last executing test programs: 8.18946517s ago: executing program 0 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r7, &(0x7f0000000500)=ANY=[], 0x78) splice(r6, 0x0, r8, 0x0, 0x39000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r9 = eventfd2(0x800004, 0x801) r10 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) read$eventfd(r9, &(0x7f0000000040), 0x8) write$tun(r4, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r1, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607", 0x48) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r15, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500163001000000080015"], 0x48}}, 0x20000000) 7.7114082s ago: executing program 0 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf25070000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e8005000100"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 7.668591688s ago: executing program 0 (id=2088): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7.560876958s ago: executing program 2 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000062c000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000002a00)={0x7, 0x1, 0x1, "689ef86dfa8ca3698e69ddaf216b5b91f5098aa120dcf8d4774636646b665455", 0x3147504d}) syz_open_dev$usbmon(&(0x7f0000000140), 0x31, 0x10200) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x88a00, 0x0) 6.597287047s ago: executing program 0 (id=2091): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b2}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9", 0x71}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1", 0xc4}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x4a4) 6.495370395s ago: executing program 2 (id=2092): socket(0x2b, 0x1, 0x1) r0 = syz_open_dev$media(&(0x7f0000000280), 0xc, 0x20200) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4028055}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020800) read$dsp(r3, &(0x7f0000000280)=""/79, 0x4f) 6.343377348s ago: executing program 4 (id=2093): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500485da331653c9ff17f385b00000100"/27, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000020000000000000001000000f21a810183bdfbff"], 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x400000002000) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) map_shadow_stack(&(0x7f0000153000/0x1000)=nil, 0x1000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[], 0x20}], 0x1}, 0x4884) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42800}, 0x84) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000005c0)={{r2}, "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"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 5.976270411s ago: executing program 3 (id=2094): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000200000010ac056902000000000001090224000100003006090400fe020300000009210500060122280009058103100008c1001a106ccfa033c66924ff5d01898fd02b92e06a3aada51f134b9e45c491b2e00eed486fb3c704bd30dae688a066f27a42c0ec91a132a97cb695baccc637b0946b72927a8e365ec1be760993e2902c00cce0b9345b9b8afa78444064cba1a11795dbb530743b9c5f3b51878d209d0dccc9"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="8c00000056003444025a273590815301e5000e6d0424901fd5e8ebd19cb2110c85e9f4fe54c5d12c91f4fd4f1da7f15629f78edd847ff2085e7a363da8"], 0x14}], 0x1}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="002428001000"], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000168000/0x4000)=nil, &(0x7f00005d0000/0xf000)=nil], 0x0, &(0x7f00000001c0), 0x2) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000ffd7013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.611743573s ago: executing program 1 (id=2097): link(&(0x7f0000001240)='.\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8040480) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b35, &(0x7f0000000000)={'wlan0\x00'}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c25040000000000006f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030407bd700000000000394c8898", @ANYRES32=r10, @ANYRESHEX=r2, @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x4008800) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a300000000009000300f3797a300000000014000480080001400000000308000240"], 0xd8}}, 0x0) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x7}) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x3]}, 0x0, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket(0x18, 0xa, 0x5) 5.586828361s ago: executing program 0 (id=2098): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000016000/0x1000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f0000011000/0x3000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xe0c4, 0xc000, 0x1, 0x2b2}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') setns(r0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a5287683", 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0xff, 0x0, 0x33424752}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r4 = dup2(r1, r1) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000080)="a791b6000000", 0x0, 0x1fc, 0x20, 0xfffffeff, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x5, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5e500328}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, @NFT_MSG_NEWRULE={0x120, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0xbd, 0x7, 0x1, 0x0, "bcb65049b7ffc9141ab3248851ad6e5301cfa81b3fdd54631d1a167f104feea3633cb30bc15bf760768740075023dcd9d0549da2ecd83ffa71be9d9fae89be340aaee34973d0ad16be837c56e617133da01428a137b6fe05862c9187eeb8b2e96b09e92a5c6cf0f23d5c03150fa5ffa9a37840abdc97ff2d85bdfe1dee49e779d69f04fe7a9cc50f8a6c44c40d09f6901db3cfe53e8fcd64bcda4f9ac3247a3f036958da23d2df2a8f1d0f858ca923d9556023cb5c031493ab"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000060}, 0x12) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r10, 0xc028644b, &(0x7f0000000780)={0x0, 0x101, 0x1e0000, 0x8, 0x80000000, 0x0, 0x6, 0x6}) syz_usb_control_io$hid(r7, 0x0, 0x0) 5.013099829s ago: executing program 1 (id=2099): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d757b731540a"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="04aa826db9e603f8a5"]}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x409}}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000940)={&(0x7f0000000140)={0xa, 0xffc2, 0x4, @mcast1, 0x54c7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="7488066adca5d9c90e181c6e68a03f26fa354ab8a2a2e78b778d85e7fe006181e13ff4acc087028c787726948a1294ee1fba9f49d022f0f24c8dcf6ad3269e38793e9b2e3f687c3e8564f1b0f88e9a33ee1d67c71ecbb1a0bd0054a2bde038a48e418738304d0aa75fac8841f3100e23bae514c6e4492d56abdce294c307aab06a9d4563bbc6648226ce8696830e7a1a5369376c66a093b968ac874dae52e5fd91fdc5f42e90aadb3b020a3dfae4e877e83e0e39b4387d05da0b9f424ed7df542c0f1079b80136a80999e5bb0c92", 0xce}], 0x1, &(0x7f00000006c0)=[@rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x2, 0x0, [@remote]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2b, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts={{0x108, 0x29, 0x36, {0x3a, 0x1d, '\x00', [@generic={0x8, 0xda, "04a4ddd9261ab66ef5415609455c86b0fc8e55f27d3647e65aab6900106b68c64ea0f0c2b9240692bccf7dae784e2bc69f0d1edbbf5bac95aee4b75f4b30d5209a7df219d0a45345353d4307320f91a220432d59be9ad1f92d021c96f35981e0e08517fa660811db3c4e830195c976edb50696610390a31de252adc5d61ac5b258223ef99bcc73a335f330cce471e2436a0f19e9d494a5bec4295bb158d0271576138b5a593d36facaff923157234b5006a4841831b0051da63147c4c1ee5f8ffe13c26782a91ecf9ba5795c5a9a31b324075cd9792ad48e3e4b"}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x8, {0xb536d76c3e0f8b43, 0x0, 0x57, 0x6}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x4, 0x2, '\x00', [@ra={0x5, 0x2, 0xfffa}, @hao={0xc9, 0x10, @loopback}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x4, 0x12, 0x1, 0x5, 0x0, [@mcast2, @private0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private0]}}}], 0x260}, 0x4004000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa"], 0x0) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002440)=ANY=[], 0xfda) 3.879577561s ago: executing program 4 (id=2100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/219, 0xdb}], 0x3}, 0x6}, {{0x0, 0xfffffffffffffe36, &(0x7f0000003c40)=[{&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000b80)=""/4080, 0xff0}], 0x2}, 0x3}], 0x2, 0x12000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x4114}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0xc8, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7fffffff}, @in6={0xa, 0x4e22, 0xfcd, @mcast2, 0x10001}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfd6}, @in6={0xa, 0x4e23, 0x40, @remote, 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x10, @remote, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0xaf, @private0, 0x5}]}, &(0x7f0000000480)=0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r12) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.807597197s ago: executing program 2 (id=2101): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c89e0"}, 0xee) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000001c0)) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) write$vhost_msg_v2(r7, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 2.904287319s ago: executing program 4 (id=2102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385", 0x63}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40adced23638423cdc401bdd228b0590432be970bd3c9c7b2a6ee3dabba57022a222a4b012ef17e0385b92f034fe82ff530fddd4285581275eecee8a722e309654717a604b740ca6dbc00e7c878d6dd35f55413fc7c8cb1fd3beda73c7db9903f9d44c4faf64095a03292fda7cb99bc539914391c4ca199090cd5fd133969265c62ed24a87055dd031a71479489af1fde720611d613ab6", 0x4ca) 2.813424052s ago: executing program 4 (id=2103): r0 = userfaultfd(0x1) r1 = socket(0x8, 0x3, 0x3) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045518, &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000380)=""/12, 0xc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x2041, 0x0) r8 = syz_io_uring_setup(0x7aee, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r8, 0x2000, 0x1, 0x9, 0x0, 0x0) 2.734668341s ago: executing program 0 (id=2104): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x100, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0x6, 0x0, 0x1}, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10003, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x6, 0x94, 0x1}}, @common=@frag={{0x30}, {[0xfffffffb, 0x3], 0x4, 0x0, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x2bc}, 0x1, 0x0, 0x0, 0x800}, 0x20040810) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x42000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000010a306210600000000000106022400014000a007090400010103000000092121020201222800090581030002080700"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="2022280000002823c263138526792c3cffffffff8d0fb706000000446c4e88e78881ce2a52973661d67a0c554438bd58e7964f10056b6c83fc2d946f18aefb1f5cd0f1666233ea9d4211b4071c24d65d6b1257c30ea2f8346509ab29ea36eeaf0eacb028c7442ff65289865eefca4b87c288a40c0020f60fc3433a4c988b1d6d6404e92c3a5459d1e7542da5c07c30bb43f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x375, 0x4) (async) symlink(0x0, &(0x7f0000002cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) (async) io_submit(0x0, 0x0, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0x54, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRES16=r1, @ANYRES8=r3], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4810) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000004c0)=0xc) (rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lchown(&(0x7f0000000500)='./file0\x00', r6, r7) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) r9 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400e81"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="83ed8f00ac2d886928f4ac7ab908f778643faed3726b74d74eb1f276d6c904ea506de3c6f0c9", @ANYRES16=r8, @ANYBLOB="000126bd7000fedbdf25060000001400038008000100cf0d0000080001000d000000"], 0x28}, 0x1, 0x0, 0x0, 0x240048d0}, 0x4008000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r11, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a006a84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845", @ANYBLOB="c0cfc5d44b2b0cda805d448701af8269a5e7fdceab9fb64a65cb3d7247f52d9bacdade978b1bdae5315bcb989576c8defc4944927ca71632df88add973bc12e5ab0377f4989046c409c86c36b9807510c6cfa09df3658e2de89977a1bf26815c5836bff1d093493df656dedee30856de8e"], 0x4c}, 0x1, 0x0, 0x0, 0x48050}, 0x40080) (rerun: 64) 2.574638516s ago: executing program 1 (id=2105): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000cffd3f00ff07000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x48) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000940)=""/179, 0xb3}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/171, 0xab}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x8, &(0x7f0000003180)=""/181, 0xb5}, 0x400}, {{&(0x7f0000003240)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000032c0)=""/199, 0xc7}, {&(0x7f00000033c0)=""/221, 0xdd}], 0x2, &(0x7f0000003500)=""/217, 0xd9}}], 0x2, 0x40010000, &(0x7f0000000280)={0x0, 0x989680}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000940)=""/179, 0xb3}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/171, 0xab}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x8, &(0x7f0000003180)=""/181, 0xb5}, 0x400}, {{&(0x7f0000003240)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000032c0)=""/199, 0xc7}, {&(0x7f00000033c0)=""/221, 0xdd}], 0x2, &(0x7f0000003500)=""/217, 0xd9}}], 0x2, 0x40010000, &(0x7f0000000280)={0x0, 0x989680}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) (async) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$chown(0x4, r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d613000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c084) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000700)={0x5, 0x0, '\x00', {0x0, @bt={0x8, 0xfffffffd, 0x0, 0x2, 0xfffffffffffffffb, 0x9, 0x3, 0x9, 0xf, 0x7, 0x7, 0xfff, 0x8, 0x9, 0x6, 0x0, {0xffff, 0x5}, 0x9, 0x9}}}) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe800000000000"], 0x0) socket$nl_audit(0x10, 0x3, 0x9) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, 0x0, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x5c42, 0xfffffffffffffffc}) fcntl$lock(r10, 0x25, &(0x7f0000000140)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_DECODER_CMD(r10, 0xc0485661, &(0x7f00000001c0)={0x2, 0x7aa3d42b5c5ed2bc, @stop_pts=0x2}) 2.262619228s ago: executing program 1 (id=2106): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040010) 2.260078649s ago: executing program 3 (id=2107): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x8) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000100)=0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) 2.010882134s ago: executing program 1 (id=2108): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b2}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9", 0x71}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1", 0xc4}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x4a4) 1.907279066s ago: executing program 1 (id=2109): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x18) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) 1.534713162s ago: executing program 2 (id=2110): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500485da331653c9ff17f385b00000100"/27, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000020000000000000001000000f21a810183bdfbff"], 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x400000002000) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) map_shadow_stack(&(0x7f0000153000/0x1000)=nil, 0x1000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[], 0x20}], 0x1}, 0x4884) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42800}, 0x84) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000005c0)={{r2}, "11e2d5ca899bb8e3a871c762fbd1adbd2e967322cf16e349b684371e105aa4cb92b5cba99177501f9638c879967323511ed84e6b6eb758ccb2d8e638759b38697c1c1002a100711dc6ce6c45c18188a9ac464d227a663e0fd525d99dccf55abe5bffe64d016e825b1c0670af716f6323a275b447359739c10a33f8a99d6f1ed5c48645c892a4d359238e5b80406012e56889500ff807cfdced7ac035f606a4c39f0ecd6bacd5edd28305afb3dbe32f85c5c2b191e6e10fb4752730314e46d1d039df5f7716ed0b875cb7208efecf21e65fdf40bbcb86cbcfde145022848a4b35d9f8b41bacbf7bb6e298ff61a1bf269bc00d8399662b9449a9cc458e23b57211f9f849963239d829a1b0f422bfd61bfa004b1662aa6a6e3d2c2ea2f806864db243cd8d48f3dfeb5d87cac667cb598a3ba5f4d6cda54da117bae5bcc72efef7db639c89e77a691da768e464292b454a908f89f32103b3ea54efb86e5a95b8ae04d580bde45f7fb7c9cb2f7cee7ebfef98bd701e3c0d8773fcfd9734e9cef1b458a356ba6487f3555fe235ebe3c07bc5d1ee8bc48deb5b1d26ff87bc26a8a5f22693acf8b2710859e4b8c5b6a9cf3483e1537a0793e1f7e3c4ac3abd4a08b44b81ea75aa93f2e77cec1ad10855d9b1976172377bf55d5611bd7e03e5e1bcecbf449b45b0e762f8572b6e2cb4bc7b0acb4e09519275f78a0dd4161fe12fd438863dec9f008d31980a3e9767931830888a1ab0a4795dc04dc0410f43133c70a98933eca72b0bf6443f168a751ce9622fe30abab61d6b41c32eb5f01a848465734e58b92caa86703ad3f9e77b4f6cba44b5c58ab21500dd533456daedde50a9761e5b7365537dbdbb9792c6b71b6a2c4275dc9b48a38dfb43c96d4d024e8c49238b814e8919afb45da70935c511cb5df243d230f2c1291bdfc00737c96e607ef8e442edff8d658e5d78e4f56ccd7ea7314e9f6ce0ce7218af182e0a9163829e2af2dfe13ac809026353ffcb1de92fb96cd7edf69ebddf2a2ba88720137ba6c5f8875be8b8ff0e9930b0344cda832642cfd128ceeb54a9ef32d445a62f62abc31fce6b5dd6bc3f4be55c90d9c6d2bd1204bd4b009e31e66f404c8066c899e25e0259c3f9101c904bcbd41df82fd2120c928fe8122d62f792c2131e2adb97a173ad65bd036ed1ca2bbc7a104def7b25438c0f0f663cc610b204837dc52c0972222d56aebed348473ab57dd506ce109d27c5701ea689c7fee72bf8c4c168b022f179f4b9aa2991976de6a05037136919e5d45f30752456bffd567462eff28c3fca55cea66fbad93c92388629ec9cf39aa5c98974cbe020901878b1689d64c662365535241f2ac52df2d078e35e8680e1428dc2b04fff77d59075605197ff07b8206dc47b44b10244d37f8b8bbc0bf63b228ac975e6ac46eb69b757afbc08002ccc35f565d5c69ec5b148168c0a5cd831e0470122e5656a9d362fa909cb9710db715d85a7c0aa3123cdec2d67516f1d7393f664cbfb750579e65c895320de118fffccd62b2dc314c5efeaed824adf9813ab3efc6f0e96e4c9543991902f2f1f505dcac9fbaf66caf7a8bc431be5594439fbac47075238310995faf78c181a0b8047b1f85dc5d295be4227418339de511352d484af6fc795d25a9b9b906abc98cf8d342d185d20aac6f9d0505bdd3f5e47847f1b585984bbb790c68e6117caed9d10c324fcd91e5ddd4cb00b771fb8cef2a4ac32d16cc3b8c070bb3ec6e5ac12c905ce0f113969af2b32387f9516a9cb64aa6340f56d05da1d249387c3552b6c753406ccb7747411d448e29b4d1b8986a75d1bd46246a339b774c976201d6ddf765cd226e35cae6e6c01892e7426b4c6c947494b7b467e8a5b4f76734d7bcd15e26b1a514c83fa849faa9791d52da405545fd1f5a417826c03f7c42f93b1ac8a5b337aa95a45cbd52faeb0c96a5701ec31541b15ca99e04d3938f53da9e37e3ca33c547041176ec87cd56a17f0bceb2d1812d79a0a8a28c9288056456c5ed17fc4c0b792881d4191c08fd4abe980e6e2dc5b9d44935524305ccb7d4e1687e6b18175db2dd92ba2ccf56c0d9b95302768146280e2cb86a01d44094574ccdfd0dabf6b9965ddfafd5a25a7110b76da4fc6f89e64ff85358f29ac82a79a6f88a3e895b9780aafaf46426d56aabc736049c5123ebd7b979795052a4df94a38b1e2ebbdfd923ff48d0bd12b88edadd5a79d4f22041f8276e2d484ffe262dac6742e6de7370cc48f2d48c25edbda0230597208386d359038f8c9e6ed5602474dde2dd0d1895536ca6bb6481e4c0d513af089de6aa2359c8fbfaf690b5e58ba940267dd5d8fd9c3d674ca031a25655d8f1801f2cf99a0206bb71de8afd95fbd38cfce7a2ce4e902c8ce9fedb9126ed98f4bf6e52a03bd27a11e020ae6fa2065da189f3640a62598f3f91f1bd9190e99336fcc20ad2dbde280115cac62ef649ab4b03ba8afc65adea89d1b5f606b4bc8aeab31e32d94ef49d5a48fd0b4c043a27633721e542dcb7d5ca5e056227dd20277aee7eb6c14d4d163346afdd233e40cd33d4de6d5d663b954b6f57351da59716af180d4906a3063acb745cc42e6c6b39281b96755f11430bbe09100b73761f8f16f4092174b770231950866e6f1629e575bc5e83c3e3aec04ad0a9e2fcff24f63d765d52eec5eb77c6ea46ebde7c32e6fa8d0003a3dc918f93e2e1c6a958dcde049c83025a6db550954ff26529199b3d95c2ee45deaebeda4663bbc93466a34ebddd422d9fed98d194a3aa3e47d41018a3cd65218a5ad176c6cf331b997c38bbcdc04d18a5cbcef31d4475954cf57b87db2ac6f5c019dfefaefd9d981cc0754579fdd54ba87606568d06743dfb7b0b727802af6a4e52777661636505f896b2d235d154e7af1715ed281d53d22a0cbe88a5e6068604842aefc0601606ae0cf7a3cfba6624856b82e3ff5d43a7c964f26513acc403f2acf0d5ea9116b7453f23c8de248b105b9f099654b093d825ed1d0809558d54c905526b278d775bc91aed5fea020d727fabad18499b234ec291a2b0045c322d3c02b5245883fd0f6aa9498d50df8f30559c03ffacec22efecd7054410fb6b067316b6a8352175d012d93c90c4b656651937b24e56d4c2913968eb81319ada5ac2f35a4f9d09258f0f2cf7cf2141b41f44d423dd71cd5ff901251588d23b96261631f9264fcd8627fb92de7d07ea47c09fd2109b518d889b2e08a3f23251a0a38a489283308be21564d9040031e6555f9610cc89668211d4a80ee4645c29356f4a0896558f29caf57303aff58567e0d951e2ac3c059b2634fce7a832a78a35528a33460cc5b5434a6c75ffed1821ef9d52f74a4b2ed7ac52bb8f6696fff009cded0364d3e46a22cba5560497f6780c4ea2161b95a1d75a9a9a19e82134c87f5ad8ab40e88790c040f459a841c8119548c0324d7098b5582b6bd5d271a8f744de419897c208cce796560c561c381a2cefbde349c008bb8fd4f63cceb24d234a2a58b7f7fd1f00c7bf805e5f18f78eedc910ae7b1129d3e5040b3213e24c314557fbd663c7b063840951edf32a25654de093cb928e764222bf3186d0643fe630266f5eac56ff1d46bcf1d15751df747f4081232a3726eaca39e984f1a7dda707dfaa67879348a9adab40e0bab234a941db2b08fbb399f4cf17eaee8b7b104c6db0e331c25b2993333305723d22307cc5edc89099d31349f34eb577f867efb78c2dffca7dbbbe93ed94f97e519c6854e7b8d502f09ce1483c4cd863deaa8dfcfe10c2ccf5ebf5b7de08a781cda7db9afd04c66b9f3045cb4899b5f6bebbfe9c1597e5c1082811af6c9d5a9f9eb0962407a06d4b2efc829c951d8373146f61b57ee5e5005e614d700758ffe38cb8b44aa5b9c5f5d04198424f8a41330e636529bc19cbd5c2c3a516d34fad54bf64b1cb619af3ffd600a3e34370d057221415906bc1074a73c7afec1245887e17a52a965b595e119d033bc1ae7015ed5288fca9df4233db62b7305c79c956e14422e991c65cb3de350950a892bed066798cfdcadf581d243f4b81101ccabab96b9355580d0d9303dd23d8a22e514ba9646f73d12050266b13ca5ef55f5827b9883a5e3507224ebc43e44dc06885a3dde2bdc5adc431b17b587fc6bc3dbf50785964126ed65ff37ef8fb872bfcdae04fc4653210ed87380c7864f59905a51fa5d3c6edee39689f201c270fce02282cc1269eb0afe1f4b3d21f1356a5684a63881b0ad77e04110c00a5f048a81a9172d814b17123a58e6506ee67e2689343e3f984d6750a628c5c19565b88fd324f158fd6685c0699b3238bb1decd9b79a97d36636a3e328019a4410a7c733fc11872572064c864b0a411561ebc0403813ede74f64a07ea72ffe0aefc8c8b156084fb6ac380543ee9b2331795f56ce4a1f49cc380aee23bbb6323afa2a58db3cf5e418b2d9b89958e7c5c4f6acc312f6f2022930b43e3f321b18340924ab5292f48dd296155d15614b199d64f8c8deb7bb9765e9017570778ef4abd3ef27485c4289debe369b0802fb991c5da229eba5ef24d2d61f4e207feb617c1df8baee8e7cb1d181db38e6a1c29231cdbcacaed62fb967e5d9ef39858c707a47f005b92f230be32329907d59ed6edf1ec9bb816a0c223308ff04c6e286be9f44724332af2493aa2a573629aa2584d5441780ae59a9cdeb4307c8c63a706fe5288347b62a8fd2c8195d52fad286529f2b257fc8a98b10c0f0fd4bf7e1e7699e197b70e539dd261dce86b73c4043ec5a372a1a36e650dd9badf854bc5c9eda2192839d8a065824bcee7a63f4dfcc2ad97775291aff957cc69304821d4eedc9df942a69ddf9f850d852c07fdb335559cf5f7d2a73ee2862a114c5ae797b2d88fdedfa02520aa4c1fefeb8de2365f960379f8b01281507ee2097f48c1bd8db2cd6ef9a2c4cd1baaabb18ce5d6126815112b9c3e70fe410f8495427bf8859c5ad566f1299b237306d9792c133cb7da1a42602435bc994242a907a64507de358255e6fd73c7b4e19101e7a5c20139e5607852694ccd38c011ff1e799361abf33188698b51360d0db76e0552f11c7e686ad91d65eee9d3bd0c85379c7d4333ce2475cff2faf0172c0b9910c0710864fc738d88597a1f91a771cbe6a36d75d64050582c0efbaee5bd8a9db0133b8be578fd6963e7f5c55249d2b8af3915e8bf67a103b813ea8252c87baeecde08ace288f032bca556aa1f0e7dfa03cf33e260b31604998282f807b3ede0eda1a089d159e5f015c43c84d715471fa08ecdc99d998345b62f8663e1df920a0f9508de4039e9f2383b2ac223fd4e4db6f570d8f7c3eb65b3765167a0372e28e5fb23c21d47263124f38f0506dce9556980832ab5a714c77152a8cb80b1e02e8c7156d52797c75820099c2e26a72ebe73ec97d9fff00d3257ee0835a503ed2a1cd1f80d7dc5265e6434464e9908a435bb9446997545701f482db171dc046b3eb7d09452e21aac26626bbb1190d94f4c29011cef30c0e677c4bc8ca511dae214716a15f8183e9db4a9a409e139828c3ede2cafaf32ec774ff1a863586e5f66645e8458b311248193c60000651b13c47abec18d76bb5912e1ca63a3ba37e1704ae27f42f7e6af88c9773b25f15d159da8c072ed6653bf0bff185facecfa595115f746ce1bb650471abd08b1366d399c0b3a47c6ddbd2cd7d344dec90a61a90ac369bee3341e5d50e15d961d804a26614f7530e2cb84e5c6f500c528afbf42fcd930f762b"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.360654843s ago: executing program 2 (id=2111): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 1.155448618s ago: executing program 3 (id=2112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/219, 0xdb}], 0x3}, 0x6}, {{0x0, 0xfffffffffffffe36, &(0x7f0000003c40)=[{&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000b80)=""/4080, 0xff0}], 0x2}, 0x3}], 0x2, 0x12000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r4, 0x4114}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0xc8, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7fffffff}, @in6={0xa, 0x4e22, 0xfcd, @mcast2, 0x10001}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfd6}, @in6={0xa, 0x4e23, 0x40, @remote, 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x10, @remote, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0xaf, @private0, 0x5}]}, &(0x7f0000000480)=0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r12) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 664.021524ms ago: executing program 4 (id=2113): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (fail_nth: 1) 324.243297ms ago: executing program 4 (id=2114): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0xffffffffffffff94, {0x5, 0x9}}], 0x20}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0xa4, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r0, &(0x7f0000002c00)=[{&(0x7f0000001840)="d23e534e", 0x4}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xfff], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 321.791624ms ago: executing program 2 (id=2115): prctl$PR_SET_TIMERSLACK(0x1d, 0x5) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x101) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xa13, 0x200}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000500)={0x0, 0x3db1, 0x80, 0x2, 0x1e0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) getegid() r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, r7, 0x205, 0x40, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x3c}}, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x650, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa0}}}, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x404}, 0x24000000) close_range(r0, 0xffffffffffffffff, 0x0) 195.344507ms ago: executing program 3 (id=2116): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) 76.474216ms ago: executing program 3 (id=2117): unshare(0x28000600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 0s ago: executing program 3 (id=2118): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974790000000000008000000000000000000000000000000000002300000000000000"], 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0x0, 0xc0000000}) landlock_restrict_self(r2, 0xf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {0xd, 0xfff3}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) kernel console output (not intermixed with test programs): 1857] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 408.310667][T11857] ? skb_clone+0x212/0x3a0 [ 408.310686][T11857] ? skb_clone+0x212/0x3a0 [ 408.310711][T11857] skb_clone+0x212/0x3a0 [ 408.310733][T11857] __netlink_deliver_tap+0x413/0x860 [ 408.310766][T11857] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.310787][T11857] netlink_deliver_tap+0x19c/0x1b0 [ 408.310807][T11857] netlink_unicast+0x77f/0x940 [ 408.310834][T11857] netlink_sendmsg+0x813/0xb40 [ 408.310863][T11857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.310887][T11857] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.310919][T11857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.310937][T11857] sock_sendmsg_nosec+0x13a/0x180 [ 408.310965][T11857] ____sys_sendmsg+0x54e/0x850 [ 408.310989][T11857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.311017][T11857] ? import_iovec+0x73/0xa0 [ 408.311057][T11857] ___sys_sendmsg+0x2a5/0x360 [ 408.311076][T11857] ? __lock_acquire+0x683/0x2cf0 [ 408.311103][T11857] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.311152][T11857] ? __fget_files+0x2a/0x420 [ 408.311175][T11857] ? __fget_files+0x3a2/0x420 [ 408.311206][T11857] __x64_sys_sendmsg+0x1b1/0x290 [ 408.311228][T11857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.311265][T11857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.311284][T11857] do_syscall_64+0x174/0x580 [ 408.311304][T11857] ? trace_irq_disable+0x3b/0x140 [ 408.311332][T11857] ? clear_bhb_loop+0x70/0xc0 [ 408.311353][T11857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.311371][T11857] RIP: 0033:0x7f2c64f9e0d9 [ 408.311389][T11857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.311403][T11857] RSP: 002b:00007f2c65ef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.311423][T11857] RAX: ffffffffffffffda RBX: 00007f2c65225fa0 RCX: 00007f2c64f9e0d9 [ 408.311437][T11857] RDX: 00000000040008c0 RSI: 0000200000000000 RDI: 0000000000000005 [ 408.311449][T11857] RBP: 00007f2c65ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 408.311461][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.311471][T11857] R13: 00007f2c65226038 R14: 00007f2c65225fa0 R15: 00007f2c6534fa48 [ 408.311496][T11857] [ 408.786499][T11834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.886009][ T5679] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input36 [ 409.051971][ T5679] usb 2-1: USB disconnect, device number 56 [ 409.096826][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1780'. [ 409.143999][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'. [ 409.227522][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'. [ 409.854372][ T985] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 409.878089][ T5344] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 409.994574][ T985] usb 2-1: device descriptor read/64, error -71 [ 410.047577][ T5344] usb 4-1: unable to get BOS descriptor or descriptor too short [ 410.059590][ T5344] usb 4-1: not running at top speed; connect to a high speed hub [ 410.070476][ T5344] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 410.079804][ T5344] usb 4-1: config 0 has no interface number 0 [ 410.089486][ T5344] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 410.103036][ T5344] usb 4-1: config 0 interface 88 has no altsetting 0 [ 410.132694][ T5344] usb 4-1: language id specifier not provided by device, defaulting to English [ 410.155741][ T5344] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 410.168097][ T5344] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 410.183188][ T5344] usb 4-1: Product: syz [ 410.190590][ T5344] usb 4-1: SerialNumber: Љ [ 410.202868][ T5344] usb 4-1: config 0 descriptor?? [ 410.244332][ T985] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 410.296332][T11878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.394447][ T985] usb 2-1: device descriptor read/64, error -71 [ 410.513777][ T189] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 410.528581][ T985] usb usb2-port1: attempt power cycle [ 410.627813][T11878] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1783'. [ 410.647301][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.664606][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.845587][ T5344] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input37 [ 410.884981][ T985] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 410.901121][ T5344] usb 4-1: USB disconnect, device number 59 [ 410.914506][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 410.922092][ T985] usb 2-1: device descriptor read/8, error -71 [ 410.933636][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.985544][ T189] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 410.997604][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.020318][ T189] usb 1-1: Product: syz [ 411.027027][ T189] usb 1-1: Manufacturer: syz [ 411.033425][ T189] usb 1-1: SerialNumber: syz [ 411.054031][ T189] usb 1-1: config 0 descriptor?? [ 411.077568][ T189] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 411.244549][ T985] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 411.523704][T11895] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 411.551972][ T985] usb 2-1: device descriptor read/8, error -71 [ 411.634676][ T985] usb usb2-port1: unable to enumerate USB device [ 411.652789][ T189] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 411.660085][ T189] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 411.741890][T11901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1791'. [ 411.944281][ T985] usb 1-1: USB disconnect, device number 43 [ 412.161962][T11895] nvme nvme0: failed to connect socket: -512 [ 412.427675][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 412.505571][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 412.928297][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'. [ 412.945916][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'. [ 412.969176][T11928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.156739][ T985] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 413.234770][ T5699] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 413.307399][ T189] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 413.422740][ T985] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.436844][ T985] usb 3-1: not running at top speed; connect to a high speed hub [ 413.455769][ T5699] usb 2-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 413.466039][ T985] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 413.476168][ T985] usb 3-1: config 0 has no interface number 0 [ 413.482733][ T985] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 413.495967][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.504728][ T5699] usb 2-1: Product: syz [ 413.509046][ T5699] usb 2-1: Manufacturer: syz [ 413.514062][ T5699] usb 2-1: SerialNumber: syz [ 413.519303][ T985] usb 3-1: config 0 interface 88 has no altsetting 0 [ 413.529588][ T985] usb 3-1: language id specifier not provided by device, defaulting to English [ 413.547039][ T985] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 413.556523][ T985] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 413.565300][ T985] usb 3-1: Product: syz [ 413.570244][ T985] usb 3-1: SerialNumber: Љ [ 413.578722][ T985] usb 3-1: config 0 descriptor?? [ 413.586086][T11915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 413.770947][ T5699] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 413.800585][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.817112][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.878086][ T5699] usb 2-1: USB disconnect, device number 61 [ 413.886698][ T985] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input38 [ 413.937521][ T985] usb 3-1: USB disconnect, device number 35 [ 413.945502][ T7621] udevd[7621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.097719][ T189] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 414.130610][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 414.170343][ T189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 414.184168][ T189] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 414.193934][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.257186][ T189] usb 4-1: config 0 descriptor?? [ 414.309403][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.330623][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.366444][T11928] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 414.970095][T11951] netlink: 'syz.1.1806': attribute type 23 has an invalid length. [ 415.116448][T11959] x_tables: duplicate entry at hook 3 [ 415.218779][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'. [ 415.238533][ T189] usbhid 4-1:0.0: can't add hid device: -71 [ 415.245552][ T189] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 415.262333][ T189] usb 4-1: USB disconnect, device number 60 [ 415.306453][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'. [ 416.556445][ T5815] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.629543][ T5699] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 416.836067][ T985] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 416.884461][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 416.909533][ T5699] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 416.923069][ T5699] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 416.934102][ T5699] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.945902][ T5699] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.947363][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 416.960983][ T5699] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.996321][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.107276][ T985] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.114038][ T189] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 417.125256][ T985] usb 3-1: not running at top speed; connect to a high speed hub [ 417.134623][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 417.145878][ T985] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 417.176780][ T985] usb 3-1: config 0 has no interface number 0 [ 417.204289][ T985] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 417.219223][ T985] usb 3-1: config 0 interface 88 has no altsetting 0 [ 417.235792][ T5699] usb 1-1: GET_CAPABILITIES returned 0 [ 417.248105][ T985] usb 3-1: language id specifier not provided by device, defaulting to English [ 417.258524][ T5699] usbtmc 1-1:16.0: can't read capabilities [ 417.271909][ T985] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 417.283893][ T985] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 417.297525][ T985] usb 3-1: Product: syz [ 417.306033][ T985] usb 3-1: SerialNumber: Љ [ 417.313572][ T985] usb 3-1: config 0 descriptor?? [ 417.319636][T11992] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 417.536594][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.547931][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.583845][ T985] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input39 [ 417.680799][ T985] usb 3-1: USB disconnect, device number 36 [ 417.687137][ C1] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 417.751666][ T9849] udevd[9849]: Error opening device "/dev/input/event4": No such device [ 417.774253][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 417.788526][ T9849] udevd[9849]: Unable to EVIOCGABS device "/dev/input/event4" [ 417.796751][ T9849] udevd[9849]: Unable to EVIOCGABS device "/dev/input/event4" [ 417.882227][ T189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.901337][ T189] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 417.911865][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.921738][ T189] usb 2-1: Product: syz [ 417.926640][ T189] usb 2-1: Manufacturer: syz [ 417.931616][ T189] usb 2-1: SerialNumber: syz [ 417.941771][ T189] usb 2-1: config 0 descriptor?? [ 418.163760][ T189] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 418.423656][ T189] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 418.433096][ T189] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8 [ 418.683124][ T189] usb 2-1: USB disconnect, device number 62 [ 418.718558][ T985] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 418.975768][ T985] usb 4-1: Using ep0 maxpacket: 32 [ 418.988229][ T985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.003739][ T985] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 419.013699][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.022487][ T985] usb 4-1: Product: syz [ 419.028429][ T985] usb 4-1: Manufacturer: syz [ 419.035982][ T985] usb 4-1: SerialNumber: syz [ 419.046574][ T985] usb 4-1: config 0 descriptor?? [ 419.064143][ T985] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 419.334769][ T5679] usb 1-1: USB disconnect, device number 44 [ 419.595153][T12044] FAULT_INJECTION: forcing a failure. [ 419.595153][T12044] name failslab, interval 1, probability 0, space 0, times 0 [ 419.608536][T12044] CPU: 0 UID: 0 PID: 12044 Comm: syz.1.1841 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.608564][T12044] Tainted: [L]=SOFTLOCKUP [ 419.608571][T12044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.608581][T12044] Call Trace: [ 419.608588][T12044] [ 419.608595][T12044] dump_stack_lvl+0xe8/0x150 [ 419.608625][T12044] should_fail_ex+0x40c/0x560 [ 419.608646][T12044] should_failslab+0xa8/0x100 [ 419.608670][T12044] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 419.608690][T12044] ? skb_clone+0x212/0x3a0 [ 419.608706][T12044] ? skb_clone+0x212/0x3a0 [ 419.608728][T12044] skb_clone+0x212/0x3a0 [ 419.608750][T12044] __netlink_deliver_tap+0x413/0x860 [ 419.608779][T12044] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.608798][T12044] netlink_deliver_tap+0x19c/0x1b0 [ 419.608816][T12044] netlink_unicast+0x77f/0x940 [ 419.608839][T12044] netlink_sendmsg+0x813/0xb40 [ 419.608862][T12044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.608884][T12044] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.608912][T12044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.608929][T12044] sock_sendmsg_nosec+0x13a/0x180 [ 419.608952][T12044] ____sys_sendmsg+0x54e/0x850 [ 419.608975][T12044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.609004][T12044] ? import_iovec+0x73/0xa0 [ 419.609042][T12044] ___sys_sendmsg+0x2a5/0x360 [ 419.609059][T12044] ? __lock_acquire+0x683/0x2cf0 [ 419.609085][T12044] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.609109][T12044] ? kstrtouint+0x6e/0xe0 [ 419.609152][T12044] ? __fget_files+0x2a/0x420 [ 419.609173][T12044] ? __fget_files+0x3a2/0x420 [ 419.609203][T12044] __sys_sendmmsg+0x273/0x4d0 [ 419.609226][T12044] ? __pfx___sys_sendmmsg+0x10/0x10 [ 419.609253][T12044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.609289][T12044] ? ksys_write+0x242/0x270 [ 419.609316][T12044] ? __pfx_ksys_write+0x10/0x10 [ 419.609347][T12044] __x64_sys_sendmmsg+0xa0/0xc0 [ 419.609366][T12044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.609385][T12044] do_syscall_64+0x174/0x580 [ 419.609406][T12044] ? trace_irq_disable+0x3b/0x140 [ 419.609426][T12044] ? clear_bhb_loop+0x70/0xc0 [ 419.609447][T12044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.609465][T12044] RIP: 0033:0x7f55e419e0d9 [ 419.609482][T12044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.609497][T12044] RSP: 002b:00007f55e5125028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.609516][T12044] RAX: ffffffffffffffda RBX: 00007f55e4425fa0 RCX: 00007f55e419e0d9 [ 419.609529][T12044] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 419.609541][T12044] RBP: 00007f55e5125090 R08: 0000000000000000 R09: 0000000000000000 [ 419.609553][T12044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.609563][T12044] R13: 00007f55e4426038 R14: 00007f55e4425fa0 R15: 00007f55e454fa48 [ 419.609591][T12044] [ 420.196039][ T985] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 420.214456][ T985] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 420.444535][ T5679] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 420.475860][ T985] usb 4-1: USB disconnect, device number 61 [ 420.570066][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.580353][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.593093][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.610712][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.669558][ T5679] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 420.679733][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.690645][ T5679] usb 1-1: config 0 descriptor?? [ 420.967468][ T5679] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 421.237934][ T5679] [drm:udl_init] *ERROR* Selecting channel failed [ 421.271781][ T5679] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 421.280411][ T5679] [drm] Initialized udl on minor 1 [ 421.294547][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'. [ 421.307288][ T5679] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 421.323518][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'. [ 421.336217][ T5679] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 421.376464][ T985] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 421.393320][ T5679] usb 1-1: USB disconnect, device number 45 [ 421.402685][ T985] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 421.784340][ T189] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 421.955620][ T189] usb 2-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 421.979999][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.011729][ T189] usb 2-1: Product: syz [ 422.026368][ T189] usb 2-1: Manufacturer: syz [ 422.041081][ T189] usb 2-1: SerialNumber: syz [ 422.693315][ T189] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 422.786681][ T189] usb 2-1: USB disconnect, device number 63 [ 422.824368][ T5678] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 422.997409][ T5678] usb 4-1: unable to get BOS descriptor or descriptor too short [ 423.008453][ T5678] usb 4-1: not running at top speed; connect to a high speed hub [ 423.029727][ T5678] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 423.049060][ T5678] usb 4-1: config 0 has no interface number 0 [ 423.056730][ T5678] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 423.070404][ T5678] usb 4-1: config 0 interface 88 has no altsetting 0 [ 423.083955][ T5678] usb 4-1: language id specifier not provided by device, defaulting to English [ 423.424034][ T5678] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 423.453044][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 423.475540][ T189] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 423.487048][T12119] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 423.519982][ T5678] usb 4-1: Product: syz [ 423.524378][ T5678] usb 4-1: SerialNumber: Љ [ 423.560964][ T5678] usb 4-1: config 0 descriptor?? [ 423.615280][T12102] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 423.652389][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 423.722281][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 423.878355][T12119] nvme nvme0: failed to connect socket: -111 [ 423.890627][ T189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 423.908225][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.929894][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.965456][ T189] usb 1-1: not running at top speed; connect to a high speed hub [ 423.991943][ T189] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 424.012073][ T5678] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input40 [ 424.032660][ T189] usb 1-1: config 0 has no interface number 0 [ 424.062376][ T189] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 424.083622][ T5678] usb 4-1: USB disconnect, device number 62 [ 424.103522][ T189] usb 1-1: config 0 interface 88 has no altsetting 0 [ 424.303198][ T189] usb 1-1: language id specifier not provided by device, defaulting to English [ 424.321371][ T189] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 424.334581][ T189] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 424.344744][ T189] usb 1-1: Product: syz [ 424.353070][ T189] usb 1-1: SerialNumber: Љ [ 424.364518][ T5679] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 424.417816][ T189] usb 1-1: config 0 descriptor?? [ 424.438917][T12112] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 424.547714][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 424.580173][ T5679] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 424.601097][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.658023][ T5679] usb 3-1: config 0 descriptor?? [ 424.673559][T12112] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1864'. [ 424.690278][T12128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 424.726597][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 425.168705][ T189] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input41 [ 425.198994][ T5679] hid (null): invalid report_count -71268061 [ 425.206755][ T189] usb 1-1: USB disconnect, device number 46 [ 425.223432][ T5679] hid (null): report_id 0 is invalid [ 425.236034][ T5679] hid (null): invalid report_size 25464 [ 425.315627][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.344905][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.371146][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.395960][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.434852][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.463562][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.486542][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.503142][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.519165][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.528642][ T5679] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 425.536588][ T5679] asus 0003:0B05:1ABE.0006: collection stack underflow [ 425.544047][ T5679] asus 0003:0B05:1ABE.0006: item 0 4 0 12 parsing failed [ 425.553708][ T5679] asus 0003:0B05:1ABE.0006: Asus hid parse failed: -22 [ 425.573297][ T5679] asus 0003:0B05:1ABE.0006: probe with driver asus failed with error -22 [ 425.604317][ T5811] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 426.294038][T12174] xt_hashlimit: size too large, truncated to 1048576 [ 426.656222][T12184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1882'. [ 426.701438][T12184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1882'. [ 427.031119][ T189] usb 3-1: USB disconnect, device number 37 [ 427.259948][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.286421][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.326875][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.359917][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.725879][T12194] erspan0: entered promiscuous mode [ 427.744506][ T985] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 427.927898][ T985] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 427.953652][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.975771][ T985] usb 2-1: config 0 descriptor?? [ 428.144542][ T189] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 428.273278][ T985] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 428.441842][T12223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1893'. [ 428.453191][T12223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1893'. [ 428.546586][ T985] [drm:udl_init] *ERROR* Selecting channel failed [ 428.605560][ T985] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 428.625412][ T985] [drm] Initialized udl on minor 1 [ 428.640207][ T985] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 428.656055][ T985] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 428.664468][ T5679] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 428.677131][ T985] usb 2-1: USB disconnect, device number 64 [ 428.683603][ T5679] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 428.932014][ T189] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 428.949220][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.970992][ T189] usb 3-1: config 0 descriptor?? [ 429.303291][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 429.322885][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 429.554625][ T5344] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 429.584358][ T985] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 429.634342][ T5679] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 429.719740][ T5344] usb 2-1: Using ep0 maxpacket: 32 [ 429.732952][ T5344] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.759060][ T985] usb 4-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 429.762354][ T5344] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 429.790268][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.790361][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.810654][ T5344] usb 2-1: Product: syz [ 429.814538][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 429.815533][ T5344] usb 2-1: Manufacturer: syz [ 429.828814][ T985] usb 4-1: Product: syz [ 429.828960][ T5344] usb 2-1: SerialNumber: syz [ 429.838519][ T5679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.851381][ T985] usb 4-1: Manufacturer: syz [ 429.852375][ T5344] usb 2-1: config 0 descriptor?? [ 429.863581][ T985] usb 4-1: SerialNumber: syz [ 429.877448][ T5679] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 429.902220][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.918464][ T5679] usb 1-1: Product: syz [ 429.922990][ T5679] usb 1-1: Manufacturer: syz [ 429.928331][ T5679] usb 1-1: SerialNumber: syz [ 429.946273][ T5679] usb 1-1: config 0 descriptor?? [ 429.961762][ T5679] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 430.066712][ T5344] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 430.106715][ T985] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 430.340070][ T985] usb 4-1: USB disconnect, device number 63 [ 430.362387][ T5679] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 430.574970][ T5679] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 430.673845][ T5344] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 430.703536][ T5344] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8 [ 430.798271][ T5679] usb 1-1: USB disconnect, device number 47 [ 430.824557][ T189] usb 3-1: Cannot set autoneg [ 430.833536][ T189] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 430.898680][ T189] usb 3-1: USB disconnect, device number 38 [ 430.966892][ T5699] usb 2-1: USB disconnect, device number 65 [ 431.776427][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 431.848430][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 433.064445][ T189] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 433.319685][ T5609] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 433.337142][ T189] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 433.358736][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.392794][ T189] usb 3-1: config 0 descriptor?? [ 433.514312][ T5609] usb 4-1: Using ep0 maxpacket: 32 [ 433.528575][ T5609] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.556897][ T5609] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 433.574289][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.589443][ T5609] usb 4-1: Product: syz [ 433.594631][ T5609] usb 4-1: Manufacturer: syz [ 433.600490][ T5609] usb 4-1: SerialNumber: syz [ 433.613199][ T5609] usb 4-1: config 0 descriptor?? [ 433.626046][ T5609] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 433.781038][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.796080][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.099850][ T5609] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 434.108581][ T5609] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 434.171152][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 434.289626][ T189] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 434.310700][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 434.415334][ T5344] usb 4-1: USB disconnect, device number 64 [ 434.512336][ T5807] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.613790][ T189] [drm:udl_init] *ERROR* Selecting channel failed [ 434.629508][ T189] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 434.637664][ T189] [drm] Initialized udl on minor 1 [ 434.721293][ T189] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.732188][ T189] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 434.743796][ T189] usb 3-1: USB disconnect, device number 39 [ 434.768699][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 434.782311][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 434.825757][ T5743] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.834456][ T5743] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 435.151656][ T5678] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 435.712828][T12328] fuse: Bad value for 'fd' [ 435.765450][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 436.205479][ T5678] usb 1-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 436.232250][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.254342][ T5678] usb 1-1: Product: syz [ 436.260200][ T5678] usb 1-1: Manufacturer: syz [ 436.265258][ T5678] usb 1-1: SerialNumber: syz [ 436.504871][ T5699] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 436.764844][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 436.787887][ T5699] usb 2-1: string descriptor 0 read error: -22 [ 436.806639][ T5699] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 436.837887][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.910204][ T5678] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 437.205012][ T5678] usb 1-1: USB disconnect, device number 48 [ 437.450050][ T5699] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 437.472719][ T5699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.483436][ T5699] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 437.597855][ T5699] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 437.652358][ T5699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.705044][ T5699] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 437.760374][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 437.786076][ T5699] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 437.814291][ T5699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.889996][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 438.133158][ T5699] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 438.171127][ T5699] usb 2-1: USB disconnect, device number 66 [ 438.455921][ T985] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 438.669956][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.723965][ T985] usb 1-1: Using ep0 maxpacket: 32 [ 438.760838][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.775741][ T985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.909081][ T985] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 438.936429][ T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.949495][ T985] usb 1-1: Product: syz [ 438.958474][ T985] usb 1-1: Manufacturer: syz [ 438.984926][ T985] usb 1-1: SerialNumber: syz [ 439.000884][ T985] usb 1-1: config 0 descriptor?? [ 439.022836][ T985] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 439.645697][ T985] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 439.667200][ T985] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 439.899972][ T985] usb 1-1: USB disconnect, device number 49 [ 440.049138][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 440.098026][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 440.236199][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.243084][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.365043][ T5678] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 440.419631][T12416] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 440.658919][ T5678] usb 2-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 440.670783][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.682161][ T5678] usb 2-1: Product: syz [ 440.687138][ T5678] usb 2-1: Manufacturer: syz [ 440.692617][ T5678] usb 2-1: SerialNumber: syz [ 440.943257][ T5678] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 441.047502][ T5678] usb 2-1: USB disconnect, device number 67 [ 441.094059][ T7621] udevd[7621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.244338][ T5699] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 441.485122][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 441.493191][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 441.515839][ T5699] usb 3-1: config 14 has an invalid interface number: 228 but max is 0 [ 441.534456][ T5699] usb 3-1: config 14 has no interface number 0 [ 441.542789][ T5699] usb 3-1: config 14 interface 228 has no altsetting 0 [ 441.553993][ T5699] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 441.567268][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.576057][ T5699] usb 3-1: Product: syz [ 441.580468][ T5699] usb 3-1: Manufacturer: syz [ 441.585490][ T5699] usb 3-1: SerialNumber: syz [ 441.713612][ T5678] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 441.830141][ T5699] legousbtower 3-1:14.228: interrupt endpoints not found [ 441.852027][ T5699] usb 3-1: USB disconnect, device number 40 [ 441.945959][T12441] FAULT_INJECTION: forcing a failure. [ 441.945959][T12441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.006663][T12441] CPU: 1 UID: 0 PID: 12441 Comm: syz.1.1961 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.006693][T12441] Tainted: [L]=SOFTLOCKUP [ 442.006700][T12441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.006764][T12441] Call Trace: [ 442.006773][T12441] [ 442.006781][T12441] dump_stack_lvl+0xe8/0x150 [ 442.006812][T12441] should_fail_ex+0x40c/0x560 [ 442.006837][T12441] _copy_from_user+0x2d/0xb0 [ 442.006861][T12441] do_ipv6_setsockopt+0x249/0x3180 [ 442.006972][T12441] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 442.006998][T12441] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 442.007015][T12441] ? get_pid_task+0x20/0x1f0 [ 442.007044][T12441] ? __lock_acquire+0x683/0x2cf0 [ 442.007082][T12441] ? aa_sk_perm+0x6d5/0x900 [ 442.007106][T12441] ? __fget_files+0x2a/0x420 [ 442.007130][T12441] ? __pfx_aa_sk_perm+0x10/0x10 [ 442.007155][T12441] ? __fget_files+0x2a/0x420 [ 442.007174][T12441] ? aa_sock_opt_perm+0xff/0x1a0 [ 442.007192][T12441] ipv6_setsockopt+0x59/0x170 [ 442.007243][T12441] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 442.007267][T12441] do_sock_setsockopt+0x17c/0x1b0 [ 442.007290][T12441] __x64_sys_setsockopt+0x13d/0x1b0 [ 442.007310][T12441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.007329][T12441] do_syscall_64+0x174/0x580 [ 442.007350][T12441] ? trace_irq_disable+0x3b/0x140 [ 442.007370][T12441] ? clear_bhb_loop+0x70/0xc0 [ 442.007392][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.007409][T12441] RIP: 0033:0x7f55e419e0d9 [ 442.007426][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.007439][T12441] RSP: 002b:00007f55e5104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 442.007457][T12441] RAX: ffffffffffffffda RBX: 00007f55e4426090 RCX: 00007f55e419e0d9 [ 442.007477][T12441] RDX: 0000000000000035 RSI: 0000000000000029 RDI: 0000000000000003 [ 442.007487][T12441] RBP: 00007f55e5104090 R08: 0000000000000004 R09: 0000000000000000 [ 442.007498][T12441] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 442.007509][T12441] R13: 00007f55e4426128 R14: 00007f55e4426090 R15: 00007f55e454fa48 [ 442.007535][T12441] [ 442.431083][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.440275][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.700198][ T5678] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 442.713372][ T5678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.731271][ T5678] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 442.757441][ T5678] usb 4-1: config 0 has no interface number 0 [ 442.763759][ T5678] usb 4-1: config 0 has no interface number 1 [ 442.770625][ T5678] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 442.780116][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.792303][ T5678] usb 4-1: config 0 descriptor?? [ 442.796469][ T5699] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 442.855636][ T5609] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 442.864018][ T5678] usb 4-1: unknown number of interfaces: 2 [ 442.957312][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 442.965859][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.979478][ T5699] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 442.989594][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.998690][ T5699] usb 1-1: Product: syz [ 443.003409][ T5699] usb 1-1: Manufacturer: syz [ 443.008173][ T5699] usb 1-1: SerialNumber: syz [ 443.016275][ T5609] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.029706][ T5699] usb 1-1: config 0 descriptor?? [ 443.039076][ T5609] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 443.051692][ T5699] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 443.064375][ T5609] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 443.074096][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.083447][ T5609] usb 3-1: Product: syz [ 443.088020][ T5609] usb 3-1: Manufacturer: syz [ 443.088189][ T5678] usb 4-1: USB disconnect, device number 65 [ 443.093090][ T5609] usb 3-1: SerialNumber: syz [ 443.442764][ T5699] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 443.452215][ T5699] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 443.508316][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 443.542522][ T5609] usb 3-1: usb_control_msg returned -71 [ 443.549248][ T5609] usbtmc 3-1:1.0: can't read capabilities [ 443.556769][ T5609] usbtmc 3-1:1.0: Failed to submit iin_urb [ 443.562880][ T5609] usbtmc 3-1:1.0: probe with driver usbtmc failed with error -90 [ 443.572252][ T5609] usbtouchscreen 3-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 443.586714][ T5609] usb 3-1: USB disconnect, device number 41 [ 443.730354][ T189] usb 1-1: USB disconnect, device number 50 [ 443.985584][ T5699] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 444.204681][ T5699] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.219847][ T5699] usb 2-1: config 0 has no interface number 0 [ 444.234089][ T5699] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 444.244999][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.260956][ T5699] usb 2-1: Product: syz [ 444.268407][ T5699] usb 2-1: Manufacturer: syz [ 444.276231][ T5699] usb 2-1: SerialNumber: syz [ 444.292418][ T5699] usb 2-1: config 0 descriptor?? [ 444.311060][ T5699] usb 2-1: selecting invalid altsetting 1 [ 444.330932][ T5699] dvb_ttusb_budget: ttusb_init_controller: error [ 444.339705][ T5699] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 444.393084][ T5699] DVB: Unable to find symbol stv0299_attach() [ 444.488740][ T5699] DVB: Unable to find symbol tda8083_attach() [ 444.501912][ T5699] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 444.643284][ T189] usb 2-1: USB disconnect, device number 68 [ 445.492677][T12487] FAULT_INJECTION: forcing a failure. [ 445.492677][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 445.508183][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.4.1975 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.508213][T12487] Tainted: [L]=SOFTLOCKUP [ 445.508220][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.508230][T12487] Call Trace: [ 445.508239][T12487] [ 445.508247][T12487] dump_stack_lvl+0xe8/0x150 [ 445.508278][T12487] should_fail_ex+0x40c/0x560 [ 445.508301][T12487] ? traverse+0xf1/0x620 [ 445.508321][T12487] should_failslab+0xa8/0x100 [ 445.508347][T12487] __kvmalloc_node_noprof+0x176/0x860 [ 445.508372][T12487] ? __mutex_unlock_slowpath+0x731/0x900 [ 445.508395][T12487] ? seq_lseek+0x52/0x260 [ 445.508412][T12487] ? traverse+0xf1/0x620 [ 445.508436][T12487] traverse+0xf1/0x620 [ 445.508465][T12487] seq_lseek+0x134/0x260 [ 445.508487][T12487] proc_reg_llseek+0x1bc/0x290 [ 445.508516][T12487] __x64_sys_lseek+0x14f/0x1e0 [ 445.508541][T12487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.508561][T12487] do_syscall_64+0x174/0x580 [ 445.508582][T12487] ? trace_irq_disable+0x3b/0x140 [ 445.508604][T12487] ? clear_bhb_loop+0x70/0xc0 [ 445.508626][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.508644][T12487] RIP: 0033:0x7f6781f9e0d9 [ 445.508662][T12487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.508676][T12487] RSP: 002b:00007f6782e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 445.508716][T12487] RAX: ffffffffffffffda RBX: 00007f6782225fa0 RCX: 00007f6781f9e0d9 [ 445.508729][T12487] RDX: 0000000000000000 RSI: 0000000040000007 RDI: 0000000000000003 [ 445.508740][T12487] RBP: 00007f6782e53090 R08: 0000000000000000 R09: 0000000000000000 [ 445.508751][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.508761][T12487] R13: 00007f6782226038 R14: 00007f6782225fa0 R15: 00007f678234fa48 [ 445.508791][T12487] [ 445.894384][ T5344] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 446.273428][T12506] syz.3.1981: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 446.288087][T12506] CPU: 1 UID: 0 PID: 12506 Comm: syz.3.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.288119][T12506] Tainted: [L]=SOFTLOCKUP [ 446.288126][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.288138][T12506] Call Trace: [ 446.288150][T12506] [ 446.288160][T12506] dump_stack_lvl+0xe8/0x150 [ 446.288191][T12506] warn_alloc+0x24c/0x270 [ 446.288217][T12506] ? __pfx_warn_alloc+0x10/0x10 [ 446.288254][T12506] __vmalloc_node_range_noprof+0x12c/0x1730 [ 446.288278][T12506] ? __mutex_trylock_common+0x15f/0x270 [ 446.288308][T12506] ? __pfx___mutex_trylock_common+0x10/0x10 [ 446.288340][T12506] ? trace_contention_end+0x3d/0x140 [ 446.288365][T12506] ? __mutex_lock+0x30d/0x1550 [ 446.288393][T12506] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.288413][T12506] ? tomoyo_path_number_perm+0x219/0x5f0 [ 446.288442][T12506] ? dvb_demux_do_ioctl+0x320/0x540 [ 446.288468][T12506] ? __pfx___mutex_lock+0x10/0x10 [ 446.288495][T12506] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 446.288518][T12506] vmalloc_noprof+0xb2/0xe0 [ 446.288540][T12506] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 446.288565][T12506] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 446.288593][T12506] dvb_demux_do_ioctl+0x45d/0x540 [ 446.288631][T12506] dvb_usercopy+0x199/0x2e0 [ 446.288651][T12506] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 446.288674][T12506] ? __pfx_dvb_usercopy+0x10/0x10 [ 446.288704][T12506] ? __fget_files+0x3a2/0x420 [ 446.288729][T12506] ? __fget_files+0x2a/0x420 [ 446.288755][T12506] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 446.288778][T12506] dvb_demux_ioctl+0x29/0x40 [ 446.288799][T12506] __se_sys_ioctl+0xfc/0x170 [ 446.288818][T12506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.288839][T12506] do_syscall_64+0x174/0x580 [ 446.288861][T12506] ? trace_irq_disable+0x3b/0x140 [ 446.288885][T12506] ? clear_bhb_loop+0x70/0xc0 [ 446.288906][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.288924][T12506] RIP: 0033:0x7ff27d79e0d9 [ 446.288944][T12506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.288962][T12506] RSP: 002b:00007ff27b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.288991][T12506] RAX: ffffffffffffffda RBX: 00007ff27da25fa0 RCX: 00007ff27d79e0d9 [ 446.289007][T12506] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 446.289020][T12506] RBP: 00007ff27d835024 R08: 0000000000000000 R09: 0000000000000000 [ 446.289034][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.289047][T12506] R13: 00007ff27da26038 R14: 00007ff27da25fa0 R15: 00007ff27db4fa48 [ 446.289078][T12506] [ 446.289086][T12506] Mem-Info: [ 446.320438][ T5344] usb 2-1: Using ep0 maxpacket: 32 [ 446.322085][T12506] active_anon:6195 inactive_anon:0 isolated_anon:0 [ 446.322085][T12506] active_file:0 inactive_file:53384 isolated_file:0 [ 446.322085][T12506] unevictable:0 dirty:259 writeback:0 [ 446.322085][T12506] slab_reclaimable:10517 slab_unreclaimable:98392 [ 446.322085][T12506] mapped:32980 shmem:523 pagetables:1367 [ 446.322085][T12506] sec_pagetables:0 bounce:0 [ 446.322085][T12506] kernel_misc_reclaimable:0 [ 446.322085][T12506] free:1310714 free_pcp:7984 free_cma:0 [ 446.627321][ T5699] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 446.638844][T12506] Node 0 active_anon:24780kB inactive_anon:0kB active_file:0kB inactive_file:213180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131856kB dirty:1036kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.674941][T12506] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.715251][T12506] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.757664][T12506] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 446.758919][ T189] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 446.763811][T12506] Node 0 DMA32 free:1286412kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24680kB inactive_anon:0kB active_file:0kB inactive_file:213180kB unevictable:0kB writepending:1036kB zspages:0kB present:3129332kB managed:2548648kB mlocked:0kB bounce:0kB free_pcp:29644kB local_pcp:20556kB free_cma:0kB [ 446.864302][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 446.872002][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.887330][ T5699] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 446.905738][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.918050][T12506] lowmem_reserve[]: 0 0 0 0 0 [ 446.923056][T12506] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.960778][ T5699] usb 1-1: Product: syz [ 446.966438][ T5699] usb 1-1: Manufacturer: syz [ 446.971435][ T5699] usb 1-1: SerialNumber: syz [ 446.978064][T12506] lowmem_reserve[]: 0 0 0 0 0 [ 446.983549][T12506] Node 1 Normal free:3941084kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2468kB local_pcp:2468kB free_cma:0kB [ 447.016928][T12506] lowmem_reserve[]: 0 0 0 0 0 [ 447.023727][ T5699] usb 1-1: config 0 descriptor?? [ 447.029486][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1983'. [ 447.046544][ T5699] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 447.064457][T12506] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.118038][T12506] Node 0 DMA32: 913*4kB (UME) 631*8kB (UME) 133*16kB (ME) 528*32kB (UME) 134*64kB (UME) 85*128kB (UME) 94*256kB (UME) 10*512kB (UME) 6*1024kB (UM) 9*2048kB (UM) 289*4096kB (UME) = 1284684kB [ 447.139088][T12506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.154972][T12506] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 5*16kB (UM) 5*32kB (UM) 9*64kB (UM) 5*128kB (M) 3*256kB (M) 1*512kB (M) 0*1024kB 1*2048kB (M) 961*4096kB (UM) = 3941084kB [ 447.172623][T12506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.182779][T12506] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 447.193805][T12506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.203785][T12506] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 447.214277][T12506] 53905 total pagecache pages [ 447.219871][T12506] 0 pages in swap cache [ 447.224109][T12506] Free swap = 124996kB [ 447.229370][T12506] Total swap = 124996kB [ 447.233974][T12506] 2097051 pages RAM [ 447.238232][T12506] 0 pages HighMem/MovableOnly [ 447.243332][T12506] 428209 pages reserved [ 447.248342][T12506] 0 pages cma reserved [ 447.416424][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 447.467394][ T5699] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 447.475617][ T5699] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 447.530552][ T5344] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 447.542142][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.553777][ T5344] usb 2-1: Product: syz [ 447.558150][ T5344] usb 2-1: Manufacturer: syz [ 447.563097][ T5344] usb 2-1: SerialNumber: syz [ 447.570983][ T5344] usb 2-1: config 0 descriptor?? [ 447.691176][ T5699] usb 1-1: USB disconnect, device number 51 [ 447.778579][ T5344] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 447.787778][ T5344] dvb-usb: bulk message failed: -22 (2/0) [ 447.798367][ T5344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.872975][ T5344] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 447.891341][ T189] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.904778][ T5344] usb 2-1: media controller created [ 447.919097][ T189] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 447.939055][ T5344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.948893][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.957949][ T189] usb 3-1: Product: syz [ 447.962387][ T189] usb 3-1: Manufacturer: syz [ 447.969246][ T189] usb 3-1: SerialNumber: syz [ 447.983065][ T189] usb 3-1: config 0 descriptor?? [ 447.989143][ T5344] usb 2-1: selecting invalid altsetting 7 [ 447.997265][ T5344] cxusb: set interface failed [ 448.002728][ T5344] dvb-usb: bulk message failed: -22 (1/0) [ 448.028867][ T5344] DVB: Unable to find symbol lgdt330x_attach() [ 448.047274][T12488] dvb-usb: bulk message failed: -22 (4/0) [ 448.060047][T12488] cxusb: i2c read failed [ 448.077841][ T5344] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 448.160587][ T189] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 448.229887][T12529] FAULT_INJECTION: forcing a failure. [ 448.229887][T12529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.248667][T12529] CPU: 0 UID: 0 PID: 12529 Comm: syz.4.1987 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.248698][T12529] Tainted: [L]=SOFTLOCKUP [ 448.248702][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.248708][T12529] Call Trace: [ 448.248713][T12529] [ 448.248719][T12529] dump_stack_lvl+0xe8/0x150 [ 448.248739][T12529] should_fail_ex+0x40c/0x560 [ 448.248754][T12529] _copy_from_user+0x2d/0xb0 [ 448.248770][T12529] ___sys_sendmsg+0x1c6/0x360 [ 448.248782][T12529] ? __lock_acquire+0x683/0x2cf0 [ 448.248797][T12529] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.248824][T12529] ? __fget_files+0x2a/0x420 [ 448.248837][T12529] ? __fget_files+0x3a2/0x420 [ 448.248853][T12529] __x64_sys_sendmsg+0x1b1/0x290 [ 448.248865][T12529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.248885][T12529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.248895][T12529] do_syscall_64+0x174/0x580 [ 448.248909][T12529] ? trace_irq_disable+0x3b/0x140 [ 448.248922][T12529] ? clear_bhb_loop+0x70/0xc0 [ 448.248934][T12529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.248946][T12529] RIP: 0033:0x7f6781f9e0d9 [ 448.248963][T12529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.248974][T12529] RSP: 002b:00007f6782e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.248990][T12529] RAX: ffffffffffffffda RBX: 00007f6782225fa0 RCX: 00007f6781f9e0d9 [ 448.249001][T12529] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 448.249010][T12529] RBP: 00007f6782e53090 R08: 0000000000000000 R09: 0000000000000000 [ 448.249020][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.249029][T12529] R13: 00007f6782226038 R14: 00007f6782225fa0 R15: 00007f678234fa48 [ 448.249054][T12529] [ 448.803989][ T5344] rc_core: IR keymap rc-dvico-portable not found [ 448.810631][ T5344] Registered IR keymap rc-empty [ 448.817594][ T5344] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 448.827945][ T189] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 448.835062][ T189] quatech2 3-1:0.0: probe with driver quatech2 failed with error -8 [ 448.845297][ T5344] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input43 [ 448.875020][ T5344] dvb-usb: schedule remote query interval to 100 msecs. [ 448.885930][ T5344] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 448.931289][ T5344] usb 2-1: USB disconnect, device number 69 [ 449.074618][ T5699] usb 3-1: USB disconnect, device number 42 [ 449.173001][ T5344] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 449.195026][ T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.316352][T12540] FAULT_INJECTION: forcing a failure. [ 449.316352][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 449.383542][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.1.1990 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.383575][T12540] Tainted: [L]=SOFTLOCKUP [ 449.383581][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.383591][T12540] Call Trace: [ 449.383598][T12540] [ 449.383607][T12540] dump_stack_lvl+0xe8/0x150 [ 449.383636][T12540] should_fail_ex+0x40c/0x560 [ 449.383662][T12540] should_failslab+0xa8/0x100 [ 449.383694][T12540] __kmalloc_noprof+0xfe/0x720 [ 449.383714][T12540] ? lock_sock_nested+0x6a/0x100 [ 449.383738][T12540] ? sock_kmalloc+0xd6/0x160 [ 449.383755][T12540] ? sock_kmalloc+0xd6/0x160 [ 449.383780][T12540] sock_kmalloc+0xd6/0x160 [ 449.383802][T12540] af_alg_alloc_areq+0x8c/0x200 [ 449.383859][T12540] skcipher_recvmsg+0x31e/0xe10 [ 449.383897][T12540] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 449.383919][T12540] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.383946][T12540] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 449.383962][T12540] ? security_socket_recvmsg+0x7e/0x2c0 [ 449.383984][T12540] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 449.384006][T12540] sock_recvmsg+0x196/0x1e0 [ 449.384095][T12540] __sys_recvfrom+0x231/0x3a0 [ 449.384113][T12540] ? ksys_write+0x1e6/0x270 [ 449.384141][T12540] ? __pfx___sys_recvfrom+0x10/0x10 [ 449.384157][T12540] ? __mutex_unlock_slowpath+0x731/0x900 [ 449.384201][T12540] ? __pfx_ksys_write+0x10/0x10 [ 449.384230][T12540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.384252][T12540] __x64_sys_recvfrom+0xde/0x100 [ 449.384291][T12540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.384309][T12540] do_syscall_64+0x174/0x580 [ 449.384331][T12540] ? clear_bhb_loop+0x70/0xc0 [ 449.384545][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.384565][T12540] RIP: 0033:0x7f55e419e0d9 [ 449.384583][T12540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.384596][T12540] RSP: 002b:00007f55e5104028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 449.384615][T12540] RAX: ffffffffffffffda RBX: 00007f55e4426090 RCX: 00007f55e419e0d9 [ 449.384627][T12540] RDX: fffffffffffffd0b RSI: 0000200000000000 RDI: 0000000000000003 [ 449.384638][T12540] RBP: 00007f55e5104090 R08: 0000000000000000 R09: 1154103478d401ea [ 449.384650][T12540] R10: 00000000400123eb R11: 0000000000000246 R12: 0000000000000001 [ 449.384660][T12540] R13: 00007f55e4426128 R14: 00007f55e4426090 R15: 00007f55e454fa48 [ 449.384688][T12540] [ 450.095640][ T189] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 450.153444][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1994'. [ 450.266303][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1997'. [ 450.661756][ T189] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 450.679000][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.708643][ T189] usb 4-1: Product: syz [ 450.725815][ T189] usb 4-1: Manufacturer: syz [ 450.734370][ T189] usb 4-1: SerialNumber: syz [ 450.764361][ T5609] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 451.005695][ T5609] usb 3-1: Using ep0 maxpacket: 32 [ 451.013324][ T5609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.028546][ T5609] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 451.038301][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.046930][ T5609] usb 3-1: Product: syz [ 451.051239][ T5609] usb 3-1: Manufacturer: syz [ 451.056846][ T5609] usb 3-1: SerialNumber: syz [ 451.065394][ T5609] usb 3-1: config 0 descriptor?? [ 451.077308][ T5609] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 451.224847][ T985] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 451.233173][ T5699] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 451.497461][ T5699] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 451.510263][ T985] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.519908][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.536457][ T985] usb 1-1: not running at top speed; connect to a high speed hub [ 451.557010][ T5609] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 451.569620][ T5699] usb 2-1: config 0 descriptor?? [ 451.575849][ T985] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 451.584548][ T5609] quatech2 3-1:0.0: probe with driver quatech2 failed with error -8 [ 451.593046][ T985] usb 1-1: config 0 has no interface number 0 [ 451.609497][ T985] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 451.631974][ T985] usb 1-1: config 0 interface 88 has no altsetting 0 [ 451.643493][ T985] usb 1-1: language id specifier not provided by device, defaulting to English [ 451.657605][T12581] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2005'. [ 451.671188][ T985] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 451.681050][ T985] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 451.689855][ T985] usb 1-1: Product: syz [ 451.694439][ T985] usb 1-1: SerialNumber: Љ [ 451.700090][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2005'. [ 451.703326][ T985] usb 1-1: config 0 descriptor?? [ 451.716182][T12570] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 451.765458][ T5609] usb 4-1: USB disconnect, device number 66 [ 451.852028][ T189] usb 3-1: USB disconnect, device number 43 [ 451.862276][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2006'. [ 451.956329][T12570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2003'. [ 451.988813][ T5699] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 452.015047][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 452.068499][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.086964][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.119540][T12591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.131614][T12591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.132759][ T985] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input44 [ 452.343519][ T5699] [drm:udl_init] *ERROR* Selecting channel failed [ 452.403838][ T985] usb 1-1: USB disconnect, device number 52 [ 452.464486][ T5699] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 452.495850][ T5699] [drm] Initialized udl on minor 1 [ 452.516787][ T5699] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 452.527938][ T5699] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 452.539307][ T29] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 452.557528][ T29] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 452.582710][ T5699] usb 2-1: USB disconnect, device number 70 [ 453.080101][T12604] FAULT_INJECTION: forcing a failure. [ 453.080101][T12604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.145858][T12604] CPU: 1 UID: 0 PID: 12604 Comm: syz.0.2010 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.145909][T12604] Tainted: [L]=SOFTLOCKUP [ 453.145916][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.145927][T12604] Call Trace: [ 453.145934][T12604] [ 453.145943][T12604] dump_stack_lvl+0xe8/0x150 [ 453.145977][T12604] should_fail_ex+0x40c/0x560 [ 453.146005][T12604] _copy_from_user+0x2d/0xb0 [ 453.146032][T12604] ___sys_sendmsg+0x1c6/0x360 [ 453.146052][T12604] ? __lock_acquire+0x683/0x2cf0 [ 453.146083][T12604] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.146149][T12604] ? __fget_files+0x2a/0x420 [ 453.146173][T12604] ? __fget_files+0x3a2/0x420 [ 453.146201][T12604] __x64_sys_sendmsg+0x1b1/0x290 [ 453.146220][T12604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.146253][T12604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.146272][T12604] do_syscall_64+0x174/0x580 [ 453.146292][T12604] ? trace_irq_disable+0x3b/0x140 [ 453.146312][T12604] ? clear_bhb_loop+0x70/0xc0 [ 453.146330][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.146345][T12604] RIP: 0033:0x7f2c64f9e0d9 [ 453.146361][T12604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.146375][T12604] RSP: 002b:00007f2c65ef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.146491][T12604] RAX: ffffffffffffffda RBX: 00007f2c65225fa0 RCX: 00007f2c64f9e0d9 [ 453.146587][T12604] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 453.146598][T12604] RBP: 00007f2c65ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 453.146610][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.146620][T12604] R13: 00007f2c65226038 R14: 00007f2c65225fa0 R15: 00007f2c6534fa48 [ 453.146648][T12604] [ 453.399756][T12613] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 453.824585][T12632] program syz.2.2015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.976175][T12636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2017'. [ 454.154664][ T5699] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 454.336961][ T5699] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 28207, setting to 1024 [ 454.350111][ T5699] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 454.384291][ T985] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 454.395820][ T5699] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 454.429483][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 454.434525][ T5678] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 454.456869][ T5699] usb 3-1: Product: syz [ 454.461822][ T5699] usb 3-1: Manufacturer: syz [ 454.473446][T12632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.493617][ T5699] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input45 [ 454.654484][ T985] usb 2-1: Using ep0 maxpacket: 32 [ 454.662273][ T985] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.675122][ T985] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 454.690807][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.699616][ T985] usb 2-1: Product: syz [ 454.705337][ T985] usb 2-1: Manufacturer: syz [ 454.714512][ T985] usb 2-1: SerialNumber: syz [ 454.724588][ T985] usb 2-1: config 0 descriptor?? [ 454.736419][ T985] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 454.875682][ T189] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 455.104892][ T985] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 455.122109][ T985] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8 [ 455.130701][ T5699] usb 3-1: USB disconnect, device number 44 [ 455.355207][ T5344] usb 2-1: USB disconnect, device number 71 [ 455.402265][T12654] FAULT_INJECTION: forcing a failure. [ 455.402265][T12654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.422392][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.4.2023 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.422423][T12654] Tainted: [L]=SOFTLOCKUP [ 455.422429][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.422439][T12654] Call Trace: [ 455.422446][T12654] [ 455.422454][T12654] dump_stack_lvl+0xe8/0x150 [ 455.422485][T12654] should_fail_ex+0x40c/0x560 [ 455.422512][T12654] _copy_from_user+0x2d/0xb0 [ 455.422541][T12654] ___sys_sendmsg+0x1c6/0x360 [ 455.422567][T12654] ? __lock_acquire+0x683/0x2cf0 [ 455.422594][T12654] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.422644][T12654] ? __fget_files+0x2a/0x420 [ 455.422666][T12654] ? __fget_files+0x3a2/0x420 [ 455.422695][T12654] __x64_sys_sendmsg+0x1b1/0x290 [ 455.422716][T12654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.422750][T12654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.422769][T12654] do_syscall_64+0x174/0x580 [ 455.422792][T12654] ? trace_irq_disable+0x3b/0x140 [ 455.422814][T12654] ? clear_bhb_loop+0x70/0xc0 [ 455.422834][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.422850][T12654] RIP: 0033:0x7f6781f9e0d9 [ 455.422866][T12654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.422879][T12654] RSP: 002b:00007f6782e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.422898][T12654] RAX: ffffffffffffffda RBX: 00007f6782225fa0 RCX: 00007f6781f9e0d9 [ 455.422911][T12654] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 455.422922][T12654] RBP: 00007f6782e53090 R08: 0000000000000000 R09: 0000000000000000 [ 455.422933][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.422944][T12654] R13: 00007f6782226038 R14: 00007f6782225fa0 R15: 00007f678234fa48 [ 455.422971][T12654] [ 455.645848][ T5678] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 455.656465][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.666199][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.738211][ T189] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 455.748068][ T189] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 455.757424][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.808690][ T5678] usb 4-1: config 0 descriptor?? [ 455.891424][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.923361][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.968492][T12656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.984490][T12656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.136633][T12656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.145989][T12656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.269438][ T5678] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 456.357516][T12667] warn_alloc: 2 callbacks suppressed [ 456.357559][T12667] syz.2.2027: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 456.398827][T12667] CPU: 0 UID: 0 PID: 12667 Comm: syz.2.2027 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.398864][T12667] Tainted: [L]=SOFTLOCKUP [ 456.398871][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.398884][T12667] Call Trace: [ 456.398892][T12667] [ 456.398902][T12667] dump_stack_lvl+0xe8/0x150 [ 456.399131][T12667] warn_alloc+0x24c/0x270 [ 456.399162][T12667] ? __pfx_warn_alloc+0x10/0x10 [ 456.399205][T12667] __vmalloc_node_range_noprof+0x12c/0x1730 [ 456.399229][T12667] ? __mutex_trylock_common+0x15f/0x270 [ 456.399259][T12667] ? __pfx___mutex_trylock_common+0x10/0x10 [ 456.399292][T12667] ? trace_contention_end+0x3d/0x140 [ 456.399319][T12667] ? __mutex_lock+0x30d/0x1550 [ 456.399348][T12667] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 456.399369][T12667] ? tomoyo_path_number_perm+0x219/0x5f0 [ 456.399399][T12667] ? dvb_demux_do_ioctl+0x320/0x540 [ 456.399422][T12667] ? __pfx___mutex_lock+0x10/0x10 [ 456.399450][T12667] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 456.399474][T12667] vmalloc_noprof+0xb2/0xe0 [ 456.399496][T12667] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 456.399522][T12667] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 456.399550][T12667] dvb_demux_do_ioctl+0x45d/0x540 [ 456.399576][T12667] dvb_usercopy+0x199/0x2e0 [ 456.399595][T12667] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 456.399615][T12667] ? __pfx_dvb_usercopy+0x10/0x10 [ 456.399642][T12667] ? __fget_files+0x3a2/0x420 [ 456.399665][T12667] ? __fget_files+0x2a/0x420 [ 456.399691][T12667] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 456.399712][T12667] dvb_demux_ioctl+0x29/0x40 [ 456.399732][T12667] __se_sys_ioctl+0xfc/0x170 [ 456.399749][T12667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.399769][T12667] do_syscall_64+0x174/0x580 [ 456.399793][T12667] ? clear_bhb_loop+0x70/0xc0 [ 456.399815][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.399833][T12667] RIP: 0033:0x7fca5459e0d9 [ 456.399851][T12667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.399867][T12667] RSP: 002b:00007fca553bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.399886][T12667] RAX: ffffffffffffffda RBX: 00007fca54825fa0 RCX: 00007fca5459e0d9 [ 456.399900][T12667] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 456.399913][T12667] RBP: 00007fca54635024 R08: 0000000000000000 R09: 0000000000000000 [ 456.399938][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.399950][T12667] R13: 00007fca54826038 R14: 00007fca54825fa0 R15: 00007fca5494fa48 [ 456.399979][T12667] [ 456.691089][T12667] Mem-Info: [ 456.694361][T12667] active_anon:6376 inactive_anon:0 isolated_anon:0 [ 456.694361][T12667] active_file:0 inactive_file:53405 isolated_file:0 [ 456.694361][T12667] unevictable:0 dirty:372 writeback:0 [ 456.694361][T12667] slab_reclaimable:10457 slab_unreclaimable:99525 [ 456.694361][T12667] mapped:30976 shmem:531 pagetables:1369 [ 456.694361][T12667] sec_pagetables:0 bounce:0 [ 456.694361][T12667] kernel_misc_reclaimable:0 [ 456.694361][T12667] free:1310685 free_pcp:9552 free_cma:0 [ 456.742316][T12667] Node 0 active_anon:25504kB inactive_anon:0kB active_file:0kB inactive_file:213264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123804kB dirty:1484kB writeback:0kB shmem:2124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12340kB pagetables:5352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.778406][T12667] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.825559][T12667] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.856040][T12667] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 456.862014][T12667] Node 0 DMA32 free:1285540kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25604kB inactive_anon:0kB active_file:0kB inactive_file:213264kB unevictable:0kB writepending:1484kB zspages:0kB present:3129332kB managed:2548648kB mlocked:0kB bounce:0kB free_pcp:36220kB local_pcp:20152kB free_cma:0kB [ 456.896197][T12667] lowmem_reserve[]: 0 0 0 0 0 [ 456.901052][T12667] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.943821][T12667] lowmem_reserve[]: 0 0 0 0 0 [ 456.949544][T12667] Node 1 Normal free:3941840kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1712kB local_pcp:0kB free_cma:0kB [ 456.981657][T12667] lowmem_reserve[]: 0 0 0 0 0 [ 456.986483][T12667] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 456.999246][T12667] Node 0 DMA32: 715*4kB (ME) 765*8kB (UME) 405*16kB (UME) 218*32kB (UME) 106*64kB (UME) 87*128kB (UME) 100*256kB (UME) 14*512kB (UME) 10*1024kB (UM) 9*2048kB (UM) 289*4096kB (UME) = 1285540kB [ 457.019322][T12667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 457.031785][T12667] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 10*64kB (UM) 4*128kB (M) 2*256kB (M) 3*512kB (M) 0*1024kB 1*2048kB (M) 961*4096kB (UM) = 3941840kB [ 457.066969][ T5678] [drm:udl_init] *ERROR* Selecting channel failed [ 457.091874][ T5678] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 457.098876][ T5678] [drm] Initialized udl on minor 1 [ 457.117416][T12667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.127967][T12667] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 457.137888][T12667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.148527][T12667] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 457.158614][T12667] 53929 total pagecache pages [ 457.192858][ T5678] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 457.220640][ T5678] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 457.244213][ T5678] usb 4-1: USB disconnect, device number 67 [ 457.265270][T12667] 0 pages in swap cache [ 457.272046][T12667] Free swap = 124996kB [ 457.297058][ T5743] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 457.305540][ T5743] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 457.347486][T12667] Total swap = 124996kB [ 457.351824][T12667] 2097051 pages RAM [ 457.359501][T12667] 0 pages HighMem/MovableOnly [ 457.364658][T12667] 428209 pages reserved [ 457.369966][T12667] 0 pages cma reserved [ 457.424654][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2030'. [ 457.481481][T12685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2031'. [ 457.564409][ T5987] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.736483][ T189] gud 1-1:1.0: USB-2: Failed to add properties (ret=-71) [ 457.743862][ T189] gud 1-1:1.0: Failed to get connectors (error=-71) [ 457.751004][ T189] gud 1-1:1.0: probe with driver gud failed with error -71 [ 457.773342][ T189] usb 1-1: USB disconnect, device number 53 [ 457.949049][ T5743] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 457.963896][T12689] FAULT_INJECTION: forcing a failure. [ 457.963896][T12689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 458.001235][T12689] CPU: 0 UID: 0 PID: 12689 Comm: syz.3.2033 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.001286][T12689] Tainted: [L]=SOFTLOCKUP [ 458.001293][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.001302][T12689] Call Trace: [ 458.001310][T12689] [ 458.001324][T12689] dump_stack_lvl+0xe8/0x150 [ 458.001359][T12689] should_fail_ex+0x40c/0x560 [ 458.001385][T12689] prepare_alloc_pages+0x230/0x650 [ 458.001434][T12689] __alloc_frozen_pages_noprof+0x12f/0x380 [ 458.001468][T12689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 458.001500][T12689] ? __pfx_policy_nodemask+0x10/0x10 [ 458.001534][T12689] alloc_pages_mpol+0x212/0x380 [ 458.001563][T12689] alloc_pages_noprof+0xac/0x2a0 [ 458.001589][T12689] folio_alloc_noprof+0x1e/0x30 [ 458.001613][T12689] filemap_alloc_folio_noprof+0x111/0x470 [ 458.001645][T12689] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 458.001682][T12689] ? irqentry_exit+0x218/0x8f0 [ 458.001704][T12689] ? trace_irq_disable+0x3b/0x140 [ 458.001734][T12689] __filemap_get_folio_mpol+0x402/0x1000 [ 458.001762][T12689] fuse_notify+0x161c/0x2610 [ 458.001848][T12689] ? __pfx_fuse_notify+0x10/0x10 [ 458.001872][T12689] ? iov_iter_advance+0x8b/0x1c0 [ 458.001895][T12689] ? __iov_iter_get_pages_alloc+0x3d3/0xa40 [ 458.001919][T12689] ? __lock_acquire+0x683/0x2cf0 [ 458.001950][T12689] ? iov_iter_get_pages2+0x5e/0xa0 [ 458.001976][T12689] ? fuse_copy_fill+0x729/0x910 [ 458.002012][T12689] ? aa_file_perm+0x18b/0x15f0 [ 458.002030][T12689] ? fuse_copy_do+0x18e/0x380 [ 458.002053][T12689] ? __asan_memcpy+0x40/0x70 [ 458.002078][T12689] ? fuse_copy_do+0x239/0x380 [ 458.002107][T12689] fuse_dev_do_write+0x344/0xbf0 [ 458.002124][T12689] ? kstrtoull+0x12f/0x1d0 [ 458.002169][T12689] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 458.002210][T12689] fuse_dev_write+0x18c/0x230 [ 458.002232][T12689] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.002255][T12689] ? __pfx_fuse_dev_write+0x10/0x10 [ 458.002296][T12689] vfs_write+0x612/0xba0 [ 458.002336][T12689] ? __pfx_vfs_write+0x10/0x10 [ 458.002390][T12689] ? __fget_files+0x2a/0x420 [ 458.002429][T12689] ksys_write+0x150/0x270 [ 458.002455][T12689] ? __pfx_ksys_write+0x10/0x10 [ 458.002484][T12689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.002502][T12689] do_syscall_64+0x174/0x580 [ 458.002521][T12689] ? clear_bhb_loop+0x70/0xc0 [ 458.002539][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.002553][T12689] RIP: 0033:0x7ff27d79e0d9 [ 458.002570][T12689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.002584][T12689] RSP: 002b:00007ff27b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.002603][T12689] RAX: ffffffffffffffda RBX: 00007ff27da25fa0 RCX: 00007ff27d79e0d9 [ 458.002617][T12689] RDX: 0000000000000029 RSI: 0000200000000440 RDI: 0000000000000004 [ 458.002627][T12689] RBP: 00007ff27b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 458.002637][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.002647][T12689] R13: 00007ff27da26038 R14: 00007ff27da25fa0 R15: 00007ff27db4fa48 [ 458.002698][T12689] [ 458.552760][T12698] FAULT_INJECTION: forcing a failure. [ 458.552760][T12698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.630525][T12698] CPU: 1 UID: 0 PID: 12698 Comm: syz.4.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.630549][T12698] Tainted: [L]=SOFTLOCKUP [ 458.630553][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.630560][T12698] Call Trace: [ 458.630564][T12698] [ 458.630570][T12698] dump_stack_lvl+0xe8/0x150 [ 458.630597][T12698] should_fail_ex+0x40c/0x560 [ 458.630612][T12698] _copy_from_user+0x2d/0xb0 [ 458.630628][T12698] ___sys_recvmsg+0x173/0x5a0 [ 458.630664][T12698] ? __pfx____sys_recvmsg+0x10/0x10 [ 458.630686][T12698] ? __fget_files+0x2a/0x420 [ 458.630716][T12698] ? __fget_files+0x3a2/0x420 [ 458.630741][T12698] do_recvmmsg+0x31a/0x7f0 [ 458.630756][T12698] ? __pfx_do_recvmmsg+0x10/0x10 [ 458.630772][T12698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.630793][T12698] ? __fget_files+0x3a2/0x420 [ 458.630810][T12698] __x64_sys_recvmmsg+0x198/0x250 [ 458.630822][T12698] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 458.630838][T12698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.630862][T12698] do_syscall_64+0x174/0x580 [ 458.630877][T12698] ? trace_irq_disable+0x3b/0x140 [ 458.630889][T12698] ? clear_bhb_loop+0x70/0xc0 [ 458.630901][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.630911][T12698] RIP: 0033:0x7f6781f9e0d9 [ 458.630921][T12698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.630930][T12698] RSP: 002b:00007f6782e32028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 458.630942][T12698] RAX: ffffffffffffffda RBX: 00007f6782226090 RCX: 00007f6781f9e0d9 [ 458.630949][T12698] RDX: 0000000000000001 RSI: 0000200000004e80 RDI: 0000000000000003 [ 458.630955][T12698] RBP: 00007f6782e32090 R08: 0000000000000000 R09: 0000000000000000 [ 458.630961][T12698] R10: 0000000040000023 R11: 0000000000000246 R12: 0000000000000001 [ 458.630967][T12698] R13: 00007f6782226128 R14: 00007f6782226090 R15: 00007f678234fa48 [ 458.630982][T12698] [ 458.772785][ T5743] usb 2-1: Using ep0 maxpacket: 16 [ 459.178501][T12713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2041'. [ 459.418328][ T5743] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 459.427570][ T5743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.438184][ T5743] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.450524][ T189] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 459.585834][ T5699] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 459.646352][ T5743] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 459.658198][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.668831][ T5743] usb 2-1: Product: syz [ 459.673986][ T5743] usb 2-1: Manufacturer: syz [ 459.679531][ T5743] usb 2-1: SerialNumber: syz [ 459.736341][ T5699] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 459.747644][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.760027][ T5699] usb 4-1: config 0 descriptor?? [ 459.784393][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 459.794586][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.809514][ T189] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 459.820533][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.829671][ T189] usb 1-1: Product: syz [ 459.835319][ T189] usb 1-1: Manufacturer: syz [ 459.840774][ T189] usb 1-1: SerialNumber: syz [ 459.852025][ T189] usb 1-1: config 0 descriptor?? [ 459.975120][T12687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.984211][T12687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.037136][ T5699] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 460.066884][ T189] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 460.183462][ T5743] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 460.238644][ T5743] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 460.252364][ T5743] usb 2-1: USB disconnect, device number 72 [ 460.263270][ T5699] [drm:udl_init] *ERROR* Selecting channel failed [ 460.300459][ T7621] udevd[7621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.498646][ T5699] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 460.529236][ T5699] [drm] Initialized udl on minor 1 [ 460.558688][ T189] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 460.567459][ T189] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 460.599417][ T5699] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 460.620017][ T5699] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 460.636813][ T985] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 460.680213][ T5699] usb 4-1: USB disconnect, device number 68 [ 460.688438][ T985] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 460.716055][ T985] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 460.793527][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.804276][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.857494][ T985] usb 1-1: USB disconnect, device number 54 [ 461.140590][T12741] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 461.194293][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 461.289302][T12745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2051'. [ 461.308579][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 461.356784][T12750] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 461.619266][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2058'. [ 461.658900][ T30] audit: type=1326 audit(1786209085.480:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.0.2057" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c64f9e0d9 code=0x0 [ 461.903232][T12767] fuse: Unknown parameter 'eroup_id' [ 461.912379][T12767] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2061'. [ 461.922792][T12767] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 461.962531][T12770] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2061'. [ 462.300985][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2063'. [ 462.570343][T12784] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 462.672286][T12787] FAULT_INJECTION: forcing a failure. [ 462.672286][T12787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.747404][T12787] CPU: 0 UID: 0 PID: 12787 Comm: syz.4.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.747425][T12787] Tainted: [L]=SOFTLOCKUP [ 462.747429][T12787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.747436][T12787] Call Trace: [ 462.747442][T12787] [ 462.747448][T12787] dump_stack_lvl+0xe8/0x150 [ 462.747470][T12787] should_fail_ex+0x40c/0x560 [ 462.747485][T12787] _copy_from_user+0x2d/0xb0 [ 462.747501][T12787] ___sys_sendmsg+0x1c6/0x360 [ 462.747513][T12787] ? __lock_acquire+0x683/0x2cf0 [ 462.747529][T12787] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.747555][T12787] ? __fget_files+0x2a/0x420 [ 462.747571][T12787] ? __fget_files+0x3a2/0x420 [ 462.747588][T12787] __x64_sys_sendmsg+0x1b1/0x290 [ 462.747600][T12787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.747619][T12787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.747630][T12787] do_syscall_64+0x174/0x580 [ 462.747645][T12787] ? clear_bhb_loop+0x70/0xc0 [ 462.747657][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.747667][T12787] RIP: 0033:0x7f6781f9e0d9 [ 462.747678][T12787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.747687][T12787] RSP: 002b:00007f6782e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.747699][T12787] RAX: ffffffffffffffda RBX: 00007f6782225fa0 RCX: 00007f6781f9e0d9 [ 462.747706][T12787] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003 [ 462.747712][T12787] RBP: 00007f6782e53090 R08: 0000000000000000 R09: 0000000000000000 [ 462.747718][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.747724][T12787] R13: 00007f6782226038 R14: 00007f6782225fa0 R15: 00007f678234fa48 [ 462.747739][T12787] [ 463.194399][ T5743] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 463.365347][ T5743] usb 3-1: Using ep0 maxpacket: 16 [ 463.392730][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short [ 463.415289][ T5743] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 463.431447][ T5743] usb 3-1: config 9 has no interface number 0 [ 463.462709][ T5743] usb 3-1: config 9 interface 57 has no altsetting 0 [ 463.501273][ T5743] usb 3-1: string descriptor 0 read error: -22 [ 463.510352][ T5743] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 463.559983][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.579636][T12798] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2068'. [ 463.639665][ T5344] IPVS: starting estimator thread 0... [ 463.736249][T12800] IPVS: using max 39 ests per chain, 93600 per kthread [ 463.840928][T12803] syz_tun: entered allmulticast mode [ 463.899616][T12783] dvmrp8: entered allmulticast mode [ 463.964569][T12784] nvme nvme0: failed to connect socket: -111 [ 464.227929][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2070'. [ 464.524725][T12782] syz_tun: left allmulticast mode [ 464.538733][ T5743] video4linux radio48: keene_cmd_set failed (-71) [ 464.558670][ T5743] radio-keene 3-1:9.57: V4L2 device registered as radio48 [ 464.599744][ T5743] usb 3-1: USB disconnect, device number 45 [ 464.671225][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 464.775527][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 465.523555][T12821] FAULT_INJECTION: forcing a failure. [ 465.523555][T12821] name failslab, interval 1, probability 0, space 0, times 0 [ 465.540860][T12821] CPU: 0 UID: 0 PID: 12821 Comm: syz.1.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.540889][T12821] Tainted: [L]=SOFTLOCKUP [ 465.540895][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.540905][T12821] Call Trace: [ 465.540913][T12821] [ 465.540921][T12821] dump_stack_lvl+0xe8/0x150 [ 465.540952][T12821] should_fail_ex+0x40c/0x560 [ 465.540977][T12821] should_failslab+0xa8/0x100 [ 465.541003][T12821] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 465.541025][T12821] ? do_getname+0x2e/0x250 [ 465.541042][T12821] ? do_getname+0x2e/0x250 [ 465.541067][T12821] do_getname+0x2e/0x250 [ 465.541084][T12821] ? getname_flags+0x11/0x20 [ 465.541105][T12821] do_sys_openat2+0xcc/0x200 [ 465.541129][T12821] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.541149][T12821] ? ksys_write+0x242/0x270 [ 465.541174][T12821] ? __pfx_ksys_write+0x10/0x10 [ 465.541199][T12821] __x64_sys_openat+0x138/0x170 [ 465.541220][T12821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.541238][T12821] do_syscall_64+0x174/0x580 [ 465.541264][T12821] ? clear_bhb_loop+0x70/0xc0 [ 465.541285][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.541302][T12821] RIP: 0033:0x7f55e419e0d9 [ 465.541319][T12821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.541333][T12821] RSP: 002b:00007f55e5125028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.541354][T12821] RAX: ffffffffffffffda RBX: 00007f55e4425fa0 RCX: 00007f55e419e0d9 [ 465.541366][T12821] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 465.541379][T12821] RBP: 00007f55e5125090 R08: 0000000000000000 R09: 0000000000000000 [ 465.541390][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.541401][T12821] R13: 00007f55e4426038 R14: 00007f55e4425fa0 R15: 00007f55e454fa48 [ 465.541430][T12821] [ 465.836507][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2075'. [ 466.072747][ T30] audit: type=1326 audit(1786209089.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.077643][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2079'. [ 466.155368][ T30] audit: type=1326 audit(1786209089.870:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.198956][ T30] audit: type=1326 audit(1786209089.870:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.249730][ T30] audit: type=1326 audit(1786209089.870:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.287563][ T30] audit: type=1326 audit(1786209089.870:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.313834][T12838] FAULT_INJECTION: forcing a failure. [ 466.313834][T12838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.328658][ T30] audit: type=1326 audit(1786209089.870:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.362191][T12838] CPU: 0 UID: 0 PID: 12838 Comm: syz.2.2080 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.362215][T12838] Tainted: [L]=SOFTLOCKUP [ 466.362220][T12838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.362229][T12838] Call Trace: [ 466.362235][T12838] [ 466.362252][T12838] dump_stack_lvl+0xe8/0x150 [ 466.362277][T12838] should_fail_ex+0x40c/0x560 [ 466.362297][T12838] _copy_to_user+0x31/0xb0 [ 466.362318][T12838] simple_read_from_buffer+0xe1/0x170 [ 466.362339][T12838] proc_fail_nth_read+0x1bb/0x230 [ 466.362360][T12838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 466.362380][T12838] ? rw_verify_area+0x24a/0x4c0 [ 466.362400][T12838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 466.362417][T12838] vfs_read+0x213/0xa80 [ 466.362434][T12838] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.362455][T12838] ? hook_socket_connect+0x1f1/0x470 [ 466.362475][T12838] ? __pfx_vfs_read+0x10/0x10 [ 466.362494][T12838] ? mctp_connect+0xd9/0x480 [ 466.362628][T12838] ? __sys_connect+0x33c/0x460 [ 466.362649][T12838] ? __pfx___sys_connect+0x10/0x10 [ 466.362673][T12838] ksys_read+0x150/0x270 [ 466.362694][T12838] ? __pfx_ksys_read+0x10/0x10 [ 466.362720][T12838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.362735][T12838] do_syscall_64+0x174/0x580 [ 466.362754][T12838] ? trace_irq_disable+0x3b/0x140 [ 466.362770][T12838] ? clear_bhb_loop+0x70/0xc0 [ 466.362786][T12838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.362800][T12838] RIP: 0033:0x7fca5455e90e [ 466.362814][T12838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 466.362826][T12838] RSP: 002b:00007fca553bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.362842][T12838] RAX: ffffffffffffffda RBX: 00007fca553bc6c0 RCX: 00007fca5455e90e [ 466.362851][T12838] RDX: 000000000000000f RSI: 00007fca553bc0a0 RDI: 0000000000000004 [ 466.362860][T12838] RBP: 00007fca553bc090 R08: 0000000000000000 R09: 0000000000000000 [ 466.362868][T12838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.362876][T12838] R13: 00007fca54826038 R14: 00007fca54825fa0 R15: 00007fca5494fa48 [ 466.362898][T12838] [ 466.592915][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.609437][ T30] audit: type=1326 audit(1786209089.870:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.634566][ T30] audit: type=1326 audit(1786209089.870:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.662252][ T30] audit: type=1326 audit(1786209089.870:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.662882][T12833] tipc: Started in network mode [ 466.687441][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 466.687459][ T30] audit: type=1326 audit(1786209089.870:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.687511][ T30] audit: type=1326 audit(1786209089.870:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.687544][ T30] audit: type=1326 audit(1786209089.870:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.687583][ T30] audit: type=1326 audit(1786209089.870:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.687617][ T30] audit: type=1326 audit(1786209089.870:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.687658][ T30] audit: type=1326 audit(1786209089.870:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.687712][ T30] audit: type=1326 audit(1786209089.870:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 466.687744][ T30] audit: type=1326 audit(1786209089.870:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 467.003424][T12833] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 467.012899][T12833] tipc: Enabling of bearer rejected, failed to enable media [ 467.064543][ T30] audit: type=1326 audit(1786209089.870:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 467.149438][ T30] audit: type=1326 audit(1786209089.870:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12832 comm="syz.0.2079" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c64f9e0d9 code=0x7ffc0000 [ 467.194253][T12846] vivid-001: disconnect [ 467.211081][T12833] vivid-001: reconnect [ 467.364686][T12853] Cannot find add_set index 2 as target [ 467.443069][ T5743] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 467.459370][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 467.520784][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 467.765287][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2087'. [ 467.807967][ T5743] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 467.817896][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.829299][ T5743] usb 4-1: config 0 descriptor?? [ 468.386010][ T5743] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 468.632830][ T5743] [drm:udl_init] *ERROR* Selecting channel failed [ 468.658911][ T5743] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 468.666780][ T5743] [drm] Initialized udl on minor 1 [ 468.676977][ T5743] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 468.689914][ T5743] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 468.700896][ T5743] usb 4-1: USB disconnect, device number 69 [ 468.806100][ T189] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 468.816300][ T189] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 468.832852][T12865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 468.840490][T12865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.846565][T12865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.853253][T12865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.859759][T12865] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 469.102046][T12879] warn_alloc: 3 callbacks suppressed [ 469.102062][T12879] syz.4.2093: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.134932][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.4.2093 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.134965][T12879] Tainted: [L]=SOFTLOCKUP [ 469.134972][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.134983][T12879] Call Trace: [ 469.135002][T12879] [ 469.135022][T12879] dump_stack_lvl+0xe8/0x150 [ 469.135055][T12879] warn_alloc+0x24c/0x270 [ 469.135086][T12879] ? __pfx_warn_alloc+0x10/0x10 [ 469.135128][T12879] __vmalloc_node_range_noprof+0x12c/0x1730 [ 469.135152][T12879] ? __mutex_trylock_common+0x15f/0x270 [ 469.135185][T12879] ? __pfx___mutex_trylock_common+0x10/0x10 [ 469.135220][T12879] ? trace_contention_end+0x3d/0x140 [ 469.135248][T12879] ? __mutex_lock+0x30d/0x1550 [ 469.135278][T12879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.135298][T12879] ? tomoyo_path_number_perm+0x219/0x5f0 [ 469.135327][T12879] ? dvb_demux_do_ioctl+0x320/0x540 [ 469.135353][T12879] ? __pfx___mutex_lock+0x10/0x10 [ 469.135380][T12879] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 469.135404][T12879] vmalloc_noprof+0xb2/0xe0 [ 469.135425][T12879] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 469.135451][T12879] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 469.135478][T12879] dvb_demux_do_ioctl+0x45d/0x540 [ 469.135503][T12879] dvb_usercopy+0x199/0x2e0 [ 469.135522][T12879] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 469.135543][T12879] ? __pfx_dvb_usercopy+0x10/0x10 [ 469.135575][T12879] ? __fget_files+0x3a2/0x420 [ 469.135598][T12879] ? __fget_files+0x2a/0x420 [ 469.135624][T12879] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 469.135646][T12879] dvb_demux_ioctl+0x29/0x40 [ 469.135669][T12879] __se_sys_ioctl+0xfc/0x170 [ 469.135700][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.135726][T12879] do_syscall_64+0x174/0x580 [ 469.135756][T12879] ? trace_irq_disable+0x3b/0x140 [ 469.135780][T12879] ? clear_bhb_loop+0x70/0xc0 [ 469.135805][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.135822][T12879] RIP: 0033:0x7f6781f9e0d9 [ 469.135842][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.135859][T12879] RSP: 002b:00007f6782e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.135881][T12879] RAX: ffffffffffffffda RBX: 00007f6782225fa0 RCX: 00007f6781f9e0d9 [ 469.135896][T12879] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 469.135909][T12879] RBP: 00007f6782035024 R08: 0000000000000000 R09: 0000000000000000 [ 469.135923][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.135935][T12879] R13: 00007f6782226038 R14: 00007f6782225fa0 R15: 00007f678234fa48 [ 469.135966][T12879] [ 469.136084][T12879] Mem-Info: [ 469.443051][T12879] active_anon:6222 inactive_anon:0 isolated_anon:0 [ 469.443051][T12879] active_file:0 inactive_file:53776 isolated_file:0 [ 469.443051][T12879] unevictable:0 dirty:421 writeback:0 [ 469.443051][T12879] slab_reclaimable:10479 slab_unreclaimable:98248 [ 469.443051][T12879] mapped:30959 shmem:523 pagetables:1335 [ 469.443051][T12879] sec_pagetables:0 bounce:0 [ 469.443051][T12879] kernel_misc_reclaimable:0 [ 469.443051][T12879] free:1308265 free_pcp:12737 free_cma:0 [ 469.493273][T12879] Node 0 active_anon:24888kB inactive_anon:0kB active_file:0kB inactive_file:214748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123736kB dirty:1680kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12404kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 469.536376][T12879] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 469.578949][T12879] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.693926][T12879] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 469.739574][T12879] Node 0 DMA32 free:1274804kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27776kB inactive_anon:0kB active_file:0kB inactive_file:214748kB unevictable:0kB writepending:1680kB zspages:0kB present:3129332kB managed:2548648kB mlocked:0kB bounce:0kB free_pcp:47332kB local_pcp:20944kB free_cma:0kB [ 469.960656][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2097'. [ 469.990848][T12879] lowmem_reserve[]: 0 0 0 0 0 [ 470.002879][T12897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2097'. [ 470.012287][T12879] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.051288][T12879] lowmem_reserve[]: 0 0 0 0 0 [ 470.066312][T12879] Node 1 Normal free:3942596kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:356kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:956kB local_pcp:956kB free_cma:0kB [ 470.103050][ T5743] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 470.126810][T12900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2097'. [ 470.143963][T12879] lowmem_reserve[]: 0 0 0 0 0 [ 470.149288][T12879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 470.168628][T12879] Node 0 DMA32: 1311*4kB (UME) 467*8kB (UM) 181*16kB (UM) 311*32kB (UM) 167*64kB (ME) 99*128kB (UME) 69*256kB (UME) 14*512kB (UME) 9*1024kB (UM) 6*2048kB (UM) 289*4096kB (UME) = 1275268kB [ 470.212761][T12879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.234139][T12879] Node 1 Normal: 3*4kB (UM) 3*8kB (U) 6*16kB (UM) 6*32kB (UM) 10*64kB (UM) 4*128kB (M) 3*256kB (M) 4*512kB (M) 0*1024kB 1*2048kB (M) 961*4096kB (UM) = 3942596kB [ 470.270163][T12879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.314737][T12879] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 470.364255][T12879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.394328][T12879] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 470.426383][T12879] 54297 total pagecache pages [ 470.437033][T12879] 0 pages in swap cache [ 470.465722][T12879] Free swap = 124996kB [ 470.478770][T12879] Total swap = 124996kB [ 470.503404][T12879] 2097051 pages RAM [ 470.520435][T12879] 0 pages HighMem/MovableOnly [ 470.534481][ T4928] Bluetooth: hci0: command 0x0406 tx timeout [ 470.537074][T12879] 428209 pages reserved [ 470.545391][ T5743] usb 4-1: Using ep0 maxpacket: 16 [ 470.563480][ T5743] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.574372][T12879] 0 pages cma reserved [ 470.595273][ T5743] usb 4-1: config 0 interface 0 has no altsetting 0 [ 470.636269][ T985] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 470.656106][ T5743] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 470.665457][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.695347][ T5743] usb 4-1: config 0 descriptor?? [ 470.824265][ T985] usb 1-1: Using ep0 maxpacket: 32 [ 470.836185][ T985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.863174][ T985] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 470.874367][ T4928] Bluetooth: hci4: command 0x0406 tx timeout [ 470.882516][ T4928] Bluetooth: hci1: command 0x0406 tx timeout [ 470.890196][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 470.904471][ T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.905358][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 470.934324][ T29] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 470.943060][ T985] usb 1-1: Product: syz [ 470.953259][ T985] usb 1-1: Manufacturer: syz [ 470.964792][ T985] usb 1-1: SerialNumber: syz [ 470.990425][ T985] usb 1-1: config 0 descriptor?? [ 471.021386][ T985] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 471.097028][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.109944][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 471.132452][ T29] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 471.156311][ T29] usb 2-1: config 0 has no interface number 0 [ 471.177126][ T29] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 471.209730][ T29] usb 2-1: config 0 interface 88 has no altsetting 0 [ 471.246429][ T29] usb 2-1: language id specifier not provided by device, defaulting to English [ 471.292438][ T29] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 471.565829][ T29] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 471.574570][ T29] usb 2-1: Product: syz [ 471.579836][ T29] usb 2-1: SerialNumber: Љ [ 471.623615][ T29] usb 2-1: config 0 descriptor?? [ 471.645849][T12904] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 471.777130][ T985] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 471.786754][ T985] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 471.841576][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2100'. [ 471.908093][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2100'. [ 471.932316][T12904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2099'. [ 471.979584][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 472.004662][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.013632][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.053928][ T5344] usb 1-1: USB disconnect, device number 55 [ 472.086159][ T29] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input46 [ 472.099077][T12913] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 472.230841][ T29] usb 2-1: USB disconnect, device number 73 [ 472.345032][ T9849] udevd[9849]: Error opening device "/dev/input/event4": No such file or directory [ 472.354831][ T9849] udevd[9849]: Unable to EVIOCGABS device "/dev/input/event4" [ 472.363871][ T9849] udevd[9849]: Unable to EVIOCGABS device "/dev/input/event4" [ 472.372693][ T9849] udevd[9849]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 472.394845][ T4978] udevd[4978]: worker [9849] terminated by signal 6 (Aborted) [ 472.402841][ T4978] udevd[4978]: worker [9849] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input46/event4' [ 472.745276][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.798937][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.144501][ T5344] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 473.347335][ T5743] usbhid 4-1:0.0: can't add hid device: -71 [ 473.357532][ T5743] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 473.367001][ T5344] usb 1-1: Using ep0 maxpacket: 16 [ 473.386922][ T5344] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 6 [ 473.422989][ T5743] usb 4-1: USB disconnect, device number 70 [ 473.430017][ T5344] usb 1-1: can't read configurations, error -22 [ 473.549683][T12913] nvme nvme0: failed to connect socket: -512 [ 473.581312][T12937] vlan1: entered allmulticast mode [ 473.586580][T12937] veth0_vlan: entered allmulticast mode [ 473.736561][ T5344] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 473.803213][T12940] vlan0: left promiscuous mode [ 473.824245][T12940] veth0_vlan: left promiscuous mode [ 473.883762][T12940] vlan2: left promiscuous mode [ 473.909162][T12940] bond0: left promiscuous mode [ 473.918279][T12940] bond_slave_0: left promiscuous mode [ 473.966893][T12942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.985216][T12940] bond_slave_1: left promiscuous mode [ 474.094464][ T5344] usb 1-1: Using ep0 maxpacket: 16 [ 474.219268][ T5344] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 6 [ 474.229228][ T5344] usb 1-1: can't read configurations, error -22 [ 474.238062][ T5344] usb usb1-port1: attempt power cycle [ 474.485852][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 474.586413][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 474.690175][ T5344] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 474.910475][T12953] FAULT_INJECTION: forcing a failure. [ 474.910475][T12953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.925010][T12953] CPU: 1 UID: 0 PID: 12953 Comm: syz.4.2113 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.925032][T12953] Tainted: [L]=SOFTLOCKUP [ 474.925036][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.925043][T12953] Call Trace: [ 474.925048][T12953] [ 474.925053][T12953] dump_stack_lvl+0xe8/0x150 [ 474.925076][T12953] should_fail_ex+0x40c/0x560 [ 474.925091][T12953] _copy_from_user+0x2d/0xb0 [ 474.925106][T12953] ___sys_sendmsg+0x1c6/0x360 [ 474.925117][T12953] ? __lock_acquire+0x683/0x2cf0 [ 474.925134][T12953] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.925162][T12953] ? __fget_files+0x2a/0x420 [ 474.925176][T12953] ? __fget_files+0x3a2/0x420 [ 474.925193][T12953] __x64_sys_sendmsg+0x1b1/0x290 [ 474.925205][T12953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.925224][T12953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.925234][T12953] do_syscall_64+0x174/0x580 [ 474.925249][T12953] ? trace_irq_disable+0x3b/0x140 [ 474.925264][T12953] ? clear_bhb_loop+0x70/0xc0 [ 474.925279][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.925289][T12953] RIP: 0033:0x7f6781f9e0d9 [ 474.925299][T12953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.925308][T12953] RSP: 002b:00007f6782e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.925319][T12953] RAX: ffffffffffffffda RBX: 00007f6782225fa0 RCX: 00007f6781f9e0d9 [ 474.925326][T12953] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 474.925333][T12953] RBP: 00007f6782e53090 R08: 0000000000000000 R09: 0000000000000000 [ 474.925339][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.925345][T12953] R13: 00007f6782226038 R14: 00007f6782225fa0 R15: 00007f678234fa48 [ 474.925359][T12953] [ 475.182640][ T5678] hid_parser_main: 66 callbacks suppressed [ 475.182661][ T5678] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 475.263546][ T5344] usb 1-1: Using ep0 maxpacket: 16 [ 475.277833][ T5678] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 475.553637][ C0] ------------[ cut here ]------------ [ 475.560189][ C0] DEBUG_LOCKS_WARN_ON(1) [ 475.560291][ C0] WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x382/0x2cf0, CPU#0: ksoftirqd/0/15 [ 475.575392][ C0] Modules linked in: [ 475.579504][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.590278][ C0] Tainted: [L]=SOFTLOCKUP [ 475.594601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.604708][ C0] RIP: 0010:__lock_acquire+0x389/0x2cf0 [ 475.610715][ C0] Code: 83 3d 0a 48 d5 18 00 75 27 90 e8 a2 2e 2d 03 85 c0 74 1c 83 3d bb bb b4 0e 00 75 13 48 8d 3d 0e 18 b8 0e 48 c7 c6 fe 10 35 8e <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 475.631750][ C0] RSP: 0018:ffffc90000147778 EFLAGS: 00010046 [ 475.638435][ C0] RAX: 0000000000000001 RBX: 0000000000042000 RCX: ffff88801dea9f00 [ 475.646428][ C0] RDX: 0000000000000100 RSI: ffffffff8e3510fe RDI: ffffffff905ad5a0 [ 475.654720][ C0] RBP: 0000000000000001 R08: ffffffff90577943 R09: 1ffffffff20aef28 [ 475.663485][ C0] R10: dffffc0000000000 R11: fffffbfff20aef29 R12: 0000000000000d1c [ 475.672105][ C0] R13: ffff88801deaaaf0 R14: ffff88801dea9f00 R15: ffff88801deaaaa0 [ 475.680169][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 475.689207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.696685][ C0] CR2: 00007ff27da27dac CR3: 0000000075794000 CR4: 00000000003526f0 [ 475.705187][ C0] Call Trace: [ 475.708924][ C0] [ 475.712048][ C0] ? __lock_acquire+0x683/0x2cf0 [ 475.717757][ C0] ? look_up_lock_class+0x57/0x110 [ 475.722988][ C0] ? register_lock_class+0x31/0x2e0 [ 475.728360][ C0] ? tcp_tsq_handler+0x29/0x200 [ 475.733388][ C0] lock_acquire+0x106/0x350 [ 475.738161][ C0] ? tcp_tsq_handler+0x29/0x200 [ 475.743028][ C0] _raw_spin_lock+0x2e/0x40 [ 475.747721][ C0] ? tcp_tsq_handler+0x29/0x200 [ 475.752936][ C0] tcp_tsq_handler+0x29/0x200 [ 475.757896][ C0] tcp_tsq_workfn+0x384/0x410 [ 475.763272][ C0] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 475.768925][ C0] ? rcu_is_watching+0x15/0xb0 [ 475.773787][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 475.779515][ C0] process_scheduled_works+0xa8e/0x14e0 [ 475.785242][ C0] ? __lock_acquire+0x683/0x2cf0 [ 475.790754][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.796995][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 475.802153][ C0] ? assign_work+0x3cf/0x5d0 [ 475.806741][ C0] bh_worker+0x44e/0x840 [ 475.811171][ C0] tasklet_action+0xc/0x70 [ 475.815967][ C0] handle_softirqs+0x225/0x840 [ 475.820884][ C0] ? run_ksoftirqd+0x36/0x60 [ 475.826006][ C0] run_ksoftirqd+0x36/0x60 [ 475.830862][ C0] smpboot_thread_fn+0x57c/0xa80 [ 475.836168][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 475.841402][ C0] kthread+0x388/0x470 [ 475.846013][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 475.851734][ C0] ? __pfx_kthread+0x10/0x10 [ 475.856593][ C0] ret_from_fork+0x514/0xb70 [ 475.861462][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 475.866824][ C0] ? __switch_to+0xc89/0x1420 [ 475.871790][ C0] ? __pfx_kthread+0x10/0x10 [ 475.876746][ C0] ret_from_fork_asm+0x1a/0x30 [ 475.881682][ C0] [ 475.885197][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 475.892670][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.904925][ C0] Tainted: [L]=SOFTLOCKUP [ 475.909712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.920389][ C0] Call Trace: [ 475.923937][ C0] [ 475.927690][ C0] vpanic+0x56c/0xa60 [ 475.931968][ C0] ? __pfx__printk+0x10/0x10 [ 475.936833][ C0] ? __pfx_vpanic+0x10/0x10 [ 475.941513][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 475.947160][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 475.952451][ C0] panic+0xc5/0xd0 [ 475.956370][ C0] ? __pfx_panic+0x10/0x10 [ 475.960997][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 475.966293][ C0] __warn+0x315/0x4c0 [ 475.970278][ C0] ? __lock_acquire+0x382/0x2cf0 [ 475.975381][ C0] ? __lock_acquire+0x382/0x2cf0 [ 475.980416][ C0] __report_bug+0x276/0x570 [ 475.985334][ C0] ? __lock_acquire+0x382/0x2cf0 [ 475.990363][ C0] ? __pfx___report_bug+0x10/0x10 [ 475.995406][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 476.000538][ C0] ? stack_trace_save+0xa9/0x100 [ 476.005743][ C0] report_bug_entry+0x19a/0x290 [ 476.010687][ C0] ? __lock_acquire+0x389/0x2cf0 [ 476.015886][ C0] ? __lock_acquire+0x38e/0x2cf0 [ 476.021460][ C0] handle_bug+0xce/0x200 [ 476.025722][ C0] exc_invalid_op+0x1a/0x50 [ 476.030361][ C0] asm_exc_invalid_op+0x1a/0x20 [ 476.036012][ C0] RIP: 0010:__lock_acquire+0x389/0x2cf0 [ 476.042206][ C0] Code: 83 3d 0a 48 d5 18 00 75 27 90 e8 a2 2e 2d 03 85 c0 74 1c 83 3d bb bb b4 0e 00 75 13 48 8d 3d 0e 18 b8 0e 48 c7 c6 fe 10 35 8e <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 476.063116][ C0] RSP: 0018:ffffc90000147778 EFLAGS: 00010046 [ 476.069445][ C0] RAX: 0000000000000001 RBX: 0000000000042000 RCX: ffff88801dea9f00 [ 476.078107][ C0] RDX: 0000000000000100 RSI: ffffffff8e3510fe RDI: ffffffff905ad5a0 [ 476.087661][ C0] RBP: 0000000000000001 R08: ffffffff90577943 R09: 1ffffffff20aef28 [ 476.095763][ C0] R10: dffffc0000000000 R11: fffffbfff20aef29 R12: 0000000000000d1c [ 476.104792][ C0] R13: ffff88801deaaaf0 R14: ffff88801dea9f00 R15: ffff88801deaaaa0 [ 476.113291][ C0] ? __lock_acquire+0x36e/0x2cf0 [ 476.118893][ C0] ? __lock_acquire+0x683/0x2cf0 [ 476.124256][ C0] ? look_up_lock_class+0x57/0x110 [ 476.129633][ C0] ? register_lock_class+0x31/0x2e0 [ 476.135105][ C0] ? tcp_tsq_handler+0x29/0x200 [ 476.140423][ C0] lock_acquire+0x106/0x350 [ 476.145024][ C0] ? tcp_tsq_handler+0x29/0x200 [ 476.150260][ C0] _raw_spin_lock+0x2e/0x40 [ 476.155719][ C0] ? tcp_tsq_handler+0x29/0x200 [ 476.161813][ C0] tcp_tsq_handler+0x29/0x200 [ 476.167031][ C0] tcp_tsq_workfn+0x384/0x410 [ 476.171804][ C0] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 476.177396][ C0] ? rcu_is_watching+0x15/0xb0 [ 476.182545][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 476.188754][ C0] process_scheduled_works+0xa8e/0x14e0 [ 476.195099][ C0] ? __lock_acquire+0x683/0x2cf0 [ 476.200398][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.207467][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.213401][ C0] ? assign_work+0x3cf/0x5d0 [ 476.218284][ C0] bh_worker+0x44e/0x840 [ 476.222969][ C0] tasklet_action+0xc/0x70 [ 476.227570][ C0] handle_softirqs+0x225/0x840 [ 476.232432][ C0] ? run_ksoftirqd+0x36/0x60 [ 476.237103][ C0] run_ksoftirqd+0x36/0x60 [ 476.241754][ C0] smpboot_thread_fn+0x57c/0xa80 [ 476.247175][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 476.252204][ C0] kthread+0x388/0x470 [ 476.256266][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 476.262184][ C0] ? __pfx_kthread+0x10/0x10 [ 476.267181][ C0] ret_from_fork+0x514/0xb70 [ 476.272169][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 476.277400][ C0] ? __switch_to+0xc89/0x1420 [ 476.282192][ C0] ? __pfx_kthread+0x10/0x10 [ 476.286874][ C0] ret_from_fork_asm+0x1a/0x30 [ 476.291743][ C0] [ 476.295388][ C0] Kernel Offset: disabled [ 476.299922][ C0] Rebooting in 86400 seconds..