddac229c1d1ac19e9d59f19d26bde208a5a976c4d65d0d75b1fbe0c89d54341a313e4eca232fe554f2b3d0287ffd84c9a582825e370bb7967854576b4d3ccc26e07545b02ed531d714f343071d29cd4b3ee8b2a08768ed4c4b3a8b1496021ba8b57aef45d29dc6f36424d8f8bdf93ed8753039529774eac777d5eb42df818a05b1725698edccad0b0d05ec07cd9508d119cdb94e2d0ef7f9bc6b17b89a778d61cff65751192fb93fb3465b8aa69223c89c76a9dbcbeba6eaf139cfebeb8198d3021219d83dba1ce5853017b73490584eb14c4a4c569f9489171e93de9d9de5ccea0032e97bdcd32d38a940501414f63901cc1503478d21a431f807a001e87a976c5cbfd804625d215b83e4d220bc4e2cb5a83fcfa613fc8e73c74835ea4a55a776a8094621d7921209a7454bfe816cae26465fc402ef8e4f081b11857bd4cea218dd267bca75b926cd1ff406b72060555cc8d2505ddbc91ddbb384d300c392d2a1983e76a6ec5ca562431220a3ad76f16618626a9e85f0999c5a95d8e7f8d26deeb179f653896092f9a00e82d3e3636db31c68e91e66111db03a7d4a3e6ca54ba7c74fe92df91002a6744d7165f6f730295dbc5fe7ce21f9d61fab2e1f0253d7ea1423d355a3474e414db152fbfcd13c4c7d7c30ea747ab65341e824977a88886550de6467193030c225d0836e6e4f53c6cd7a53ace1a9d403d89e95ef67bd489eaedd0837fa1f77823e770edebfe3c2b56d4ee79b461c6550f7c9d179bc81370dfa2822449d185cdfc765a90902da7db8f08fce9998edb1018b8b3bb29d3ccc672f192584e24a459f9237b50b8e2ae761f706287f9faa519b1c19ba331e993d027f64f06a1e7a6676cc51aa91e2cc377c175c14d3b4620da1420caf75d7c7a72fb4e3869a84dae34c6c8214d66bc277ef7010b0020b1fd9e6510b5cbf9f0944e3f9cd97bf4f3d2611f4429b740bb8e3345a68d7511b455c3d3188e474819eacab18a38efdadc1851dae1768285edbc9072366ba483f6bbe242c8f90d3850182afa31569fd987f87bc4049b5b9a04ba2561f9e0b735f13ed9cd9de6afafcd01e491e1f948366205d1a5f624427123059be4889a9f3dde510b1512a638f7792e6d4ce468ca1b82ca29567affe62d10a338358477fc1d827307b72a60346eecec47dead90aaa6dc5255b42db9f4fa8d73e987c3360b3a5877b3ea632399d8525974320cf0b8bddc106d47fef3a76814b4fe6414e0b0467aded2ebf013cf5e68943e0855d7eeb66c76bb5e78e0a30e186eeee8f79e67629d4e2fe5ef2fee9a40dda5516ecda26bc31edf9db57c27d1ff5660db5492b72886c18da95c7425e07dd597c72d10ec3aec1a89f4f522b91ea7304c50d834114ee465de0b386fe60facbc97a811aba44a9d2655e32af637337f3b59f188d33cf0fb630c1398b87225eecf36aa609cc058361b961ea4b4360f12cfa7b067d0662a45ff77cc68e82477bea1a6ee11cde4d3a2c265e62a3255f61b4df6351ff31011c6f80e37d8c4779eb5a708361bcaf99f209ea554bf6157195419591f73e85ec5441c9fef9d7ca070cf075ec76856b5bd21c09bab5b511f88048db0492086b52a84211fd9e5168f6f7b959490f6392a91cc48db593690b3ecf6342336f53f716d917c9f6412240a76daded1e07b4fdc9c06e73753614fd8c138c6ed25b3f6b7ad00dcc0a12958ae1165df7e672a6b449edeee3e42b4058242a3f5a71d886a5c325bc62eaacfec7025892a3b9a9941dc5eed193ca62c75d692272bb3a8a311cc56483b9b6698f6e037d7cd6ae6caf4c830c36c72403d4ff92db41204ed27d5be84be09eebe9cebfc5fe9ed7131e947ab3232a7da5932eb6e12344f13ed49c651eb9f85053eef277ab61e4638378bafdc981a32bc02c3345e7c48db090216d300eacdfa6c334b6f01142b48bb3b08bc2eb0db15c29613effdd3866afbe7520794840e2ce5ae41945888b671daa4a1faa237e4ad879ac9cb43a002a3db1908f246bd04c40005b96aff90d94e12d0c7afe64dcff720bd2e172e97eab466a516767a2503bac1aa76fb183b2abd08fa167ca483bd6e24cf94c0c0c2d664338357daa1bf7db1ca3e668353fae6d1fe0ce57720b8a91714978b62fa989468032328f0a4799d1cff2bc61b00177fdc7d2266557d9f6517c940d2c0c8ef8e3898cf79722d4f024105deb4633077034be9220e14009a9f380ed3d1560a93803", 0x1000}, {&(0x7f00000010c0)="60a969fa810a302c928fb0adecbf72588fe00ef01e5783035166ae9e16837c10ac8a0d7fb164654bb356a4d4b8f85699ee73b36f6540910f7816e23d3c2f9131b7ed674b042e22b7e4867bc752d490da546db375674130fe0978a63c6aca6ea97b20c693fe2d5505f3169f9471ad9e6d3f281775bba28bf67008453ba326d96b926652a6a5fe6be39ce87edaf497bdefbcc33abf59f5", 0x96}], 0x2}, 0x4000000) 9.224604748s ago: executing program 1 (id=7690): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r3, 0xa, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44000005}, 0x0) ppoll(&(0x7f0000000340)=[{r4, 0x8200}], 0x1, 0x0, &(0x7f0000000300)={[0x8001a0efffffff]}, 0xffffffffffffffaa) dup2(r3, r4) r6 = syz_io_uring_setup(0x4b7, &(0x7f00000004c0)={0x0, 0x86df, 0x1, 0x808006, 0xa3}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1, 0x300}, 0x20) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x200013) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4f23, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x40008}, 0x1c) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e000000000000109022400030000000009"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x6, 0x2, "4dec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000002c0)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000080)=""/45, 0x2d, 0x2, 0x7}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x1c, 0x110, 0xd, {[@generic={0x0, 0xa, "84b1f926b5b84bd7"}]}}}], 0x40}, 0x0) 8.383681018s ago: executing program 5 (id=7691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$alg(0x26, 0x5, 0x0) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r5 = shmat(r4, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r5) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) timerfd_create(0x0, 0x0) r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x800) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.238686821s ago: executing program 4 (id=7692): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00') syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8054}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.38908249s ago: executing program 5 (id=7693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7ec, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (fail_nth: 2) 7.238237729s ago: executing program 4 (id=7694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @loopback, 0x75c41ba2}, 0x1c) listen(r1, 0xffffffc0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r0, 0x0, 0x56, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$I2C_SLAVE_FORCE(r2, 0x706, 0x1d0) 7.047852284s ago: executing program 4 (id=7695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000000c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0xe0, r9, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) 6.475322185s ago: executing program 3 (id=7698): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4a23, @empty}}, 0x1000000, 0x31, 0xffff1893, 0x3, 0xb23be0fbe66397b6, 0x0, 0x1b}, 0x9c) 6.28341071s ago: executing program 3 (id=7699): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 6.101521683s ago: executing program 1 (id=7700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 5.362051735s ago: executing program 3 (id=7702): unshare(0x400) r0 = mq_open(&(0x7f0000000340)='\xd0sxt\x1a\x00\xbdd\x00\x00\x00\x00\x00\x00\x00\x00\xc7S\xe9c\xf1\xa6\xb5\xf3\xa0\"\xc1]g@\x1bqt\x87\x98w\xf7j6\xa3\xf6\xfb\x1d\x18\xa8_\xe9\x91\x91\xe5\x9d\xa3\xd7\xf1\xa4\xa8e5\x04\xc9MR\x01U\xb9\xce\xe3p\x8aI]|\xc9\x13\xc3;\\\xbd\xeb>$t\xa7Y\x8f\xd4\xce\xcaZ\x12\x95\xba\x1a\x05f\x81\xe8\xed\xc1/\x991\f\xd9=\xd87\xf5\x17\xfcA\f\xd0\xc8V^5B\x14\xaf8\xf6\xa8\xac\x9b\xa1\xb2b\xf5n=\x80\xba\x93:\v_\xa7G\xf3k\x8cV\xd0\x9f\xb2o\x80\x16\xfe_\xc0A\xb1\xeb\xa4\xf1x8\xd5\x97\xf1T\xf3\xe3\xde\x17L3\xda', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 5.283923707s ago: executing program 3 (id=7703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$alg(0x26, 0x5, 0x0) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r5 = shmat(r4, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r5) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) timerfd_create(0x0, 0x0) r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x800) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5.144104196s ago: executing program 1 (id=7704): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00') syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8054}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.584603711s ago: executing program 3 (id=7706): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r4 = dup3(r3, r2, 0x80000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r7}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) truncate(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x9) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902120001000000000904"], 0x0) close_range(r9, r10, 0x0) r11 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x325840, 0x115) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="d80000003e00040026bd7000fedbdf25be009a0051a68eb884ab74f0db78f81b94847580fc1dea058849277115e58e71a3c89b71bb53c8269802c289bf75305aae44068526659dfa88481b11fa202dd447b5839104631628698e23b1c0c24745eb6f97f544994c25d5062a8021a5654c4bfd17b24af3f8ebf1aea716d654f8d91f3ac4a2aecbe13851eb7a07775d81572e3c70a0050e4151e5e938e2b973d94558d5eff7394d4d746afb1e8d11558209ffa1a100d563fe2cfe512ef6278c58b209aa3f000004005680040000000000000000000000000000c660ceefbaa981b46069db285bfd1f0741905fc0fca5dc60cb496777e54ae8f3b83fd906378fa7dec783e467778481408e63df0ed6cfbcc40e4110e4832a12d71729862419e7758ca0a6e155be4dd3ecf50299801741ce2b9ac8389c322996166267e2ae8976ae7bf94b717260e98261ac1f377122b0537155a3f3b127575374e3a7393ff87df8d25c4a03c1e9ed239675b8726be12544e7db18bd1f2df81907ca26582fed2cfd588f5e62a9147edda1a754a1af98703c65086367cb5d739f6e61ff93c0a87174a39e"], 0xd8}, {&(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x1c2c}, {&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x9c}], 0x3, 0x0, 0x0, 0x4004}, 0x40040) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0xc000) 2.894691523s ago: executing program 2 (id=7707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.834662229s ago: executing program 2 (id=7708): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0xf) (async) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x0) (async) 1.608067915s ago: executing program 1 (id=7709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xe000000, 0x0, 0x1, 0xd844, 0x8, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r5, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 1.560449806s ago: executing program 2 (id=7710): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9", 0xf}], 0x3}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x348}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.560182201s ago: executing program 5 (id=7711): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (fail_nth: 2) 1.502928438s ago: executing program 4 (id=7712): r0 = socket(0x2, 0x80805, 0xb3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000500)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffff001}]}, &(0x7f0000000180)=0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x3, 0x8, 0x4, 0x0, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x5}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004090) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r8, 0x5405, &(0x7f0000000000)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x4000001) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f64370bbd04bf3adf3"], 0x1c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1.382108672s ago: executing program 5 (id=7713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040000", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.129132169s ago: executing program 5 (id=7714): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r1}) 1.015305924s ago: executing program 5 (id=7715): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063115b000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a851000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "ba287455a8d1a0d7", "b9628b3aba5f13b642fcd224cf4ddbcd", "b5a8b9bd", "5f403955b4b56725"}, 0x28) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0xfffffff7, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f00000004c0)=0x2c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000440)=0x5, 0x4) 1.003333007s ago: executing program 1 (id=7716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = socket(0xa, 0x3, 0x3a) syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='loV`\ri\n+mdm\x00'], 0xc) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'unlock', ' ', 'io+mem'}, 0xe) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x608000, 0x800, 0x0, 0x2}, 0x5d) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x558410e9) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) close(r7) recvfrom$inet(r5, &(0x7f0000000080), 0xfffffddb, 0x40000000, 0x0, 0x0) 964.783323ms ago: executing program 2 (id=7717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2a, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xfe, 0x0, 0x500}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x9953}, {0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) (fail_nth: 2) 159.378884ms ago: executing program 2 (id=7718): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 158.504223ms ago: executing program 4 (id=7719): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00') syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8054}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=7720): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25030000005800018044ffffff0000520000fffffffffffffff500000000000000010480000020972f000a0000000016000000000000000000000000ffff00006191077afb9543c901007a64703a73797a3000000000"], 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="030002"], 0xc) kernel console output (not intermixed with test programs): ][T26351] ? clear_bhb_loop+0x40/0x90 [ 1038.374680][T26351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.374698][T26351] RIP: 0033:0x7f74e319c799 [ 1038.374716][T26351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.374732][T26351] RSP: 002b:00007f74e4032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.374750][T26351] RAX: ffffffffffffffda RBX: 00007f74e3415fa0 RCX: 00007f74e319c799 [ 1038.374763][T26351] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1038.374775][T26351] RBP: 00007f74e4032090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.374786][T26351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.374797][T26351] R13: 00007f74e3416038 R14: 00007f74e3415fa0 R15: 00007f74e353fa48 [ 1038.374823][T26351] [ 1038.705510][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.732571][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.733917][ T5929] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1038.817995][ T5929] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1038.838283][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.849471][ T5929] usb 2-1: Product: syz [ 1038.854462][ T5929] usb 2-1: Manufacturer: syz [ 1038.859633][ T5929] usb 2-1: SerialNumber: syz [ 1038.862145][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.878232][T26343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1038.923198][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.284391][T12266] bridge_slave_1: left allmulticast mode [ 1039.309577][T12266] bridge_slave_1: left promiscuous mode [ 1039.316016][T21900] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1039.347188][T12266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.389348][T12266] bridge_slave_0: left allmulticast mode [ 1039.422941][ T5929] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input69 [ 1039.446622][T12266] bridge_slave_0: left promiscuous mode [ 1039.471140][T12266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.478862][T21900] usb 4-1: Using ep0 maxpacket: 8 [ 1039.497275][T21900] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1039.511701][ T5183] bcm5974 2-1:1.0: could not read from device [ 1039.555362][T21900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.593447][ T5183] bcm5974 2-1:1.0: could not read from device [ 1039.612143][ T5929] usb 2-1: USB disconnect, device number 104 [ 1039.754943][T21900] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1039.809103][T21900] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 1039.929561][T26374] FAULT_INJECTION: forcing a failure. [ 1039.929561][T26374] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.996843][T26374] CPU: 0 UID: 0 PID: 26374 Comm: syz.4.7343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.996875][T26374] Tainted: [L]=SOFTLOCKUP [ 1039.996882][T26374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1039.996893][T26374] Call Trace: [ 1039.996900][T26374] [ 1039.996907][T26374] dump_stack_lvl+0xe8/0x150 [ 1039.996928][T26374] should_fail_ex+0x412/0x560 [ 1039.996944][T26374] should_failslab+0xa8/0x100 [ 1039.996959][T26374] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1039.996970][T26374] ? __alloc_skb+0x186/0x7d0 [ 1039.996984][T26374] ? __alloc_skb+0x1d0/0x7d0 [ 1039.996996][T26374] ? __local_bh_enable_ip+0xd0/0x130 [ 1039.997012][T26374] __alloc_skb+0x1d0/0x7d0 [ 1039.997027][T26374] netlink_sendmsg+0x5d4/0xb40 [ 1039.997046][T26374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.997061][T26374] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.997075][T26374] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.997088][T26374] ____sys_sendmsg+0x972/0x9f0 [ 1039.997102][T26374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.997115][T26374] ? import_iovec+0x73/0xa0 [ 1039.997132][T26374] ___sys_sendmsg+0x2a5/0x360 [ 1039.997144][T26374] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.997169][T26374] ? __fget_files+0x2a/0x420 [ 1039.997190][T26374] ? __fget_files+0x3a0/0x420 [ 1039.997220][T26374] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1039.997240][T26374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.997265][T26374] ? __pfx_ksys_write+0x10/0x10 [ 1039.997293][T26374] do_syscall_64+0x14d/0xf80 [ 1039.997313][T26374] ? trace_irq_disable+0x3b/0x150 [ 1039.997338][T26374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.997356][T26374] ? clear_bhb_loop+0x40/0x90 [ 1039.997378][T26374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.997396][T26374] RIP: 0033:0x7f74e319c799 [ 1039.997414][T26374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.997429][T26374] RSP: 002b:00007f74e4032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.997449][T26374] RAX: ffffffffffffffda RBX: 00007f74e3415fa0 RCX: 00007f74e319c799 [ 1039.997463][T26374] RDX: 0000000004000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 1039.997475][T26374] RBP: 00007f74e4032090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.997487][T26374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.997499][T26374] R13: 00007f74e3416038 R14: 00007f74e3415fa0 R15: 00007f74e353fa48 [ 1039.997526][T26374] [ 1040.882656][ T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1041.208325][T12266] bond0 (unregistering): Released all slaves [ 1041.476185][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 1041.722583][T21901] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1041.875671][T12266] tipc: Left network mode [ 1041.914185][T21901] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.987134][ T47] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1042.008051][T21901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1042.022644][T26396] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1042.030006][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.149760][T12266] hsr_slave_0: left promiscuous mode [ 1042.165609][T21901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1042.183623][T12266] hsr_slave_1: left promiscuous mode [ 1042.194328][ T47] usb 6-1: config 0 descriptor?? [ 1042.213983][T12266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.249831][T12266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.325100][T21901] usb 5-1: Product: syz [ 1042.329323][T21901] usb 5-1: Manufacturer: syz [ 1042.356944][ T47] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1042.372544][T21901] usb 5-1: SerialNumber: syz [ 1042.387565][ T47] pwc: Warning: more than 1 configuration available. [ 1042.599207][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7345'. [ 1042.618337][T12266] team0 (unregistering): Port device team_slave_1 removed [ 1042.627818][T21901] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1042.668303][T12266] team0 (unregistering): Port device team_slave_0 removed [ 1042.830061][ T5929] usb 4-1: USB disconnect, device number 18 [ 1042.997193][ C1] usblp0: nonzero write bulk status received: -71 [ 1043.005163][T23483] usb 5-1: USB disconnect, device number 114 [ 1043.068915][T23483] usblp0: removed [ 1043.775884][T26414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7351'. [ 1043.834915][ T47] pwc: Failed to set LED on/off time (-71) [ 1043.952555][ T5929] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1044.016377][ T47] pwc: send_video_command error -71 [ 1044.048285][ T47] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1044.072639][ T47] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1044.146188][ T47] usb 6-1: USB disconnect, device number 2 [ 1044.154968][ T5929] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1044.184351][ T5929] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1044.225547][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1044.258012][ T5929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1044.312156][ T5929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1044.368400][ T5929] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1044.402974][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1044.432692][ T5929] usb 2-1: Product: syz [ 1044.446007][ T5929] usb 2-1: Manufacturer: syz [ 1044.506034][ T5929] cdc_wdm 2-1:1.0: skipping garbage [ 1044.532553][ T5929] cdc_wdm 2-1:1.0: skipping garbage [ 1044.575325][ T5929] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1044.606632][ T5929] cdc_wdm 2-1:1.0: Unknown control protocol [ 1045.793150][T26431] dummy0: entered allmulticast mode [ 1045.838611][T26449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7362'. [ 1045.871699][T26449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7362'. [ 1046.563084][ T47] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1046.640188][T23483] usb 2-1: USB disconnect, device number 105 [ 1046.707538][T26475] trusted_key: encrypted_key: insufficient parameters specified [ 1046.772648][ T980] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1046.785450][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1046.806212][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1046.815905][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1046.832655][ T47] usb 5-1: Product: syz [ 1046.837021][ T47] usb 5-1: Manufacturer: syz [ 1046.844215][ T47] usb 5-1: SerialNumber: syz [ 1046.932605][ T980] usb 4-1: device descriptor read/64, error -71 [ 1047.062899][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058343c00: rx timeout, send abort [ 1047.104865][ T47] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 115 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1047.182572][ T980] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1047.322579][ T980] usb 4-1: device descriptor read/64, error -71 [ 1047.406187][ C1] usblp0: nonzero write bulk status received: -71 [ 1047.413377][ T47] usb 5-1: USB disconnect, device number 115 [ 1047.423818][ T47] usblp0: removed [ 1047.462866][ T980] usb usb4-port1: attempt power cycle [ 1047.563012][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058340400: rx timeout, send abort [ 1047.572742][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058343c00: abort rx timeout. Force session deactivation [ 1047.814633][ T980] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1047.843369][ T980] usb 4-1: device descriptor read/8, error -71 [ 1047.875061][T26491] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.881327][T26491] binder: 26489:26491 ioctl 4018620d 200000000100 returned -16 [ 1048.036549][T26495] syzkaller0: entered promiscuous mode [ 1048.048770][T26495] syzkaller0: entered allmulticast mode [ 1048.071529][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058340400: abort rx timeout. Force session deactivation [ 1048.102559][ T980] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1048.153229][ T980] usb 4-1: device descriptor read/8, error -71 [ 1048.282831][ T980] usb usb4-port1: unable to enumerate USB device [ 1049.886525][ T5929] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1050.082566][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 1050.106692][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.164414][ T5929] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1050.202828][ T5929] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1050.238370][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1050.270661][ T5929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.293747][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1050.305779][ T5929] usb 4-1: SerialNumber: syz [ 1050.328060][T26518] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1050.342432][T26518] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1050.354571][ T5929] hub 4-1:1.0: bad descriptor, ignoring hub [ 1050.362267][ T5929] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1050.578483][T26518] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1050.587487][T26518] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1050.815195][T26518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.826218][T26518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.050760][ T5929] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1051.086326][ T5929] usb 4-1: USB disconnect, device number 23 [ 1051.716929][T26536] xt_hashlimit: size too large, truncated to 1048576 [ 1052.232670][ T5929] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1052.431652][ T5929] usb 2-1: config 0 has no interfaces? [ 1052.438462][ T5929] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1052.459070][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.491595][ T5929] usb 2-1: config 0 descriptor?? [ 1052.604842][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 1052.604859][ T29] audit: type=1326 audit(1773156761.369:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.646821][ T29] audit: type=1326 audit(1773156761.409:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.670783][ T29] audit: type=1326 audit(1773156761.409:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.693868][ T29] audit: type=1326 audit(1773156761.409:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.720007][ T29] audit: type=1326 audit(1773156761.409:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.754578][ T29] audit: type=1326 audit(1773156761.409:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.780540][T26546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7389'. [ 1052.800773][T26540] kvm: kvm [26539]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1052.801009][ T29] audit: type=1326 audit(1773156761.409:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.834473][ T29] audit: type=1326 audit(1773156761.409:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.857386][ T29] audit: type=1326 audit(1773156761.409:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.882368][T26540] kvm: kvm [26539]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1052.882812][ T29] audit: type=1326 audit(1773156761.409:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26542 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1052.977281][ T5929] usb 2-1: USB disconnect, device number 106 [ 1053.431247][T26553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.453369][T26553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.541536][T26561] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 1053.558315][T26561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1053.629523][T26566] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1053.649625][T26566] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1053.867337][T26578] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7396'. [ 1053.892120][T26578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.901012][T26578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.147843][T26594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7400'. [ 1054.285827][T26591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7398'. [ 1054.505674][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.512698][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.562862][T26610] FAULT_INJECTION: forcing a failure. [ 1054.562862][T26610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.628358][T26610] CPU: 0 UID: 0 PID: 26610 Comm: syz.2.7402 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.628389][T26610] Tainted: [L]=SOFTLOCKUP [ 1054.628396][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1054.628407][T26610] Call Trace: [ 1054.628415][T26610] [ 1054.628423][T26610] dump_stack_lvl+0xe8/0x150 [ 1054.628454][T26610] should_fail_ex+0x412/0x560 [ 1054.628482][T26610] _copy_from_iter+0x1d3/0x1670 [ 1054.628507][T26610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1054.628534][T26610] ? __pfx_policy_nodemask+0x10/0x10 [ 1054.628561][T26610] ? __pfx__copy_from_iter+0x10/0x10 [ 1054.628590][T26610] ? set_page_refcounted+0xa0/0x1e0 [ 1054.628613][T26610] ? page_copy_sane+0x4e/0x270 [ 1054.628638][T26610] copy_page_from_iter+0xdd/0x170 [ 1054.628667][T26610] tun_get_user+0x1d4b/0x3dd0 [ 1054.628703][T26610] ? tun_get_user+0x6ff/0x3dd0 [ 1054.628745][T26610] ? aa_file_perm+0x50e/0x15e0 [ 1054.628769][T26610] ? __pfx_tun_get_user+0x10/0x10 [ 1054.628792][T26610] ? aa_file_perm+0x192/0x15e0 [ 1054.628831][T26610] ? ref_tracker_alloc+0x35c/0x4c0 [ 1054.628857][T26610] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1054.628886][T26610] ? tun_get+0x1c/0x2f0 [ 1054.628915][T26610] ? tun_get+0x1c/0x2f0 [ 1054.628938][T26610] ? tun_get+0x1c/0x2f0 [ 1054.628966][T26610] tun_chr_write_iter+0x113/0x200 [ 1054.628992][T26610] vfs_write+0x61d/0xb90 [ 1054.629019][T26610] ? __pfx_vfs_write+0x10/0x10 [ 1054.629046][T26610] ? __fget_files+0x2a/0x420 [ 1054.629078][T26610] ksys_write+0x150/0x270 [ 1054.629100][T26610] ? __pfx_ksys_write+0x10/0x10 [ 1054.629129][T26610] do_syscall_64+0x14d/0xf80 [ 1054.629146][T26610] ? trace_irq_disable+0x3b/0x150 [ 1054.629171][T26610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.629189][T26610] ? clear_bhb_loop+0x40/0x90 [ 1054.629211][T26610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.629229][T26610] RIP: 0033:0x7fd7ac75cfce [ 1054.629246][T26610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1054.629261][T26610] RSP: 002b:00007fd7ad637fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.629281][T26610] RAX: ffffffffffffffda RBX: 00007fd7ad6386c0 RCX: 00007fd7ac75cfce [ 1054.629294][T26610] RDX: 00000000000000da RSI: 0000200000000000 RDI: 00000000000000c8 [ 1054.629307][T26610] RBP: 00007fd7ad638090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.629318][T26610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.629329][T26610] R13: 00007fd7aca16038 R14: 00007fd7aca15fa0 R15: 00007fd7acb3fa48 [ 1054.629357][T26610] [ 1055.224385][T26620] FAULT_INJECTION: forcing a failure. [ 1055.224385][T26620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.288150][T26620] CPU: 1 UID: 0 PID: 26620 Comm: syz.5.7404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.288187][T26620] Tainted: [L]=SOFTLOCKUP [ 1055.288194][T26620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.288205][T26620] Call Trace: [ 1055.288213][T26620] [ 1055.288222][T26620] dump_stack_lvl+0xe8/0x150 [ 1055.288251][T26620] should_fail_ex+0x412/0x560 [ 1055.288279][T26620] _copy_from_user+0x2d/0xb0 [ 1055.288307][T26620] __sys_sendto+0x2b0/0x710 [ 1055.288335][T26620] ? __pfx___sys_sendto+0x10/0x10 [ 1055.288382][T26620] ? exc_page_fault+0x6a/0xc0 [ 1055.288411][T26620] ? do_user_addr_fault+0xc6f/0x1340 [ 1055.288471][T26620] __x64_sys_sendto+0xde/0x100 [ 1055.288499][T26620] do_syscall_64+0x14d/0xf80 [ 1055.288515][T26620] ? trace_irq_disable+0x3b/0x150 [ 1055.288539][T26620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.288558][T26620] ? clear_bhb_loop+0x40/0x90 [ 1055.288580][T26620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.288598][T26620] RIP: 0033:0x7f2d20b5cfce [ 1055.288615][T26620] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1055.288631][T26620] RSP: 002b:00007f2d219f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1055.288650][T26620] RAX: ffffffffffffffda RBX: 00007f2d219f66c0 RCX: 00007f2d20b5cfce [ 1055.288665][T26620] RDX: 0000000000000020 RSI: 00007f2d219f5000 RDI: 0000000000000003 [ 1055.288676][T26620] RBP: 0000000000000000 R08: 00007f2d219f4f04 R09: 000000000000000c [ 1055.288687][T26620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1055.288697][T26620] R13: 00007f2d219f4f58 R14: 00007f2d219f5000 R15: 0000000000000000 [ 1055.288725][T26620] [ 1055.817984][T26634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.861347][T26634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.875980][T26634] kvm: kvm [26631]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1055.924612][T26634] kvm: kvm [26631]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1056.002662][T21900] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1056.154809][T21900] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1056.241589][T21900] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1056.287729][T21900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.309855][T21900] usb 6-1: config 0 descriptor?? [ 1056.326109][T21900] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1056.657026][T26659] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1056.893802][T26667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7411'. [ 1057.036172][T26673] tipc: Started in network mode [ 1057.041656][T26673] tipc: Node identity 1a06156ff548, cluster identity 4711 [ 1057.051767][T26673] tipc: Enabled bearer , priority 0 [ 1057.081028][T26672] tipc: Disabling bearer [ 1057.126441][T26674] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1057.299479][T26679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.431642][T26699] syzkaller0: entered promiscuous mode [ 1058.444406][T26699] syzkaller0: entered allmulticast mode [ 1058.492672][T26697] netlink: 'syz.3.7418': attribute type 20 has an invalid length. [ 1058.501487][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7418'. [ 1058.550358][ T1118] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.560221][T26697] netlink: 'syz.3.7418': attribute type 20 has an invalid length. [ 1058.569024][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7418'. [ 1058.596347][ T1118] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.631790][ T1118] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.664086][ T1118] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.712159][ T5929] usb 6-1: USB disconnect, device number 3 [ 1058.870476][T26702] syzkaller0: entered promiscuous mode [ 1058.876384][T26702] syzkaller0: entered allmulticast mode [ 1059.330632][ T5929] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1059.363874][T26708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1059.513728][ T5929] usb 6-1: config 0 has no interfaces? [ 1059.519967][ T5929] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1059.529601][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.566712][ T5929] usb 6-1: config 0 descriptor?? [ 1059.800603][T26705] kvm: kvm [26704]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1059.841310][T26705] kvm: kvm [26704]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1060.069532][ T5929] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1060.226704][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 1060.234315][ T5929] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.246577][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1060.257435][ T5929] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1060.267872][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.288096][ T5929] usb 5-1: config 0 descriptor?? [ 1060.735010][ T5929] mcp2221 0003:04D8:00DD.0035: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1061.135018][ T5929] usb 5-1: USB disconnect, device number 116 [ 1061.770979][T26716] FAULT_INJECTION: forcing a failure. [ 1061.770979][T26716] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.785227][T26716] CPU: 0 UID: 0 PID: 26716 Comm: syz.4.7425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.785257][T26716] Tainted: [L]=SOFTLOCKUP [ 1061.785264][T26716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.785274][T26716] Call Trace: [ 1061.785283][T26716] [ 1061.785289][T26716] dump_stack_lvl+0xe8/0x150 [ 1061.785319][T26716] should_fail_ex+0x412/0x560 [ 1061.785344][T26716] should_failslab+0xa8/0x100 [ 1061.785365][T26716] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1061.785383][T26716] ? __alloc_skb+0x186/0x7d0 [ 1061.785404][T26716] ? __alloc_skb+0x1d0/0x7d0 [ 1061.785423][T26716] ? __local_bh_enable_ip+0xd0/0x130 [ 1061.785451][T26716] __alloc_skb+0x1d0/0x7d0 [ 1061.785475][T26716] netlink_sendmsg+0x5d4/0xb40 [ 1061.785504][T26716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.785528][T26716] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1061.785551][T26716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1061.785574][T26716] ____sys_sendmsg+0x972/0x9f0 [ 1061.785600][T26716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.785625][T26716] ? import_iovec+0x73/0xa0 [ 1061.785654][T26716] ___sys_sendmsg+0x2a5/0x360 [ 1061.785675][T26716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.785722][T26716] ? __fget_files+0x2a/0x420 [ 1061.785747][T26716] ? __fget_files+0x3a0/0x420 [ 1061.785780][T26716] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1061.785800][T26716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1061.785826][T26716] ? __pfx_ksys_write+0x10/0x10 [ 1061.785856][T26716] do_syscall_64+0x14d/0xf80 [ 1061.785873][T26716] ? trace_irq_disable+0x3b/0x150 [ 1061.785898][T26716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.785916][T26716] ? clear_bhb_loop+0x40/0x90 [ 1061.785937][T26716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.785956][T26716] RIP: 0033:0x7f74e319c799 [ 1061.785974][T26716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.785990][T26716] RSP: 002b:00007f74e4032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.786010][T26716] RAX: ffffffffffffffda RBX: 00007f74e3415fa0 RCX: 00007f74e319c799 [ 1061.786033][T26716] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1061.786043][T26716] RBP: 00007f74e4032090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.786052][T26716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.786062][T26716] R13: 00007f74e3416038 R14: 00007f74e3415fa0 R15: 00007f74e353fa48 [ 1061.786085][T26716] [ 1062.051505][T21900] usb 6-1: USB disconnect, device number 4 [ 1062.179970][T26718] FAULT_INJECTION: forcing a failure. [ 1062.179970][T26718] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.205415][T26718] CPU: 1 UID: 0 PID: 26718 Comm: syz.5.7426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.205447][T26718] Tainted: [L]=SOFTLOCKUP [ 1062.205454][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1062.205465][T26718] Call Trace: [ 1062.205473][T26718] [ 1062.205481][T26718] dump_stack_lvl+0xe8/0x150 [ 1062.205513][T26718] should_fail_ex+0x412/0x560 [ 1062.205550][T26718] should_failslab+0xa8/0x100 [ 1062.205574][T26718] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1062.205595][T26718] ? __alloc_skb+0x186/0x7d0 [ 1062.205619][T26718] ? __alloc_skb+0x1d0/0x7d0 [ 1062.205641][T26718] ? __local_bh_enable_ip+0xd0/0x130 [ 1062.205669][T26718] __alloc_skb+0x1d0/0x7d0 [ 1062.205696][T26718] netlink_sendmsg+0x5d4/0xb40 [ 1062.205726][T26718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.205752][T26718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1062.205777][T26718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1062.205800][T26718] ____sys_sendmsg+0x972/0x9f0 [ 1062.205826][T26718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.205851][T26718] ? import_iovec+0x73/0xa0 [ 1062.205880][T26718] ___sys_sendmsg+0x2a5/0x360 [ 1062.205901][T26718] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.205946][T26718] ? __fget_files+0x2a/0x420 [ 1062.205971][T26718] ? __fget_files+0x3a0/0x420 [ 1062.206002][T26718] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1062.206020][T26718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1062.206043][T26718] ? __pfx_ksys_write+0x10/0x10 [ 1062.206067][T26718] do_syscall_64+0x14d/0xf80 [ 1062.206081][T26718] ? trace_irq_disable+0x3b/0x150 [ 1062.206103][T26718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.206119][T26718] ? clear_bhb_loop+0x40/0x90 [ 1062.206137][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.206153][T26718] RIP: 0033:0x7f2d20b9c799 [ 1062.206170][T26718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.206184][T26718] RSP: 002b:00007f2d219f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.206202][T26718] RAX: ffffffffffffffda RBX: 00007f2d20e15fa0 RCX: 00007f2d20b9c799 [ 1062.206215][T26718] RDX: 0000000024000054 RSI: 0000200000000200 RDI: 0000000000000003 [ 1062.206227][T26718] RBP: 00007f2d219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.206238][T26718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.206249][T26718] R13: 00007f2d20e16038 R14: 00007f2d20e15fa0 R15: 00007f2d20f3fa48 [ 1062.206275][T26718] [ 1063.160058][T26708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.168708][T26708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.182839][T26711] lo: entered allmulticast mode [ 1063.215641][T26711] tunl0: entered allmulticast mode [ 1063.237093][T26711] gre0: entered allmulticast mode [ 1063.296290][T26711] gretap0: entered allmulticast mode [ 1063.336717][T26711] erspan0: entered allmulticast mode [ 1063.362763][T26711] ip_vti0: entered allmulticast mode [ 1063.370263][T26711] ip6_vti0: entered allmulticast mode [ 1063.394136][T26711] sit0: entered allmulticast mode [ 1063.401335][T26711] ip6tnl0: entered allmulticast mode [ 1063.424092][T26711] ip6gre0: entered allmulticast mode [ 1063.443543][T26711] syz_tun: entered allmulticast mode [ 1063.454497][T26711] ip6gretap0: entered allmulticast mode [ 1063.487409][T26711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.496846][T26711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.531503][T26711] bridge0: entered allmulticast mode [ 1063.555989][T26711] vcan0: entered allmulticast mode [ 1063.563144][T26711] team0: entered allmulticast mode [ 1063.571871][T26711] team_slave_0: entered allmulticast mode [ 1063.580846][T26711] team_slave_1: entered allmulticast mode [ 1063.602849][T26711] nlmon0: entered allmulticast mode [ 1063.614230][T26711] caif0: entered allmulticast mode [ 1063.626615][T26711] batadv0: entered allmulticast mode [ 1063.634357][T26711] vxcan0: entered allmulticast mode [ 1063.640336][T26711] vxcan1: entered allmulticast mode [ 1063.663771][T26711] veth0: entered allmulticast mode [ 1063.684777][T26711] veth1: entered allmulticast mode [ 1063.712624][ T5929] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1063.731238][T26711] wg0: entered allmulticast mode [ 1063.759440][T26711] wg1: entered allmulticast mode [ 1063.771777][T26711] wg2: entered allmulticast mode [ 1063.778543][T26711] veth0_to_bridge: entered allmulticast mode [ 1063.803818][T26711] veth1_to_bridge: entered allmulticast mode [ 1063.824613][T26711] veth0_to_bond: entered allmulticast mode [ 1063.842957][T26711] bond_slave_0: entered allmulticast mode [ 1063.859203][T26711] veth1_to_bond: entered allmulticast mode [ 1063.874898][T26711] bond_slave_1: entered allmulticast mode [ 1063.881750][T26711] veth0_to_team: entered allmulticast mode [ 1063.906829][T26711] veth1_to_team: entered allmulticast mode [ 1063.926858][T26711] veth0_to_batadv: entered allmulticast mode [ 1063.944611][T26711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.968090][T26711] batadv_slave_0: entered allmulticast mode [ 1063.989090][T26711] veth1_to_batadv: entered allmulticast mode [ 1064.000823][T26711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.002741][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 1064.027614][T26711] batadv_slave_1: entered allmulticast mode [ 1064.045590][T26711] xfrm0: entered allmulticast mode [ 1064.064621][T26711] veth0_to_hsr: entered allmulticast mode [ 1064.071545][ T5929] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.084188][T26711] hsr_slave_0: entered allmulticast mode [ 1064.097017][ T5929] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1064.102957][T26711] veth1_to_hsr: entered allmulticast mode [ 1064.129474][T26711] hsr_slave_1: entered allmulticast mode [ 1064.150395][T26711] hsr0: entered allmulticast mode [ 1064.167142][T26711] veth1_virt_wifi: entered allmulticast mode [ 1064.174404][ T5929] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.203044][ T5929] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1064.218690][T26711] veth0_virt_wifi: entered allmulticast mode [ 1064.264483][ T5929] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1064.280079][T26711] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1064.302540][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.310496][T26711] veth1_vlan: entered allmulticast mode [ 1064.310797][ T5929] usb 2-1: Product: syz [ 1064.340752][ T5929] usb 2-1: Manufacturer: syz [ 1064.345070][T26711] veth0_vlan: entered allmulticast mode [ 1064.346010][ T5929] usb 2-1: SerialNumber: syz [ 1064.399147][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1064.417108][ T5929] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input71 [ 1064.418257][T26711] vlan0: entered allmulticast mode [ 1064.480766][T26711] vlan1: entered allmulticast mode [ 1064.491099][T26711] macvlan0: entered allmulticast mode [ 1064.517811][T26711] macvlan1: entered allmulticast mode [ 1064.538676][T26711] ipvlan0: entered allmulticast mode [ 1064.552040][T26711] ipvlan1: entered allmulticast mode [ 1064.569018][T26711] veth1_macvtap: entered allmulticast mode [ 1064.584870][T26711] veth0_macvtap: entered allmulticast mode [ 1064.592614][ T5929] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1064.611487][ T5929] (id 0x00) [ 1064.616109][T26711] macvtap0: entered allmulticast mode [ 1064.633599][T26711] macsec0: entered allmulticast mode [ 1064.657563][T26711] geneve0: entered allmulticast mode [ 1064.676535][T26711] geneve1: entered allmulticast mode [ 1064.700151][T26711] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1064.738179][T26711] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1064.756549][T26711] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1064.764737][ T5929] rc_core: IR keymap rc-imon-pad not found [ 1064.764760][ T5929] Registered IR keymap rc-empty [ 1064.764839][ T5929] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1064.764859][ T5929] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1064.794431][ T5929] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1064.872936][ T5929] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input72 [ 1064.902702][T26711] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1064.928864][T26711] ipip0: entered allmulticast mode [ 1064.933044][ T5929] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:107> initialized [ 1064.957331][T26711] bond0: entered allmulticast mode [ 1064.976522][T26711] @: entered allmulticast mode [ 1065.127576][ T1092] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1065.153286][ T1092] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.174716][ T1092] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1065.194230][ T1092] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.267648][ T1092] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1065.300548][T26749] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7434'. [ 1065.318321][ T1092] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.364182][ T1092] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1065.392810][ T1092] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.408510][T26754] imon:send_packet: task interrupted [ 1065.419954][T26754] imon:send_packet: packet tx failed (-512) [ 1065.438635][T26754] imon:vfd_write: send packet #0 failed [ 1065.469863][T26758] imon:display_open: display port is already open [ 1065.517615][T26754] imon:send_packet: task interrupted [ 1065.542364][T26754] imon:send_packet: packet tx failed (-512) [ 1065.570358][T26754] imon:vfd_write: send packet #0 failed [ 1065.580918][T26762] FAULT_INJECTION: forcing a failure. [ 1065.580918][T26762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.603659][T26754] imon:send_packet: packet tx failed (-32) [ 1065.611498][T26754] imon:vfd_write: send packet #0 failed [ 1065.621495][T26762] CPU: 1 UID: 0 PID: 26762 Comm: syz.2.7436 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.621522][T26762] Tainted: [L]=SOFTLOCKUP [ 1065.621529][T26762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1065.621540][T26762] Call Trace: [ 1065.621547][T26762] [ 1065.621555][T26762] dump_stack_lvl+0xe8/0x150 [ 1065.621584][T26762] should_fail_ex+0x412/0x560 [ 1065.621609][T26762] _copy_from_user+0x2d/0xb0 [ 1065.621635][T26762] __copy_msghdr+0x3c5/0x5b0 [ 1065.621662][T26762] ___sys_sendmsg+0x213/0x360 [ 1065.621683][T26762] ? __pfx____sys_sendmsg+0x10/0x10 [ 1065.621722][T26762] ? __fget_files+0x2a/0x420 [ 1065.621746][T26762] ? __fget_files+0x3a0/0x420 [ 1065.621778][T26762] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1065.621798][T26762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1065.621823][T26762] ? __pfx_ksys_write+0x10/0x10 [ 1065.621851][T26762] do_syscall_64+0x14d/0xf80 [ 1065.621866][T26762] ? trace_irq_disable+0x3b/0x150 [ 1065.621890][T26762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.621908][T26762] ? clear_bhb_loop+0x40/0x90 [ 1065.621928][T26762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.621943][T26762] RIP: 0033:0x7fd7ac79c799 [ 1065.621960][T26762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.621974][T26762] RSP: 002b:00007fd7ad638028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.621992][T26762] RAX: ffffffffffffffda RBX: 00007fd7aca15fa0 RCX: 00007fd7ac79c799 [ 1065.622004][T26762] RDX: 0000000000000400 RSI: 00002000000014c0 RDI: 0000000000000003 [ 1065.622016][T26762] RBP: 00007fd7ad638090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.622028][T26762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.622038][T26762] R13: 00007fd7aca16038 R14: 00007fd7aca15fa0 R15: 00007fd7acb3fa48 [ 1065.622065][T26762] [ 1065.623090][T26759] netlink: 488 bytes leftover after parsing attributes in process `syz.4.7435'. [ 1065.879448][T26769] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1065.885975][T26759] netlink: 488 bytes leftover after parsing attributes in process `syz.4.7435'. [ 1065.912765][T26769] bridge0: left allmulticast mode [ 1065.916376][ T47] usb 2-1: USB disconnect, device number 107 [ 1066.048406][ T1118] tipc: Subscription rejected, illegal request [ 1066.112544][ T5929] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1066.218713][T12266] tipc: Subscription rejected, illegal request [ 1066.273844][ T5929] usb 6-1: no configurations [ 1066.278794][ T5929] usb 6-1: can't read configurations, error -22 [ 1066.422949][ T5929] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1066.593148][ T5929] usb 6-1: no configurations [ 1066.598042][ T5929] usb 6-1: can't read configurations, error -22 [ 1066.603019][ T47] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1066.608632][ T5929] usb usb6-port1: attempt power cycle [ 1066.774645][ T47] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1066.799193][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.823643][ T47] usb 5-1: config 0 descriptor?? [ 1066.849314][ T47] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1066.970335][T21694] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1066.982498][ T5929] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1066.990517][T21694] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1066.998884][T21694] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1067.009114][T21694] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1067.053715][ T47] gspca_cpia1: usb_control_msg 03, error -32 [ 1067.062329][ T5929] usb 6-1: no configurations [ 1067.068732][ T5929] usb 6-1: can't read configurations, error -22 [ 1067.074321][T26795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7447'. [ 1067.232557][ T5929] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1067.254122][T26780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.276500][ T5929] usb 6-1: no configurations [ 1067.285354][T26780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.317527][ T5929] usb 6-1: can't read configurations, error -22 [ 1067.346994][ T5929] usb usb6-port1: unable to enumerate USB device [ 1067.437597][ T47] gspca_cpia1: usb_control_msg 03, error -71 [ 1067.469574][ T47] gspca_cpia1: usb_control_msg 01, error -71 [ 1067.500159][ T47] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1067.537111][ T47] usb 5-1: USB disconnect, device number 117 [ 1067.659767][T26808] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1067.681863][T26808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.689543][T26808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.791443][T26809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1068.595731][T26827] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1069.246063][T26837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7457'. [ 1069.325071][T26837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.428905][T26837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.527794][T26843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1069.543656][T26840] hfs: unable to load iocharset "io#harset" [ 1070.242632][T21900] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1070.257152][T26857] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1070.480968][T21900] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1070.520963][T21900] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1070.550759][T21900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1070.581431][T21900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1070.666395][T21900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1070.746363][T21900] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1070.775586][T21900] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1070.836363][T21900] usb 2-1: Product: syz [ 1070.868105][T21900] usb 2-1: Manufacturer: syz [ 1070.921535][T21900] cdc_wdm 2-1:1.0: skipping garbage [ 1070.941482][T21900] cdc_wdm 2-1:1.0: skipping garbage [ 1070.959798][T21900] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1070.995975][T21900] cdc_wdm 2-1:1.0: Unknown control protocol [ 1071.143976][T26850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7460'. [ 1071.163289][T26850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.229228][T26850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.363486][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1071.363910][T21901] usb 2-1: USB disconnect, device number 108 [ 1071.370130][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1071.370152][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1071.417602][T26882] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 1071.975311][T26894] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1073.121538][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1073.121556][ T29] audit: type=1326 audit(1773156781.859:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.241939][ T29] audit: type=1326 audit(1773156781.859:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.282528][T23483] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1073.314313][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7476'. [ 1073.330986][ T29] audit: type=1326 audit(1773156781.869:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.393237][ T29] audit: type=1326 audit(1773156781.869:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.428383][ T29] audit: type=1326 audit(1773156781.869:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.459495][ T29] audit: type=1326 audit(1773156781.869:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.484901][T23483] usb 6-1: Using ep0 maxpacket: 8 [ 1073.493110][ T29] audit: type=1326 audit(1773156781.869:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.517964][ T29] audit: type=1326 audit(1773156781.869:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.542042][ T29] audit: type=1326 audit(1773156781.869:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.566850][T23483] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1073.576324][ T29] audit: type=1326 audit(1773156781.869:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26911 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9579c799 code=0x7ffc0000 [ 1073.602588][T23483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.612172][T23483] usb 6-1: Product: syz [ 1073.618643][T23483] usb 6-1: Manufacturer: syz [ 1073.623499][T23483] usb 6-1: SerialNumber: syz [ 1073.633373][T23483] usb 6-1: config 0 descriptor?? [ 1073.848247][T23483] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1074.042748][T26924] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1074.461246][T26933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1074.757234][T23483] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1074.791312][T23483] usb 6-1: USB disconnect, device number 9 [ 1075.352631][T21901] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1075.361000][T26948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7484'. [ 1075.398755][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7484'. [ 1075.573337][T21901] usb 4-1: Using ep0 maxpacket: 32 [ 1075.602375][T21901] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 1075.634466][T21901] usb 4-1: config 0 has no interface number 0 [ 1075.661322][T21901] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1075.708908][T21901] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1075.742623][T21901] usb 4-1: Product: syz [ 1075.759948][T21901] usb 4-1: Manufacturer: syz [ 1075.788376][T21901] usb 4-1: config 0 descriptor?? [ 1076.028912][T21901] usb 4-1: USB disconnect, device number 24 [ 1076.944819][T21900] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1077.152566][T21900] usb 5-1: Using ep0 maxpacket: 32 [ 1077.167382][T21900] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 1077.185092][T21900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.221761][T21900] usb 5-1: Product: syz [ 1077.242501][T21900] usb 5-1: Manufacturer: syz [ 1077.262716][T21900] usb 5-1: SerialNumber: syz [ 1077.327905][T26972] trusted_key: encrypted_key: insufficient parameters specified [ 1077.548352][T21900] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 1077.595203][T21900] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1077.632576][T21900] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 1077.658165][T21900] usb 5-1: media controller created [ 1077.700346][T21900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1077.771374][T21900] usb 5-1: selecting invalid altsetting 2 [ 1077.810292][T21900] set interface failed [ 1077.810325][T21900] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1077.848022][T21900] error writing reg: 0xff, val: 0x00 [ 1077.864746][T26978] kvm: apic: phys broadcast and lowest prio [ 1077.928631][T21900] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1077.967133][T21900] usb 5-1: USB disconnect, device number 118 [ 1078.171047][T26983] FAULT_INJECTION: forcing a failure. [ 1078.171047][T26983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.220687][T26983] CPU: 0 UID: 0 PID: 26983 Comm: syz.4.7494 Tainted: G L syzkaller #0 PREEMPT(full) [ 1078.220719][T26983] Tainted: [L]=SOFTLOCKUP [ 1078.220725][T26983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1078.220736][T26983] Call Trace: [ 1078.220744][T26983] [ 1078.220752][T26983] dump_stack_lvl+0xe8/0x150 [ 1078.220783][T26983] should_fail_ex+0x412/0x560 [ 1078.220810][T26983] _copy_from_iter+0x1d3/0x1670 [ 1078.220849][T26983] ? __pfx__copy_from_iter+0x10/0x10 [ 1078.220873][T26983] ? trace_kmalloc+0x2a/0x110 [ 1078.220895][T26983] ? __kmalloc_noprof+0x37d/0x760 [ 1078.220915][T26983] ? kernfs_fop_write_iter+0x158/0x540 [ 1078.220934][T26983] ? __kmalloc_noprof+0x1b8/0x760 [ 1078.220957][T26983] kernfs_fop_write_iter+0x19b/0x540 [ 1078.220983][T26983] vfs_write+0x61d/0xb90 [ 1078.221011][T26983] ? __pfx_vfs_write+0x10/0x10 [ 1078.221041][T26983] ? __fget_files+0x2a/0x420 [ 1078.221075][T26983] ksys_write+0x150/0x270 [ 1078.221097][T26983] ? __pfx_ksys_write+0x10/0x10 [ 1078.221125][T26983] do_syscall_64+0x14d/0xf80 [ 1078.221142][T26983] ? trace_irq_disable+0x3b/0x150 [ 1078.221166][T26983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.221188][T26983] ? clear_bhb_loop+0x40/0x90 [ 1078.221209][T26983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.221226][T26983] RIP: 0033:0x7f74e319c799 [ 1078.221244][T26983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.221259][T26983] RSP: 002b:00007f74e4032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1078.221278][T26983] RAX: ffffffffffffffda RBX: 00007f74e3415fa0 RCX: 00007f74e319c799 [ 1078.221292][T26983] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000004 [ 1078.221304][T26983] RBP: 00007f74e4032090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.221315][T26983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.221326][T26983] R13: 00007f74e3416038 R14: 00007f74e3415fa0 R15: 00007f74e353fa48 [ 1078.221356][T26983] [ 1078.864324][T26994] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1078.925430][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7497'. [ 1079.492571][T21900] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1079.649968][T21900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.691664][T21900] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 1079.750549][T21900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1079.801450][T21900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1079.875649][T21900] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 1080.038549][T21900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1080.101678][T21900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.139989][T21900] usb 4-1: Product: syz [ 1080.145069][T21900] usb 4-1: Manufacturer: syz [ 1080.163743][T21900] usb 4-1: SerialNumber: syz [ 1080.210315][T27004] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1080.236205][T21900] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1080.243681][T21900] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1080.302700][T21900] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1080.369588][T21900] cdc_ncm 4-1:1.1: bind() failure [ 1080.397928][T21900] usbtest 4-1:1.1: couldn't get endpoints, -22 [ 1080.428219][T21900] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1080.460974][T27004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.516564][T27004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.588524][T21900] usb 4-1: USB disconnect, device number 25 [ 1080.729780][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.776590][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.381487][T27019] xt_hashlimit: size too large, truncated to 1048576 [ 1081.632643][T23483] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1081.852617][T23483] usb 4-1: Using ep0 maxpacket: 8 [ 1081.962573][T21900] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1082.019884][T27037] FAULT_INJECTION: forcing a failure. [ 1082.019884][T27037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.035950][T27037] CPU: 0 UID: 0 PID: 27037 Comm: syz.2.7510 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.035984][T27037] Tainted: [L]=SOFTLOCKUP [ 1082.035991][T27037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.036003][T27037] Call Trace: [ 1082.036011][T27037] [ 1082.036020][T27037] dump_stack_lvl+0xe8/0x150 [ 1082.036050][T27037] should_fail_ex+0x412/0x560 [ 1082.036092][T27037] _copy_from_user+0x2d/0xb0 [ 1082.036120][T27037] __copy_msghdr+0x3c5/0x5b0 [ 1082.036152][T27037] ___sys_sendmsg+0x213/0x360 [ 1082.036175][T27037] ? __pfx____sys_sendmsg+0x10/0x10 [ 1082.036198][T27037] ? kstrtouint+0x6e/0xe0 [ 1082.036242][T27037] ? __fget_files+0x2a/0x420 [ 1082.036268][T27037] ? __fget_files+0x3a0/0x420 [ 1082.036301][T27037] __sys_sendmmsg+0x27c/0x4e0 [ 1082.036325][T27037] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1082.036341][T27037] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1082.036388][T27037] ? ksys_write+0x242/0x270 [ 1082.036407][T27037] ? __pfx_ksys_write+0x10/0x10 [ 1082.036432][T27037] __x64_sys_sendmmsg+0xa0/0xc0 [ 1082.036453][T27037] do_syscall_64+0x14d/0xf80 [ 1082.036469][T27037] ? trace_irq_disable+0x3b/0x150 [ 1082.036495][T27037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.036514][T27037] ? clear_bhb_loop+0x40/0x90 [ 1082.036536][T27037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.036554][T27037] RIP: 0033:0x7fd7ac79c799 [ 1082.036572][T27037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.036588][T27037] RSP: 002b:00007fd7ad638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1082.036609][T27037] RAX: ffffffffffffffda RBX: 00007fd7aca15fa0 RCX: 00007fd7ac79c799 [ 1082.036623][T27037] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 1082.036635][T27037] RBP: 00007fd7ad638090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.036646][T27037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.036657][T27037] R13: 00007fd7aca16038 R14: 00007fd7aca15fa0 R15: 00007fd7acb3fa48 [ 1082.036684][T27037] [ 1082.144281][T21900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.409522][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7511'. [ 1082.487052][T21900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.497284][T21900] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 1082.602723][ T47] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1082.663296][T23483] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1082.675291][T23483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.684402][T21900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.720400][T21900] usb 5-1: config 0 descriptor?? [ 1082.775033][T23483] usb 4-1: config 0 descriptor?? [ 1082.795612][ T47] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1082.819318][ T47] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.876562][ T47] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1082.914758][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.025383][T21900] usbhid 5-1:0.0: can't add hid device: -71 [ 1083.066299][T21900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1083.078184][T23483] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1083.103403][T23483] pwc: Warning: more than 1 configuration available. [ 1083.121130][T21900] usb 5-1: USB disconnect, device number 119 [ 1083.192076][ T47] usb 6-1: usb_control_msg returned -32 [ 1083.232408][ T47] usbtmc 6-1:16.0: can't read capabilities [ 1083.420916][T27058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.428390][T27058] bridge0: port 2(bridge_slave_1) entered listening state [ 1083.437560][T27058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.445455][T27058] bridge0: port 1(bridge_slave_0) entered listening state [ 1083.573157][T27062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.588332][T27058] dummy0: left allmulticast mode [ 1083.647109][T27062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.674600][T27017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7503'. [ 1083.754421][T27058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.936589][T23483] pwc: Failed to set LED on/off time (-71) [ 1083.969496][T23483] pwc: send_video_command error -71 [ 1084.013223][T23483] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1084.082674][T23483] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1084.178500][T27069] FAULT_INJECTION: forcing a failure. [ 1084.178500][T27069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.183532][T23483] usb 4-1: USB disconnect, device number 26 [ 1084.236706][T27069] CPU: 1 UID: 0 PID: 27069 Comm: syz.4.7518 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.236738][T27069] Tainted: [L]=SOFTLOCKUP [ 1084.236745][T27069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.236757][T27069] Call Trace: [ 1084.236765][T27069] [ 1084.236775][T27069] dump_stack_lvl+0xe8/0x150 [ 1084.236802][T27069] should_fail_ex+0x412/0x560 [ 1084.236829][T27069] _copy_from_user+0x2d/0xb0 [ 1084.236857][T27069] ___sys_recvmsg+0x175/0x590 [ 1084.236876][T27069] ? __lock_acquire+0x6b5/0x2cf0 [ 1084.236904][T27069] ? __pfx____sys_recvmsg+0x10/0x10 [ 1084.236954][T27069] do_recvmmsg+0x334/0x800 [ 1084.236978][T27069] ? __pfx_do_recvmmsg+0x10/0x10 [ 1084.237005][T27069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1084.237038][T27069] __x64_sys_recvmmsg+0x198/0x250 [ 1084.237061][T27069] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1084.237090][T27069] do_syscall_64+0x14d/0xf80 [ 1084.237108][T27069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.237136][T27069] ? clear_bhb_loop+0x40/0x90 [ 1084.237158][T27069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.237177][T27069] RIP: 0033:0x7f74e319c799 [ 1084.237194][T27069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.237210][T27069] RSP: 002b:00007f74e4032028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1084.237230][T27069] RAX: ffffffffffffffda RBX: 00007f74e3415fa0 RCX: 00007f74e319c799 [ 1084.237244][T27069] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 1084.237257][T27069] RBP: 00007f74e4032090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.237268][T27069] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1084.237279][T27069] R13: 00007f74e3416038 R14: 00007f74e3415fa0 R15: 00007f74e353fa48 [ 1084.237307][T27069] [ 1084.548013][T27074] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.7519'. [ 1084.565637][T27074] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.7519'. [ 1085.766202][ T5929] usb 6-1: USB disconnect, device number 10 [ 1085.993533][T27094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.052100][T27094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.144700][T27094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.198131][T27094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.896612][T27123] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1086.952862][T27122] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7531'. [ 1087.512694][T27130] bond2 (unregistering): Released all slaves [ 1087.534980][T27134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.725862][T27134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.896407][T27134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.157855][T27134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.880484][T27141] FAULT_INJECTION: forcing a failure. [ 1088.880484][T27141] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.966160][T27141] CPU: 1 UID: 0 PID: 27141 Comm: syz.3.7537 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.966192][T27141] Tainted: [L]=SOFTLOCKUP [ 1088.966199][T27141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1088.966209][T27141] Call Trace: [ 1088.966217][T27141] [ 1088.966226][T27141] dump_stack_lvl+0xe8/0x150 [ 1088.966256][T27141] should_fail_ex+0x412/0x560 [ 1088.966285][T27141] should_failslab+0xa8/0x100 [ 1088.966317][T27141] __kmalloc_cache_noprof+0x88/0x660 [ 1088.966414][T27141] ? unix_autobind+0xf3/0xa40 [ 1088.966520][T27141] ? kasan_quarantine_put+0xbb/0x1f0 [ 1088.966543][T27141] unix_autobind+0xf3/0xa40 [ 1088.966566][T27141] ? tomoyo_check_unix_address+0x167/0x7f0 [ 1088.966594][T27141] ? tomoyo_check_unix_address+0x60f/0x7f0 [ 1088.966631][T27141] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1088.966657][T27141] unix_dgram_sendmsg+0x3e6/0x18e0 [ 1088.966680][T27141] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 1088.966720][T27141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1088.966738][T27141] ? tomoyo_socket_sendmsg_permission+0x1d9/0x300 [ 1088.966768][T27141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1088.966783][T27141] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1088.966806][T27141] __sys_sendto+0x672/0x710 [ 1088.966835][T27141] ? __pfx___sys_sendto+0x10/0x10 [ 1088.966856][T27141] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1088.966886][T27141] ? __fget_files+0x3a0/0x420 [ 1088.966920][T27141] ? ksys_write+0x242/0x270 [ 1088.966943][T27141] ? __pfx_ksys_write+0x10/0x10 [ 1088.966969][T27141] __x64_sys_sendto+0xde/0x100 [ 1088.966999][T27141] do_syscall_64+0x14d/0xf80 [ 1088.967017][T27141] ? trace_irq_disable+0x3b/0x150 [ 1088.967043][T27141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.967063][T27141] ? clear_bhb_loop+0x40/0x90 [ 1088.967085][T27141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.967105][T27141] RIP: 0033:0x7f5bffb9c799 [ 1088.967123][T27141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.967140][T27141] RSP: 002b:00007f5c009d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1088.967160][T27141] RAX: ffffffffffffffda RBX: 00007f5bffe15fa0 RCX: 00007f5bffb9c799 [ 1088.967175][T27141] RDX: fffffffffffffceb RSI: 0000000000000000 RDI: 0000000000000003 [ 1088.967187][T27141] RBP: 00007f5c009d0090 R08: 0000200000000240 R09: 000000000000006e [ 1088.967200][T27141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.967311][T27141] R13: 00007f5bffe16038 R14: 00007f5bffe15fa0 R15: 00007f5bfff3fa48 [ 1088.967343][T27141] [ 1089.602634][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1089.602663][ T29] audit: type=1326 audit(1773156798.379:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1089.684711][ T29] audit: type=1326 audit(1773156798.379:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1089.739646][T27150] trusted_key: encrypted_key: insufficient parameters specified [ 1089.758994][ T29] audit: type=1326 audit(1773156798.409:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1089.828529][ T29] audit: type=1326 audit(1773156798.409:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1089.901885][ T29] audit: type=1326 audit(1773156798.409:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1089.928800][ T29] audit: type=1326 audit(1773156798.439:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1090.020549][ T29] audit: type=1326 audit(1773156798.439:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bffb9c502 code=0x7ffc0000 [ 1090.052514][ T29] audit: type=1326 audit(1773156798.439:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5bffb9c502 code=0x7ffc0000 [ 1090.083594][ T29] audit: type=1326 audit(1773156798.439:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1090.122866][ T29] audit: type=1326 audit(1773156798.439:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27145 comm="syz.3.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bffb9c799 code=0x7ffc0000 [ 1090.956678][T27167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.017694][T27167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.056199][T27167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.098124][T27167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.334804][T27154] dummy0: entered allmulticast mode [ 1091.366186][T27176] FAULT_INJECTION: forcing a failure. [ 1091.366186][T27176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.393790][T27176] CPU: 0 UID: 0 PID: 27176 Comm: syz.4.7548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1091.393822][T27176] Tainted: [L]=SOFTLOCKUP [ 1091.393829][T27176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1091.393840][T27176] Call Trace: [ 1091.393848][T27176] [ 1091.393856][T27176] dump_stack_lvl+0xe8/0x150 [ 1091.393887][T27176] should_fail_ex+0x412/0x560 [ 1091.393914][T27176] _copy_from_iter+0x1d3/0x1670 [ 1091.393946][T27176] ? rcu_is_watching+0x15/0xb0 [ 1091.393977][T27176] ? __pfx__copy_from_iter+0x10/0x10 [ 1091.394008][T27176] ? netlink_sendmsg+0x650/0xb40 [ 1091.394031][T27176] ? skb_put+0x11b/0x210 [ 1091.394058][T27176] netlink_sendmsg+0x6c0/0xb40 [ 1091.394090][T27176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1091.394114][T27176] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1091.394139][T27176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1091.394161][T27176] ____sys_sendmsg+0x972/0x9f0 [ 1091.394188][T27176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1091.394214][T27176] ? import_iovec+0x73/0xa0 [ 1091.394244][T27176] ___sys_sendmsg+0x2a5/0x360 [ 1091.394267][T27176] ? __pfx____sys_sendmsg+0x10/0x10 [ 1091.394315][T27176] ? __fget_files+0x2a/0x420 [ 1091.394340][T27176] ? __fget_files+0x3a0/0x420 [ 1091.394372][T27176] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1091.394392][T27176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1091.394426][T27176] ? __pfx_ksys_write+0x10/0x10 [ 1091.394456][T27176] do_syscall_64+0x14d/0xf80 [ 1091.394473][T27176] ? trace_irq_disable+0x3b/0x150 [ 1091.394498][T27176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.394516][T27176] ? clear_bhb_loop+0x40/0x90 [ 1091.394538][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.394597][T27176] RIP: 0033:0x7f74e319c799 [ 1091.394616][T27176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.394631][T27176] RSP: 002b:00007f74e4032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.394650][T27176] RAX: ffffffffffffffda RBX: 00007f74e3415fa0 RCX: 00007f74e319c799 [ 1091.394664][T27176] RDX: 0000000020000804 RSI: 0000200000000240 RDI: 0000000000000003 [ 1091.394676][T27176] RBP: 00007f74e4032090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.394687][T27176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.394698][T27176] R13: 00007f74e3416038 R14: 00007f74e3415fa0 R15: 00007f74e353fa48 [ 1091.394726][T27176] [ 1092.026191][T27185] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1092.642003][T27202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.650673][T27202] bridge0: port 2(bridge_slave_1) entered listening state [ 1092.659020][T27202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.666476][T27202] bridge0: port 1(bridge_slave_0) entered listening state [ 1092.718682][T27202] dummy0: left allmulticast mode [ 1092.784823][T27202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.942537][T26233] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1093.137377][T26233] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1093.200359][T26233] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1093.273911][T26233] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1093.292964][T26233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.327889][T26233] usb 5-1: Product: syz [ 1093.343803][T26233] usb 5-1: Manufacturer: syz [ 1093.367308][T26233] usb 5-1: SerialNumber: syz [ 1093.398645][T26233] usb 5-1: config 0 descriptor?? [ 1093.415355][T27204] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1093.427205][T27204] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1093.664887][T27204] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1093.690715][T27204] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1093.937902][T26233] Error reading MAC address [ 1093.969425][T26233] usb 5-1: USB disconnect, device number 120 [ 1094.284656][T27221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.332552][T23483] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1094.403345][T27221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.519339][T23483] usb 4-1: Using ep0 maxpacket: 8 [ 1094.543052][T23483] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1094.592264][T23483] usb 4-1: string descriptor 0 read error: -22 [ 1094.611595][T23483] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1094.631620][T23483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.642658][T21900] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1094.790312][T27230] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1094.882830][T21900] usb 2-1: Using ep0 maxpacket: 32 [ 1094.908295][T21900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.940645][T21900] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1094.940915][T23483] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1095.022963][T21900] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1095.033392][T21900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.035322][T23483] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1095.065123][T21900] usb 2-1: Product: syz [ 1095.071468][T21900] usb 2-1: Manufacturer: syz [ 1095.078755][T21900] usb 2-1: SerialNumber: syz [ 1095.123293][T21900] usb 2-1: config 0 descriptor?? [ 1095.164362][T23483] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1095.191122][T27236] syzkaller0: entered promiscuous mode [ 1095.205957][T27236] syzkaller0: entered allmulticast mode [ 1095.222873][T23483] usb 4-1: USB disconnect, device number 27 [ 1095.389777][T27238] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1095.415222][T27238] FAULT_INJECTION: forcing a failure. [ 1095.415222][T27238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.475652][T27238] CPU: 1 UID: 0 PID: 27238 Comm: syz.4.7566 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.475683][T27238] Tainted: [L]=SOFTLOCKUP [ 1095.475688][T27238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.475694][T27238] Call Trace: [ 1095.475699][T27238] [ 1095.475704][T27238] dump_stack_lvl+0xe8/0x150 [ 1095.475726][T27238] should_fail_ex+0x412/0x560 [ 1095.475745][T27238] _copy_to_user+0x31/0xb0 [ 1095.475762][T27238] simple_read_from_buffer+0xe1/0x170 [ 1095.475781][T27238] proc_fail_nth_read+0x1bb/0x230 [ 1095.475798][T27238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.475813][T27238] ? rw_verify_area+0x2a6/0x4d0 [ 1095.475824][T27238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.475838][T27238] vfs_read+0x20c/0xa70 [ 1095.475848][T27238] ? fdget_pos+0x246/0x320 [ 1095.475864][T27238] ? __pfx___mutex_lock+0x10/0x10 [ 1095.475876][T27238] ? __pfx_vfs_read+0x10/0x10 [ 1095.475887][T27238] ? __fget_files+0x2a/0x420 [ 1095.475903][T27238] ? __fget_files+0x3a0/0x420 [ 1095.475916][T27238] ? __fget_files+0x2a/0x420 [ 1095.475934][T27238] ksys_read+0x150/0x270 [ 1095.475946][T27238] ? __pfx_ksys_read+0x10/0x10 [ 1095.475956][T27238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1095.475994][T27238] do_syscall_64+0x14d/0xf80 [ 1095.476003][T27238] ? trace_irq_disable+0x3b/0x150 [ 1095.476021][T27238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.476033][T27238] ? clear_bhb_loop+0x40/0x90 [ 1095.476047][T27238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.476058][T27238] RIP: 0033:0x7f74e315cfce [ 1095.476072][T27238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1095.476081][T27238] RSP: 002b:00007f74e4031fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1095.476093][T27238] RAX: ffffffffffffffda RBX: 00007f74e40326c0 RCX: 00007f74e315cfce [ 1095.476100][T27238] RDX: 000000000000000f RSI: 00007f74e40320a0 RDI: 0000000000000007 [ 1095.476107][T27238] RBP: 00007f74e4032090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.476115][T27238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.476121][T27238] R13: 00007f74e3416038 R14: 00007f74e3415fa0 R15: 00007f74e353fa48 [ 1095.476136][T27238] [ 1096.015334][T27243] FAULT_INJECTION: forcing a failure. [ 1096.015334][T27243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.030222][T27243] CPU: 1 UID: 0 PID: 27243 Comm: syz.3.7567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.030252][T27243] Tainted: [L]=SOFTLOCKUP [ 1096.030259][T27243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1096.030269][T27243] Call Trace: [ 1096.030277][T27243] [ 1096.030286][T27243] dump_stack_lvl+0xe8/0x150 [ 1096.030316][T27243] should_fail_ex+0x412/0x560 [ 1096.030344][T27243] _copy_from_iter+0x1d3/0x1670 [ 1096.030372][T27243] ? rcu_is_watching+0x15/0xb0 [ 1096.030404][T27243] ? __pfx__copy_from_iter+0x10/0x10 [ 1096.030434][T27243] ? netlink_sendmsg+0x650/0xb40 [ 1096.030460][T27243] ? skb_put+0x11b/0x210 [ 1096.030489][T27243] netlink_sendmsg+0x6c0/0xb40 [ 1096.030520][T27243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1096.030546][T27243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1096.030572][T27243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1096.030594][T27243] ____sys_sendmsg+0x972/0x9f0 [ 1096.030617][T27243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1096.030638][T27243] ? import_iovec+0x73/0xa0 [ 1096.030666][T27243] ___sys_sendmsg+0x2a5/0x360 [ 1096.030688][T27243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1096.030732][T27243] ? __fget_files+0x2a/0x420 [ 1096.030756][T27243] ? __fget_files+0x3a0/0x420 [ 1096.030787][T27243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1096.030807][T27243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1096.030832][T27243] ? __pfx_ksys_write+0x10/0x10 [ 1096.030865][T27243] do_syscall_64+0x14d/0xf80 [ 1096.030884][T27243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.030902][T27243] ? clear_bhb_loop+0x40/0x90 [ 1096.030923][T27243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.030941][T27243] RIP: 0033:0x7f5bffb9c799 [ 1096.030960][T27243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.030975][T27243] RSP: 002b:00007f5c009d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.030994][T27243] RAX: ffffffffffffffda RBX: 00007f5bffe15fa0 RCX: 00007f5bffb9c799 [ 1096.031007][T27243] RDX: 000000002008c010 RSI: 0000200000000580 RDI: 0000000000000003 [ 1096.031019][T27243] RBP: 00007f5c009d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.031030][T27243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.031041][T27243] R13: 00007f5bffe16038 R14: 00007f5bffe15fa0 R15: 00007f5bfff3fa48 [ 1096.031067][T27243] [ 1096.513626][T27259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7575'. [ 1096.698965][T27268] netlink: 'syz.3.7577': attribute type 2 has an invalid length. [ 1096.895706][T27271] syzkaller0: entered promiscuous mode [ 1096.914103][T27271] syzkaller0: entered allmulticast mode [ 1097.261485][ T5929] usb 2-1: USB disconnect, device number 109 [ 1097.322617][T23483] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1097.512641][T23483] usb 6-1: Using ep0 maxpacket: 16 [ 1097.519872][T23483] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.553419][T23483] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1097.578563][T23483] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1097.612942][T23483] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1097.634266][T23483] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.662623][T23483] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1097.675487][T23483] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1097.688516][T23483] usb 6-1: Manufacturer: syz [ 1097.704920][T23483] usb 6-1: config 0 descriptor?? [ 1097.712538][ T5929] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1097.862559][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1098.016244][T23483] rc_core: IR keymap rc-hauppauge not found [ 1098.031847][T23483] Registered IR keymap rc-empty [ 1098.038336][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.063716][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.115619][T23483] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1098.130303][ T5929] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1098.172873][T23483] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input73 [ 1098.271842][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.279989][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1098.334218][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.432808][ T5929] usb usb2-port1: attempt power cycle [ 1098.438773][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.472826][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.513222][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.573408][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.632716][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.654983][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1098.663845][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1098.673102][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.702585][ T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1098.733011][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.772572][T23483] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1098.822628][ T5929] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1098.854242][T23483] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1098.882593][T23483] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1098.892530][ T5929] usb 2-1: device descriptor read/8, error -71 [ 1098.932771][T23483] usb 6-1: USB disconnect, device number 11 [ 1099.102560][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1099.153021][ T5929] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1099.195600][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1099.223153][ T5929] usb 2-1: device descriptor read/8, error -71 [ 1099.246302][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.313387][ T10] usb 5-1: config 0 descriptor?? [ 1099.373252][ T5929] usb usb2-port1: unable to enumerate USB device [ 1099.394980][T27311] FAULT_INJECTION: forcing a failure. [ 1099.394980][T27311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.411260][T27311] CPU: 0 UID: 0 PID: 27311 Comm: syz.3.7588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.411290][T27311] Tainted: [L]=SOFTLOCKUP [ 1099.411298][T27311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1099.411308][T27311] Call Trace: [ 1099.411316][T27311] [ 1099.411324][T27311] dump_stack_lvl+0xe8/0x150 [ 1099.411357][T27311] should_fail_ex+0x412/0x560 [ 1099.411384][T27311] _copy_from_user+0x2d/0xb0 [ 1099.411412][T27311] ___sys_sendmsg+0x1c6/0x360 [ 1099.411433][T27311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.411477][T27311] ? __fget_files+0x2a/0x420 [ 1099.411501][T27311] ? __fget_files+0x3a0/0x420 [ 1099.411533][T27311] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1099.411552][T27311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.411575][T27311] ? __pfx_ksys_write+0x10/0x10 [ 1099.411604][T27311] do_syscall_64+0x14d/0xf80 [ 1099.411620][T27311] ? trace_irq_disable+0x3b/0x150 [ 1099.411644][T27311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.411662][T27311] ? clear_bhb_loop+0x40/0x90 [ 1099.411684][T27311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.411702][T27311] RIP: 0033:0x7f5bffb9c799 [ 1099.411719][T27311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.411734][T27311] RSP: 002b:00007f5c009d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.411753][T27311] RAX: ffffffffffffffda RBX: 00007f5bffe15fa0 RCX: 00007f5bffb9c799 [ 1099.411767][T27311] RDX: 0000000040008020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1099.411779][T27311] RBP: 00007f5c009d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.411789][T27311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.411799][T27311] R13: 00007f5bffe16038 R14: 00007f5bffe15fa0 R15: 00007f5bfff3fa48 [ 1099.411826][T27311] [ 1099.616530][T23483] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1099.649068][ T10] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1099.655666][ T10] pwc: Warning: more than 1 configuration available. [ 1099.809527][T27300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1099.818828][T23483] usb 6-1: Using ep0 maxpacket: 8 [ 1099.929148][T23483] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1099.947275][T21900] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1099.952012][T23483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.985424][T23483] usb 6-1: config 0 descriptor?? [ 1100.007312][T23483] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1100.024372][T23483] pwc: Warning: more than 1 configuration available. [ 1100.114401][T21900] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 1100.123998][T21900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.140006][T21900] usb 4-1: config 0 descriptor?? [ 1100.159172][T21900] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1100.170702][T21900] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 1100.300510][T27308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7587'. [ 1100.325357][T23483] pwc: Failed to set LED on/off time (-71) [ 1100.343455][T23483] pwc: send_video_command error -71 [ 1100.362025][T23483] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1100.392257][T23483] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1100.427738][T23483] usb 6-1: USB disconnect, device number 12 [ 1100.433535][T21900] usb 4-1: USB disconnect, device number 28 [ 1100.460790][T21900] ftdi_sio 4-1:0.0: device disconnected [ 1101.081876][T27336] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7595'. [ 1101.327061][ T10] pwc: Failed to set LED on/off time (-71) [ 1101.349139][ T10] pwc: send_video_command error -71 [ 1101.372695][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1101.389827][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1101.422501][ T10] usb 5-1: USB disconnect, device number 121 [ 1101.679375][T27350] FAULT_INJECTION: forcing a failure. [ 1101.679375][T27350] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.727208][T27350] CPU: 0 UID: 0 PID: 27350 Comm: syz.5.7601 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.727237][T27350] Tainted: [L]=SOFTLOCKUP [ 1101.727241][T27350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1101.727247][T27350] Call Trace: [ 1101.727253][T27350] [ 1101.727258][T27350] dump_stack_lvl+0xe8/0x150 [ 1101.727279][T27350] should_fail_ex+0x412/0x560 [ 1101.727296][T27350] should_failslab+0xa8/0x100 [ 1101.727311][T27350] __kmalloc_cache_noprof+0x88/0x660 [ 1101.727335][T27350] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1101.727350][T27350] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1101.727370][T27350] tcp_sendmsg_locked+0x4bb2/0x5490 [ 1101.727383][T27350] ? tcp_sendmsg_locked+0x2a1/0x5490 [ 1101.727393][T27350] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1101.727412][T27350] ? __pfx_process_measurement+0x10/0x10 [ 1101.727503][T27350] ? tomoyo_check_open_permission+0x38e/0x470 [ 1101.727517][T27350] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1101.727531][T27350] ? __lock_acquire+0x6b5/0x2cf0 [ 1101.727557][T27350] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1101.727571][T27350] ? tcp_sendmsg+0x21/0x50 [ 1101.727582][T27350] ? __local_bh_enable_ip+0xd0/0x130 [ 1101.727598][T27350] tcp_sendmsg+0x2f/0x50 [ 1101.727609][T27350] ____sys_sendmsg+0x5c7/0x9f0 [ 1101.727624][T27350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1101.727639][T27350] ? import_iovec+0x73/0xa0 [ 1101.727663][T27350] ___sys_sendmsg+0x2a5/0x360 [ 1101.727676][T27350] ? __pfx____sys_sendmsg+0x10/0x10 [ 1101.727693][T27350] ? kstrtouint+0x6e/0xe0 [ 1101.727736][T27350] ? __fget_files+0x2a/0x420 [ 1101.727759][T27350] ? __fget_files+0x3a0/0x420 [ 1101.727798][T27350] __sys_sendmmsg+0x27c/0x4e0 [ 1101.727822][T27350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1101.727835][T27350] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1101.727884][T27350] ? ksys_write+0x242/0x270 [ 1101.727904][T27350] ? __pfx_ksys_write+0x10/0x10 [ 1101.727925][T27350] __x64_sys_sendmmsg+0xa0/0xc0 [ 1101.727946][T27350] do_syscall_64+0x14d/0xf80 [ 1101.727969][T27350] ? trace_irq_disable+0x3b/0x150 [ 1101.727993][T27350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.728017][T27350] ? clear_bhb_loop+0x40/0x90 [ 1101.728039][T27350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.728056][T27350] RIP: 0033:0x7f2d20b9c799 [ 1101.728074][T27350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.728089][T27350] RSP: 002b:00007f2d219f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1101.728108][T27350] RAX: ffffffffffffffda RBX: 00007f2d20e15fa0 RCX: 00007f2d20b9c799 [ 1101.728120][T27350] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 1101.728131][T27350] RBP: 00007f2d219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.728142][T27350] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 1101.728153][T27350] R13: 00007f2d20e16038 R14: 00007f2d20e15fa0 R15: 00007f2d20f3fa48 [ 1101.728180][T27350] [ 1102.372579][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1102.520951][T27360] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1102.581469][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.613073][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1102.629215][ T10] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1102.645694][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.657685][ T10] usb 4-1: config 0 descriptor?? [ 1103.122657][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1103.317624][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.367169][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1103.435234][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1103.486516][ T10] usb 2-1: Product: syz [ 1103.496678][ T10] usb 2-1: Manufacturer: syz [ 1103.535028][ T10] usb 2-1: SerialNumber: syz [ 1103.809820][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1104.012816][ T10] usb 2-1: USB disconnect, device number 114 [ 1104.021767][ T10] usblp0: removed [ 1104.128382][T27377] x_tables: duplicate underflow at hook 3 [ 1104.745277][ T47] usb 4-1: USB disconnect, device number 29 [ 1104.842521][T21900] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1105.002256][T27393] trusted_key: encrypted_key: insufficient parameters specified [ 1105.016464][T21900] usb 6-1: Using ep0 maxpacket: 8 [ 1105.094059][T21900] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1105.131836][T21900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.211743][T21900] usb 6-1: config 0 descriptor?? [ 1105.281411][T21900] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1105.321651][T21900] pwc: Warning: more than 1 configuration available. [ 1105.497674][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7608'. [ 1105.700610][T27401] Invalid option length (255) for dns_resolver key [ 1105.717620][T27403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.772350][T27403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.945374][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7614'. [ 1106.568300][T27423] FAULT_INJECTION: forcing a failure. [ 1106.568300][T27423] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.596262][T27423] CPU: 1 UID: 0 PID: 27423 Comm: syz.3.7618 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.596295][T27423] Tainted: [L]=SOFTLOCKUP [ 1106.596302][T27423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1106.596314][T27423] Call Trace: [ 1106.596325][T27423] [ 1106.596333][T27423] dump_stack_lvl+0xe8/0x150 [ 1106.596372][T27423] should_fail_ex+0x412/0x560 [ 1106.596400][T27423] should_failslab+0xa8/0x100 [ 1106.596424][T27423] __kvmalloc_node_noprof+0x178/0x8a0 [ 1106.596446][T27423] ? file_tty_write+0x2e7/0xa20 [ 1106.596595][T27423] file_tty_write+0x2e7/0xa20 [ 1106.596626][T27423] vfs_write+0x61d/0xb90 [ 1106.596655][T27423] ? __pfx_vfs_write+0x10/0x10 [ 1106.596684][T27423] ? __fget_files+0x2a/0x420 [ 1106.596717][T27423] ksys_write+0x150/0x270 [ 1106.596739][T27423] ? __pfx_ksys_write+0x10/0x10 [ 1106.596759][T27423] ? handle_softirqs+0x73c/0x870 [ 1106.596792][T27423] do_syscall_64+0x14d/0xf80 [ 1106.596810][T27423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.596830][T27423] ? clear_bhb_loop+0x40/0x90 [ 1106.596852][T27423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.596869][T27423] RIP: 0033:0x7f5bffb9c799 [ 1106.596887][T27423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.596901][T27423] RSP: 002b:00007f5c009d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1106.596921][T27423] RAX: ffffffffffffffda RBX: 00007f5bffe15fa0 RCX: 00007f5bffb9c799 [ 1106.596936][T27423] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000003 [ 1106.596948][T27423] RBP: 00007f5c009d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.596961][T27423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.596972][T27423] R13: 00007f5bffe16038 R14: 00007f5bffe15fa0 R15: 00007f5bfff3fa48 [ 1106.597003][T27423] [ 1106.629192][T27424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.629346][T27424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.629616][T27424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.629719][T27424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.647868][T27424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1107.577476][T21900] pwc: Failed to set LED on/off time (-71) [ 1107.577965][T21900] pwc: send_video_command error -71 [ 1107.577982][T21900] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1107.578076][T21900] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1107.632986][T21900] usb 6-1: USB disconnect, device number 13 [ 1108.252544][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1108.260248][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1108.312800][T27442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7623'. [ 1108.352557][ T5929] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1108.522988][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 1108.574144][ T5929] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1108.620534][ T5929] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1108.663864][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1108.700567][ T5929] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1108.732693][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.741141][T27453] FAULT_INJECTION: forcing a failure. [ 1108.741141][T27453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.761397][ T5929] usb 4-1: Product: syz [ 1108.775550][ T5929] usb 4-1: Manufacturer: syz [ 1108.790211][ T5929] usb 4-1: SerialNumber: syz [ 1108.794986][T27453] CPU: 1 UID: 0 PID: 27453 Comm: syz.4.7625 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.795016][T27453] Tainted: [L]=SOFTLOCKUP [ 1108.795023][T27453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.795034][T27453] Call Trace: [ 1108.795043][T27453] [ 1108.795055][T27453] dump_stack_lvl+0xe8/0x150 [ 1108.795085][T27453] should_fail_ex+0x412/0x560 [ 1108.795110][T27453] _copy_from_user+0x2d/0xb0 [ 1108.795134][T27453] copy_from_sockptr_offset+0x66/0xa0 [ 1108.795164][T27453] do_tcp_getsockopt+0xdb2/0x2950 [ 1108.795196][T27453] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1108.795217][T27453] ? sock_recv_errqueue+0x570/0x590 [ 1108.795240][T27453] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.795259][T27453] ? aa_label_sk_perm+0x532/0x6e0 [ 1108.795291][T27453] ? kstrtoull+0x12f/0x1d0 [ 1108.795308][T27453] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1108.795328][T27453] ? kstrtouint+0x6e/0xe0 [ 1108.795353][T27453] ? get_pid_task+0x20/0x1f0 [ 1108.795387][T27453] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.795450][T27453] tcp_getsockopt+0x83/0x130 [ 1108.795473][T27453] ? sock_recv_errqueue+0x570/0x590 [ 1108.795494][T27453] ? sock_recv_errqueue+0x570/0x590 [ 1108.795515][T27453] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1108.795536][T27453] do_sock_getsockopt+0x2d3/0x3f0 [ 1108.795566][T27453] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1108.795626][T27453] ? __fget_files+0x3a0/0x420 [ 1108.795650][T27453] ? __fget_files+0x2a/0x420 [ 1108.795681][T27453] __x64_sys_getsockopt+0x1a4/0x240 [ 1108.795716][T27453] do_syscall_64+0x14d/0xf80 [ 1108.795734][T27453] ? trace_irq_disable+0x3b/0x150 [ 1108.795760][T27453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.795780][T27453] ? clear_bhb_loop+0x40/0x90 [ 1108.795802][T27453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.795820][T27453] RIP: 0033:0x7f74e319c799 [ 1108.795838][T27453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.795852][T27453] RSP: 002b:00007f74e4011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1108.795869][T27453] RAX: ffffffffffffffda RBX: 00007f74e3416090 RCX: 00007f74e319c799 [ 1108.795881][T27453] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1108.795892][T27453] RBP: 00007f74e4011090 R08: 0000200000000140 R09: 0000000000000000 [ 1108.795903][T27453] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1108.795913][T27453] R13: 00007f74e3416128 R14: 00007f74e3416090 R15: 00007f74e353fa48 [ 1108.795939][T27453] [ 1108.843792][ T5929] usb 4-1: config 0 descriptor?? [ 1109.888204][T27469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.913593][T27469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.934327][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7630'. [ 1109.970563][ T5929] gs_usb 4-1:0.0: Configuring for 159 interfaces [ 1109.977263][ T1581] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1110.134520][ T1581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1110.149476][ T1581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.159932][ T1581] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1110.171316][ T1581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.195735][ T1581] usb 5-1: config 0 descriptor?? [ 1110.393453][T27437] netlink: 308 bytes leftover after parsing attributes in process `syz.3.7622'. [ 1110.406777][ T5929] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1110.420873][ T5929] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1110.435715][ T5929] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1110.453208][ T5929] usb 4-1: USB disconnect, device number 30 [ 1110.615319][ T1581] usbhid 5-1:0.0: can't add hid device: -71 [ 1110.636887][ T1581] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1110.661466][ T1581] usb 5-1: USB disconnect, device number 122 [ 1113.482578][T21900] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1113.702682][T21900] usb 6-1: Using ep0 maxpacket: 16 [ 1113.719889][T21900] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 1113.798909][T21900] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1113.833406][T21900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.833718][T21900] usb 6-1: Product: syz [ 1113.833729][T21900] usb 6-1: Manufacturer: syz [ 1113.833737][T21900] usb 6-1: SerialNumber: syz [ 1113.847858][T21900] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1113.847877][T21900] r8152-cfgselector 6-1: config 0 descriptor?? [ 1114.012707][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.047921][ C1] bridge0: topology change detected, propagating [ 1114.055089][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.062491][ C1] bridge0: topology change detected, propagating [ 1114.122679][T21900] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1114.136980][T21900] r8152-cfgselector 6-1: bad CDC descriptors [ 1114.173902][T21900] r8152-cfgselector 6-1: USB disconnect, device number 14 [ 1115.272501][ T1581] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1115.454923][ T1581] usb 2-1: config 0 has no interfaces? [ 1115.478377][ T1581] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1115.510977][ T1581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.557072][ T1581] usb 2-1: config 0 descriptor?? [ 1115.818402][T27552] kvm: kvm [27551]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1115.842288][T27552] kvm: kvm [27551]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1115.936831][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.943307][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.982126][ T47] usb 2-1: USB disconnect, device number 115 [ 1116.324758][T27567] dummy0: entered allmulticast mode [ 1116.523107][T27575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1116.602589][ T47] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1116.762772][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 1116.982509][T21900] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1117.056373][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1117.066850][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.077597][ T47] usb 5-1: config 0 descriptor?? [ 1117.095899][ T47] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1117.104995][ T47] pwc: Warning: more than 1 configuration available. [ 1117.165103][T27590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7662'. [ 1117.182681][T21900] usb 2-1: Using ep0 maxpacket: 8 [ 1117.339336][T21900] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1117.364639][T21900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.372133][T27569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7656'. [ 1117.392967][T21900] usb 2-1: config 0 descriptor?? [ 1117.411714][T21900] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1117.428724][T21900] pwc: Warning: more than 1 configuration available. [ 1117.446445][T27593] binder: 27591:27593 ioctl 40046205 0 returned -22 [ 1117.454176][T27593] binder: 27591:27593 ioctl 40046205 0 returned -22 [ 1117.462095][T27593] binder: 27591:27593 ioctl 40046205 0 returned -22 [ 1117.471574][T27593] binder: 27591:27593 ioctl 40046205 0 returned -22 [ 1117.479241][T27593] binder: 27591:27593 ioctl 40046205 0 returned -22 [ 1117.843176][ T5929] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1117.977058][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7659'. [ 1118.042612][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 1118.092699][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.134590][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1118.175661][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.254130][ T5929] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1118.272714][T21900] pwc: Failed to set LED on/off time (-71) [ 1118.275831][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.311076][ T5929] usb 4-1: Product: syz [ 1118.338076][ T5929] usb 4-1: Manufacturer: syz [ 1118.349230][ T5929] usb 4-1: SerialNumber: syz [ 1118.371320][ T5929] usb 4-1: config 0 descriptor?? [ 1118.420102][T21900] pwc: send_video_command error -71 [ 1118.453646][ T5929] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 1118.475429][T21900] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1118.498471][T21900] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1118.502548][ T5929] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8) [ 1118.622383][T21900] usb 2-1: USB disconnect, device number 116 [ 1118.721237][T27608] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7667'. [ 1118.731469][ T5929] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 1119.571735][T27624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1119.842622][ T5929] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1119.977569][ T47] pwc: Failed to set LED on/off time (-71) [ 1119.985382][ T47] pwc: send_video_command error -71 [ 1119.990910][ T47] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1119.997758][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1120.000988][ T47] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1120.008125][ T5929] usb 2-1: config 0 has no interface number 0 [ 1120.029522][ T47] usb 5-1: USB disconnect, device number 123 [ 1120.039241][ T5929] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1120.054844][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.086842][ T5929] usb 2-1: Product: syz [ 1120.099578][ T5929] usb 2-1: Manufacturer: syz [ 1120.125556][ T5929] usb 2-1: SerialNumber: syz [ 1120.145630][ T5929] usb 2-1: config 0 descriptor?? [ 1120.210507][T27633] syzkaller0: entered promiscuous mode [ 1120.216869][T27633] syzkaller0: entered allmulticast mode [ 1120.360044][ T5929] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1120.370957][ T5929] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1120.384287][ T5929] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1120.396242][ T5929] usb 2-1: media controller created [ 1120.438745][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1120.964607][ T47] usb 4-1: USB disconnect, device number 31 [ 1121.170115][T27650] FAULT_INJECTION: forcing a failure. [ 1121.170115][T27650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.208466][T27650] CPU: 0 UID: 0 PID: 27650 Comm: syz.3.7677 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.208499][T27650] Tainted: [L]=SOFTLOCKUP [ 1121.208506][T27650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1121.208518][T27650] Call Trace: [ 1121.208526][T27650] [ 1121.208534][T27650] dump_stack_lvl+0xe8/0x150 [ 1121.208556][T27650] should_fail_ex+0x412/0x560 [ 1121.208582][T27650] _copy_from_iter+0x1d3/0x1670 [ 1121.208610][T27650] ? rcu_is_watching+0x15/0xb0 [ 1121.208639][T27650] ? __pfx__copy_from_iter+0x10/0x10 [ 1121.208660][T27650] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1121.208695][T27650] ? netlink_sendmsg+0x650/0xb40 [ 1121.208718][T27650] ? skb_put+0x11b/0x210 [ 1121.208745][T27650] netlink_sendmsg+0x6c0/0xb40 [ 1121.208775][T27650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1121.208801][T27650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1121.208825][T27650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1121.208843][T27650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1121.208858][T27650] sock_write_iter+0x49b/0x4f0 [ 1121.208872][T27650] ? __pfx_sock_write_iter+0x10/0x10 [ 1121.208892][T27650] do_iter_readv_writev+0x619/0x8c0 [ 1121.208907][T27650] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1121.208921][T27650] ? bpf_lsm_file_permission+0x9/0x20 [ 1121.208933][T27650] ? security_file_permission+0x75/0x260 [ 1121.208945][T27650] ? rw_verify_area+0x255/0x4d0 [ 1121.208957][T27650] vfs_writev+0x33c/0x990 [ 1121.208974][T27650] ? __pfx_vfs_writev+0x10/0x10 [ 1121.209000][T27650] ? __fget_files+0x2a/0x420 [ 1121.209016][T27650] ? __fget_files+0x3a0/0x420 [ 1121.209029][T27650] ? __fget_files+0x2a/0x420 [ 1121.209047][T27650] do_writev+0x154/0x2e0 [ 1121.209061][T27650] ? __pfx_do_writev+0x10/0x10 [ 1121.209079][T27650] do_syscall_64+0x14d/0xf80 [ 1121.209089][T27650] ? trace_irq_disable+0x3b/0x150 [ 1121.209103][T27650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.209113][T27650] ? clear_bhb_loop+0x40/0x90 [ 1121.209125][T27650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.209135][T27650] RIP: 0033:0x7f5bffb9c799 [ 1121.209147][T27650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.209156][T27650] RSP: 002b:00007f5c009af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1121.209168][T27650] RAX: ffffffffffffffda RBX: 00007f5bffe16090 RCX: 00007f5bffb9c799 [ 1121.209175][T27650] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 1121.209182][T27650] RBP: 00007f5c009af090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.209188][T27650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.209199][T27650] R13: 00007f5bffe16128 R14: 00007f5bffe16090 R15: 00007f5bfff3fa48 [ 1121.209214][T27650] [ 1121.860499][T27652] xt_hashlimit: size too large, truncated to 1048576 [ 1122.415132][ T47] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1122.602502][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 1122.614234][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1122.634037][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.657807][ T47] usb 4-1: config 0 descriptor?? [ 1122.680552][ T47] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1122.708003][ T47] pwc: Warning: more than 1 configuration available. [ 1122.941338][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7679'. [ 1123.057657][ T47] pwc: Failed to set LED on/off time (-71) [ 1123.069954][ T47] pwc: send_video_command error -71 [ 1123.076373][ T47] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1123.100731][ T47] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1123.157701][ T47] usb 4-1: USB disconnect, device number 32 [ 1123.612561][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.619806][ C0] bridge0: topology change detected, propagating [ 1123.626441][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.633866][ C0] bridge0: topology change detected, propagating [ 1124.277073][T27668] hfs: unable to load iocharset "io#harset" [ 1124.980866][ T5929] usb 2-1: USB disconnect, device number 117 [ 1125.480833][T27684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.521725][T27684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.593218][T27690] input: syz0 as /devices/virtual/input/input74 [ 1125.800315][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7685'. [ 1126.129886][ T5890] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1126.138169][T21900] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1126.314625][T21900] usb 4-1: Using ep0 maxpacket: 16 [ 1126.323562][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.348457][T21900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.373851][ T5890] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1126.399152][T21900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.420572][ T5890] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1126.441729][T21900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.457936][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.471898][T21900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.496317][ T5890] usb 2-1: config 0 descriptor?? [ 1126.509807][T21900] usb 4-1: Product: syz [ 1126.532112][T21900] usb 4-1: Manufacturer: syz [ 1126.551774][T21900] usb 4-1: SerialNumber: syz [ 1127.692656][T21694] Bluetooth: hci4: command 0x0406 tx timeout [ 1127.701338][T21901] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1127.710606][T21901] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1128.005361][T27711] FAULT_INJECTION: forcing a failure. [ 1128.005361][T27711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.028541][T27710] syzkaller0: entered promiscuous mode [ 1128.035745][T27711] CPU: 1 UID: 0 PID: 27711 Comm: syz.5.7693 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.035776][T27711] Tainted: [L]=SOFTLOCKUP [ 1128.035783][T27711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1128.035794][T27711] Call Trace: [ 1128.035801][T27711] [ 1128.035810][T27711] dump_stack_lvl+0xe8/0x150 [ 1128.035843][T27711] should_fail_ex+0x412/0x560 [ 1128.035872][T27711] _copy_from_user+0x2d/0xb0 [ 1128.035899][T27711] __copy_msghdr+0x3c5/0x5b0 [ 1128.035931][T27711] ___sys_sendmsg+0x213/0x360 [ 1128.035954][T27711] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.036001][T27711] ? __fget_files+0x2a/0x420 [ 1128.036034][T27711] ? __fget_files+0x3a0/0x420 [ 1128.036072][T27711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1128.036100][T27711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1128.036127][T27711] ? __pfx_ksys_write+0x10/0x10 [ 1128.036146][T27711] ? handle_softirqs+0x73c/0x870 [ 1128.036178][T27711] do_syscall_64+0x14d/0xf80 [ 1128.036196][T27711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.036215][T27711] ? clear_bhb_loop+0x40/0x90 [ 1128.036236][T27711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.036255][T27711] RIP: 0033:0x7f2d20b9c799 [ 1128.036273][T27711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.036289][T27711] RSP: 002b:00007f2d219d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.036308][T27711] RAX: ffffffffffffffda RBX: 00007f2d20e16090 RCX: 00007f2d20b9c799 [ 1128.036322][T27711] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1128.036333][T27711] RBP: 00007f2d219d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.036344][T27711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.036355][T27711] R13: 00007f2d20e16128 R14: 00007f2d20e16090 R15: 00007f2d20f3fa48 [ 1128.036383][T27711] [ 1128.042581][T27710] syzkaller0: entered allmulticast mode [ 1128.542962][T21900] usb 4-1: 0:2 : does not exist [ 1128.569852][T21900] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1128.690659][T21900] usb 4-1: USB disconnect, device number 33 [ 1128.776626][T24420] udevd[24420]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.852278][T27723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1128.859710][T27723] IPv6: NLM_F_CREATE should be set when creating new route [ 1128.867036][T27723] IPv6: NLM_F_CREATE should be set when creating new route [ 1128.874757][T27723] IPv6: NLM_F_CREATE should be set when creating new route [ 1128.916785][ T5897] usb 2-1: USB disconnect, device number 118 [ 1129.942883][T21694] Bluetooth: hci3: command 0x0406 tx timeout [ 1129.949410][T21901] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1129.979883][T21901] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1130.141085][T27748] hfs: unable to load iocharset "io#harset" [ 1132.052783][T21900] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1132.225100][T21900] usb 4-1: Using ep0 maxpacket: 8 [ 1132.237057][T27770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7708'. [ 1132.268736][T21900] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1132.281465][T21900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.304824][T21900] usb 4-1: config 0 descriptor?? [ 1132.328196][T21900] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1132.337697][T21900] pwc: Warning: more than 1 configuration available. [ 1132.583566][T27765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7706'. [ 1133.647529][T27779] syzkaller0: entered promiscuous mode [ 1133.669801][T27779] syzkaller0: entered allmulticast mode [ 1133.799431][T27787] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7713'. [ 1133.926367][T27790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.933852][T27790] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.941349][T27790] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.948795][T27790] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.201072][T27799] FAULT_INJECTION: forcing a failure. [ 1134.201072][T27799] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.250511][T27799] CPU: 1 UID: 0 PID: 27799 Comm: syz.2.7717 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.250543][T27799] Tainted: [L]=SOFTLOCKUP [ 1134.250551][T27799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1134.250562][T27799] Call Trace: [ 1134.250570][T27799] [ 1134.250579][T27799] dump_stack_lvl+0xe8/0x150 [ 1134.250610][T27799] should_fail_ex+0x412/0x560 [ 1134.250639][T27799] should_failslab+0xa8/0x100 [ 1134.250664][T27799] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1134.250703][T27799] ? __alloc_skb+0x186/0x7d0 [ 1134.250726][T27799] ? __alloc_skb+0x1d0/0x7d0 [ 1134.250747][T27799] ? __local_bh_enable_ip+0xd0/0x130 [ 1134.250774][T27799] __alloc_skb+0x1d0/0x7d0 [ 1134.250802][T27799] netlink_sendmsg+0x5d4/0xb40 [ 1134.250834][T27799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.250860][T27799] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1134.250886][T27799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.250909][T27799] ____sys_sendmsg+0x972/0x9f0 [ 1134.250935][T27799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.250960][T27799] ? import_iovec+0x73/0xa0 [ 1134.250990][T27799] ___sys_sendmsg+0x2a5/0x360 [ 1134.251013][T27799] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.251061][T27799] ? __fget_files+0x2a/0x420 [ 1134.251087][T27799] ? __fget_files+0x3a0/0x420 [ 1134.251121][T27799] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1134.251141][T27799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.251165][T27799] ? __pfx_ksys_write+0x10/0x10 [ 1134.251195][T27799] do_syscall_64+0x14d/0xf80 [ 1134.251213][T27799] ? trace_irq_disable+0x3b/0x150 [ 1134.251238][T27799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.251255][T27799] ? clear_bhb_loop+0x40/0x90 [ 1134.251277][T27799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.251295][T27799] RIP: 0033:0x7fd7ac79c799 [ 1134.251313][T27799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.251329][T27799] RSP: 002b:00007fd7ad638028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.251348][T27799] RAX: ffffffffffffffda RBX: 00007fd7aca15fa0 RCX: 00007fd7ac79c799 [ 1134.251362][T27799] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1134.251374][T27799] RBP: 00007fd7ad638090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.251386][T27799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.251397][T27799] R13: 00007fd7aca16038 R14: 00007fd7aca15fa0 R15: 00007fd7acb3fa48 [ 1134.251425][T27799] [ 1135.134426][ T30] INFO: task kworker/0:4:5911 blocked for more than 143 seconds. [ 1135.175881][ T30] Tainted: G L syzkaller #0 [ 1135.207254][T27809] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7720'. [ 1135.231241][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1135.372504][T21901] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1135.372513][T21694] Bluetooth: hci0: command 0x0406 tx timeout [ 1135.385271][ T30] task:kworker/0:4 state:D stack:20928 pid:5911 tgid:5911 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1135.398421][T21901] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1135.472840][ T30] Workqueue: usb_hub_wq hub_event [ 1135.491353][ T30] Call Trace: [ 1135.504968][ T30] [ 1135.514171][ T30] __schedule+0x15dd/0x52d0 [ 1135.541282][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1135.560640][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1135.582494][ T30] ? __pfx___schedule+0x10/0x10 [ 1135.590412][ T30] ? schedule+0x90/0x360 [ 1135.596056][ T30] schedule+0x164/0x360 [ 1135.608060][ T30] schedule_timeout+0xc3/0x2c0 [ 1135.625823][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1135.633512][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1135.639570][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1135.649082][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1135.659799][ T30] ? wait_for_completion+0x274/0x5e0 [ 1135.671276][ T30] wait_for_completion+0x2cc/0x5e0 [ 1135.687275][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1135.722567][ T30] i2c_del_adapter+0x5c0/0x790 [ 1135.730580][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1135.738963][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1135.779487][ T30] ? dvb_usbv2_exit+0x935/0xb60 [ 1135.793922][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 1135.799704][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1135.819890][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1135.829978][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1135.850211][ T30] usb_probe_interface+0x668/0xc90 [ 1135.857959][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 1135.866306][ T30] really_probe+0x267/0xaf0 [ 1135.872562][ T30] __driver_probe_device+0x18c/0x320 [ 1135.879830][ T30] driver_probe_device+0x4f/0x240 [ 1135.886174][ T30] __device_attach_driver+0x279/0x430 [ 1135.892479][ T30] bus_for_each_drv+0x258/0x2f0 [ 1135.899186][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1135.910380][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1135.921363][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1135.931748][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1135.941897][ T30] __device_attach+0x2c5/0x450 [ 1135.960773][ T30] ? __pfx___device_attach+0x10/0x10 [ 1135.968630][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1135.980034][ T30] device_initial_probe+0xa1/0xd0 [ 1135.992714][ T30] bus_probe_device+0x12a/0x220 [ 1136.001744][ T30] ? device_add+0x726/0xb70 [ 1136.010616][ T30] device_add+0x7b6/0xb70 [ 1136.016675][ T30] usb_set_configuration+0x1a87/0x2110 [ 1136.030205][ T30] usb_generic_driver_probe+0x8d/0x150 [ 1136.036353][ T30] usb_probe_device+0x1c4/0x3b0 [ 1136.051111][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 1136.061610][ T30] really_probe+0x267/0xaf0 [ 1136.066884][ T30] __driver_probe_device+0x18c/0x320 [ 1136.075791][ T30] driver_probe_device+0x4f/0x240 [ 1136.081979][ T30] __device_attach_driver+0x279/0x430 [ 1136.108800][ T30] bus_for_each_drv+0x258/0x2f0 [ 1136.120230][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1136.132917][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1136.144531][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1136.154272][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1136.182497][ T30] __device_attach+0x2c5/0x450 [ 1136.187605][ T30] ? __pfx___device_attach+0x10/0x10 [ 1136.194278][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1136.199567][ T30] device_initial_probe+0xa1/0xd0 [ 1136.204901][ T30] bus_probe_device+0x12a/0x220 [ 1136.210338][ T30] ? device_add+0x726/0xb70 [ 1136.220305][ T30] device_add+0x7b6/0xb70 [ 1136.245131][ T30] usb_new_device+0xa08/0x16f0 [ 1136.259019][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 1136.265342][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1136.271563][ T30] hub_event+0x2a1c/0x4f30 [ 1136.278271][ T30] ? __pfx_hub_event+0x10/0x10 [ 1136.283670][ T30] ? process_scheduled_works+0xa25/0x1830 [ 1136.289915][ T30] ? process_scheduled_works+0xa25/0x1830 [ 1136.296977][ T30] process_scheduled_works+0xb02/0x1830 [ 1136.303189][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1136.309804][ T30] ? assign_work+0x3d5/0x5e0 [ 1136.314919][ T30] worker_thread+0xa50/0xfc0 [ 1136.319980][ T30] kthread+0x388/0x470 [ 1136.327625][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1136.333195][ T30] ? __pfx_kthread+0x10/0x10 [ 1136.338378][ T30] ret_from_fork+0x51e/0xb90 [ 1136.344181][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1136.349702][ T30] ? __switch_to+0xc7d/0x1450 [ 1136.355083][ T30] ? __pfx_kthread+0x10/0x10 [ 1136.360114][ T30] ret_from_fork_asm+0x1a/0x30 [ 1136.366549][ T30] [ 1136.393415][ T30] [ 1136.393415][ T30] Showing all locks held in the system: [ 1136.401314][ T30] 1 lock held by khungtaskd/30: [ 1136.407358][ T30] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1136.419605][ T30] 3 locks held by kworker/1:1/47: [ 1136.425134][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1136.436918][ T30] #1: ffffc90000b77c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1136.451312][ T30] #2: ffffffff8fee5aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1136.464319][ T30] 3 locks held by kworker/u8:9/1118: [ 1136.469784][ T30] 2 locks held by getty/5588: [ 1136.475034][ T30] #0: ffff8880370aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1136.486968][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1136.497672][ T30] 5 locks held by kworker/0:4/5911: [ 1136.503493][ T30] #0: ffff8880222fb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1136.515405][ T30] #1: ffffc900044afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1136.528233][ T30] #2: ffff8880297b6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1136.555092][ T30] #3: ffff888033edb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1136.567429][ T30] #4: ffff88802b58b160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1136.577878][ T30] 5 locks held by kworker/1:3/21900: [ 1136.584818][ T30] #0: ffff8880222fb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1136.597058][ T30] #1: ffffc90004e2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1136.609803][ T30] #2: ffff888029778198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1136.619249][ T30] #3: ffff8880547d5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1136.629355][ T30] #4: ffff8880518f3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1136.639294][ T30] 5 locks held by kworker/1:4/21901: [ 1136.645269][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1136.657779][ T30] #1: ffffc90004c7fc40 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1136.670714][ T30] #2: ffffffff8fee5aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 1136.685382][ T30] #3: ffff88807639cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x28/0xc0 [ 1136.697557][T21900] pwc: Failed to set LED on/off time (-71) [ 1136.703947][ T30] #4: ffff88807639c0c0 (&hdev->lock [ 1136.704123][T21900] pwc: send_video_command error -71 [ 1136.715461][ T30] ){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1136.722504][ T30] 3 locks held by kworker/0:2/23483: [ 1136.728139][T21900] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1136.736307][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1136.747839][T21900] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1136.757865][ T30] #1: ffffc9000c80fc40 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1136.773196][T21900] usb 4-1: USB disconnect, device number 34 [ 1136.785650][ T30] #2: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1136.797828][ T30] 1 lock held by udevd/24420: [ 1136.804934][ T30] [ 1136.818286][ T30] ============================================= [ 1136.818286][ T30] [ 1136.827345][ T30] NMI backtrace for cpu 1 [ 1136.827367][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.827392][ T30] Tainted: [L]=SOFTLOCKUP [ 1136.827399][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.827410][ T30] Call Trace: [ 1136.827417][ T30] [ 1136.827426][ T30] dump_stack_lvl+0xe8/0x150 [ 1136.827456][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1136.827587][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1136.827612][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1136.827638][ T30] sys_info+0x135/0x170 [ 1136.827657][ T30] watchdog+0xfd9/0x1030 [ 1136.827695][ T30] ? watchdog+0x21a/0x1030 [ 1136.827726][ T30] kthread+0x388/0x470 [ 1136.827745][ T30] ? __pfx_watchdog+0x10/0x10 [ 1136.827767][ T30] ? __pfx_kthread+0x10/0x10 [ 1136.827786][ T30] ret_from_fork+0x51e/0xb90 [ 1136.827811][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1136.827832][ T30] ? __switch_to+0xc7d/0x1450 [ 1136.827855][ T30] ? __pfx_kthread+0x10/0x10 [ 1136.827874][ T30] ret_from_fork_asm+0x1a/0x30 [ 1136.827912][ T30] [ 1136.827919][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1136.946236][ C0] NMI backtrace for cpu 0 [ 1136.946255][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.946276][ C0] Tainted: [L]=SOFTLOCKUP [ 1136.946282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.946291][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1136.946320][ C0] Code: fe 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 82 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1136.946333][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1136.946347][ C0] RAX: 000000000111cc61 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 1136.946359][ C0] RDX: 0000000000000001 RSI: ffffffff8def4b2d RDI: ffffffff8c27b380 [ 1136.946369][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1136.946381][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90118bb0 [ 1136.946392][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1136.946402][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 1136.946415][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1136.946425][ C0] CR2: 00005556a6558660 CR3: 0000000077356000 CR4: 00000000003526f0 [ 1136.946440][ C0] Call Trace: [ 1136.946449][ C0] [ 1136.946455][ C0] default_idle+0x9/0x20 [ 1136.946483][ C0] default_idle_call+0x72/0xb0 [ 1136.946500][ C0] do_idle+0x1bd/0x500 [ 1136.946550][ C0] ? __pfx_do_idle+0x10/0x10 [ 1136.946570][ C0] ? do_idle+0x4d0/0x500 [ 1136.946590][ C0] cpu_startup_entry+0x43/0x60 [ 1136.946609][ C0] rest_init+0x2de/0x300 [ 1136.946626][ C0] start_kernel+0x385/0x3d0 [ 1136.946743][ C0] x86_64_start_reservations+0x24/0x30 [ 1136.946790][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1136.946810][ C0] common_startup_64+0x13e/0x147 [ 1136.946832][ C0] [ 1137.147931][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1137.155107][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.166060][ T30] Tainted: [L]=SOFTLOCKUP [ 1137.170411][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1137.180790][ T30] Call Trace: [ 1137.184167][ T30] [ 1137.187189][ T30] vpanic+0x56c/0xa60 [ 1137.191185][ T30] ? __pfx_vpanic+0x10/0x10 [ 1137.195853][ T30] ? irqentry_exit+0x59e/0x620 [ 1137.200641][ T30] panic+0xc5/0xd0 [ 1137.204479][ T30] ? __pfx_panic+0x10/0x10 [ 1137.209105][ T30] watchdog+0x1023/0x1030 [ 1137.213640][ T30] ? watchdog+0x21a/0x1030 [ 1137.218274][ T30] kthread+0x388/0x470 [ 1137.222443][ T30] ? __pfx_watchdog+0x10/0x10 [ 1137.227142][ T30] ? __pfx_kthread+0x10/0x10 [ 1137.232093][ T30] ret_from_fork+0x51e/0xb90 [ 1137.236715][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.242090][ T30] ? __switch_to+0xc7d/0x1450 [ 1137.246809][ T30] ? __pfx_kthread+0x10/0x10 [ 1137.251750][ T30] ret_from_fork_asm+0x1a/0x30 [ 1137.256528][ T30] [ 1137.260020][ T30] Kernel Offset: disabled [ 1137.264558][ T30] Rebooting in 86400 seconds..