last executing test programs: 8.699441716s ago: executing program 0 (id=932): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000002180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x1000) (async) ftruncate(r4, 0xc17a) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002040)={0x84, &(0x7f0000001c40)={0x20, 0x30, 0x1, "ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.886932901s ago: executing program 1 (id=942): move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)="f1", 0x1}], 0x1}, 0x40080c0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r3, 0x5, 0x7fc00, 0x4, 0x5, 0x370, 0x8, 0x1, {0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}}, 0x4, 0x9, 0x7, 0xc, 0xe71b9cb5}}, &(0x7f0000000240)=0xb0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x1, 0x1, 0x6, 0x8, 0x4, 0x3}) 6.784131909s ago: executing program 0 (id=943): r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x2e3dc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_secret(0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000005001000050000000500"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000480)=""/187}, 0x20) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ce7000/0x1000)=nil, 0x1000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000010ac053002400001020301090224000101030000090400040103010206092105000701221e03090581a64fda353a324edbc4bd0121f4b0764308653a1381e40d1c5186536956c8b775f390ba56159bd3b4ec4cc279b665ea855b15f1572746db826697122a85844f73867ea188e8ffffffff226274947b3a61fc4d9c18f98624c0b239204129"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x63c0, &(0x7f0000000140)={0x0, 0xed77, 0x10, 0x2, 0x45}, &(0x7f00000001c0), &(0x7f0000000200)) kexec_load(0x0, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000080)="28ac96005005f09b70409a0106d28e1edacb777de32d3dc1fccc15aa2b33f43152f05add533adb05710cec022f093c99f6b312711a2d84b2e11363b1557410629beded5edf", 0x45, 0x8, 0x2}, {&(0x7f0000000240)="ad25c62deb152355e456e0c63cf613979ffe5c1451f560c15b578e5549626a66dd348bc403ea2db1f7d96ab333290e9d29534fcbf82b277e7a676fc7913c607363", 0x41, 0x8, 0x400}, {&(0x7f00000002c0)="42e449c2397392375833473c93f59ddcc9602a81363a036cecbd46af9cefdd584b874f8caa75986618037a38ed2a9004b8ddc335b29f2fb3eb851c5bab9a04d2a5fb9cd5e1c2850c99ba5151c750eb5410e7ab2a000d18d63b66da39a8530ef6b87d38af39236f6e98361093776e528cba7d03768304991b34c45a3cd08f0e8d032c96e23728a65d5d08d5780d89d8b7c63696dfcd132997b6d8cca90170df72f6393d9a9bb7d1733d7b2b2ea958559ef6800dcf4bde2d7c5185278235e5d14d80d5f1c520", 0xc5, 0x36, 0x2}, {&(0x7f00000001c0)="7f33d1f51f949244d24d86d833f07ada50974f07de72348d844799ff74355f5bd333b3fadfd8e95cb08d", 0x2a, 0x9, 0x3}], 0x140000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xcb) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x6d6, 0x0, &(0x7f0000000040)) 6.346114381s ago: executing program 1 (id=945): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x0, @mcast2, 0x6a3}, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1, {[0x5, 0xa526, 0x4, 0x3, 0xfffffff1, 0x98, 0x3b, 0x4]}}, 0x5c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.846716553s ago: executing program 2 (id=949): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x109802) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r5, r5, 0x0, 0x2000fb) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.734272925s ago: executing program 1 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x800) 4.449246491s ago: executing program 1 (id=952): syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000100), 0x100000000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4.041370098s ago: executing program 3 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.491954334s ago: executing program 3 (id=956): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x1000020c}, 0x52cc) 3.356689223s ago: executing program 0 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.255140426s ago: executing program 0 (id=958): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34565348, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}}) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x40, 0x11, 0x2b, {0x2b, 0x4, "4899276b03aa4965d3fc53a9bc1c0eea1258ea032ce5bef2c9ed80d6b7e267b9cdb52d32f79bc9f350"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f00000009c0)={0x34, &(0x7f0000001680)=ANY=[@ANYBLOB="000d9b00000052ae734f8c86d8edf706ce338e4db467d06bd02a059a19504708999d9e1c9f7f8ee223ded593681ef9470a1db1f947048507315d038f10016837eccd3c9c66710547d4e5990b67cba44dd5780b3f1938f57522e21336ffc57b44d53e482081997b22477d4d4250e4fffc41701541c6e51c9bfe762e08216e7e1ecf3e2c84c86f72f1bec7eb7ce36084106daef74d952ff7a93208eb715c54cf7e67"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0xa1, {0x9f, "2bc61000dbe05652ded4f1d82a12ceefaa6aecca82068fd3144ff8d00aacd876cb6a35ca9fdf21ae8fa8c1ba7044b89f3d73d20070ffd7917ab7fba2e100b3ab94aaa23ce9d0cb9ba8023301279f933fbc53eccedc7021bfbf2110bfb2bbd30b96fd459b1fec23e69d23127d77f72e24492205924272dfaea2776d2a1b50b5c496516e14a2b05c21d28947d5dbd23e4d0d472e78db5b60207ae0cccd991f21"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x10}}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) getresgid(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x18, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xfffffffe000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) ptrace(0x10, r4) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="402333000800333076187350ca8fb1c52be807d414f1ed747427c1a489d8923a6304fee8c63cc3db1eadd289536fff67000000000000000000"], &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000a80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x21, 0x0, 0xf, 0xff, "95da0c48", "b79ee613"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x7, 0x9, 0x5, 0x5}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d40)={0x20, 0x0, 0xbc, "0646dbda2d208bf0d5c143720623a5a566bf9f8196a21c8c1009da21a7bef144e25c70d4c13d9f183fef550c5bc09a3a5410274688f72fdad8582ada1f1504bc8c2b8b740ba33b72276329bee4bdb1aef538e7ee6266973c9fe3c379f3389dc96ac872c2d1670e06f1e7235ba444ad28c036215b842269b96ef050700d11697866def2dda39f562bb74f18c3849a951ae4b93435e26d1061e80e0cf0f6384caa0464406a34039e0e2788186ccf539766c87638fd1a92ec0d9e84c760"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x20, 0x10, [0xfff0]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0xff6d}, &(0x7f0000000f00)={0x40, 0x9, 0x1}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "9a49"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001000)={0x40, 0x17, 0x6, @random="a8354b7010c3"}, &(0x7f0000001040)={0x40, 0x19, 0x2, "56db"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x60, 0xa, 0x60, {0x60, 0x30, "29eb4bdec39e0d547cae137aa7edc437d09f497340f09465903495a009b5f083218445e1dbcb8bc59b0a55ae89bac83ee00522f775ed23fbfbc11d759139b1d6625e17feb25a3bbec051c5bef05ef3a3eb0b9867bf31e0e6876b9acf49f9"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f00000003c0)={0x40, 0x11, 0x36, "e3a2b834c53239f37aafe3fe6d4162b859b6fb4b09bc11e2c6f615340457a233730b1d919b9f536e4734ac1a74e35a9429b73278290a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xdf}}) 2.500375574s ago: executing program 4 (id=960): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0xe000}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 2.463545224s ago: executing program 3 (id=961): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000404) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 2.323981091s ago: executing program 3 (id=962): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x142e40, 0x0) r2 = dup(r1) fallocate(r2, 0x10, 0x0, 0x72000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004900010029bd7000fddbdf250a006000", @ANYRES32=0x0, @ANYBLOB="f9ffffff0800020000000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x5, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.122808545s ago: executing program 4 (id=963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4082) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000f00)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff, 0xa}, {0x9, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008805}, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c810) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[], 0x56c}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03ca005c2e2419b397bbfb424b5879b67d144c23b32bd04b2d70eea252684ad4584861d1a6551a73cc663a54a933490f34b11570cae6c4456d8bbd6cc257e4c621e7f52125f2a4107d5852b496bd82362386e0b8351dd501c8f7f19384cfd278"], 0x60) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) 1.782322283s ago: executing program 4 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES64=r0, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x312a26770f5af544}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x8858}, 0x22082850) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x20, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xb, 0xb}, {0x2, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'bridge_slave_1\x00', @random="2b0100004ec6"}) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000004c0)=@multiplanar_fd={0x7fffffff, 0x1, 0x4, 0x800000, 0x8, {}, {0x5, 0xc, 0x2, 0x0, 0xb6, 0xa, "5746d35a"}, 0x7fffffff, 0x4, {&(0x7f0000000440)=[{0x1, 0x5, {}, 0xfffffffa}, {0x0, 0x0, {r11}, 0x200}]}, 0x7, 0x0, r11}) 1.158923341s ago: executing program 3 (id=965): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) syz_emit_ethernet(0x32, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0x10, 0x0, @opaque="f22ab613c904ad66"}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x4, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x34000}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r3, 0x4}, 0x8) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xd4, &(0x7f0000000280)={@multicast, @multicast, @void, {@ipv4={0x800, @igmp={{0x11, 0x4, 0x0, 0x4, 0xc6, 0x67, 0x0, 0x59, 0x2, 0x0, @multicast2, @multicast1, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xa3, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @cipso={0x86, 0x13, 0x0, [{0x6, 0xd, "253cc52da4060f9f1753cd"}]}]}}, {0x15, 0x30, 0x0, @broadcast, "4862018b3f900890e512d1ed1bd0a5fa0fdf2f88540000883511211b2b93b9c69e3eed2168630b7a2670b6a44fd17f81ba47f334ffe40468ee22d93ef6e7660a0c69ddb80b7ec46f35163608820d9c89d56c5a13de8efecfbc26c0fe22e60da3d2d669d2feadae16a50245275feac7ec55c45737b35c5ce2446d"}}}}}, 0x0) 1.094478838s ago: executing program 1 (id=966): getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000600)=0x7}, 0x7, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb8f", 0x8a, 0x20}, {0x1, 0xf000000, &(0x7f0000000a80)=',&)\x00', &(0x7f0000000ac0)="88886b5361134fdedb16b5fed00e7f8d33b43d80a0ef0475884de5ba63f03122236bf35b7873bccbdb42a540fc65df92ab6d7d4c6a6d866aee54763076f1b9bd91477188b15db518401f7b83a01b8e9e725c9e03e42dbd75278c15a79b544999bb747b4420a855f764", 0x69, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430dff796c2a9bc25120a9c14d002d734d1d25a1", 0xdb, 0xa}]}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x54, 0x14, {{'cmac(aes)\x00'}, 0x40, 0x0, "3509fe8fd57fd44a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x150}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.044403409s ago: executing program 2 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc15db06e676022ae, 0x1) r6 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x1}) io_uring_enter(r6, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000bed0471f76203c15aa9f3d04db0000e0bdafa1140000ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364f12a4743eba6c3a6e7969c6a00aa2eb378f3c4d19466597f637bdac4d168f7469a5fdac3599784828c08cea0f3c7a721c698fa1d7441ef66fdedac3193ae149cc2e263"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 847.490366ms ago: executing program 1 (id=968): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0xb, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x58}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = io_uring_setup(0x31b9, &(0x7f0000000200)={0x0, 0x8276, 0x200, 0x1, 0x2f}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002a40)={0xa, 0x1, 0x0, &(0x7f0000002940)=[{&(0x7f0000000280)}, {&(0x7f00000012c0)=""/231, 0xe7}, {&(0x7f00000013c0)=""/107, 0x6b}, {&(0x7f0000001440)=""/115, 0x73}, {&(0x7f00000014c0)=""/252, 0xfc}, {&(0x7f00000015c0)=""/233, 0xe9}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/80, 0x50}, {&(0x7f0000002740)=""/253, 0xfd}, {&(0x7f0000002840)=""/201, 0xc9}], &(0x7f0000002a00)=[0xc46, 0xe, 0x3d]}, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 846.217229ms ago: executing program 2 (id=969): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 713.62261ms ago: executing program 2 (id=970): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000600)=0x7}, 0x7, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb8f", 0x8a, 0x20}, {0x1, 0xf000000, &(0x7f0000000a80)=',&)\x00', &(0x7f0000000ac0)="88886b5361134fdedb16b5fed00e7f8d33b43d80a0ef0475884de5ba63f03122236bf35b7873bccbdb42a540fc65df92ab6d7d4c6a6d866aee54763076f1b9bd91477188b15db518401f7b83a01b8e9e725c9e03e42dbd75278c15a79b544999bb747b4420a855f764", 0x69, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430dff796c2a9bc25120a9c14d002d734d1d25a1", 0xdb, 0xa}]}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 656.269817ms ago: executing program 4 (id=971): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 500.570553ms ago: executing program 4 (id=972): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000404) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 452.687162ms ago: executing program 2 (id=973): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0xe000}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r5}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 359.220281ms ago: executing program 4 (id=974): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000004c0)={0x1, @win={{0x1, 0x0, 0x47524247}, 0x7, 0x8, 0x0, 0x0, 0x0}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x12c02) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800001, 0x40010, r2, 0xa) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x40010021, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000300)=ANY=[@ANYBLOB="120101020000002035121280400001020301090269000301008008080b0101010c200609040000000122bdd50d24010300040900040904010000070000002000090501090004080606082501823001280009040200fdff0220248904020101ffffc470dba11501565ee8ff05082501030006290f00000000000000ff058d7079e654417519ebf5f640987d46802df50fac53"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0x3e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 286.721464ms ago: executing program 0 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) 210.962791ms ago: executing program 3 (id=976): syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000100), 0x100000000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 153.379539ms ago: executing program 2 (id=977): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d3, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x30, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1, @ANYBLOB="961b8b5a6b2ab96619c0557e84b9977ed8f9bcdf10912718cc5cd996b888971faae7398a2324b7617156c98be421fc10e57e4ae215162ecc7b8336f0ac6895b5"], &(0x7f0000000300)='syzkaller\x00', 0xc1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x10, 0x0, r0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0xbf, 0xcd, 0x61, 0x40, 0x1199, 0x9078, 0x82c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x22, 0x4, 0x0, 0x6, "", [{{0x9, 0x4, 0x21, 0x0, 0x0, 0x96, 0x3f, 0xfd, 0x40}}, {{0x9, 0x4, 0xe4, 0x1, 0x0, 0xff, 0xff, 0xff, 0xa9}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=978): r0 = getpid() msgget$private(0x0, 0x2a0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x3000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r2, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x1) socket$inet(0x2, 0x3, 0x41) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff05) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44024}, 0x8094) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) kernel console output (not intermixed with test programs): been left with an inconsistent configuration, please check. [ 255.290167][ T796] usb 5-1: not running at top speed; connect to a high speed hub [ 255.312229][ T796] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 255.348168][ T796] usb 5-1: config 1 interface 0 has no altsetting 0 [ 255.394033][ T796] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 255.410415][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.420977][ T796] usb 5-1: Product: syz [ 255.425229][ T796] usb 5-1: Manufacturer: syz [ 255.432140][ T796] usb 5-1: SerialNumber: syz [ 255.503000][ T8091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.652379][ T8099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.709756][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.718755][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.947425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 256.071638][ T24] usb 4-1: USB disconnect, device number 19 [ 256.291317][ T796] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input19 [ 256.303682][ T5178] bcm5974 5-1:1.0: could not read from device [ 256.329134][ T5178] bcm5974 5-1:1.0: could not read from device [ 256.350369][ T796] usb 5-1: USB disconnect, device number 31 [ 256.359480][ T5178] bcm5974 5-1:1.0: could not read from device [ 256.380992][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 257.072638][ T8116] IPVS: Error connecting to the multicast addr [ 259.239729][ T5828] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 259.541463][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 259.589716][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.636891][ T5828] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 259.667479][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.717497][ T5828] usb 4-1: Product: syz [ 259.721825][ T5828] usb 4-1: Manufacturer: syz [ 259.726425][ T5828] usb 4-1: SerialNumber: syz [ 259.771138][ T5828] usb 4-1: config 0 descriptor?? [ 259.979387][ T5828] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 260.152915][ T5828] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.184396][ T5828] usb 2-1: config 0 interface 0 has no altsetting 0 [ 260.213334][ T5828] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 260.245942][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.284861][ T5828] usb 2-1: config 0 descriptor?? [ 260.323544][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.337003][ T5828] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 260.397273][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.959564][ T8152] can: request_module (can-proto-0) failed. [ 262.181247][ T5828] usb 4-1: USB disconnect, device number 20 [ 262.307362][ T8175] FAULT_INJECTION: forcing a failure. [ 262.307362][ T8175] name failslab, interval 1, probability 0, space 0, times 0 [ 262.342841][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.3.584 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.342877][ T8175] Tainted: [L]=SOFTLOCKUP [ 262.342885][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.342915][ T8175] Call Trace: [ 262.342921][ T8175] [ 262.342928][ T8175] dump_stack_lvl+0xe8/0x150 [ 262.342956][ T8175] should_fail_ex+0x412/0x560 [ 262.342980][ T8175] ? proc_alloc_inode+0x2a/0xc0 [ 262.343005][ T8175] should_failslab+0xa8/0x100 [ 262.343026][ T8175] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 262.343048][ T8175] ? __pfx_proc_alloc_inode+0x10/0x10 [ 262.343071][ T8175] proc_alloc_inode+0x2a/0xc0 [ 262.343093][ T8175] alloc_inode+0x6a/0x1b0 [ 262.343122][ T8175] new_inode+0x22/0x170 [ 262.343148][ T8175] proc_pid_make_inode+0x21/0x130 [ 262.343167][ T8175] proc_map_files_instantiate+0xa2/0x190 [ 262.343195][ T8175] proc_fill_cache+0x1ff/0x440 [ 262.343216][ T8175] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 262.343240][ T8175] ? __pfx_proc_fill_cache+0x10/0x10 [ 262.343255][ T8175] ? snprintf+0xe8/0x140 [ 262.343277][ T8175] ? __up_read+0x291/0x6b0 [ 262.343305][ T8175] proc_map_files_readdir+0x7e2/0xa40 [ 262.343333][ T8175] ? __mutex_lock+0x319/0x1300 [ 262.343353][ T8175] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 262.343394][ T8175] ? iterate_dir+0x292/0x570 [ 262.343411][ T8175] ? down_read_killable+0x1bb/0x340 [ 262.343435][ T8175] iterate_dir+0x399/0x570 [ 262.343463][ T8175] __se_sys_getdents64+0xf1/0x280 [ 262.343485][ T8175] ? __pfx___se_sys_getdents64+0x10/0x10 [ 262.343503][ T8175] ? ksys_write+0x242/0x270 [ 262.343518][ T8175] ? __pfx_filldir64+0x10/0x10 [ 262.343538][ T8175] ? __pfx_ksys_write+0x10/0x10 [ 262.343563][ T8175] do_syscall_64+0x14d/0xf80 [ 262.343581][ T8175] ? trace_irq_disable+0x3b/0x150 [ 262.343603][ T8175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.343618][ T8175] ? clear_bhb_loop+0x40/0x90 [ 262.343637][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.343653][ T8175] RIP: 0033:0x7fa53099c799 [ 262.343667][ T8175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.343686][ T8175] RSP: 002b:00007fa531856028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 262.343703][ T8175] RAX: ffffffffffffffda RBX: 00007fa530c15fa0 RCX: 00007fa53099c799 [ 262.343714][ T8175] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000003 [ 262.343724][ T8175] RBP: 00007fa531856090 R08: 0000000000000000 R09: 0000000000000000 [ 262.343733][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.343742][ T8175] R13: 00007fa530c16038 R14: 00007fa530c15fa0 R15: 00007fa530d3fa48 [ 262.343766][ T8175] [ 262.945677][ T42] usb 2-1: USB disconnect, device number 36 [ 262.967646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 265.439339][ T5919] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 265.669333][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 265.686604][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.736327][ T5919] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 265.755393][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.786969][ T5919] usb 5-1: Product: syz [ 266.355276][ T5919] usb 5-1: Manufacturer: syz [ 266.375932][ T5919] usb 5-1: SerialNumber: syz [ 266.403794][ T5919] usb 5-1: config 0 descriptor?? [ 267.410007][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 267.429490][ T5919] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 267.632233][ T5919] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.675871][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.686281][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 267.703024][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.720275][ T5919] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 267.745227][ T9] usb 2-1: config 0 descriptor?? [ 267.756125][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.789598][ T5919] usb 1-1: config 0 descriptor?? [ 267.805299][ T5919] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 268.826669][ T5919] usb 5-1: USB disconnect, device number 32 [ 268.929431][ T8238] FAULT_INJECTION: forcing a failure. [ 268.929431][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 268.970431][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: syz.3.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.970467][ T8238] Tainted: [L]=SOFTLOCKUP [ 268.970475][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.970489][ T8238] Call Trace: [ 268.970498][ T8238] [ 268.970508][ T8238] dump_stack_lvl+0xe8/0x150 [ 268.970543][ T8238] should_fail_ex+0x412/0x560 [ 268.970582][ T8238] should_failslab+0xa8/0x100 [ 268.970604][ T8238] __kmalloc_noprof+0xe8/0x760 [ 268.970637][ T8238] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.970679][ T8238] tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.970724][ T8238] ? tomoyo_path_number_perm+0x219/0x630 [ 268.970750][ T8238] tomoyo_path_number_perm+0x246/0x630 [ 268.970773][ T8238] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.970815][ T8238] ? __lock_acquire+0x6b5/0x2cf0 [ 268.970862][ T8238] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 268.970906][ T8238] ? __fget_files+0x2a/0x420 [ 268.970931][ T8238] ? __fget_files+0x2a/0x420 [ 268.970974][ T8238] ? __fget_files+0x3a0/0x420 [ 268.971004][ T8238] ? __fget_files+0x2a/0x420 [ 268.971046][ T8238] security_file_ioctl+0xc3/0x2a0 [ 268.971073][ T8238] __se_sys_ioctl+0x47/0x170 [ 268.971098][ T8238] do_syscall_64+0x14d/0xf80 [ 268.971136][ T8238] ? trace_irq_disable+0x3b/0x150 [ 268.971167][ T8238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.971193][ T8238] ? clear_bhb_loop+0x40/0x90 [ 268.971220][ T8238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.971236][ T8238] RIP: 0033:0x7fa53099c799 [ 268.971251][ T8238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.971281][ T8238] RSP: 002b:00007fa531814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.971306][ T8238] RAX: ffffffffffffffda RBX: 00007fa530c16180 RCX: 00007fa53099c799 [ 268.971321][ T8238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 268.971333][ T8238] RBP: 00007fa531814090 R08: 0000000000000000 R09: 0000000000000000 [ 268.971347][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.971364][ T8238] R13: 00007fa530c16218 R14: 00007fa530c16180 R15: 00007fa530d3fa48 [ 268.971387][ T8238] [ 268.971455][ T8238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.068271][ T5887] usb 1-1: USB disconnect, device number 21 [ 270.125978][ T8248] netdevsim netdevsim2: Direct firmware load for / [ 270.125978][ T8248] failed with error -2 [ 270.138178][ T8248] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 270.138178][ T8248] [ 270.776513][ T9] usb 2-1: Cannot set autoneg [ 270.783382][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 270.848980][ T9] usb 2-1: USB disconnect, device number 37 [ 271.581200][ T8260] fuse: Bad value for 'user_id' [ 271.588397][ T8260] fuse: Bad value for 'user_id' [ 273.020555][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.120732][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.185696][ T8268] fuse: Bad value for 'user_id' [ 273.227475][ T8268] fuse: Bad value for 'user_id' [ 273.649407][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 273.811757][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 273.821206][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.833808][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.845766][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 273.853131][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 273.862472][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.952951][ T8277] netdevsim netdevsim3: Direct firmware load for / [ 273.952951][ T8277] failed with error -2 [ 273.965485][ T8277] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 273.965485][ T8277] [ 274.013303][ T24] usb 1-1: config 0 descriptor?? [ 274.078736][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 274.086353][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.112931][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.147201][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 274.165024][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.192910][ T9] usb 5-1: config 0 descriptor?? [ 274.521365][ T24] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 274.554504][ T24] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 274.759829][ T9] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 274.766779][ T9] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 274.813314][ T24] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 274.879130][ T5919] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 274.980092][ T9] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 275.014945][ T24] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 275.059450][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 275.069784][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.089595][ T5919] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 275.100242][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.110319][ T5919] usb 2-1: Product: syz [ 275.120608][ T5919] usb 2-1: Manufacturer: syz [ 275.125291][ T5919] usb 2-1: SerialNumber: syz [ 275.150239][ T5919] usb 2-1: config 0 descriptor?? [ 275.200284][ T9] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 275.215336][ T24] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 275.466753][ T9] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 275.490125][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.514600][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.555485][ T24] usb 1-1: USB disconnect, device number 22 [ 275.805915][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.825367][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.929471][ T9] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 276.329219][ T5828] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 276.545273][ T5828] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.593439][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 276.605535][ T5828] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 276.633479][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.673922][ T5828] usb 4-1: config 0 descriptor?? [ 276.693834][ T5828] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 276.812364][ T5919] usb 5-1: USB disconnect, device number 33 [ 277.764859][ T8291] netlink: 348 bytes leftover after parsing attributes in process `syz.0.615'. [ 278.155523][ T24] usb 2-1: USB disconnect, device number 38 [ 278.449653][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 278.552862][ T8313] bridge_slave_1: left allmulticast mode [ 278.610941][ T8313] bridge_slave_1: left promiscuous mode [ 278.617128][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.687226][ T8313] bridge_slave_0: left allmulticast mode [ 278.695409][ T8313] bridge_slave_0: left promiscuous mode [ 278.704675][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.124777][ T5887] usb 4-1: USB disconnect, device number 21 [ 279.334044][ T8325] fuse: Bad value for 'user_id' [ 279.340436][ T8325] fuse: Bad value for 'user_id' [ 279.624592][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.700082][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.771949][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.794395][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.997192][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 280.259051][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 280.276346][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.290172][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.313996][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.333440][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 280.353184][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.380513][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 280.391463][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 280.404916][ T24] usb 1-1: Manufacturer: syz [ 280.442611][ T24] usb 1-1: config 0 descriptor?? [ 280.978732][ T24] rc_core: IR keymap rc-hauppauge not found [ 280.986100][ T24] Registered IR keymap rc-empty [ 280.993778][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.053746][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.114807][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 281.213779][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 281.573225][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.659866][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.737418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 281.818880][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.858938][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.909859][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.948864][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 281.968869][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.178410][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.208792][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.339942][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.536143][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 282.562437][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 282.818613][ T24] usb 1-1: USB disconnect, device number 23 [ 283.658197][ T42] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 283.792717][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.834782][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.842159][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 283.886671][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.948232][ T42] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 283.991475][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.065400][ T42] usb 1-1: Product: syz [ 284.075543][ T42] usb 1-1: Manufacturer: syz [ 284.113386][ T42] usb 1-1: SerialNumber: syz [ 284.183681][ T42] usb 1-1: config 0 descriptor?? [ 284.631994][ T8374] tap0: tun_chr_ioctl cmd 1074025677 [ 284.639552][ T8374] tap0: linktype set to 0 [ 284.888459][ T8381] netlink: 72 bytes leftover after parsing attributes in process `syz.4.638'. [ 284.949256][ T8382] fuse: Bad value for 'user_id' [ 284.955480][ T8382] fuse: Bad value for 'user_id' [ 287.169298][ T5919] usb 1-1: USB disconnect, device number 24 [ 287.848711][ T42] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 288.091861][ T42] usb 1-1: not running at top speed; connect to a high speed hub [ 288.126053][ T8421] FAULT_INJECTION: forcing a failure. [ 288.126053][ T8421] name failslab, interval 1, probability 0, space 0, times 0 [ 288.144061][ T42] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 288.179753][ T42] usb 1-1: config 1 interface 0 has no altsetting 0 [ 288.221648][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: syz.2.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.221684][ T8421] Tainted: [L]=SOFTLOCKUP [ 288.221692][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.221707][ T8421] Call Trace: [ 288.221715][ T8421] [ 288.221724][ T8421] dump_stack_lvl+0xe8/0x150 [ 288.221761][ T8421] should_fail_ex+0x412/0x560 [ 288.221799][ T8421] should_failslab+0xa8/0x100 [ 288.221829][ T8421] __kmalloc_cache_noprof+0x88/0x660 [ 288.221855][ T8421] ? hash_ipportip_create+0x2fe/0x1040 [ 288.221886][ T8421] hash_ipportip_create+0x2fe/0x1040 [ 288.221929][ T8421] ? __pfx_hash_ipportip_create+0x10/0x10 [ 288.221955][ T8421] ip_set_create+0xae6/0x1a40 [ 288.221989][ T8421] ? ip_set_create+0x4eb/0x1a40 [ 288.222030][ T8421] ? __pfx_ip_set_create+0x10/0x10 [ 288.222091][ T8421] nfnetlink_rcv_msg+0xc00/0x12c0 [ 288.222119][ T8421] ? unwind_get_return_address+0x4d/0x90 [ 288.222153][ T8421] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 288.222203][ T8421] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 288.222283][ T8421] netlink_rcv_skb+0x232/0x4b0 [ 288.222317][ T8421] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 288.222349][ T8421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.222394][ T8421] ? bpf_lsm_capable+0x9/0x20 [ 288.222423][ T8421] ? security_capable+0x7e/0x2c0 [ 288.222461][ T8421] nfnetlink_rcv+0x2c0/0x27b0 [ 288.222500][ T8421] ? __local_bh_enable_ip+0xd0/0x130 [ 288.222529][ T8421] ? lockdep_hardirqs_on+0x7a/0x110 [ 288.222553][ T8421] ? __dev_queue_xmit+0x277/0x3890 [ 288.222578][ T8421] ? __local_bh_enable_ip+0xd0/0x130 [ 288.222604][ T8421] ? __dev_queue_xmit+0x277/0x3890 [ 288.222630][ T8421] ? __dev_queue_xmit+0x1e78/0x3890 [ 288.222655][ T8421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.222685][ T8421] ? __dev_queue_xmit+0x277/0x3890 [ 288.222717][ T8421] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 288.222753][ T8421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 288.222789][ T8421] ? ref_tracker_free+0x693/0x840 [ 288.222820][ T8421] ? __copy_skb_header+0xa3/0x4a0 [ 288.222847][ T8421] ? __pfx_ref_tracker_free+0x10/0x10 [ 288.222896][ T8421] ? __skb_clone+0x63/0x7a0 [ 288.222934][ T8421] ? __skb_clone+0x483/0x7a0 [ 288.222967][ T8421] ? skb_clone+0x246/0x3a0 [ 288.222996][ T8421] ? __netlink_deliver_tap+0x807/0x850 [ 288.223028][ T8421] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.223068][ T8421] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.223108][ T8421] netlink_unicast+0x80f/0x9b0 [ 288.223147][ T8421] ? __pfx_netlink_unicast+0x10/0x10 [ 288.223180][ T8421] ? netlink_sendmsg+0x650/0xb40 [ 288.223198][ T8421] ? skb_put+0x11b/0x210 [ 288.223224][ T8421] netlink_sendmsg+0x813/0xb40 [ 288.223255][ T8421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.223279][ T8421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 288.223313][ T8421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.223340][ T8421] ____sys_sendmsg+0x972/0x9f0 [ 288.223376][ T8421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.223411][ T8421] ? import_iovec+0x73/0xa0 [ 288.223439][ T8421] ___sys_sendmsg+0x2a5/0x360 [ 288.223470][ T8421] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.223533][ T8421] ? __fget_files+0x2a/0x420 [ 288.223563][ T8421] ? __fget_files+0x3a0/0x420 [ 288.223605][ T8421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 288.223635][ T8421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.223671][ T8421] ? __pfx_ksys_write+0x10/0x10 [ 288.223713][ T8421] do_syscall_64+0x14d/0xf80 [ 288.223737][ T8421] ? trace_irq_disable+0x3b/0x150 [ 288.223767][ T8421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.223789][ T8421] ? clear_bhb_loop+0x40/0x90 [ 288.223816][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.223837][ T8421] RIP: 0033:0x7f40f839c799 [ 288.223857][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.223876][ T8421] RSP: 002b:00007f40f918e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.223907][ T8421] RAX: ffffffffffffffda RBX: 00007f40f8615fa0 RCX: 00007f40f839c799 [ 288.223924][ T8421] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 288.223937][ T8421] RBP: 00007f40f918e090 R08: 0000000000000000 R09: 0000000000000000 [ 288.223951][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.223963][ T8421] R13: 00007f40f8616038 R14: 00007f40f8615fa0 R15: 00007f40f873fa48 [ 288.223998][ T8421] [ 289.296540][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 289.351666][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.432002][ T42] usb 1-1: Product: syz [ 289.440268][ T42] usb 1-1: Manufacturer: syz [ 289.499519][ T42] usb 1-1: SerialNumber: syz [ 289.538150][ T8412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.564953][ T8423] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 289.601032][ T8423] xt_hashlimit: size too large, truncated to 1048576 [ 289.609725][ T8423] xt_hashlimit: max too large, truncated to 1048576 [ 289.971824][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 290.002320][ T8429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.653'. [ 290.174374][ T42] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22 [ 290.200408][ T8432] bond3 (unregistering): Released all slaves [ 290.245388][ T5178] bcm5974 1-1:1.0: could not read from device [ 290.264137][ T5178] bcm5974 1-1:1.0: could not read from device [ 290.291217][ T42] usb 1-1: USB disconnect, device number 25 [ 290.300092][ T5178] bcm5974 1-1:1.0: could not read from device [ 290.339734][ T5178] bcm5974 1-1:1.0: could not read from device [ 290.494130][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 290.689564][ T9] usb 4-1: device descriptor read/64, error -71 [ 290.925084][ T8447] netlink: 232 bytes leftover after parsing attributes in process `syz.0.657'. [ 290.959827][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 291.022360][ T5828] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 291.022964][ T8447] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.116383][ T8447] FAULT_INJECTION: forcing a failure. [ 291.116383][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 291.219230][ T9] usb 4-1: device descriptor read/64, error -71 [ 291.237191][ T8447] CPU: 1 UID: 0 PID: 8447 Comm: syz.0.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.237222][ T8447] Tainted: [L]=SOFTLOCKUP [ 291.237228][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.237237][ T8447] Call Trace: [ 291.237244][ T8447] [ 291.237251][ T8447] dump_stack_lvl+0xe8/0x150 [ 291.237278][ T8447] should_fail_ex+0x412/0x560 [ 291.237306][ T8447] should_failslab+0xa8/0x100 [ 291.237328][ T8447] __kmalloc_noprof+0xe8/0x760 [ 291.237351][ T8447] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.237402][ T8447] ? fib6_new_table+0x376/0x3f0 [ 291.237432][ T8447] ? fib6_info_alloc+0x30/0xf0 [ 291.237469][ T8447] fib6_info_alloc+0x30/0xf0 [ 291.237512][ T8447] ip6_route_info_create+0x142/0x860 [ 291.237535][ T8447] ip6_route_add+0x49/0x1b0 [ 291.237551][ T8447] inet6_rtm_newroute+0x268/0x19e0 [ 291.237579][ T8447] ? kasan_quarantine_put+0xbb/0x1f0 [ 291.237595][ T8447] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.237614][ T8447] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 291.237672][ T8447] ? kmem_cache_free+0x187/0x630 [ 291.237689][ T8447] ? nlmon_xmit+0xb0/0x100 [ 291.237714][ T8447] ? __lock_acquire+0x6b5/0x2cf0 [ 291.237738][ T8447] ? __local_bh_enable_ip+0xd0/0x130 [ 291.237761][ T8447] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.237796][ T8447] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 291.237818][ T8447] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 291.237846][ T8447] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 291.237874][ T8447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.237896][ T8447] ? ref_tracker_free+0x693/0x840 [ 291.237930][ T8447] ? __copy_skb_header+0xa3/0x4a0 [ 291.237950][ T8447] ? __pfx_ref_tracker_free+0x10/0x10 [ 291.237972][ T8447] ? __skb_clone+0x63/0x7a0 [ 291.237995][ T8447] netlink_rcv_skb+0x232/0x4b0 [ 291.238020][ T8447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.238045][ T8447] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.238076][ T8447] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.238104][ T8447] netlink_unicast+0x80f/0x9b0 [ 291.238134][ T8447] ? __pfx_netlink_unicast+0x10/0x10 [ 291.238156][ T8447] ? netlink_sendmsg+0x650/0xb40 [ 291.238169][ T8447] ? skb_put+0x11b/0x210 [ 291.238187][ T8447] netlink_sendmsg+0x813/0xb40 [ 291.238207][ T8447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.238224][ T8447] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.238248][ T8447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.238268][ T8447] ____sys_sendmsg+0x972/0x9f0 [ 291.238293][ T8447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.238317][ T8447] ? import_iovec+0x73/0xa0 [ 291.238336][ T8447] ___sys_sendmsg+0x2a5/0x360 [ 291.238358][ T8447] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.238402][ T8447] ? __fget_files+0x2a/0x420 [ 291.238424][ T8447] ? __fget_files+0x3a0/0x420 [ 291.238454][ T8447] __x64_sys_sendmsg+0x1bd/0x2a0 [ 291.238474][ T8447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.238499][ T8447] ? __pfx_ksys_write+0x10/0x10 [ 291.238524][ T8447] do_syscall_64+0x14d/0xf80 [ 291.238541][ T8447] ? trace_irq_disable+0x3b/0x150 [ 291.238563][ T8447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.238579][ T8447] ? clear_bhb_loop+0x40/0x90 [ 291.238597][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.238613][ T8447] RIP: 0033:0x7fa2c6b9c799 [ 291.238634][ T8447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.238648][ T8447] RSP: 002b:00007fa2c7a5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.238665][ T8447] RAX: ffffffffffffffda RBX: 00007fa2c6e15fa0 RCX: 00007fa2c6b9c799 [ 291.238676][ T8447] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 291.238686][ T8447] RBP: 00007fa2c7a5c090 R08: 0000000000000000 R09: 0000000000000000 [ 291.238695][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.238704][ T8447] R13: 00007fa2c6e16038 R14: 00007fa2c6e15fa0 R15: 00007fa2c6f3fa48 [ 291.238726][ T8447] [ 291.629666][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 291.643292][ T9] usb usb4-port1: attempt power cycle [ 292.053552][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.142211][ T5828] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 292.200177][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.247468][ T5828] usb 5-1: Product: syz [ 292.251801][ T5828] usb 5-1: Manufacturer: syz [ 292.261734][ T5828] usb 5-1: SerialNumber: syz [ 292.283434][ T5828] usb 5-1: config 0 descriptor?? [ 292.359388][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 292.430349][ T9] usb 4-1: device descriptor read/8, error -71 [ 292.612709][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 292.612729][ T29] audit: type=1326 audit(1774321735.735:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 292.682956][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 292.699172][ T5887] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 292.727182][ T29] audit: type=1326 audit(1774321735.775:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 292.765892][ T9] usb 4-1: device descriptor read/8, error -71 [ 292.838830][ T29] audit: type=1326 audit(1774321735.775:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 292.963533][ T9] usb usb4-port1: unable to enumerate USB device [ 293.009743][ T5887] usb 2-1: not running at top speed; connect to a high speed hub [ 293.041266][ T5887] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 293.310024][ T5887] usb 2-1: config 1 interface 0 has no altsetting 0 [ 293.368287][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 293.378123][ T29] audit: type=1326 audit(1774321735.775:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 293.378179][ T29] audit: type=1326 audit(1774321735.775:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 293.378225][ T29] audit: type=1326 audit(1774321735.775:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 293.378271][ T29] audit: type=1326 audit(1774321735.775:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 293.378317][ T29] audit: type=1326 audit(1774321735.775:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 293.378364][ T29] audit: type=1326 audit(1774321735.775:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 293.378409][ T29] audit: type=1326 audit(1774321735.775:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 293.916277][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.943751][ T5887] usb 2-1: Product: syz [ 293.961502][ T5887] usb 2-1: Manufacturer: syz [ 293.972750][ T5887] usb 2-1: SerialNumber: syz [ 294.007957][ T8455] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 294.327661][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input23 [ 294.343038][ T5828] usb 5-1: USB disconnect, device number 34 [ 294.397052][ T5178] bcm5974 2-1:1.0: could not read from device [ 294.439430][ T5887] usb 2-1: USB disconnect, device number 39 [ 294.445508][ T5178] bcm5974 2-1:1.0: could not read from device [ 294.578919][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.702364][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.737314][ T8468] netlink: 'syz.2.663': attribute type 10 has an invalid length. [ 294.763520][ T8468] team0: Device vxcan1 is of different type [ 294.914560][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.962906][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.212716][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 295.306407][ T8474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.665'. [ 295.344363][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 295.425583][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 295.436910][ T8474] syzkaller1: entered promiscuous mode [ 295.443322][ T8474] syzkaller1: entered allmulticast mode [ 295.452207][ T8474] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 295.583739][ T8479] bond1 (unregistering): Released all slaves [ 295.728726][ T42] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 295.819371][ T8486] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 295.888767][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 295.896108][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 295.939674][ T42] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 295.958838][ T42] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 295.979615][ T42] usb 2-1: Product: syz [ 295.992761][ T42] usb 2-1: Manufacturer: syz [ 296.011501][ T42] usb 2-1: SerialNumber: syz [ 296.237104][ T42] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 296.259146][ T42] usb 2-1: Handspring Visor / Palm OS: port 42, is for unknown use [ 296.275646][ T42] usb 2-1: Handspring Visor / Palm OS: port 0, is for Console use [ 296.296087][ T42] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 296.441611][ T42] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 296.486525][ T42] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 296.511402][ T42] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 296.530843][ T42] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 296.640099][ T42] usb 2-1: USB disconnect, device number 40 [ 296.720429][ T42] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 296.786886][ T42] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 296.818924][ T796] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 296.847191][ T42] visor 2-1:1.0: device disconnected [ 296.866138][ T8504] netlink: 76 bytes leftover after parsing attributes in process `syz.2.675'. [ 296.922452][ T8505] netlink: 76 bytes leftover after parsing attributes in process `syz.2.675'. [ 297.033476][ T5887] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 297.049569][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 297.092712][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.112071][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.137133][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.180597][ T796] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 297.191230][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.249145][ T796] usb 4-1: Product: syz [ 297.249352][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 297.253365][ T796] usb 4-1: Manufacturer: syz [ 297.253385][ T796] usb 4-1: SerialNumber: syz [ 297.285740][ T796] usb 4-1: config 0 descriptor?? [ 297.321382][ T5887] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 297.334022][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 297.383170][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 297.593809][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.628789][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.650810][ T5887] usb 5-1: SerialNumber: syz [ 297.858952][ T796] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 297.945428][ T5887] usb 5-1: USB disconnect, device number 35 [ 298.024428][ T796] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.036258][ T796] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.121941][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.163262][ T796] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 298.183759][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.219431][ T796] usb 2-1: config 0 descriptor?? [ 298.646542][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 298.654523][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 298.674137][ T796] usb 2-1: USB disconnect, device number 41 [ 298.896629][ T8517] bond3: entered promiscuous mode [ 298.939676][ T8517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.162619][ T8519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.182358][ T8519] bond4: entered promiscuous mode [ 299.209854][ T8519] bond3: (slave bond4): Enslaving as an active interface with an up link [ 300.263117][ T9] usb 4-1: USB disconnect, device number 26 [ 300.494246][ T8531] FAULT_INJECTION: forcing a failure. [ 300.494246][ T8531] name failslab, interval 1, probability 0, space 0, times 0 [ 300.519367][ T8531] CPU: 0 UID: 0 PID: 8531 Comm: syz.3.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.519393][ T8531] Tainted: [L]=SOFTLOCKUP [ 300.519398][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.519408][ T8531] Call Trace: [ 300.519414][ T8531] [ 300.519421][ T8531] dump_stack_lvl+0xe8/0x150 [ 300.519448][ T8531] should_fail_ex+0x412/0x560 [ 300.519476][ T8531] should_failslab+0xa8/0x100 [ 300.519498][ T8531] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 300.519518][ T8531] ? ethnl_default_set_doit+0x595/0xad0 [ 300.519535][ T8531] ? __kmalloc_noprof+0x37d/0x760 [ 300.519555][ T8531] kmemdup_noprof+0x2b/0x70 [ 300.519576][ T8531] ethnl_default_set_doit+0x595/0xad0 [ 300.519595][ T8531] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 300.519620][ T8531] genl_family_rcv_msg_doit+0x22a/0x330 [ 300.519640][ T8531] ? __asan_memcpy+0x40/0x70 [ 300.519658][ T8531] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.519686][ T8531] ? bpf_lsm_capable+0x9/0x20 [ 300.519707][ T8531] ? security_capable+0x7e/0x2c0 [ 300.519733][ T8531] genl_rcv_msg+0x61c/0x7a0 [ 300.519756][ T8531] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.519774][ T8531] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 300.519791][ T8531] ? __lock_acquire+0x6b5/0x2cf0 [ 300.519819][ T8531] netlink_rcv_skb+0x232/0x4b0 [ 300.519844][ T8531] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.519864][ T8531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.519900][ T8531] ? down_read+0x272/0x2e0 [ 300.519919][ T8531] ? genl_rcv+0xd/0x40 [ 300.519937][ T8531] genl_rcv+0x28/0x40 [ 300.519953][ T8531] netlink_unicast+0x80f/0x9b0 [ 300.519981][ T8531] ? __pfx_netlink_unicast+0x10/0x10 [ 300.520003][ T8531] ? netlink_sendmsg+0x650/0xb40 [ 300.520017][ T8531] ? skb_put+0x11b/0x210 [ 300.520035][ T8531] netlink_sendmsg+0x813/0xb40 [ 300.520057][ T8531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.520074][ T8531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.520098][ T8531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.520119][ T8531] ____sys_sendmsg+0x972/0x9f0 [ 300.520151][ T8531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.520175][ T8531] ? import_iovec+0x73/0xa0 [ 300.520195][ T8531] ___sys_sendmsg+0x2a5/0x360 [ 300.520217][ T8531] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.520261][ T8531] ? __fget_files+0x2a/0x420 [ 300.520283][ T8531] ? __fget_files+0x3a0/0x420 [ 300.520313][ T8531] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.520333][ T8531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.520359][ T8531] ? __pfx_ksys_write+0x10/0x10 [ 300.520384][ T8531] do_syscall_64+0x14d/0xf80 [ 300.520401][ T8531] ? trace_irq_disable+0x3b/0x150 [ 300.520424][ T8531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.520440][ T8531] ? clear_bhb_loop+0x40/0x90 [ 300.520458][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.520474][ T8531] RIP: 0033:0x7fa53099c799 [ 300.520489][ T8531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.520503][ T8531] RSP: 002b:00007fa531856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.520520][ T8531] RAX: ffffffffffffffda RBX: 00007fa530c15fa0 RCX: 00007fa53099c799 [ 300.520532][ T8531] RDX: 0000000010004000 RSI: 0000200000001900 RDI: 0000000000000003 [ 300.520542][ T8531] RBP: 00007fa531856090 R08: 0000000000000000 R09: 0000000000000000 [ 300.520551][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.520560][ T8531] R13: 00007fa530c16038 R14: 00007fa530c15fa0 R15: 00007fa530d3fa48 [ 300.520584][ T8531] [ 301.790535][ T796] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 302.436971][ T796] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.476938][ T796] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.500146][ T8560] FAULT_INJECTION: forcing a failure. [ 302.500146][ T8560] name failslab, interval 1, probability 0, space 0, times 0 [ 302.524657][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.595444][ T8560] CPU: 0 UID: 0 PID: 8560 Comm: syz.2.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.595480][ T8560] Tainted: [L]=SOFTLOCKUP [ 302.595488][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.595501][ T8560] Call Trace: [ 302.595509][ T8560] [ 302.595517][ T8560] dump_stack_lvl+0xe8/0x150 [ 302.595552][ T8560] should_fail_ex+0x412/0x560 [ 302.595599][ T8560] should_failslab+0xa8/0x100 [ 302.595629][ T8560] __kmalloc_noprof+0xe8/0x760 [ 302.595654][ T8560] ? io_uring_alloc_async_data+0x78/0x120 [ 302.595691][ T8560] io_uring_alloc_async_data+0x78/0x120 [ 302.595724][ T8560] io_waitid_prep+0x10e/0x340 [ 302.595755][ T8560] io_submit_sqes+0xb6d/0x2400 [ 302.595811][ T8560] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 302.595838][ T8560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.595869][ T8560] ? __fget_files+0x3a0/0x420 [ 302.595904][ T8560] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 302.595926][ T8560] ? fput+0xa0/0xd0 [ 302.595957][ T8560] ? ksys_write+0x242/0x270 [ 302.595993][ T8560] ? __pfx_ksys_write+0x10/0x10 [ 302.596020][ T8560] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 302.596042][ T8560] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 302.596067][ T8560] do_syscall_64+0x14d/0xf80 [ 302.596091][ T8560] ? trace_irq_disable+0x3b/0x150 [ 302.596122][ T8560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.596143][ T8560] ? clear_bhb_loop+0x40/0x90 [ 302.596169][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.596190][ T8560] RIP: 0033:0x7f40f839c799 [ 302.596209][ T8560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.596226][ T8560] RSP: 002b:00007f40f918e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 302.596248][ T8560] RAX: ffffffffffffffda RBX: 00007f40f8615fa0 RCX: 00007f40f839c799 [ 302.596264][ T8560] RDX: 0000000000000000 RSI: 00000000200047bc RDI: 0000000000000005 [ 302.596277][ T8560] RBP: 00007f40f918e090 R08: 0000000000000000 R09: 000000000000005e [ 302.596295][ T8560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.596307][ T8560] R13: 00007f40f8616038 R14: 00007f40f8615fa0 R15: 00007f40f873fa48 [ 302.596341][ T8560] [ 303.014610][ T796] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 303.126345][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.299392][ T796] usb 4-1: config 0 descriptor?? [ 303.736906][ T796] usbhid 4-1:0.0: can't add hid device: -71 [ 303.745243][ T796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 303.771046][ T796] usb 4-1: USB disconnect, device number 27 [ 303.851421][ T5828] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 304.059158][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 304.089362][ T5828] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 304.115467][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.141052][ T5828] usb 1-1: config 0 descriptor?? [ 304.173133][ T5828] as10x_usb: device has been detected [ 304.199742][ T5828] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 304.353228][ T5828] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 304.424425][ T5828] as10x_usb: error during firmware upload part1 [ 304.683054][ T5828] Registered device nBox DVB-T Dongle [ 304.691864][ T5828] usb 1-1: USB disconnect, device number 26 [ 304.866963][ T8584] netlink: 68 bytes leftover after parsing attributes in process `syz.1.703'. [ 304.926091][ T5828] Unregistered device nBox DVB-T Dongle [ 304.931227][ T5828] as10x_usb: device has been disconnected [ 305.402998][ T8587] program syz.1.705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.819466][ T5828] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 306.905940][ T8613] program syz.4.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.049527][ T5828] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.215182][ T5828] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.289295][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.309383][ T5828] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 307.402288][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.459852][ T5828] usb 1-1: config 0 descriptor?? [ 307.570919][ T8617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.715'. [ 307.902304][ T5828] usbhid 1-1:0.0: can't add hid device: -71 [ 307.917136][ T5828] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 307.962241][ T5828] usb 1-1: USB disconnect, device number 27 [ 308.622641][ T8627] netlink: 'syz.0.718': attribute type 12 has an invalid length. [ 309.546090][ T796] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 309.745591][ T796] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 309.788679][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.845467][ T796] usb 4-1: config 0 has no interfaces? [ 309.858693][ T796] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 309.939223][ T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 309.947112][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.990454][ T796] usb 4-1: config 0 descriptor?? [ 310.093839][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 310.149720][ T9] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 310.185297][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 310.233962][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 310.266538][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.334262][ T9] usb 1-1: Product: syz [ 310.489809][ T9] usb 1-1: Manufacturer: syz [ 310.494618][ T9] usb 1-1: SerialNumber: syz [ 310.706187][ T8635] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 311.356277][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24 [ 311.623330][ T5178] bcm5974 1-1:1.0: could not read from device [ 311.662356][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 311.691190][ T8650] block device autoloading is deprecated and will be removed. [ 311.720023][ T9] usb 1-1: USB disconnect, device number 28 [ 311.732023][ T5178] bcm5974 1-1:1.0: could not read from device [ 311.761734][ T8650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.241058][ T5919] usb 4-1: USB disconnect, device number 28 [ 312.499104][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 312.691501][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 312.705175][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 312.722326][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 312.857531][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 312.889197][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 312.919412][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 312.951167][ T9] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 312.962123][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.029916][ T9] usb 1-1: Product: syz [ 313.034153][ T9] usb 1-1: Manufacturer: syz [ 313.105575][ T9] usb 1-1: SerialNumber: syz [ 313.142377][ T9] usb 1-1: config 0 descriptor?? [ 313.460102][ T8669] fuse: Bad value for 'fd' [ 313.715110][ T8671] FAULT_INJECTION: forcing a failure. [ 313.715110][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 313.743854][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.1.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.743890][ T8671] Tainted: [L]=SOFTLOCKUP [ 313.743898][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.743916][ T8671] Call Trace: [ 313.743925][ T8671] [ 313.743934][ T8671] dump_stack_lvl+0xe8/0x150 [ 313.743971][ T8671] should_fail_ex+0x412/0x560 [ 313.744008][ T8671] should_failslab+0xa8/0x100 [ 313.744038][ T8671] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 313.744063][ T8671] ? __alloc_skb+0x186/0x7d0 [ 313.744085][ T8671] ? __alloc_skb+0x1d0/0x7d0 [ 313.744104][ T8671] ? __local_bh_enable_ip+0xd0/0x130 [ 313.744138][ T8671] __alloc_skb+0x1d0/0x7d0 [ 313.744164][ T8671] netlink_sendmsg+0x5d4/0xb40 [ 313.744195][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.744220][ T8671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 313.744254][ T8671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.744282][ T8671] ____sys_sendmsg+0x972/0x9f0 [ 313.744317][ T8671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.744352][ T8671] ? import_iovec+0x73/0xa0 [ 313.744379][ T8671] ___sys_sendmsg+0x2a5/0x360 [ 313.744411][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.744472][ T8671] ? __fget_files+0x2a/0x420 [ 313.744504][ T8671] ? __fget_files+0x3a0/0x420 [ 313.744546][ T8671] __x64_sys_sendmsg+0x1bd/0x2a0 [ 313.744575][ T8671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.744611][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 313.744648][ T8671] do_syscall_64+0x14d/0xf80 [ 313.744672][ T8671] ? trace_irq_disable+0x3b/0x150 [ 313.744704][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.744726][ T8671] ? clear_bhb_loop+0x40/0x90 [ 313.744752][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.744781][ T8671] RIP: 0033:0x7f94eaf9c799 [ 313.744808][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.744828][ T8671] RSP: 002b:00007f94ebddc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.744851][ T8671] RAX: ffffffffffffffda RBX: 00007f94eb215fa0 RCX: 00007f94eaf9c799 [ 313.744868][ T8671] RDX: 0000000020040880 RSI: 0000200000000180 RDI: 0000000000000003 [ 313.744882][ T8671] RBP: 00007f94ebddc090 R08: 0000000000000000 R09: 0000000000000000 [ 313.744896][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.744909][ T8671] R13: 00007f94eb216038 R14: 00007f94eb215fa0 R15: 00007f94eb33fa48 [ 313.744943][ T8671] [ 314.237394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 314.307560][ T9] input input25: Device does not respond to id packet M [ 314.461736][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 314.472117][ T9] input input25: Device does not respond to id packet P [ 314.481524][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 314.499569][ T9] input input25: Device does not respond to id packet B [ 314.507079][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 314.515130][ T9] input input25: Device does not respond to id packet N [ 314.525113][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 314.533922][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 314.542706][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 314.551744][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 314.573958][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 314.685820][ T9] usb 1-1: USB disconnect, device number 29 [ 315.960460][ T8684] kvm: apic: phys broadcast and lowest prio [ 315.966656][ T8684] kvm: Disabled LAPIC found during irq injection [ 316.209405][ T8689] FAULT_INJECTION: forcing a failure. [ 316.209405][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 316.344912][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.0.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.344948][ T8689] Tainted: [L]=SOFTLOCKUP [ 316.344957][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.344970][ T8689] Call Trace: [ 316.344979][ T8689] [ 316.344988][ T8689] dump_stack_lvl+0xe8/0x150 [ 316.345031][ T8689] should_fail_ex+0x412/0x560 [ 316.345069][ T8689] should_failslab+0xa8/0x100 [ 316.345098][ T8689] ? vm_area_dup+0x2b/0x680 [ 316.345123][ T8689] kmem_cache_alloc_noprof+0x87/0x650 [ 316.345146][ T8689] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.345170][ T8689] ? arch_stack_walk+0xfb/0x150 [ 316.345209][ T8689] vm_area_dup+0x2b/0x680 [ 316.345247][ T8689] __split_vma+0x1dc/0xa40 [ 316.345293][ T8689] ? __pfx___split_vma+0x10/0x10 [ 316.345323][ T8689] ? ima_match_policy+0x2146/0x21e0 [ 316.345361][ T8689] ? ima_match_policy+0x112/0x21e0 [ 316.345395][ T8689] vms_gather_munmap_vmas+0x32d/0x1370 [ 316.345438][ T8689] ? mtree_range_walk+0x6a7/0x840 [ 316.345469][ T8689] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 316.345511][ T8689] ? mas_find+0xa7d/0xd30 [ 316.345540][ T8689] mmap_region+0x85b/0x2240 [ 316.345578][ T8689] ? tomoyo_check_open_permission+0x1d3/0x470 [ 316.345614][ T8689] ? __pfx_mmap_region+0x10/0x10 [ 316.345652][ T8689] ? __lock_acquire+0x6b5/0x2cf0 [ 316.345683][ T8689] ? __lock_acquire+0x6b5/0x2cf0 [ 316.345798][ T8689] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 316.345829][ T8689] ? __lock_acquire+0x6b5/0x2cf0 [ 316.345861][ T8689] ? aa_file_perm+0x192/0x15e0 [ 316.345886][ T8689] ? cap_mmap_addr+0xaf/0x100 [ 316.345914][ T8689] ? bpf_lsm_mmap_addr+0x9/0x50 [ 316.345941][ T8689] ? security_mmap_addr+0x71/0x240 [ 316.345970][ T8689] ? shmem_mapping+0xd/0x50 [ 316.345999][ T8689] ? memfd_check_seals_mmap+0xc5/0x200 [ 316.346035][ T8689] do_mmap+0xc39/0x10c0 [ 316.346079][ T8689] ? __pfx_do_mmap+0x10/0x10 [ 316.346108][ T8689] ? down_write_killable+0x180/0x240 [ 316.346140][ T8689] ? __pfx_down_write_killable+0x10/0x10 [ 316.346170][ T8689] ? apparmor_mmap_file+0x2da/0x3e0 [ 316.346203][ T8689] vm_mmap_pgoff+0x2c9/0x4f0 [ 316.346249][ T8689] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 316.346283][ T8689] ? __fget_files+0x2a/0x420 [ 316.346319][ T8689] ? __fget_files+0x3a0/0x420 [ 316.346350][ T8689] ? __fget_files+0x2a/0x420 [ 316.346387][ T8689] ksys_mmap_pgoff+0x51e/0x760 [ 316.346427][ T8689] do_syscall_64+0x14d/0xf80 [ 316.346452][ T8689] ? trace_irq_disable+0x3b/0x150 [ 316.346483][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.346505][ T8689] ? clear_bhb_loop+0x40/0x90 [ 316.346532][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.346554][ T8689] RIP: 0033:0x7fa2c6b9c799 [ 316.346575][ T8689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.346594][ T8689] RSP: 002b:00007fa2c7a5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 316.346618][ T8689] RAX: ffffffffffffffda RBX: 00007fa2c6e15fa0 RCX: 00007fa2c6b9c799 [ 316.346634][ T8689] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 00002000006ad000 [ 316.346648][ T8689] RBP: 00007fa2c7a5c090 R08: 0000000000000003 R09: 0000000054c5a000 [ 316.346662][ T8689] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 316.346675][ T8689] R13: 00007fa2c6e16038 R14: 00007fa2c6e15fa0 R15: 00007fa2c6f3fa48 [ 316.346709][ T8689] [ 317.131590][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139417][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.771930][ T8711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.019297][ T5919] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 318.349245][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 318.356844][ T5919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.373837][ T5919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.417022][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.499248][ T5919] usb 1-1: SerialNumber: syz [ 318.654656][ T5919] usb 1-1: bad CDC descriptors [ 318.748521][ T5919] usb 1-1: USB disconnect, device number 30 [ 319.220563][ T8729] fuse: Bad value for 'fd' [ 319.252647][ T5919] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 319.450291][ T5919] usb 2-1: not running at top speed; connect to a high speed hub [ 319.475805][ T5919] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 319.494767][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 319.750233][ T8733] netlink: 112 bytes leftover after parsing attributes in process `syz.0.747'. [ 319.891565][ T5919] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 319.902327][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.912948][ T5919] usb 2-1: Product: syz [ 319.917141][ T5919] usb 2-1: Manufacturer: syz [ 319.931484][ T5919] usb 2-1: SerialNumber: syz [ 320.056332][ T8721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.087304][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 320.302120][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.358760][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 320.426806][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.443676][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input26 [ 320.465596][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 320.497202][ T5178] bcm5974 2-1:1.0: could not read from device [ 320.579123][ T5178] bcm5974 2-1:1.0: could not read from device [ 320.594200][ T5919] usb 2-1: USB disconnect, device number 42 [ 320.629915][ T5178] bcm5974 2-1:1.0: could not read from device [ 320.803809][ T9] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 320.877104][ T9] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 320.939851][ T9] usb 1-1: Product: syz [ 320.946869][ T9] usb 1-1: Manufacturer: syz [ 320.959840][ T9] usb 1-1: SerialNumber: syz [ 321.143574][ T9] usb 1-1: config 0 descriptor?? [ 321.270981][ T9] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 321.308822][ T9] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 321.333288][ T9] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 323.047255][ T5918] usb 1-1: USB disconnect, device number 31 [ 323.119523][ T5919] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 323.490541][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 323.500605][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.525754][ T5919] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 323.542102][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.578369][ T5919] usb 5-1: Product: syz [ 323.592848][ T5919] usb 5-1: Manufacturer: syz [ 323.618366][ T5919] usb 5-1: SerialNumber: syz [ 323.645526][ T5919] usb 5-1: config 0 descriptor?? [ 323.850890][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.912475][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.498156][ T8791] binder: BINDER_SET_CONTEXT_MGR already set [ 324.504737][ T8791] binder: 8788:8791 ioctl 4018620d 200000000040 returned -16 [ 324.588740][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 324.612860][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.766'. [ 324.639854][ T9] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 324.883181][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 324.900965][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 324.912387][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 325.116676][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 325.216183][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 325.230982][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.262220][ T9] usb 2-1: Product: syz [ 325.320495][ T9] usb 2-1: Manufacturer: syz [ 325.326088][ T9] usb 2-1: SerialNumber: syz [ 325.326477][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.356452][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.365722][ T8785] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 325.703799][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input27 [ 325.750654][ T5178] bcm5974 2-1:1.0: could not read from device [ 325.765147][ T5178] bcm5974 2-1:1.0: could not read from device [ 325.784398][ T5178] bcm5974 2-1:1.0: could not read from device [ 325.800181][ T9] usb 2-1: USB disconnect, device number 43 [ 325.802338][ T5178] bcm5974 2-1:1.0: could not read from device [ 325.829332][ T5887] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 326.002067][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 326.024445][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.046237][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.106163][ T5887] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 326.140815][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.223614][ T5887] usb 4-1: config 0 descriptor?? [ 326.383018][ T5918] usb 5-1: USB disconnect, device number 36 [ 326.695136][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 326.703121][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 326.735388][ T5887] usb 4-1: USB disconnect, device number 29 [ 326.868706][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 327.029851][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 327.046557][ T24] usb 2-1: config 0 has an invalid interface number: 170 but max is 1 [ 327.058758][ T24] usb 2-1: config 0 has an invalid interface number: 242 but max is 1 [ 327.069109][ T24] usb 2-1: config 0 has no interface number 0 [ 327.082551][ T24] usb 2-1: config 0 has no interface number 1 [ 327.089661][ T5918] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 327.111556][ T24] usb 2-1: config 0 interface 170 has no altsetting 0 [ 327.129163][ T24] usb 2-1: config 0 interface 242 has no altsetting 0 [ 327.169800][ T24] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=51.d5 [ 327.179925][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.215984][ T24] usb 2-1: Product: syz [ 327.231305][ T24] usb 2-1: Manufacturer: syz [ 327.235975][ T24] usb 2-1: SerialNumber: syz [ 327.283002][ T24] usb 2-1: config 0 descriptor?? [ 327.520351][ T5918] usb 5-1: device descriptor read/64, error -71 [ 327.530691][ T24] kvaser_usb 2-1:0.170: error -ENODEV: Cannot get usb endpoint(s) [ 327.570354][ T24] kvaser_usb 2-1:0.242: error -ENODEV: Cannot get usb endpoint(s) [ 327.608928][ T24] usb 2-1: USB disconnect, device number 44 [ 327.788157][ T5918] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 328.030077][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 328.055986][ T5918] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 328.075806][ T5918] usb 5-1: config 0 has no interface number 0 [ 328.090104][ T5918] usb 5-1: config 0 interface 12 has no altsetting 0 [ 328.121447][ T5918] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 328.142020][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.219604][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 328.235026][ T5918] usb 5-1: Product: syz [ 328.241716][ T5918] usb 5-1: Manufacturer: syz [ 328.246422][ T5918] usb 5-1: SerialNumber: syz [ 328.416555][ T5918] usb 5-1: config 0 descriptor?? [ 328.435571][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.448454][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.468663][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.498715][ T24] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 328.549744][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.729593][ T24] usb 4-1: config 0 descriptor?? [ 328.881148][ T5918] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 328.892577][ T5918] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 328.908993][ T5918] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 328.919402][ T5918] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 328.949363][ T5887] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 329.251994][ T5918] usb 5-1: USB disconnect, device number 38 [ 329.273635][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 329.325080][ T5887] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 329.433287][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.470225][ T5887] usb 1-1: Product: syz [ 329.484750][ T5887] usb 1-1: Manufacturer: syz [ 329.500998][ T5887] usb 1-1: SerialNumber: syz [ 329.588744][ T796] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 329.817329][ T796] usb 2-1: not running at top speed; connect to a high speed hub [ 329.833747][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.855419][ T796] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 329.863659][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.879960][ T796] usb 2-1: config 1 interface 0 has no altsetting 0 [ 329.899996][ T796] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 329.910853][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.922668][ T796] usb 2-1: Product: syz [ 329.931717][ T796] usb 2-1: Manufacturer: syz [ 329.944948][ T796] usb 2-1: SerialNumber: syz [ 329.979839][ T8865] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 330.156615][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 330.156643][ T29] audit: type=1800 audit(1774321773.245:232): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.790" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 330.431743][ T796] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input29 [ 330.456883][ T5178] bcm5974 2-1:1.0: could not read from device [ 330.484353][ T5178] bcm5974 2-1:1.0: could not read from device [ 330.554632][ T5178] bcm5974 2-1:1.0: could not read from device [ 330.601730][ T5178] bcm5974 2-1:1.0: could not read from device [ 330.710824][ T796] usb 2-1: USB disconnect, device number 45 [ 331.027450][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.056123][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.484289][ T5887] usb 1-1: USB disconnect, device number 32 [ 331.564019][ T8877] libceph: resolve '96.' (ret=-3): failed [ 331.621827][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 331.652508][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.670087][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 331.741129][ T24] usb 4-1: USB disconnect, device number 30 [ 333.707153][ T8877] syzkaller1: entered promiscuous mode [ 333.714464][ T8877] syzkaller1: entered allmulticast mode [ 333.928978][ T5887] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 334.041205][ T8902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 334.124401][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 334.177636][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.190863][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.216020][ T5887] usb 5-1: config 0 has no interfaces? [ 334.251697][ T5887] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 334.277672][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.312796][ T5887] usb 5-1: Product: syz [ 334.338068][ T5887] usb 5-1: Manufacturer: syz [ 334.343470][ T5887] usb 5-1: SerialNumber: syz [ 334.389901][ T5887] usb 5-1: config 0 descriptor?? [ 334.839212][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.850118][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.155543][ T8906] netlink: 348 bytes leftover after parsing attributes in process `syz.1.800'. [ 335.223565][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 335.238857][ T8918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.803'. [ 335.659271][ T797] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 335.834675][ T797] usb 4-1: not running at top speed; connect to a high speed hub [ 335.851619][ T797] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 335.880710][ T797] usb 4-1: config 1 interface 0 has no altsetting 0 [ 335.927077][ T797] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 335.942739][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.955070][ T797] usb 4-1: Product: syz [ 335.962291][ T797] usb 4-1: Manufacturer: syz [ 335.971300][ T797] usb 4-1: SerialNumber: syz [ 335.986376][ T8932] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 336.011033][ T8919] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 336.049064][ T8935] input: syz1 as /devices/virtual/input/input32 [ 336.414481][ T797] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input33 [ 336.548371][ T5178] bcm5974 4-1:1.0: could not read from device [ 336.569958][ T5178] bcm5974 4-1:1.0: could not read from device [ 336.591240][ T797] usb 4-1: USB disconnect, device number 31 [ 336.791848][ T24] usb 5-1: USB disconnect, device number 39 [ 336.929271][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 337.099501][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 337.128425][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.141332][ T5887] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 337.268951][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.289770][ T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 337.300963][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.321816][ T9] usb 2-1: config 0 descriptor?? [ 337.342419][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 337.381599][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.404303][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.426090][ T5887] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 337.456343][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.489581][ T5887] usb 1-1: config 0 descriptor?? [ 337.773625][ T8955] netlink: 348 bytes leftover after parsing attributes in process `syz.3.817'. [ 337.808835][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 337.815050][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 337.895731][ T9] usb 2-1: USB disconnect, device number 46 [ 337.967090][ T5887] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 337.986101][ T5887] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 338.171740][ T5887] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 338.607892][ T5887] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 338.800023][ T5887] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 338.834157][ T29] audit: type=1326 audit(1774321781.955:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.4.818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4359c799 code=0x0 [ 338.875346][ T8971] can: request_module (can-proto-0) failed. [ 339.043021][ T796] usb 1-1: USB disconnect, device number 33 [ 339.103829][ T8976] fuse: Unknown parameter '000000000000000000000x000000000000000c' [ 339.506450][ T8978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 340.666616][ T796] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 340.682033][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.701058][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.916629][ T796] usb 1-1: not running at top speed; connect to a high speed hub [ 341.929677][ T796] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 341.944147][ T796] usb 1-1: config 1 interface 0 has no altsetting 0 [ 342.084913][ T796] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 342.127090][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.168686][ T796] usb 1-1: Product: syz [ 342.198362][ T796] usb 1-1: Manufacturer: syz [ 342.202991][ T796] usb 1-1: SerialNumber: syz [ 342.239714][ T9000] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.476079][ T796] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input35 [ 342.540232][ T5178] bcm5974 1-1:1.0: could not read from device [ 342.613178][ T796] usb 1-1: USB disconnect, device number 34 [ 342.648651][ T5178] bcm5974 1-1:1.0: could not read from device [ 343.159477][ T5887] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 343.211453][ T9029] syzkaller1: entered promiscuous mode [ 343.240351][ T9029] syzkaller1: entered allmulticast mode [ 343.260268][ T9029] fuse: Unknown parameter '' [ 343.329499][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 343.336621][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.350901][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 343.363408][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.382225][ T5887] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 343.410565][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 343.421331][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.442574][ T5887] usb 2-1: config 0 descriptor?? [ 343.835785][ T9047] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 343.879775][ T9047] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.916400][ T5887] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 343.925977][ T5887] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 344.136452][ T5887] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 344.252684][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.844'. [ 344.424041][ T5887] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 344.612352][ T9055] bond2 (unregistering): Released all slaves [ 344.624276][ T5887] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 344.846752][ T24] usb 2-1: USB disconnect, device number 47 [ 345.338825][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 345.468101][ T24] usb 1-1: device descriptor read/64, error -71 [ 345.678882][ T796] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 345.708748][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 345.896779][ T24] usb 1-1: device descriptor read/64, error -71 [ 345.912180][ T796] usb 4-1: not running at top speed; connect to a high speed hub [ 345.967063][ T796] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 346.029235][ T24] usb usb1-port1: attempt power cycle [ 346.170025][ T796] usb 4-1: config 1 interface 0 has no altsetting 0 [ 346.210846][ T796] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 346.221208][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.240652][ T796] usb 4-1: Product: syz [ 346.261069][ T796] usb 4-1: Manufacturer: syz [ 346.275847][ T796] usb 4-1: SerialNumber: syz [ 346.336081][ T9066] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 346.378977][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 346.426922][ T24] usb 1-1: device descriptor read/8, error -71 [ 346.778740][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 346.843912][ T24] usb 1-1: device descriptor read/8, error -71 [ 346.859386][ T796] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input36 [ 346.887120][ T796] usb 4-1: USB disconnect, device number 32 [ 346.904772][ T5178] bcm5974 4-1:1.0: could not read from device [ 346.959051][ T24] usb usb1-port1: unable to enumerate USB device [ 347.634505][ T9088] kvm: kvm [9087]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 348.378725][ T796] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 348.528179][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 348.538683][ T796] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 348.546831][ T796] usb 2-1: config 0 has no interface number 0 [ 348.576731][ T796] usb 2-1: config 0 interface 30 has no altsetting 0 [ 348.600864][ T796] usb 2-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 348.611342][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.641701][ T796] usb 2-1: Product: syz [ 348.645938][ T796] usb 2-1: Manufacturer: syz [ 348.678735][ T796] usb 2-1: SerialNumber: syz [ 348.701338][ T9] usb 1-1: config 2 has an invalid interface number: 97 but max is 0 [ 348.703676][ T796] usb 2-1: config 0 descriptor?? [ 348.723548][ T9] usb 1-1: config 2 has no interface number 0 [ 348.745890][ T796] hub 2-1:0.30: bad descriptor, ignoring hub [ 348.753553][ T9] usb 1-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.753589][ T9] usb 1-1: config 2 interface 97 has no altsetting 0 [ 348.776215][ T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 348.800349][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.838702][ T796] hub 2-1:0.30: probe with driver hub failed with error -5 [ 348.840162][ T9] usb 1-1: Product: syz [ 348.857197][ T796] keyspan 2-1:0.30: Keyspan - (without firmware) converter detected [ 348.866338][ T9] usb 1-1: Manufacturer: syz [ 348.866363][ T9] usb 1-1: SerialNumber: syz [ 348.916993][ T9102] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 348.929133][ T797] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 349.090529][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 349.100757][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.113400][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.138614][ T797] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 349.150426][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.192614][ T797] usb 5-1: config 0 descriptor?? [ 349.414810][ T9] usb-storage 1-1:2.97: USB Mass Storage device detected [ 349.452180][ T9] usb-storage 1-1:2.97: Quirks match for vid 04e6 pid 000b: 4 [ 349.553145][ T9] usb 1-1: USB disconnect, device number 39 [ 349.643066][ T797] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 349.657096][ T797] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 349.843420][ T797] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 349.962577][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 350.049854][ T797] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 350.132312][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 350.141312][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 350.153591][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 350.166092][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 350.186670][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 350.203450][ T9] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 350.218535][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.229130][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.243350][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.253981][ T9] usb 1-1: Product: syz [ 350.258569][ T9] usb 1-1: Manufacturer: syz [ 350.263513][ T9] usb 1-1: SerialNumber: syz [ 350.271072][ T797] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 350.282783][ T9] usb 1-1: config 0 descriptor?? [ 350.503508][ T24] usb 5-1: USB disconnect, device number 40 [ 350.989446][ T9] usb 2-1: USB disconnect, device number 48 [ 350.996741][ T9] keyspan 2-1:0.30: device disconnected [ 351.201123][ T9127] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 351.633373][ T797] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 351.657173][ T797] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.742005][ T9141] netlink: zone id is out of range [ 351.748144][ T9142] fuse: Bad value for 'fd' [ 351.752829][ T9141] netlink: zone id is out of range [ 351.761783][ T9141] netlink: zone id is out of range [ 351.767173][ T9141] netlink: zone id is out of range [ 351.839138][ T9141] netlink: zone id is out of range [ 351.844467][ T9141] netlink: zone id is out of range [ 351.867059][ T9141] netlink: zone id is out of range [ 351.873818][ T9141] netlink: zone id is out of range [ 351.885254][ T9141] netlink: zone id is out of range [ 351.893702][ T9141] netlink: zone id is out of range [ 351.908773][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 352.076305][ T24] usb 5-1: config 0 has no interfaces? [ 352.085653][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.119684][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 352.139281][ T24] usb 5-1: SerialNumber: syz [ 352.241718][ T24] usb 5-1: config 0 descriptor?? [ 352.370115][ T797] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 352.620989][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.641094][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.651263][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 352.661424][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.696772][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.735738][ T9] usb 1-1: USB disconnect, device number 40 [ 352.754901][ T797] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 352.770556][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.794395][ T797] usb 2-1: config 0 descriptor?? [ 353.369148][ T5887] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 353.444303][ T797] usbhid 2-1:0.0: can't add hid device: -71 [ 353.453428][ T797] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 353.476983][ T797] usb 2-1: USB disconnect, device number 49 [ 353.540934][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 353.554357][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.575584][ T5887] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 353.619203][ T5887] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 353.632770][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.653043][ T5887] usb 1-1: Product: syz [ 353.665678][ T5887] usb 1-1: Manufacturer: syz [ 353.680269][ T5887] usb 1-1: SerialNumber: syz [ 353.923740][ T5887] usb 1-1: USB disconnect, device number 41 [ 354.833614][ T9] usb 5-1: USB disconnect, device number 41 [ 356.331537][ T9177] syzkaller0: entered promiscuous mode [ 356.339694][ T9177] syzkaller0: entered allmulticast mode [ 356.508818][ T796] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 356.678082][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 356.685750][ T796] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 356.698514][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 356.717003][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 356.756466][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 356.776818][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 356.799516][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 356.829911][ T796] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 356.848738][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 356.854119][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.885809][ T796] usb 5-1: Product: syz [ 356.891696][ T796] usb 5-1: Manufacturer: syz [ 356.896419][ T796] usb 5-1: SerialNumber: syz [ 356.912327][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.930377][ T24] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 356.960759][ T796] usb 5-1: config 0 descriptor?? [ 356.969662][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 356.975729][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.993537][ T9] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 357.006891][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 357.014533][ T9] usb 4-1: config 127 has no interface number 1 [ 357.027187][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.044743][ T24] usb 1-1: Product: syz [ 357.049980][ T24] usb 1-1: Manufacturer: syz [ 357.053667][ T9] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 357.055786][ T24] usb 1-1: SerialNumber: syz [ 357.080417][ T9] usb 4-1: config 127 interface 171 has no altsetting 0 [ 357.089974][ T24] usb 1-1: config 0 descriptor?? [ 357.103094][ T9] usb 4-1: config 127 interface 0 has no altsetting 0 [ 357.112666][ T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 357.149715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.259504][ T9] usb 4-1: Product: syz [ 357.265800][ T9] usb 4-1: Manufacturer: syz [ 357.295355][ T9] usb 4-1: SerialNumber: syz [ 357.549063][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 357.652596][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.680502][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.705977][ T9] xr_serial 4-1:127.171: xr_serial converter detected [ 357.720711][ T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 357.758922][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 357.800953][ T9] usb 4-1: USB disconnect, device number 33 [ 357.822185][ T9] xr_serial 4-1:127.171: device disconnected [ 358.070350][ T9198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 358.689351][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 358.859103][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 358.882787][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.896203][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.911179][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 358.923576][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.944834][ T9] usb 4-1: config 0 descriptor?? [ 359.296965][ T797] usb 5-1: USB disconnect, device number 42 [ 359.579625][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 359.586752][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.621745][ T9] usb 4-1: USB disconnect, device number 34 [ 359.889808][ T24] usb 1-1: USB disconnect, device number 42 [ 362.639203][ T5823] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 362.812225][ T5823] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 362.845183][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.878868][ T5823] usb 1-1: config 0 has no interfaces? [ 362.899022][ T5823] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 362.928074][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.961811][ T5823] usb 1-1: config 0 descriptor?? [ 363.050161][ T9251] net_ratelimit: 2 callbacks suppressed [ 363.050239][ T9251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.974682][ T9264] FAULT_INJECTION: forcing a failure. [ 363.974682][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 363.987780][ T9264] CPU: 0 UID: 0 PID: 9264 Comm: syz.4.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.987817][ T9264] Tainted: [L]=SOFTLOCKUP [ 363.987825][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.987839][ T9264] Call Trace: [ 363.987921][ T9264] [ 363.987964][ T9264] dump_stack_lvl+0xe8/0x150 [ 363.988110][ T9264] should_fail_ex+0x412/0x560 [ 363.988215][ T9264] should_failslab+0xa8/0x100 [ 363.988271][ T9264] __kmalloc_cache_noprof+0x88/0x660 [ 363.988302][ T9264] ? tipc_net+0x45/0x270 [ 363.988463][ T9264] ? tipc_topsrv_queue_evt+0xef/0x2d0 [ 363.988492][ T9264] tipc_topsrv_queue_evt+0xef/0x2d0 [ 363.988522][ T9264] tipc_sub_report_overlap+0x4bd/0x8b0 [ 363.988587][ T9264] tipc_nametbl_insert_publ+0xe5a/0x13d0 [ 363.988643][ T9264] tipc_nametbl_publish+0xc7/0x1f0 [ 363.988682][ T9264] tipc_sk_publish+0x17b/0x3c0 [ 363.988719][ T9264] ? __pfx_tipc_sk_publish+0x10/0x10 [ 363.988749][ T9264] ? tipc_nametbl_build_group+0x4c8/0x500 [ 363.988782][ T9264] ? tipc_nametbl_build_group+0x2e/0x500 [ 363.988819][ T9264] tipc_sk_join+0x3ab/0x6a0 [ 363.988841][ T9264] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 363.988883][ T9264] ? __pfx_tipc_sk_join+0x10/0x10 [ 363.988896][ T9264] ? tipc_setsockopt+0x731/0x990 [ 363.988921][ T9264] ? __local_bh_enable_ip+0xd0/0x130 [ 363.988952][ T9264] tipc_setsockopt+0x73e/0x990 [ 363.988980][ T9264] ? __pfx_tipc_setsockopt+0x10/0x10 [ 363.989004][ T9264] ? __fget_files+0x2a/0x420 [ 363.989036][ T9264] ? aa_sock_opt_perm+0xff/0x1a0 [ 363.989117][ T9264] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 363.989149][ T9264] ? __pfx_tipc_setsockopt+0x10/0x10 [ 363.989173][ T9264] do_sock_setsockopt+0x17c/0x1b0 [ 363.989240][ T9264] __x64_sys_setsockopt+0x13d/0x1b0 [ 363.989263][ T9264] do_syscall_64+0x14d/0xf80 [ 363.989337][ T9264] ? trace_irq_disable+0x3b/0x150 [ 363.989367][ T9264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.989398][ T9264] ? clear_bhb_loop+0x40/0x90 [ 363.989419][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.989452][ T9264] RIP: 0033:0x7f0d4359c799 [ 363.989489][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.989503][ T9264] RSP: 002b:00007f0d444fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 363.989541][ T9264] RAX: ffffffffffffffda RBX: 00007f0d43815fa0 RCX: 00007f0d4359c799 [ 363.989553][ T9264] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 363.989563][ T9264] RBP: 00007f0d444fa090 R08: 0000000000000010 R09: 0000000000000000 [ 363.989572][ T9264] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 363.989582][ T9264] R13: 00007f0d43816038 R14: 00007f0d43815fa0 R15: 00007f0d4393fa48 [ 363.989607][ T9264] [ 364.624678][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.672023][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.335021][ T24] usb 1-1: USB disconnect, device number 43 [ 365.505826][ T797] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 365.559365][ T5887] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 365.616761][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.663385][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.683146][ T797] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 365.694363][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.711576][ T797] usb 2-1: Product: syz [ 365.716386][ T797] usb 2-1: Manufacturer: syz [ 365.723155][ T5887] usb 4-1: not running at top speed; connect to a high speed hub [ 365.734234][ T797] usb 2-1: SerialNumber: syz [ 365.742381][ T5887] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 365.760279][ T5887] usb 4-1: config 1 interface 0 has no altsetting 0 [ 365.773308][ T5887] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 365.789673][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.810125][ T5887] usb 4-1: Product: syz [ 365.814450][ T5887] usb 4-1: Manufacturer: syz [ 365.822714][ T5887] usb 4-1: SerialNumber: syz [ 366.115299][ T797] usb 2-1: config 0 descriptor?? [ 366.166018][ T9278] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 366.891868][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37 [ 367.005134][ T5178] bcm5974 4-1:1.0: could not read from device [ 367.069295][ T5178] bcm5974 4-1:1.0: could not read from device [ 367.072469][ T5887] usb 4-1: USB disconnect, device number 35 [ 368.836485][ T9313] FAULT_INJECTION: forcing a failure. [ 368.836485][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 368.889236][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.0.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.889266][ T9313] Tainted: [L]=SOFTLOCKUP [ 368.889272][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.889281][ T9313] Call Trace: [ 368.889288][ T9313] [ 368.889295][ T9313] dump_stack_lvl+0xe8/0x150 [ 368.889323][ T9313] should_fail_ex+0x412/0x560 [ 368.889350][ T9313] should_failslab+0xa8/0x100 [ 368.889373][ T9313] __kmalloc_cache_noprof+0x88/0x660 [ 368.889392][ T9313] ? tipc_udp_enable+0x1c6/0xbd0 [ 368.889485][ T9313] tipc_udp_enable+0x1c6/0xbd0 [ 368.889505][ T9313] ? kasan_save_track+0x4f/0x80 [ 368.889524][ T9313] ? __pfx_tipc_udp_enable+0x10/0x10 [ 368.889541][ T9313] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 368.889609][ T9313] ? genl_rcv_msg+0x61c/0x7a0 [ 368.889625][ T9313] ? netlink_rcv_skb+0x232/0x4b0 [ 368.889664][ T9313] ? genl_rcv+0x28/0x40 [ 368.889679][ T9313] ? netlink_unicast+0x80f/0x9b0 [ 368.889698][ T9313] ? netlink_sendmsg+0x813/0xb40 [ 368.889712][ T9313] ? ____sys_sendmsg+0x972/0x9f0 [ 368.889729][ T9313] ? ___sys_sendmsg+0x2a5/0x360 [ 368.889745][ T9313] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 368.889768][ T9313] ? do_syscall_64+0x14d/0xf80 [ 368.889787][ T9313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.889876][ T9313] ? __kasan_kmalloc+0x93/0xb0 [ 368.889903][ T9313] ? __kmalloc_cache_noprof+0x31c/0x660 [ 368.889928][ T9313] ? __tipc_nl_bearer_enable+0xb6b/0x14a0 [ 368.889982][ T9313] ? __kmalloc_cache_noprof+0x15b/0x660 [ 368.890012][ T9313] __tipc_nl_bearer_enable+0xcd9/0x14a0 [ 368.890048][ T9313] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 368.890073][ T9313] ? __mutex_lock+0x319/0x1300 [ 368.890144][ T9313] ? tipc_nl_bearer_enable+0x17/0x40 [ 368.890167][ T9313] ? irqentry_exit+0x59e/0x620 [ 368.890196][ T9313] ? __pfx___mutex_lock+0x10/0x10 [ 368.890234][ T9313] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 368.890271][ T9313] tipc_nl_bearer_enable+0x22/0x40 [ 368.890297][ T9313] genl_family_rcv_msg_doit+0x22a/0x330 [ 368.890326][ T9313] ? __asan_memcpy+0x40/0x70 [ 368.890351][ T9313] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 368.890404][ T9313] genl_rcv_msg+0x61c/0x7a0 [ 368.890437][ T9313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.890463][ T9313] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 368.890489][ T9313] ? __lock_acquire+0x6b5/0x2cf0 [ 368.890531][ T9313] netlink_rcv_skb+0x232/0x4b0 [ 368.890565][ T9313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.890593][ T9313] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.890646][ T9313] ? down_read+0x272/0x2e0 [ 368.890672][ T9313] ? genl_rcv+0xd/0x40 [ 368.890698][ T9313] genl_rcv+0x28/0x40 [ 368.890721][ T9313] netlink_unicast+0x80f/0x9b0 [ 368.890770][ T9313] ? __pfx_netlink_unicast+0x10/0x10 [ 368.890802][ T9313] ? netlink_sendmsg+0x650/0xb40 [ 368.890821][ T9313] ? skb_put+0x11b/0x210 [ 368.890876][ T9313] netlink_sendmsg+0x813/0xb40 [ 368.890909][ T9313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.890933][ T9313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 368.890968][ T9313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.890997][ T9313] ____sys_sendmsg+0x972/0x9f0 [ 368.891033][ T9313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.891070][ T9313] ? import_iovec+0x73/0xa0 [ 368.891130][ T9313] ___sys_sendmsg+0x2a5/0x360 [ 368.891163][ T9313] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.891229][ T9313] ? __fget_files+0x2a/0x420 [ 368.891261][ T9313] ? __fget_files+0x3a0/0x420 [ 368.891305][ T9313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 368.891335][ T9313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.891372][ T9313] ? __pfx_ksys_write+0x10/0x10 [ 368.891423][ T9313] do_syscall_64+0x14d/0xf80 [ 368.891448][ T9313] ? trace_irq_disable+0x3b/0x150 [ 368.891478][ T9313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.891501][ T9313] ? clear_bhb_loop+0x40/0x90 [ 368.891528][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.891550][ T9313] RIP: 0033:0x7fa2c6b9c799 [ 368.891570][ T9313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.891589][ T9313] RSP: 002b:00007fa2c7a5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.891613][ T9313] RAX: ffffffffffffffda RBX: 00007fa2c6e15fa0 RCX: 00007fa2c6b9c799 [ 368.891630][ T9313] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 368.891644][ T9313] RBP: 00007fa2c7a5c090 R08: 0000000000000000 R09: 0000000000000000 [ 368.891658][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.891671][ T9313] R13: 00007fa2c6e16038 R14: 00007fa2c6e15fa0 R15: 00007fa2c6f3fa48 [ 368.891707][ T9313] [ 369.410394][ T9313] tipc: Enabling of bearer rejected, failed to enable media [ 370.343720][ T24] usb 2-1: USB disconnect, device number 50 [ 371.928764][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 372.188664][ T796] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 372.282542][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.293292][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.430965][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 372.475119][ T24] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 372.510907][ T796] usb 4-1: not running at top speed; connect to a high speed hub [ 372.536828][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 372.561102][ T796] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 372.656880][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 372.675914][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.686802][ T796] usb 4-1: config 1 interface 0 has no altsetting 0 [ 372.703441][ T796] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 372.716781][ T24] usb 5-1: Product: syz [ 372.734037][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.752388][ T24] usb 5-1: Manufacturer: syz [ 372.760926][ T24] usb 5-1: SerialNumber: syz [ 372.765740][ T796] usb 4-1: Product: syz [ 372.774834][ T796] usb 4-1: Manufacturer: syz [ 372.786857][ T9338] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.804118][ T796] usb 4-1: SerialNumber: syz [ 372.830257][ T9336] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 372.841888][ T9349] tipc: Started in network mode [ 372.852170][ T9349] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 372.888933][ T9349] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 372.910837][ T9349] tipc: Enabled bearer , priority 10 [ 373.067228][ T796] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input38 [ 373.096632][ T5178] bcm5974 4-1:1.0: could not read from device [ 373.129115][ T5178] bcm5974 4-1:1.0: could not read from device [ 373.178788][ T796] usb 4-1: USB disconnect, device number 36 [ 373.207184][ T5178] bcm5974 4-1:1.0: could not read from device [ 373.350131][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input39 [ 373.384877][ T5178] bcm5974 5-1:1.0: could not read from device [ 373.405839][ T5178] bcm5974 5-1:1.0: could not read from device [ 373.453601][ T5178] bcm5974 5-1:1.0: could not read from device [ 373.469306][ T24] usb 5-1: USB disconnect, device number 43 [ 373.809272][ T5823] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 373.974224][ T5823] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 374.009228][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.031708][ T797] tipc: Node number set to 1 [ 374.050494][ T5823] usb 1-1: Product: syz [ 374.073521][ T5823] usb 1-1: Manufacturer: syz [ 374.092815][ T5823] usb 1-1: SerialNumber: syz [ 374.203456][ T9369] FAULT_INJECTION: forcing a failure. [ 374.203456][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.344065][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 374.356839][ T9369] CPU: 0 UID: 0 PID: 9369 Comm: syz.3.936 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.356876][ T9369] Tainted: [L]=SOFTLOCKUP [ 374.356884][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.356897][ T9369] Call Trace: [ 374.356906][ T9369] [ 374.356915][ T9369] dump_stack_lvl+0xe8/0x150 [ 374.356952][ T9369] should_fail_ex+0x412/0x560 [ 374.356990][ T9369] _copy_to_user+0x31/0xb0 [ 374.357101][ T9369] simple_read_from_buffer+0xe1/0x170 [ 374.357139][ T9369] proc_fail_nth_read+0x1bb/0x230 [ 374.357192][ T9369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.357227][ T9369] ? rw_verify_area+0x2a6/0x4d0 [ 374.357250][ T9369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.357282][ T9369] vfs_read+0x20c/0xa70 [ 374.357303][ T9369] ? fdget_pos+0x246/0x320 [ 374.357330][ T9369] ? __pfx___mutex_lock+0x10/0x10 [ 374.357358][ T9369] ? __pfx_vfs_read+0x10/0x10 [ 374.357383][ T9369] ? __fget_files+0x2a/0x420 [ 374.357418][ T9369] ? __fget_files+0x3a0/0x420 [ 374.357449][ T9369] ? __fget_files+0x2a/0x420 [ 374.357488][ T9369] ksys_read+0x150/0x270 [ 374.357513][ T9369] ? __pfx_ksys_read+0x10/0x10 [ 374.357546][ T9369] do_syscall_64+0x14d/0xf80 [ 374.357570][ T9369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.357592][ T9369] ? clear_bhb_loop+0x40/0x90 [ 374.357618][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.357640][ T9369] RIP: 0033:0x7fa53095cfce [ 374.357659][ T9369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 374.357678][ T9369] RSP: 002b:00007fa531855fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.357708][ T9369] RAX: ffffffffffffffda RBX: 00007fa5318566c0 RCX: 00007fa53095cfce [ 374.357724][ T9369] RDX: 000000000000000f RSI: 00007fa5318560a0 RDI: 0000000000000005 [ 374.357738][ T9369] RBP: 00007fa531856090 R08: 0000000000000000 R09: 0000000000000000 [ 374.357750][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.357763][ T9369] R13: 00007fa530c16038 R14: 00007fa530c15fa0 R15: 00007fa530d3fa48 [ 374.357797][ T9369] [ 374.701676][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 374.723083][ T9381] FAULT_INJECTION: forcing a failure. [ 374.723083][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 374.741269][ T9381] CPU: 0 UID: 0 PID: 9381 Comm: syz.3.939 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.741309][ T9381] Tainted: [L]=SOFTLOCKUP [ 374.741315][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.741325][ T9381] Call Trace: [ 374.741331][ T9381] [ 374.741337][ T9381] dump_stack_lvl+0xe8/0x150 [ 374.741364][ T9381] should_fail_ex+0x412/0x560 [ 374.741391][ T9381] should_failslab+0xa8/0x100 [ 374.741413][ T9381] __kmalloc_cache_noprof+0x88/0x660 [ 374.741433][ T9381] ? nfnetlink_rcv+0xfe1/0x27b0 [ 374.741539][ T9381] nfnetlink_rcv+0xfe1/0x27b0 [ 374.741559][ T9381] ? is_bpf_text_address+0x26/0x2b0 [ 374.741600][ T9381] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 374.741635][ T9381] ? __lock_acquire+0x6b5/0x2cf0 [ 374.741679][ T9381] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.741717][ T9381] netlink_unicast+0x80f/0x9b0 [ 374.741744][ T9381] ? __pfx_netlink_unicast+0x10/0x10 [ 374.741767][ T9381] ? netlink_sendmsg+0x650/0xb40 [ 374.741779][ T9381] ? skb_put+0x11b/0x210 [ 374.741798][ T9381] netlink_sendmsg+0x813/0xb40 [ 374.741819][ T9381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.741836][ T9381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.741861][ T9381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.741881][ T9381] ____sys_sendmsg+0x972/0x9f0 [ 374.741905][ T9381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.741929][ T9381] ? import_iovec+0x73/0xa0 [ 374.741949][ T9381] ___sys_sendmsg+0x2a5/0x360 [ 374.741970][ T9381] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.742014][ T9381] ? __fget_files+0x2a/0x420 [ 374.742036][ T9381] ? __fget_files+0x3a0/0x420 [ 374.742067][ T9381] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.742087][ T9381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.742114][ T9381] ? __pfx_ksys_write+0x10/0x10 [ 374.742140][ T9381] do_syscall_64+0x14d/0xf80 [ 374.742158][ T9381] ? trace_irq_disable+0x3b/0x150 [ 374.742180][ T9381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.742196][ T9381] ? clear_bhb_loop+0x40/0x90 [ 374.742215][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.742230][ T9381] RIP: 0033:0x7fa53099c799 [ 374.742245][ T9381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.742258][ T9381] RSP: 002b:00007fa531835028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.742275][ T9381] RAX: ffffffffffffffda RBX: 00007fa530c16090 RCX: 00007fa53099c799 [ 374.742286][ T9381] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 374.742296][ T9381] RBP: 00007fa531835090 R08: 0000000000000000 R09: 0000000000000000 [ 374.742306][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.742314][ T9381] R13: 00007fa530c16128 R14: 00007fa530c16090 R15: 00007fa530d3fa48 [ 374.742338][ T9381] [ 375.026850][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 375.307210][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 375.426524][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 375.561182][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 375.643030][ T5823] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 375.701039][ T5823] usb 1-1: USB disconnect, device number 44 [ 375.745349][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 375.800231][ T9399] FAULT_INJECTION: forcing a failure. [ 375.800231][ T9399] name failslab, interval 1, probability 0, space 0, times 0 [ 376.000831][ T9399] CPU: 1 UID: 0 PID: 9399 Comm: syz.3.944 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.000868][ T9399] Tainted: [L]=SOFTLOCKUP [ 376.000876][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.000890][ T9399] Call Trace: [ 376.000899][ T9399] [ 376.000908][ T9399] dump_stack_lvl+0xe8/0x150 [ 376.000946][ T9399] should_fail_ex+0x412/0x560 [ 376.000985][ T9399] should_failslab+0xa8/0x100 [ 376.001016][ T9399] __kvmalloc_node_noprof+0x178/0x8a0 [ 376.001053][ T9399] ? rhashtable_init_noprof+0x52e/0xa70 [ 376.001077][ T9399] ? rhashtable_init_noprof+0x12d/0xa70 [ 376.001104][ T9399] rhashtable_init_noprof+0x52e/0xa70 [ 376.001126][ T9399] ? __init_waitqueue_head+0xa9/0x150 [ 376.001185][ T9399] rhltable_init_noprof+0x1e/0x60 [ 376.001208][ T9399] sta_info_init+0x28/0x130 [ 376.001345][ T9399] ieee80211_alloc_hw_nm+0x818/0x1f60 [ 376.001374][ T9399] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 376.001410][ T9399] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 376.001504][ T9399] ? __pfx_vprintk_emit+0x10/0x10 [ 376.001548][ T9399] ? _printk+0xdd/0x130 [ 376.001584][ T9399] ? __pfx__printk+0x10/0x10 [ 376.001608][ T9399] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 376.001636][ T9399] ? rcu_is_watching+0x15/0xb0 [ 376.001678][ T9399] hwsim_new_radio_nl+0xf35/0x1bd0 [ 376.001730][ T9399] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 376.001769][ T9399] ? rcu_is_watching+0x15/0xb0 [ 376.001800][ T9399] ? trace_kmalloc+0x2a/0x110 [ 376.001830][ T9399] ? __nla_parse+0x40/0x60 [ 376.001889][ T9399] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 376.001927][ T9399] genl_family_rcv_msg_doit+0x22a/0x330 [ 376.001963][ T9399] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.002003][ T9399] ? bpf_lsm_capable+0x9/0x20 [ 376.002040][ T9399] ? security_capable+0x7e/0x2c0 [ 376.002139][ T9399] genl_rcv_msg+0x61c/0x7a0 [ 376.002172][ T9399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.002197][ T9399] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 376.002226][ T9399] ? __lock_acquire+0x6b5/0x2cf0 [ 376.002266][ T9399] netlink_rcv_skb+0x232/0x4b0 [ 376.002301][ T9399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.002329][ T9399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.002381][ T9399] ? down_read+0x272/0x2e0 [ 376.002406][ T9399] ? genl_rcv+0xd/0x40 [ 376.002433][ T9399] genl_rcv+0x28/0x40 [ 376.002456][ T9399] netlink_unicast+0x80f/0x9b0 [ 376.002495][ T9399] ? __pfx_netlink_unicast+0x10/0x10 [ 376.002527][ T9399] ? netlink_sendmsg+0x650/0xb40 [ 376.002546][ T9399] ? skb_put+0x11b/0x210 [ 376.002573][ T9399] netlink_sendmsg+0x813/0xb40 [ 376.002604][ T9399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.002629][ T9399] ? aa_sock_msg_perm+0xf1/0x1b0 [ 376.002663][ T9399] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.002691][ T9399] ____sys_sendmsg+0x972/0x9f0 [ 376.002727][ T9399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.002763][ T9399] ? import_iovec+0x73/0xa0 [ 376.002790][ T9399] ___sys_sendmsg+0x2a5/0x360 [ 376.002822][ T9399] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.002886][ T9399] ? __fget_files+0x2a/0x420 [ 376.002918][ T9399] ? __fget_files+0x3a0/0x420 [ 376.002961][ T9399] __x64_sys_sendmsg+0x1bd/0x2a0 [ 376.002990][ T9399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.003027][ T9399] ? __pfx_ksys_write+0x10/0x10 [ 376.003070][ T9399] do_syscall_64+0x14d/0xf80 [ 376.003095][ T9399] ? trace_irq_disable+0x3b/0x150 [ 376.003126][ T9399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.003155][ T9399] ? clear_bhb_loop+0x40/0x90 [ 376.003182][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.003203][ T9399] RIP: 0033:0x7fa53099c799 [ 376.003224][ T9399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.003242][ T9399] RSP: 002b:00007fa531856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.003265][ T9399] RAX: ffffffffffffffda RBX: 00007fa530c15fa0 RCX: 00007fa53099c799 [ 376.003282][ T9399] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 376.003296][ T9399] RBP: 00007fa531856090 R08: 0000000000000000 R09: 0000000000000000 [ 376.003310][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.003322][ T9399] R13: 00007fa530c16038 R14: 00007fa530c15fa0 R15: 00007fa530d3fa48 [ 376.003357][ T9399] [ 377.038837][ T5823] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 377.209988][ T5823] usb 1-1: not running at top speed; connect to a high speed hub [ 377.220352][ T5823] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 377.264396][ T5823] usb 1-1: config 1 interface 0 has no altsetting 0 [ 377.301267][ T5823] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 377.311810][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.354327][ T5823] usb 1-1: Product: syz [ 377.368046][ T5823] usb 1-1: Manufacturer: syz [ 377.372704][ T5823] usb 1-1: SerialNumber: syz [ 377.412340][ T9401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 377.565976][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.585490][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.939188][ T5823] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input40 [ 378.064781][ T5178] bcm5974 1-1:1.0: could not read from device [ 378.072447][ T5823] usb 1-1: USB disconnect, device number 45 [ 378.607481][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.615919][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.298812][ T5823] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 379.458780][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 379.466152][ T5823] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 379.476696][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.493846][ T5823] usb 1-1: config 0 descriptor?? [ 379.604043][ T5823] gspca_main: sunplus-2.14.0 probing 041e:400b [ 380.220603][ T9449] lo: Caught tx_queue_len zero misconfig [ 380.226562][ T9449] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 380.240085][ T9449] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 380.454260][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.464534][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.485182][ T9451] tipc: Started in network mode [ 380.491975][ T9451] tipc: Node identity 2a06eabee0d4, cluster identity 4711 [ 380.501434][ T9451] tipc: Enabled bearer , priority 0 [ 380.541955][ T29] audit: type=1326 audit(1774321823.665:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 380.560658][ T9451] syzkaller0: entered promiscuous mode [ 380.570171][ T29] audit: type=1326 audit(1774321823.665:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 380.570251][ T29] audit: type=1326 audit(1774321823.665:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 380.570300][ T29] audit: type=1326 audit(1774321823.665:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 380.570368][ T29] audit: type=1326 audit(1774321823.665:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 380.570415][ T29] audit: type=1326 audit(1774321823.665:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 380.570459][ T29] audit: type=1326 audit(1774321823.665:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b9c799 code=0x7ffc0000 [ 380.570724][ T29] audit: type=1326 audit(1774321823.665:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa2c6b5cfce code=0x7ffc0000 [ 380.570791][ T29] audit: type=1326 audit(1774321823.665:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa2c6b5cfce code=0x7ffc0000 [ 380.570863][ T29] audit: type=1326 audit(1774321823.665:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa2c6b5cfce code=0x7ffc0000 [ 380.814141][ T9451] syzkaller0: entered allmulticast mode [ 381.236483][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.967'. [ 381.289875][ T9450] tipc: Resetting bearer [ 381.374894][ T9450] tipc: Disabling bearer [ 381.618969][ T5823] gspca_sunplus: reg_w_riv err -110 [ 381.624352][ T5823] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 381.829866][ T797] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 382.009231][ T797] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 382.021089][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.052523][ T797] usb 2-1: config 0 has no interfaces? [ 382.069645][ T797] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 382.086394][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.119771][ T797] usb 2-1: config 0 descriptor?? [ 382.296927][ T9490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.324060][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.040504][ T30] INFO: task kworker/1:4:5908 blocked for more than 143 seconds. [ 383.245852][ T30] Tainted: G L syzkaller #0 [ 383.269179][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.292676][ T30] task:kworker/1:4 state:D stack:21632 pid:5908 tgid:5908 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 383.343868][ T30] Workqueue: usb_hub_wq hub_event [ 383.352530][ T30] Call Trace: [ 383.359747][ T30] [ 383.363167][ T30] __schedule+0x15dd/0x52d0 [ 383.369816][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 383.378785][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 383.384085][ T30] ? __bfs+0x153/0x290 [ 383.391979][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.401473][ T30] ? __pfx___schedule+0x10/0x10 [ 383.409695][ T30] ? schedule+0x90/0x360 [ 383.415359][ T30] schedule+0x164/0x360 [ 383.422955][ T30] schedule_timeout+0xc3/0x2c0 [ 383.429267][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 383.443504][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.453779][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.461641][ T30] ? wait_for_completion+0x274/0x5e0 [ 383.467258][ T30] wait_for_completion+0x2cc/0x5e0 [ 383.474326][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 383.482173][ T30] i2c_del_adapter+0x5c0/0x790 [ 383.489375][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 383.495091][ T30] ? kernfs_put+0x40e/0x470 [ 383.502875][ T30] ? sysfs_remove_group+0x23d/0x2e0 [ 383.511560][ T30] ? __pfx_ft260_remove+0x10/0x10 [ 383.516942][ T30] ft260_remove+0x5d/0x80 [ 383.534753][ T30] hid_device_remove+0x228/0x370 [ 383.541736][ T30] ? __pfx_hid_device_remove+0x10/0x10 [ 383.550574][ T30] device_release_driver_internal+0x46f/0x870 [ 383.557204][ T30] bus_remove_device+0x455/0x570 [ 383.567447][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 383.573382][ T30] device_del+0x527/0x8f0 [ 383.580805][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.586513][ T30] ? __pfx_device_del+0x10/0x10 [ 383.593821][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.601253][ T30] hid_destroy_device+0x6b/0x1b0 [ 383.606582][ T30] usbhid_disconnect+0x9f/0xc0 [ 383.614672][ T30] usb_unbind_interface+0x26e/0x910 [ 383.626725][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 383.635060][ T30] device_release_driver_internal+0x4d9/0x870 [ 383.652116][ T30] bus_remove_device+0x455/0x570 [ 383.657641][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 383.663483][ T30] device_del+0x527/0x8f0 [ 383.673460][ T30] ? __pfx_device_del+0x10/0x10 [ 383.683601][ T30] ? kobject_put+0x51d/0x560 [ 383.693298][ T30] usb_disable_device+0x3d4/0x8d0 [ 383.701608][ T30] usb_disconnect+0x32f/0x990 [ 383.706754][ T30] hub_event+0x1cc9/0x4f30 [ 383.713425][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 383.720559][ T30] ? __pfx_hub_event+0x10/0x10 [ 383.725707][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 383.733759][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 383.741428][ T30] process_scheduled_works+0xb6e/0x18c0 [ 383.749655][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 383.755984][ T30] ? assign_work+0x3d5/0x5e0 [ 383.763013][ T30] worker_thread+0xa53/0xfc0 [ 383.769581][ T30] kthread+0x388/0x470 [ 383.774057][ T30] ? __pfx_worker_thread+0x10/0x10 [ 383.782936][ T30] ? __pfx_kthread+0x10/0x10 [ 383.789855][ T30] ret_from_fork+0x51e/0xb90 [ 383.794862][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 383.802513][ T30] ? __switch_to+0xc7d/0x1450 [ 383.807651][ T30] ? __pfx_kthread+0x10/0x10 [ 383.812584][ T30] ret_from_fork_asm+0x1a/0x30 [ 383.820081][ T30] [ 383.823535][ T30] [ 383.823535][ T30] Showing all locks held in the system: [ 383.834014][ T30] 1 lock held by khungtaskd/30: [ 383.843643][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 383.856042][ T30] 2 locks held by getty/5579: [ 383.862702][ T30] #0: ffff88803515b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 383.874981][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 383.886902][ T5887] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 383.901248][ T30] 5 locks held by kworker/0:4/5887: [ 383.907238][ T30] #0: ffff88801fef6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 383.923879][ T30] #1: ffffc90003a87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 383.939805][ T30] #2: ffff88802981b1e0 (&dev->mutex [ 384.076154][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 384.092928][ T30] ){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 384.119582][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 384.140046][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.155668][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.185284][ T5887] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 384.195899][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.208311][ T30] #3: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 384.231457][ T30] #4: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 384.254124][ T30] 6 locks held by kworker/1:4/5908: [ 384.260782][ T30] #0: ffff88801fef6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 384.274324][ T30] #1: ffffc90004117c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 384.290435][ T5887] usb 5-1: Product: syz [ 384.296455][ T30] #2: ffff88802970d1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 384.309616][ T5887] usb 5-1: Manufacturer: syz [ 384.309640][ T5887] usb 5-1: SerialNumber: syz [ 384.324359][ T30] #3: ffff888054a961e0 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 384.335299][ T30] #4: ffff8880596561a8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 384.350196][ T30] #5: ffff888079f59a68 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 384.363759][ T30] 1 lock held by udevd/6015: [ 384.370622][ T30] [ 384.373085][ T30] ============================================= [ 384.373085][ T30] [ 384.388745][ T30] NMI backtrace for cpu 1 [ 384.388770][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 384.388800][ T30] Tainted: [L]=SOFTLOCKUP [ 384.388807][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.388820][ T30] Call Trace: [ 384.388836][ T30] [ 384.388846][ T30] dump_stack_lvl+0xe8/0x150 [ 384.388882][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 384.388994][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.389025][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 384.389060][ T30] sys_info+0x135/0x170 [ 384.389086][ T30] watchdog+0xfd9/0x1030 [ 384.389133][ T30] ? watchdog+0x21a/0x1030 [ 384.389172][ T30] kthread+0x388/0x470 [ 384.389193][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.389223][ T30] ? __pfx_kthread+0x10/0x10 [ 384.389244][ T30] ret_from_fork+0x51e/0xb90 [ 384.389274][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 384.389301][ T30] ? __switch_to+0xc7d/0x1450 [ 384.389328][ T30] ? __pfx_kthread+0x10/0x10 [ 384.389350][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.389396][ T30] [ 384.389404][ T30] Sending NMI from CPU 1 to CPUs 0: [ 384.520181][ C0] NMI backtrace for cpu 0 [ 384.520203][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.520227][ C0] Tainted: [L]=SOFTLOCKUP [ 384.520233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.520244][ C0] RIP: 0010:fq_pie_timer+0x28d/0x5b0 [ 384.520350][ C0] Code: c7 44 48 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 75 48 4d 01 f7 41 8b 57 44 48 8b 7c 24 38 4c 89 fe e8 e8 67 ff ff 41 0f b6 04 2c <84> c0 75 3e 4c 8b 34 24 41 ff 06 41 83 ed 01 72 4a e8 fd 30 0f f8 [ 384.520367][ C0] RSP: 0018:ffffc90000007c28 EFLAGS: 00000296 [ 384.520384][ C0] RAX: 0000000000000000 RBX: ffff888057e6e290 RCX: ffffffff8e494ec0 [ 384.520397][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.520407][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 384.520418][ C0] R10: dffffc0000000000 R11: fffff52000000f74 R12: 1ffff1100afcdc5d [ 384.520431][ C0] R13: 0000000000000026 R14: 0000000000036ef0 R15: ffffc9001d436ef0 [ 384.520444][ C0] FS: 0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 384.520458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.520470][ C0] CR2: 00002000003ca030 CR3: 0000000028ce6000 CR4: 00000000003526f0 [ 384.520486][ C0] Call Trace: [ 384.520495][ C0] [ 384.520504][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 384.520532][ C0] call_timer_fn+0x192/0x640 [ 384.520568][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 384.520591][ C0] ? call_timer_fn+0xd4/0x640 [ 384.520612][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 384.520640][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.520657][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 384.520682][ C0] __run_timer_base+0x652/0x8b0 [ 384.520709][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 384.520728][ C0] ? ktime_get+0x1d2/0x200 [ 384.520752][ C0] run_timer_softirq+0xb7/0x170 [ 384.520773][ C0] handle_softirqs+0x22a/0x870 [ 384.520798][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 384.520826][ C0] __irq_exit_rcu+0x5f/0x150 [ 384.520849][ C0] irq_exit_rcu+0x9/0x30 [ 384.520870][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 384.520890][ C0] [ 384.520896][ C0] [ 384.520903][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.520923][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 384.520941][ C0] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 b2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 384.520957][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 384.520971][ C0] RAX: 00000000005b3303 RBX: ffffffff819a913a RCX: 0000000080000001 [ 384.520983][ C0] RDX: 0000000000000001 RSI: ffffffff8def8cb4 RDI: ffffffff8c27c900 [ 384.520996][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 384.521009][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 384.521022][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 384.521036][ C0] ? do_idle+0x36a/0x5f0 [ 384.521066][ C0] default_idle+0x9/0x20 [ 384.521087][ C0] default_idle_call+0x72/0xb0 [ 384.521110][ C0] do_idle+0x36a/0x5f0 [ 384.521136][ C0] ? __pfx_do_idle+0x10/0x10 [ 384.521169][ C0] cpu_startup_entry+0x43/0x60 [ 384.521194][ C0] rest_init+0x2de/0x300 [ 384.521219][ C0] start_kernel+0x385/0x3d0 [ 384.521283][ C0] x86_64_start_reservations+0x24/0x30 [ 384.521346][ C0] x86_64_start_kernel+0x143/0x1c0 [ 384.521373][ C0] common_startup_64+0x13e/0x147 [ 384.521398][ C0] [ 385.058607][ T796] usb 2-1: USB disconnect, device number 51 [ 385.065025][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 385.071941][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 385.082700][ T30] Tainted: [L]=SOFTLOCKUP [ 385.087050][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.097123][ T30] Call Trace: [ 385.100441][ T30] [ 385.103401][ T30] vpanic+0x56c/0xa60 [ 385.107434][ T30] ? __pfx___schedule+0x10/0x10 [ 385.112325][ T30] ? __pfx_vpanic+0x10/0x10 [ 385.116916][ T30] ? __pfx_console_unlock+0x10/0x10 [ 385.122178][ T30] panic+0xc5/0xd0 [ 385.125949][ T30] ? __pfx_panic+0x10/0x10 [ 385.130417][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 385.135828][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 385.142041][ T30] watchdog+0x1023/0x1030 [ 385.146431][ T30] ? watchdog+0x21a/0x1030 [ 385.150898][ T30] kthread+0x388/0x470 [ 385.155005][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.159727][ T30] ? __pfx_kthread+0x10/0x10 [ 385.164344][ T30] ret_from_fork+0x51e/0xb90 [ 385.168980][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 385.174177][ T30] ? __switch_to+0xc7d/0x1450 [ 385.178897][ T30] ? __pfx_kthread+0x10/0x10 [ 385.183505][ T30] ret_from_fork_asm+0x1a/0x30 [ 385.188352][ T30] [ 385.192036][ T30] Kernel Offset: disabled [ 385.196368][ T30] Rebooting in 86400 seconds..