last executing test programs: 8.562800863s ago: executing program 2 (id=775): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c00078008"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8.095105033s ago: executing program 2 (id=778): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), 0x0, 0x0, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) 6.168400742s ago: executing program 4 (id=785): socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x48) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x80000000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29e, 0x0, 0xe}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) shutdown(r6, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x40000001, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffb, 0xe, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0xc094) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) 6.004557387s ago: executing program 2 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r1, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000040)={0x575, 0x1, 0x5adc, 0x3, 0x6}) 5.84491995s ago: executing program 2 (id=788): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff08000000"]}, 0xe0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000280)) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0)=r5) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) syz_emit_ethernet(0x83, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x4d, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x4d, 0x0, @opaque="b73e6638cbadbdf3bbdf201f16e37d40baa01fc1737efded633c5c327cd38e6db73b7db7ffc96b1bdc59b2f495aa5d5d017af3e7847d0dd9e742d6b76d9b3dda95434e900e"}}}}}}, 0x0) 5.661059985s ago: executing program 0 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, 0x0, 0x1, 0xfe, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 3.71258989s ago: executing program 1 (id=794): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = epoll_create(0x1) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = open(0x0, 0x100000, 0x0) close_range(r0, r2, 0x0) 3.509969544s ago: executing program 1 (id=795): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) clock_getres(0xffffffea, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000740)={0x50, 0x0, r2, {0x7, 0x26, 0x6caff54c, 0xfffffffff323ca46, 0x0, 0x7f, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="800700f826bf2c999d2498bad836d88a3601b3c3bfca581ee2525bead276a22fb2e2f9e597b84d6388b448e700d789499fcfcd6a56c29d6dac9dee773b002f52d3d6a4df216dbc48ee31c64f16778cc79a80b03f18cd07bf92b3090d6d63e09ace18d7c2f136f03a01944785ce502583b52e377481", @ANYRES16, @ANYBLOB="01002dbd7000fcdb", @ANYBLOB], 0x80}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x9, &(0x7f0000000180)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xad71}}, @exit], 0x0, 0x7}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c00078008"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.056862281s ago: executing program 2 (id=796): r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x8a000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x5452, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x1, 0x113, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0xff, 0x44, 0x40, 0x1870, 0x1, 0x3c54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x101, 0x1, 0x58, 0x0, 0x20, 0x1, "", [{{0x9, 0x4, 0x20, 0x9, 0x4, 0xa, 0x0, 0x0, 0x9, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x7, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x3, 0x3, 0xd}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0xff, 0x9, 0x7, [@generic={0xb6, 0x22, "f4f19148fbeda5aa9ed4b8aad1805943dc5fcace9410aecf770a17bab84abbf03075f076910529094eedbd0ed206bdbd3098e4624b7bbba719263ac0341a6add983855c5c00c76b0f03e734caf5c2d062587053ec65de3dc01a7d932492e711fd7dc1eb39b13043ee338671d9430d5240052728739df81464027df59cb43d5475b7650b05ffc85b5ce1c5fbce2681687ebbaa51dac12348a8d184129480bbf4a202b803fcbaf47b1e3b9d195bc24ca2fb8abebef"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x608, 0x0, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x4, 0x8, 0x80, 0xf7, 0x6c}, 0x4a, &(0x7f00000003c0)={0x5, 0xf, 0x4a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x80, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0xc, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "7d1b8740253f2276a687ba57d017450b"}, @ssp_cap={0x20, 0x10, 0xa, 0x79, 0x5, 0x10001, 0xf, 0x10, [0xff0000, 0xc00f, 0x0, 0x30, 0x0]}]}, 0x1, [{0x100, &(0x7f0000000440)=@string={0x100, 0x3, "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"}}]}) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x9, r2}) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='a\x00\x00']) 2.98333469s ago: executing program 0 (id=797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa010942ba9380d410000000000000002900000005000000", 0x30) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000101e04003040000102030109028600030109b001080b00010101200009040000000101200009240108000826008c11240802010000010000000200030002000c24030303045a020e"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x7e, &(0x7f0000000080)=@string={0x7e, 0x3, "3a93cf689f4d09edaed7eceb199a5f484c4bdfd240d3480d1be38e298e5bf8faa4585c0bb93194c644726b4f8a5acbe29d7577ea791adf6b11d1fa913d63e63ffc8dc585cd3953068f41453ce77cfe2dd1905e84ebbd0c6c207266eeacf44ba5958c19c5a2f2e93f353e7123ff1a6fc44bac45123075832ccee46fa9"}}, {0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x443}}, {0xc6, &(0x7f0000000180)=@string={0xc6, 0x3, "46f9219b8d04a1af4665faa5f0e2fdee5e4d316f940a5d7a9216815a5a1a4cb672bd3da58c23cfd0056a8821bb62e74e64de40cf636e90d0095911deeffb6e4c4aaab083b5e172436873379d419c09ea73b53a1af79eb95195a4918d94a133275d5ed507d7de666297619478fb436a5487fd61aa79bae9a2e9eed7bde176d7eb3e4bc7abbf792712267fc0d98d1a50e2cf083249e4c8616360405faa66d2f245f26e413dee7d8a038c06d5673df459c6d4949993426f5974dd0ce99d60cda43c377bd783"}}, {0x2f, &(0x7f0000000400)=@string={0x2f, 0x3, "e1720fd5437f4935480ff220a0d3221e663b578f57edd4daf3cfbf5d5fad917aedec39e151dbe966ea1a79b7e8"}}, {0x49, &(0x7f0000000440)=@string={0x49, 0x3, "fe2bf32b5d1fce160aeeefc5ebd93000d65c5a5d0466ab70a924d81156461f58b56b4694a480a89d46010d0cda35bd31a6f92e73ae6360c8e05b7186e5d58d2309e5766de5c34b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x447}}]}) 2.907920539s ago: executing program 4 (id=798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x7, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) (rerun: 32) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) (async) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x80}}, './file0\x00'}) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r5, 0x8, 0x70bd2d, 0x356, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007192180000000000bc201000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r6, 0xffffffffffffffff, 0x9, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f00000004c0)=[0x7e], 0xffffffffffffffff}}, 0x30) setsockopt$packet_int(r6, 0x107, 0x3, 0x0, 0x0) (async) getpid() (async) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRES16=r1], 0x48}}, 0x4000) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000200)="1a000f488b6498aae203223d137302000000", 0x12) sendto$inet6(r9, &(0x7f0000000300)="cd", 0x1, 0x8804, &(0x7f0000000100)={0xa, 0x4e23, 0x80, @loopback, 0xfffffffe}, 0x1c) 2.531867129s ago: executing program 1 (id=799): socket$kcm(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x9e, &(0x7f0000001440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60cb763e00283afffe800000000000000000000000000041ff0200000000000000000000000000018600"], 0x0) 2.494342455s ago: executing program 4 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000080)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\\b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xab\t\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00', 0x0) r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x42000, 0x0) sendto$inet(r2, &(0x7f00000002c0)="27cc33ce6e574fc78b39d8d051f24a981b61a8287d8831e734712dd18d5a8f8d715ee6bb5be00ccd9d209aac522bca4983b0002e2c62f4988844fbf186dda396e0d4ce7b8f98590752811e3494952fd8590ffb2e1ecd21f53546e80c05d6c7ad1c0b044e85860ddb0bbcbcfe62c3fb6ab94950f4b88d9782ce1b690b25e1d27c3e33b67a008ca9", 0x87, 0x10, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000100)=0xe2, 0x4) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x50, "", [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x3, 0x1, 0x7, 0x9, {0x9, 0x21, 0x5, 0x34, 0x1, {0x22, 0x6ae}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xf9, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xf, 0x2e, 0x7}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x7, 0x8, 0xbf, 0x8, 0x3}, 0x31, &(0x7f0000000380)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0xbd, 0x35, 0x3, 0xb98}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xff, 0x9, 0x1ff, 0x5}, @wireless={0xb, 0x10, 0x1, 0xd059ce959682be1b, 0x29, 0x4, 0x31, 0x9, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x0, 0xf, 0x40, 0xd}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa6, &(0x7f0000000440)=@string={0xa6, 0x3, "48441bdb7be096713e6e17780985c048ac5e53c7864d5be2204ba5fc4af7de4cd19393ba344aed0338497d4982b8e2dd9e5006977f58b5118f54e1996f33c1a8215925b8b86e506d016e9e51d1f30167187c654a5be35f765f7e4b38e50c17969eae99c0f882c8f4b4275534be3217c22192c495ebbdd8e62e01cb020900f758a9fa075341238e0b2f860e1e91ea6e750a9c00aa9b8ae2e4081a5f8b6e420f32e8691c1c"}}, {0x86, &(0x7f00000005c0)=@string={0x86, 0x3, "bcc3e538e2efca9a67c975e51d3efae99f08efb552b2d12f487ec408099089c3e2cd0b7f5b5873902dece919b878c5e9ef2f4692e8133fa1ecdd2cfa069e09f15c4451d42665c640a99be40366a2650dcabebd663c5f278251e0d8a49d0b7cb6e96f61ed2eadae8ddc9ad6335477f374be1b5636c0f53256a48f6efe775e37b43f86d747"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000840)={0x14, &(0x7f00000006c0)={0x20, 0x3, 0x9b, {0x9b, 0x31, "accab5a27d52f53076aee8571c36ec00c34ae5630b2b4901b2a5783f5e12b8ed8fce314cdcf3b58bbeade9963393bdfddb5ce20ec1b83dbc5c4e96d56b5bd2fa468555d041f4bdb00ec56253cb2e4c497187e6bd711c8aed0130d20fa5591613813e93a12d5ce145b591c1e9b0a417ca08ee7ab61706ca8c9520186850301b33e48bd0a325a54ca5854059c205210f89c120e371f59e1264be"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f00000007c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "b9e24380"}, @main=@item_4={0x3, 0x0, 0x9, "385f9eb8"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x544}}}}, &(0x7f0000000a40)={0x18, &(0x7f0000000880)={0x20, 0x1, 0x4b, "db343792a3709050157fd3b90ab0a8bac459abdcadefb1ae40da09f09ea0010341bdf5fe73d8e16ecde4ec4d42b658e2250a3a54b6a72bbc18c63b5f60fb6f62cf3c9b1034b70c8e003e86"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x1, 0x50, "106edef98e937e8a9c4aacef76c9f5022bc09597141fee13b5d7e5d65b67c14c73c29d1a44ec3b620ef293e10b76298adb5b029f7160774d187a9abaf9ec894041bb15100c2196b02f61a79c14770f89"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0xa}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202"], 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}}, 0x0) 2.347194858s ago: executing program 3 (id=801): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) close_range(r2, r3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) pread64(r6, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) read$FUSE(r6, &(0x7f00000042c0)={0x2020}, 0x2020) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}, 0x1d}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) preadv2(r7, &(0x7f0000000340)=[{0x0}, {&(0x7f0000001380)=""/129, 0x81}], 0x2, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000049c0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x4, 0x4, 0x1, 0x3, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000380)="f9a3e20b5480e0a065a49183743a3db520062a75972a1bbab423d7910b93d353c7f77c3c03dc655061adfd3d271baa7dc10d3a427e3e26161f08c424979aafc9d3c1641db6402a86446ed5dc0745c188bbb0b9981eca3f9ca71cf0e18b4df05dc6fe2f7a46e69ed2a06f8cc1176c02678e6e88aab1726d1f9ffbcfab43b50ece3a9cc6309e6e4016184767af176a8b11885b9b22322b", 0x96}, {&(0x7f0000000440)="6beeb77d90d50f02b004cde2cb85e19ab2212895ea01c94b342561a4cfb27c52bba3d9a305b7482ab1cd2f03409d84", 0x2f}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="d3ed469a0c24729d1991ba897024844a885974cda95c0b794f549c4ff2dfc2c1cf95a29b4c3eb7e061648793e0c7b14387670c05b570ee5c90c3ff69ad8c27492038568b221d1c88210eb9792180637adf66f435ded7c8c8031a005fc527635f83fee169479e627a39275a8d89427a4af892843bc596813d51ea0f6961f0327814bde1a298a828446d87d146ce82dba579f75d2d71b8c5f4e5bea25136974914011a920ef846a00887d97f84b5a7", 0xae}], 0x4, &(0x7f0000002540)=[{0x24, 0x103, 0x4, "d2d860335be1e8ac3e5039fc9b6eb87fb40b691b6821bbab"}, {0xb0, 0x10c, 0x7, "6d0ae775c8637602a7d3a4b6789cb6018afcc24d6fe13635a57c1883fc5c656e2b654cea6aa2f22b59a21935056a6bbf5826e43e9993ee451ca361b18d7e12b4890de33f638a0ba96fa5135bf421ffe7c4b6dedbc67940a9fc2dfd580f6d223c292f9318f98382cf5f78b54ec6a4f91dd7b3b030d5236fa38de30838113012c788f93339e587abfba6257cea69fb442a50f2cfaaa8d84517d5e5aedaf542d460ab"}, {0x58, 0x114, 0x7a4, "c275b5e63d295ba47c084e9af84e553fa24c6f424445b309acb49ebc55256514d3a00b85baae15e5245228ac648a0040b0bdbf1ac9861032eec61f4ada197e78a64cf18646e002797a"}], 0x12c}}, {{&(0x7f0000002680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002700)="949c93e761b9d51f92c023c298e507e3d9441c0b1620beb3be9f75bc1e09f0d2fe956e33406a0b8d5206ee9aa7a454bf21edb7cd640743f2dee659b6f64db3b2ae682d3a4132e82452f42182c5", 0x4d}], 0x1, &(0x7f00000027c0)=[{0x74, 0x10a, 0x6, "bc33ac2bfdb3bd494da231328b3d0b4083fd00d62018c7c634be2a802abfbf966da5ca07a7d2ad13c7b0149a490e3edb6ed7bf71d00849e0c1e12b3b6cd8aec5610cf8fb2d985f83c8be9c831995b74c0415d49bcd3df8548dae052c76a5dccd75fd58d154200b"}], 0x74}}, {{&(0x7f0000002840)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e23, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f00000028c0)="f9cf32edbc1d3da828f851e3e3ce9531fbdf9138e7edf26a20571e79cdb322297e18a684d93d68ca0991243fc49c916fbea119fb498df04477416db4e34cf3e987cf8245ab9c4364ecf764f6c0551fb850a203a4a8eacb2598d7fa61cccd0c5e5505f3c196d9df417f402f09916bdf2395380cd324b697ae5ab8036b42df", 0x7e}, {&(0x7f0000002940)="7357be6f6fdc63f71e33491a5b5cbbf706149ea6f37ee3efcacbe071b8ccffbf9da8a57c15d4dbc2ba1c651e6ac18f16e1b81f05e8f4300152dc7895ea15ab05be84299c1933bfd6ad0f88e41ca805c74689462ad6095fbacba09b6223ea00354dafd04417ca7362f3d41e741ecdf46aca4eea31c388e7ee5d8cc854eb8bbafbd3a7e042c869662a104fb9b1a59b32c23e833b9970bbfafd4d5e66b684da1becaaf4765d39159fceab575e", 0xab}, {&(0x7f0000002a00)="3cf30428d9739f5db3a422109de5118d18b69fa4927545b89faa8680069568ff2213edb220fe9e1e241d6074874354f1b2a0b15cd8c43aaaeee830bc0245a511286a6c26b175557955fe9d4920db90014d57d6a2186177bc8549015d582b63cd28bb0f7b9bb04d563619ee6ce6fbc9c489f6", 0x72}, {&(0x7f0000002a80)="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", 0xfc}, {&(0x7f0000002b80)="2638f3b2422d7ee42c3b1b81142cf9dde1e78e1d80766015ad646e33a08975609425be83fcd13e787786f8ff49473f1b37faf4bf8230316d6cdc014a5cbdc1edad1ec5bea7be98ead013b74d2776ca7a87c7d34ca1", 0x55}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="8ee9f5377c70065b35e3b1242019f80f4a173044278ff43ebdf1fc78dbbb11869d67023fd0773f56760ee08dca7b5bf71ecef21ad9fcb549a48f192dea8f6219ac4f29441d6246d2996dc0a0f1ceda4beaf14763cdc4ecab86d8c00f241c337fd3939884190f58938b15696d2c482dd70415d9c7acb0959f57af50f279eec6e5517b26f4d7d8669b79f4a3e4f056de6beb8b5b20b276a887d2316cc8cffc65f449b5ab9cb33092fd67dbe5f74799fe9432cfd7207d37239fd7b694dbc7052a3e604613f2f814d156d1e020a373f3aec0", 0xd0}, {&(0x7f0000003d00)="5f40edc3da3a698bba0375fd95a5794cf0dd15ccf12e041b512639b86cf9095a04b8cb9ce49259406280961cea44fffc8d4355522d77d93a9f0ede1922bcbfc82f25926530d64db63caa839cd3193e84c3a50ef773afd33f5f8fe55b11491cf743123e173f0f01d4b45f973c4acad1fc01922ec67aa2a57ec76f57f780d6c5ae44bd3a", 0x83}, {&(0x7f0000003dc0)="31327552501daeedf1569e0af2384ff487c932aaa95fc47a7b3942c973e3b26cf7cc9b26aa7a6e329e11bb8649162e8bc3859b2c503fdb404bc05a7324d47229ec", 0x41}], 0x9, &(0x7f0000003ec0)=[{0xf0, 0x0, 0x7, "0db72811ba75644caeb06c3d4321b733fea7823e6298ef8b0aaeae73f3c8fe257568ebe0720de7cce899538bb358ca4c55fd8fbd96044d0e0ef34541afd88bd4c1d6df0b6217e38d50de52167b0abcb1c8d51492ac06eefa08f233ecb58656455a827fc59e7268d3d72a673e0442e3a08b43d2ab04ccf93023dde13d43e217d9f29e86650752f2c06c7b4f0b5857354480e5c38b74a0f543f9d3a91bb7811c4470289e9afa87bc2996138ad04103c4a9fc48d6adfc5b70288569ccfd2ab5c3967a06f356538e4b6067c61d367d2dff31f640f1ffa5eebc2ffd2c7cba0aba09ca59"}, {0x30, 0x112, 0x8, "b8ebb83c92bbbea5f06f2b8e69eb2a6990ddbcbaf76ddfe98c1da6b756a3b05974c1c2c7"}, {0x2c, 0x10f, 0x9, "4249f056527a4abe1310f06aaac6c69020887620a45d9d7c25b9de5960d3cd1e"}, {0xb4, 0x23, 0x400, "f343a7da5f7cd7d70589eecaac9db919a3ba0bda4504832cd7ca5369eca9f51d11175a8ca39ca6331d3d5a3719133a726b64751ef77aba186461407e31a5f1145c2940687d508865e5c740e96e242672850014b1ad59623d022eaed4821e01d6c968011a91a3a66e960f17149755f221d68375bbda7592e44532fc22bd1af46cc7bc3000d72a1f7aa64ae0db8c2573e0c97f518f8a49cd781924c0cd48d149da5a9402e42e53"}], 0x200}}, {{&(0x7f00000040c0)=@can, 0x80, &(0x7f0000004140)}}, {{&(0x7f0000004180)=@generic={0x2a, "01dc389f125fdf6dc366439506f77fb4fa1696efb0aae2df366d5e9b7b8bbaca362cb7b6e0ac17142535f92e3144fd69ba8c293faa540aa99faf0d6a241abc8760328fb1757950b9a6a1ca0b8e4b40e9078fcace04fd1d3eab2b874342cd1081df9b619ce21ca4cad00f31db4bbd1b67111f5d09f189687470853f87a8f1"}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004200)="0129fa7a6c0689ad5ea51019090567c7f3688b584b0ba066b7fc434ba520ecfc8717ac1aa0a8615470efe3342ac87884558e077382647a", 0x37}, {&(0x7f0000004240)="1459f738e036f3818741b50a9870c68275de39970d92f32cc382f397979bc9b2a33711d0a558a355f3f185cd42a02235dc41ea8c417179f58f89a057e9e0f63b7c2910c37bff0b0e38c7d0efa8790cad046311af7be22bf566ed2acd2b2c61cb84257fe5f05687ef55989e0f349ada568545c4958fed043b77c39ab6bf721ee71cfc39fc764ace301a8099138bda77fa02d6767ece11793e931f08104a5223804f0d078a707542053ad4c521cc6ed03499208acb9eaf718d4dc76b91602fb9516b6179058e4416e74bea3c418fe9ffcf0b7d7368", 0xd4}, {&(0x7f0000004340)="75d7e75c250023fbc499369b1bab5a0b9b42ead523e2a5f0a6c6efe85f3a90b692f2f21f23d4391ec459cfde1fe58a9bb01aaa102897980d2f0b2e6d32ab4c9a69a07ebc6f23fdd20700a6842aab6abb339441d37cfc7d630a9b125b38432a58b806a14ae70a45ced0095e60ec630ada7a0f212c46c680f00e50137f02e4518280c9133d63d4edab08d0c27d051c439e5bf63d184a47d17741a6104af2c6bad6d87fdfe26c884ebe9b23ce170d6fea82061fa51767222aad4432367cf031d7873a90e1a2a9533bb424481bd853b76d24d91d00e26f54df591b", 0xd9}, {&(0x7f0000004440)="1d206026ede81a0b", 0x8}, {&(0x7f0000004480)="e95cef6456b782548f1da562eca08a8f61fd4fd41c052eceef6bf2f48aeb4ef90d198b92dea5f8dd2952c6908dfef00cb14704833e2be5795e09b8819601ab26e8bdb647cf84c0d673d337bcc32f55b084dcdfc1e1fd7dee7b25188f1b95681e40fee30d94d66a", 0x67}, {&(0x7f0000004500)="e30d85451c81a3e32109abecf29ed2478be04c73e2b479a65640324834ca4205d3a64aac3c7b35b2053327d970b899e1ee9285a7179b540568474c5f39d7d30ac17f1dd6d49b7020e709598b970f7062dee9d4b0e511831a78b7e0f04a6a0fcaca04ac250daa839bdd0e5a597fe8df128fbffd01481966296e42f9f8ef3ce5c00261d14b225fe9b88759ca5435e2638ac648ce0e9b", 0x95}, {&(0x7f00000045c0)="407fe9f874a7507b86872940cd5abd6fa2b3fae6a4878f06e14018ac12a8767dfa88d09350fdfe0aec8c0815c5c5f410f00111adb6711cbc72cfa0d851148c01550c0daea1287f99de7ea3626f7c5a82dd41136d333164c09aa24d235f0e01ef3e59c7704294d6c71054d0aa7e67ed4c7c5675c08a43224d7c4032856817453d1abd245646fe39153261042f19d35a3f953f9f6dd9eb5d35f7f3c91ee55a3f8e81e3530c630c69b48cfebb1c3f25cb6034d579f7acd44173887dee41d3a6a270c66c3404f6534205a4b165d12d481c1e2dd4f0241ba222156c14ecb76b", 0xdd}], 0x7, &(0x7f0000004700)=[{0xe0, 0x11d, 0x1, "3fc4a638cd68b97a055fe697d43e59c7df9316df13f650ee8b71afb34a80cf5b69f3b18e8cf6e13db9c16ad1268dafacf9a73bd6c0eca8b37779016ad7378fec8f355b5179ea3c2bc854c81bda4a39bd553ef4b7aa308d045d2a2e0fc71568b3eab123ca59d949e734f896c2c34f09238742d8b3c00c50c45b5ef53e3200c8bb9a3f1fa48c8178df5bfb6d9eb495e9dd0a3f23921a5e4ac058e80ad0a507f296c962b0550291118765c360434cbe94f2ba221ece6a371f4f63e1d1fbde318143a894233b8024ae6dc8ace3a4226924800ec30b"}, {0xd8, 0x118, 0x9, "9bcee6f0254885a7ef725f5f1d24ee5ea7f5bcb6c02832a08d80c021166a76fd3b5182b8641d5fd53e90fd894d7eb51d7c7d2ff1159841a8ee50c3d491f7f507361c439c8f7828632e6f08ce7cbb19c2144ad4088e005b1127d4ef98124153b1381d6eaafaf0553ce95bebad6f693d50973af0bdda57bb3a327296f51c8aab7e6411828b63daaa6187700ced569ed65f439cefdd2a7f7e88c87bfde21b9c1d52ca31493c335580293e07d994eeaef33d3cec54c4b005e5989c717af008b1dfba7008b87ee290381e1b"}, {0x7c, 0x102, 0x6, "392cd12cb0856f529ad2f792a80d593740de822dd05a757816d32466d1a542d51452128b29cca105e3893727c66fe665b3942b2208b4a3819fc99f25dcdecd2fea203e1ce0e685b1feccf60f4b949fe986d5a682722e0f64132e7976dfb2c8503dd5a3432b3672657780fa52f69105fb"}, {0x58, 0x1, 0x80000000, "380ddbcda86dbdc144815b44f8f3975e3bd8815fc0bffadcd79e2111ea55769bb6a16cda756d7b297df22648308ab9dbf9006b79b563122524f4ad78f5dcb35ee9d72cf015a243eda0b2"}, {0x14, 0x11, 0x30f, "e38eb90b74"}], 0x2a0}}], 0x5, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 2.252064542s ago: executing program 1 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000d40)={0x0, 0x700, &(0x7f0000000d00)={&(0x7f0000000b80)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x1, 0x0, 0x2, 0x7, 0x0]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) 2.142149041s ago: executing program 1 (id=803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = syz_open_dev$audion(&(0x7f00000004c0), 0x0, 0x12140) ioctl$USBDEVFS_RESET(r3, 0x5514) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x5, 0x2, [0x9, 0x3]}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x67, 0x0, 0x0, 0x40000005}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008001}, 0x40000) sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000040)=@llc={0x1a, 0x323, 0x2, 0x5, 0x9, 0x5, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="6c0ae05f9fe99052b5", 0x9}, {&(0x7f00000001c0)="12c9146061a1cf9572a17eed550a1a8c5a68cbbb62b283719d6f68ed9c2c0d9e7ed285a56649485edd42571e0ac54c4daff09da67550e2937027adb6aaeb619580b29bd006f7983bae4e3f151a2adac103b89c3914fa5a7d6a7a8544e4e90e9732aac18252c496b226e8b2f3fe320c3955c8cbe4ea406d8b3c5660ce23eb8c43f1198ac16ac550b15fcc53e544d9116ef53dd7be017c9cdd032d13d99982ee3686366ad22ccd10a08f470e285fb3ca460e24f3c9ddea0e2a2be998ba9354c8a8bfaba916fca724f75139624d8f529e600923846bddbba5ddad4cba9ef6dbf2ba5ca1516a84a545007d6c891e65b2755b1a82cc70", 0xf4}, {&(0x7f00000002c0)="3c53395b8d256add4f9526f9a58945e47e134b859e64c907c500bd", 0x1b}, {&(0x7f0000000300)="957e1143b94ded8f24bb2f336e096d392f7c98af16e5ef8d865cac066e8725b013287e02fc1ba3edd837c5f910cb974a9cb61d3a78feb9acd3e0c7a038829994c0c421f28eaddcbcac9e99f4a20c476825e9f998e5c3ced38fd37471fc2185b9a7d2d402735d5a0484dcd6bc1990340b8a87806a56e9ec047d30987aba5126d3b441b6498953fa75ae512650b6a8a73b9537bf7375bb29b7e88cbb8c4c6d1f995c90d11f977461b36d2b580e289869d49dbbc2573ffa8cab5e9e6938950877a6b81886d3c989bee9d3332c982be2d45878302b", 0xd3}], 0x4}, 0x40000) 1.885161021s ago: executing program 3 (id=804): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r8, 0x0, r7}) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000"], 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x0, 0x90, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x81, 0x8, 0xf5}, {0x6, 0x24, 0x1a, 0x800, 0x18}, [@acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x61, 0x7, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xdd, 0x7, 0x9}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0xf5, 0xe, 0xe, 0x10, 0x7f}, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="080f40000507100210100800079002020f01800b187d02060018100aff03100000001e0e00003f00000f0000000f0000000a100302000000020000d55599cb4d7100ac18cf9ff685dbbe964e0e0949ed1b998c262b633a398aac86f024d73a966c5d63f9e96e0b097a3aff457112eeec0240a48904ad568b7d1a995c46745514fdf735d9fb63387e819c6da01a0200000000"], 0x1, [{0x97, &(0x7f0000000400)=@string={0x97, 0x3, "b50b4c0433dc77f4703922aeab96edb20b10af220d54ba71a850135b89a2295b991dd8abc805ff126cf245f2155a6fbcc5d976dfa5f218b9422be80060189cfb1162a44bc492c279dd761955103c217b7ec12f2955200c9658578ec39a89d47ba0d2aa4ffedadf59207e10c0082a83ae58bf0f4958c58e2d12f12f463318ea69d17c1f46404330b9b84c4380e7d2752acec5bf4f1b"}}]}) 1.587293675s ago: executing program 0 (id=805): r0 = socket$kcm(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4b9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x80) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r5 = gettid() rt_sigqueueinfo(r5, 0x11, &(0x7f0000000940)={0x27, 0x2, 0x1}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x3, {0x2, 0x0, 0x6}, 0x2}, 0x18) sendto(r2, 0x0, 0x0, 0x4, &(0x7f0000000440)=@isdn={0x22, 0x81, 0x1, 0x1, 0x8}, 0x80) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000900)=@in6={0xa, 0x4e20, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x20, 0x29, 0x32, "b95bba186378cde4354752a45ce4faa804"}], 0x20}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x410, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x4, 0x0, [{0xb3b, 0x0, 0x9}, {0xb31, 0x0, 0x1}, {0xa35, 0x0, 0x6f}, {0x985, 0x0, 0x3ff}]}) syz_open_dev$dri(0x0, 0xffffffff, 0x8000) r7 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}, @multicast1}, {0x17, 0x7c, 0x0, @multicast1=0xe0000300}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket(0x10, 0x3, 0x0) getsockopt(r8, 0x1, 0x6dc, 0x0, &(0x7f0000000200)) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/75, 0x4b) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000000)) 1.568028447s ago: executing program 4 (id=806): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00000b5000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x4278e000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000080)=0x8, 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) listen(r4, 0x3) listen(r3, 0x3) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0x20) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) 1.46005924s ago: executing program 0 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, 0x0, 0x1, 0xfe, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1.352608384s ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002"], 0x1c}}, 0x20000080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250500000008000200080000000800030004000008"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250500000008000200080000000800030004000008"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r6, 0x515, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.249962154s ago: executing program 0 (id=809): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x40440d0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xf, 0x2, 0x9) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x15, 0x0) 1.168004173s ago: executing program 1 (id=810): r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0x0, 0xff, 0xa7a3d69a471bef6d, 0xffffff00], [0x0, 0xff, 0xff, 0xffffff00], 'veth0_to_hsr\x00', 'bridge0\x00', {}, {0xff}, 0x84, 0x8, 0x4, 0xc}, 0x300, 0xe4, 0x10c, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff000000], 0x9, 0x2, {0x2db1e03a}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff, 0xff], 'veth1_to_hsr\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x7, 0x0, 0x20}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0xc, "c8e30d766fb12969355a35abf46e8e78c94d9ac99fb96a51c720163d518d"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300007b40ac0545024000010203010902240001010260040904006302030102100905090581032000a64b0400000000000000"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0xa, 0xffe0}, {0xfff1, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x48}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) r4 = syz_open_dev$dri(&(0x7f0000000080), 0xa605, 0x300) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca6dc95}, 0x4008840) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000004a80)={0x0, 0x17, &(0x7f0000004a40)={&(0x7f0000004a00)={0x10, 0x3f8, 0x20, 0x2070bd28, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}}, 0x800) connect$qrtr(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x6b, 0x4) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnetconf={0x1c, 0x52, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r8) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r7}, 0x10) 1.059268283s ago: executing program 0 (id=811): syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x87) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141040, 0x15) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0x80000000}], 0x1, 0x2b, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 777.691857ms ago: executing program 3 (id=812): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)={0x28, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x28}}, 0x0) 664.002274ms ago: executing program 4 (id=813): r0 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 661.363589ms ago: executing program 3 (id=814): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x2, 0x80, 0x7, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x3}, 0xe) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 495.566917ms ago: executing program 3 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "5916920a2710ed"}]}], {0x14}}, 0x54}}, 0x0) (fail_nth: 4) 163.874584ms ago: executing program 3 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000080)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\\b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xab\t\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00', 0x0) r2 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x42000, 0x0) sendto$inet(r2, &(0x7f00000002c0)="27cc33ce6e574fc78b39d8d051f24a981b61a8287d8831e734712dd18d5a8f8d715ee6bb5be00ccd9d209aac522bca4983b0002e2c62f4988844fbf186dda396e0d4ce7b8f98590752811e3494952fd8590ffb2e1ecd21f53546e80c05d6c7ad1c0b044e85860ddb0bbcbcfe62c3fb6ab94950f4b88d9782ce1b690b25e1d27c3e33b67a008ca9", 0x87, 0x10, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000100)=0xe2, 0x4) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x50, "", [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x3, 0x1, 0x7, 0x9, {0x9, 0x21, 0x5, 0x34, 0x1, {0x22, 0x6ae}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xf9, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xf, 0x2e, 0x7}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x7, 0x8, 0xbf, 0x8, 0x3}, 0x31, &(0x7f0000000380)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0xbd, 0x35, 0x3, 0xb98}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xff, 0x9, 0x1ff, 0x5}, @wireless={0xb, 0x10, 0x1, 0xd059ce959682be1b, 0x29, 0x4, 0x31, 0x9, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x0, 0xf, 0x40, 0xd}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa6, &(0x7f0000000440)=@string={0xa6, 0x3, "48441bdb7be096713e6e17780985c048ac5e53c7864d5be2204ba5fc4af7de4cd19393ba344aed0338497d4982b8e2dd9e5006977f58b5118f54e1996f33c1a8215925b8b86e506d016e9e51d1f30167187c654a5be35f765f7e4b38e50c17969eae99c0f882c8f4b4275534be3217c22192c495ebbdd8e62e01cb020900f758a9fa075341238e0b2f860e1e91ea6e750a9c00aa9b8ae2e4081a5f8b6e420f32e8691c1c"}}, {0x86, &(0x7f00000005c0)=@string={0x86, 0x3, "bcc3e538e2efca9a67c975e51d3efae99f08efb552b2d12f487ec408099089c3e2cd0b7f5b5873902dece919b878c5e9ef2f4692e8133fa1ecdd2cfa069e09f15c4451d42665c640a99be40366a2650dcabebd663c5f278251e0d8a49d0b7cb6e96f61ed2eadae8ddc9ad6335477f374be1b5636c0f53256a48f6efe775e37b43f86d747"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000840)={0x14, &(0x7f00000006c0)={0x20, 0x3, 0x9b, {0x9b, 0x31, "accab5a27d52f53076aee8571c36ec00c34ae5630b2b4901b2a5783f5e12b8ed8fce314cdcf3b58bbeade9963393bdfddb5ce20ec1b83dbc5c4e96d56b5bd2fa468555d041f4bdb00ec56253cb2e4c497187e6bd711c8aed0130d20fa5591613813e93a12d5ce145b591c1e9b0a417ca08ee7ab61706ca8c9520186850301b33e48bd0a325a54ca5854059c205210f89c120e371f59e1264be"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f00000007c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "b9e24380"}, @main=@item_4={0x3, 0x0, 0x9, "385f9eb8"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x544}}}}, &(0x7f0000000a40)={0x18, &(0x7f0000000880)={0x20, 0x1, 0x4b, "db343792a3709050157fd3b90ab0a8bac459abdcadefb1ae40da09f09ea0010341bdf5fe73d8e16ecde4ec4d42b658e2250a3a54b6a72bbc18c63b5f60fb6f62cf3c9b1034b70c8e003e86"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x1, 0x50, "106edef98e937e8a9c4aacef76c9f5022bc09597141fee13b5d7e5d65b67c14c73c29d1a44ec3b620ef293e10b76298adb5b029f7160774d187a9abaf9ec894041bb15100c2196b02f61a79c14770f89"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0xa}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202"], 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}}, 0x0) 0s ago: executing program 2 (id=817): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 4) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) kernel console output (not intermixed with test programs): 631] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input24 [ 197.780470][ T5362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.816379][ T5362] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 197.842330][ T5631] dvb-usb: schedule remote query interval to 100 msecs. [ 197.858103][ T5362] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 197.885983][ T5362] usb 1-1: Manufacturer: syz [ 197.896166][ T5631] pctv452e: pctv452e_power_ctrl: 0 [ 197.896166][ T5631] [ 197.923450][ T5631] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 197.972816][ T5362] usb 1-1: config 0 descriptor?? [ 198.040141][ T5631] dvb-usb: bulk message failed: -22 (4/0) [ 198.074065][ T5631] dvb-usb: error -22 while querying for an remote control event. [ 198.219264][ T5631] dvb-usb: bulk message failed: -22 (4/0) [ 198.258627][ T5631] dvb-usb: error -22 while querying for an remote control event. [ 198.408918][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 198.424848][ T808] dvb-usb: error -22 while querying for an remote control event. [ 198.467872][ T5362] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0006/input/input25 [ 198.578834][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 198.598051][ T808] dvb-usb: error -22 while querying for an remote control event. [ 198.619804][ T5631] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 198.650095][ T5362] creative-sb0540 0003:041E:3100.0006: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 198.730019][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 198.730070][ T808] dvb-usb: error -22 while querying for an remote control event. [ 198.787826][ T808] usb 4-1: USB disconnect, device number 17 [ 198.809590][ T5631] usb 3-1: Using ep0 maxpacket: 32 [ 198.813708][ T5631] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 198.835257][ T5631] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 198.835290][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.835311][ T5631] usb 3-1: Product: syz [ 198.835333][ T5631] usb 3-1: Manufacturer: syz [ 198.835345][ T5631] usb 3-1: SerialNumber: syz [ 198.839603][ T5631] usb 3-1: config 0 descriptor?? [ 198.846665][ T5631] cdc_ether 3-1:0.0: missing cdc header descriptor [ 198.847606][ T5631] usb 3-1: unsupported MDLM descriptors [ 199.267300][ T808] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 199.313029][ T7533] fuse: Bad value for 'fd' [ 199.497136][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.497999][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.535581][ T7535] FAULT_INJECTION: forcing a failure. [ 199.535581][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.535647][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.3.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.535675][ T7535] Tainted: [L]=SOFTLOCKUP [ 199.535682][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.535694][ T7535] Call Trace: [ 199.535702][ T7535] [ 199.535710][ T7535] dump_stack_lvl+0xe8/0x150 [ 199.535740][ T7535] should_fail_ex+0x412/0x560 [ 199.535774][ T7535] _copy_from_user+0x2d/0xb0 [ 199.535805][ T7535] kstrtouint_from_user+0xd6/0x180 [ 199.535838][ T7535] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 199.535882][ T7535] proc_fail_nth_write+0x8e/0x210 [ 199.535912][ T7535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.535945][ T7535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.535973][ T7535] vfs_write+0x29a/0xb90 [ 199.536012][ T7535] ? __pfx_vfs_write+0x10/0x10 [ 199.536045][ T7535] ? __fget_files+0x2a/0x420 [ 199.536075][ T7535] ? __fget_files+0x3a0/0x420 [ 199.536097][ T7535] ? __fget_files+0x2a/0x420 [ 199.536132][ T7535] ksys_write+0x150/0x270 [ 199.536165][ T7535] ? __pfx_ksys_write+0x10/0x10 [ 199.536197][ T7535] ? asm_int80_emulation+0x1a/0x20 [ 199.536224][ T7535] do_int80_emulation+0x181/0x530 [ 199.536244][ T7535] ? trace_irq_disable+0x3b/0x140 [ 199.536272][ T7535] ? asm_int80_emulation+0x1a/0x20 [ 199.536292][ T7535] ? clear_bhb_loop+0x40/0x90 [ 199.536314][ T7535] ? clear_bhb_loop+0x40/0x90 [ 199.536340][ T7535] asm_int80_emulation+0x1a/0x20 [ 199.536360][ T7535] RIP: 0023:0xf71161ab [ 199.536379][ T7535] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 199.536397][ T7535] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 199.536419][ T7535] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d65d0 [ 199.536433][ T7535] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.536445][ T7535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.536457][ T7535] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.536470][ T7535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.536501][ T7535] [ 199.617032][ T7533] ipip0: entered promiscuous mode [ 199.617110][ T7533] ipip0: entered allmulticast mode [ 199.632528][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 199.659086][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 199.954306][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 200.246983][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 200.389546][ T5722] usb 3-1: USB disconnect, device number 28 [ 200.483181][ T808] usb 1-1: USB disconnect, device number 29 [ 201.181196][ T7560] veth1_to_bond: entered promiscuous mode [ 201.191588][ T7560] veth1_to_bond: entered allmulticast mode [ 201.559521][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 201.569018][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 201.576189][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 201.583898][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 201.590374][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 201.863818][ T7557] veth1_to_bond: left allmulticast mode [ 201.883889][ T7557] veth1_to_bond: left promiscuous mode [ 202.513509][ T7580] FAULT_INJECTION: forcing a failure. [ 202.513509][ T7580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.513555][ T7580] CPU: 1 UID: 0 PID: 7580 Comm: syz.0.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.513576][ T7580] Tainted: [L]=SOFTLOCKUP [ 202.513581][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.513592][ T7580] Call Trace: [ 202.513598][ T7580] [ 202.513606][ T7580] dump_stack_lvl+0xe8/0x150 [ 202.513627][ T7580] should_fail_ex+0x412/0x560 [ 202.513653][ T7580] _copy_to_user+0x31/0xb0 [ 202.513677][ T7580] simple_read_from_buffer+0xe1/0x170 [ 202.513700][ T7580] proc_fail_nth_read+0x1bb/0x230 [ 202.513722][ T7580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.513744][ T7580] ? rw_verify_area+0x2a6/0x4d0 [ 202.513764][ T7580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.513784][ T7580] vfs_read+0x20c/0xa70 [ 202.513809][ T7580] ? __pfx___mutex_lock+0x10/0x10 [ 202.513834][ T7580] ? __pfx_vfs_read+0x10/0x10 [ 202.513885][ T7580] ? __fget_files+0x2a/0x420 [ 202.513916][ T7580] ? __fget_files+0x3a0/0x420 [ 202.513941][ T7580] ? __fget_files+0x2a/0x420 [ 202.513965][ T7580] ksys_read+0x150/0x270 [ 202.513988][ T7580] ? __pfx_ksys_read+0x10/0x10 [ 202.514012][ T7580] ? asm_int80_emulation+0x1a/0x20 [ 202.514031][ T7580] do_int80_emulation+0x181/0x530 [ 202.514044][ T7580] ? trace_irq_disable+0x3b/0x140 [ 202.514066][ T7580] ? asm_int80_emulation+0x1a/0x20 [ 202.514079][ T7580] ? clear_bhb_loop+0x40/0x90 [ 202.514094][ T7580] ? clear_bhb_loop+0x40/0x90 [ 202.514111][ T7580] asm_int80_emulation+0x1a/0x20 [ 202.514125][ T7580] RIP: 0023:0xf71d61ab [ 202.514138][ T7580] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 202.514151][ T7580] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 202.514166][ T7580] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0 [ 202.514176][ T7580] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 202.514184][ T7580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.514192][ T7580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.514201][ T7580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.514222][ T7580] [ 202.707728][ T7582] sctp: [Deprecated]: syz.0.561 (pid 7582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.707728][ T7582] Use struct sctp_sack_info instead [ 202.723821][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.561'. [ 203.431065][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.474614][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.788813][ T7587] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 203.949153][ T7587] usb 4-1: device descriptor read/64, error -71 [ 204.087172][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.143959][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.199275][ T7587] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 204.206453][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.287599][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.339477][ T7587] usb 4-1: device descriptor read/64, error -71 [ 204.432552][ T7616] FAULT_INJECTION: forcing a failure. [ 204.432552][ T7616] name failslab, interval 1, probability 0, space 0, times 0 [ 204.458250][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.1.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.458285][ T7616] Tainted: [L]=SOFTLOCKUP [ 204.458291][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.458303][ T7616] Call Trace: [ 204.458312][ T7616] [ 204.458321][ T7616] dump_stack_lvl+0xe8/0x150 [ 204.458350][ T7616] should_fail_ex+0x412/0x560 [ 204.458383][ T7616] should_failslab+0xa8/0x100 [ 204.458429][ T7616] __kmalloc_noprof+0xe8/0x760 [ 204.458458][ T7616] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 204.458488][ T7616] ? sock_kmalloc+0xd6/0x160 [ 204.458525][ T7616] sock_kmalloc+0xd6/0x160 [ 204.458558][ T7616] af_alg_alloc_areq+0x99/0x200 [ 204.458588][ T7616] skcipher_recvmsg+0x321/0x1140 [ 204.458620][ T7616] ? __lock_acquire+0x6b5/0x2cf0 [ 204.458659][ T7616] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 204.458688][ T7616] ? aa_sock_msg_perm+0xf1/0x1b0 [ 204.458717][ T7616] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 204.458742][ T7616] ? security_socket_recvmsg+0x7e/0x2c0 [ 204.458773][ T7616] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 204.458803][ T7616] sock_recvmsg+0x172/0x1b0 [ 204.458828][ T7616] ____sys_recvmsg+0x1e6/0x4a0 [ 204.458866][ T7616] ? __pfx_____sys_recvmsg+0x10/0x10 [ 204.459002][ T7616] ? get_compat_msghdr+0x34b/0x4c0 [ 204.459148][ T7616] ? __lock_acquire+0x6b5/0x2cf0 [ 204.459225][ T7616] ___sys_recvmsg+0x215/0x590 [ 204.459311][ T7616] ? __lock_acquire+0x6b5/0x2cf0 [ 204.459378][ T7616] ? __pfx____sys_recvmsg+0x10/0x10 [ 204.459474][ T7616] ? __fget_files+0x2a/0x420 [ 204.459589][ T7616] ? __fget_files+0x3a0/0x420 [ 204.459681][ T7616] do_recvmmsg+0x3a5/0x800 [ 204.459783][ T7616] ? __pfx_do_recvmmsg+0x10/0x10 [ 204.459906][ T7616] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 204.459989][ T7616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.460095][ T7616] __sys_recvmmsg+0x1a5/0x290 [ 204.460181][ T7616] ? __pfx___sys_recvmmsg+0x10/0x10 [ 204.460259][ T7616] ? ksys_write+0x242/0x270 [ 204.460370][ T7616] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 204.460500][ T7616] __do_fast_syscall_32+0x229/0x6e0 [ 204.460554][ T7616] ? do_fast_syscall_32+0x33/0x70 [ 204.460604][ T7616] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.460677][ T7616] ? asm_int80_emulation+0x1a/0x20 [ 204.460734][ T7616] ? do_int80_emulation+0x286/0x530 [ 204.460784][ T7616] ? trace_irq_disable+0x3b/0x140 [ 204.460870][ T7616] do_fast_syscall_32+0x33/0x70 [ 204.460923][ T7616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.460986][ T7616] RIP: 0023:0xf7f6501c [ 204.461050][ T7616] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 204.461102][ T7616] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 204.461151][ T7616] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 204.461188][ T7616] RDX: 0000000000000001 RSI: 0000000000000041 RDI: 0000000000000000 [ 204.461217][ T7616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.461239][ T7616] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.461268][ T7616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.461338][ T7616] [ 204.472394][ T7587] usb usb4-port1: attempt power cycle [ 204.629487][ T7621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.568'. [ 204.809114][ T7587] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 204.833494][ T7587] usb 4-1: device descriptor read/8, error -71 [ 204.961343][ T7630] FAULT_INJECTION: forcing a failure. [ 204.961343][ T7630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.961397][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: syz.1.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.961424][ T7630] Tainted: [L]=SOFTLOCKUP [ 204.961432][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.961445][ T7630] Call Trace: [ 204.961453][ T7630] [ 204.961461][ T7630] dump_stack_lvl+0xe8/0x150 [ 204.961492][ T7630] should_fail_ex+0x412/0x560 [ 204.961525][ T7630] _copy_from_iter+0x1d3/0x1670 [ 204.961558][ T7630] ? rcu_is_watching+0x15/0xb0 [ 204.961602][ T7630] ? __pfx__copy_from_iter+0x10/0x10 [ 204.961636][ T7630] ? netlink_sendmsg+0x650/0xb40 [ 204.961665][ T7630] ? skb_put+0x11b/0x210 [ 204.961694][ T7630] netlink_sendmsg+0x6c0/0xb40 [ 204.961732][ T7630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.961764][ T7630] ? aa_sock_msg_perm+0xf1/0x1b0 [ 204.961792][ T7630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.961822][ T7630] ____sys_sendmsg+0x972/0x9f0 [ 204.961860][ T7630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.961893][ T7630] ? kstrtoull+0x12f/0x1d0 [ 204.961923][ T7630] ___sys_sendmsg+0x2a5/0x360 [ 204.961951][ T7630] ? __lock_acquire+0x6b5/0x2cf0 [ 204.961977][ T7630] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.962009][ T7630] ? get_pid_task+0x20/0x1f0 [ 204.962034][ T7630] ? get_pid_task+0x20/0x1f0 [ 204.962057][ T7630] ? get_pid_task+0x20/0x1f0 [ 204.962108][ T7630] ? __fget_files+0x2a/0x420 [ 204.962133][ T7630] ? __fget_files+0x3a0/0x420 [ 204.962166][ T7630] __sys_sendmsg+0x183/0x260 [ 204.962196][ T7630] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.962243][ T7630] __do_fast_syscall_32+0x229/0x6e0 [ 204.962262][ T7630] ? do_fast_syscall_32+0x33/0x70 [ 204.962280][ T7630] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.962306][ T7630] ? asm_int80_emulation+0x1a/0x20 [ 204.962324][ T7630] ? do_int80_emulation+0x286/0x530 [ 204.962341][ T7630] ? trace_irq_disable+0x3b/0x140 [ 204.962381][ T7630] do_fast_syscall_32+0x33/0x70 [ 204.962399][ T7630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.962422][ T7630] RIP: 0023:0xf7f6501c [ 204.962440][ T7630] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 204.962458][ T7630] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 204.962477][ T7630] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 204.962491][ T7630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.962502][ T7630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.962514][ T7630] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.962526][ T7630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.962554][ T7630] [ 205.069086][ T7587] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 205.089874][ T7587] usb 4-1: device descriptor read/8, error -71 [ 205.207871][ T7587] usb usb4-port1: unable to enumerate USB device [ 207.541627][ T7658] FAULT_INJECTION: forcing a failure. [ 207.541627][ T7658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.569806][ T7658] CPU: 1 UID: 0 PID: 7658 Comm: syz.0.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.569851][ T7658] Tainted: [L]=SOFTLOCKUP [ 207.569859][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.569872][ T7658] Call Trace: [ 207.569881][ T7658] [ 207.569890][ T7658] dump_stack_lvl+0xe8/0x150 [ 207.569920][ T7658] should_fail_ex+0x412/0x560 [ 207.569953][ T7658] _copy_from_iter+0x1d3/0x1670 [ 207.569986][ T7658] ? rcu_is_watching+0x15/0xb0 [ 207.570017][ T7658] ? __pfx__copy_from_iter+0x10/0x10 [ 207.570053][ T7658] ? netlink_sendmsg+0x650/0xb40 [ 207.570081][ T7658] ? skb_put+0x11b/0x210 [ 207.570113][ T7658] netlink_sendmsg+0x6c0/0xb40 [ 207.570152][ T7658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.570185][ T7658] ? aa_sock_msg_perm+0xf1/0x1b0 [ 207.570214][ T7658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.570247][ T7658] ____sys_sendmsg+0x972/0x9f0 [ 207.570287][ T7658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.570334][ T7658] ___sys_sendmsg+0x2a5/0x360 [ 207.570363][ T7658] ? __lock_acquire+0x6b5/0x2cf0 [ 207.570390][ T7658] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.570421][ T7658] ? __schedule+0x1837/0x5740 [ 207.570448][ T7658] ? get_pid_task+0x20/0x1f0 [ 207.570505][ T7658] ? __fget_files+0x2a/0x420 [ 207.570529][ T7658] ? __fget_files+0x3a0/0x420 [ 207.570565][ T7658] __sys_sendmsg+0x183/0x260 [ 207.570592][ T7658] ? irqentry_exit+0x218/0x760 [ 207.570624][ T7658] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.570662][ T7658] ? do_fast_syscall_32+0x33/0x70 [ 207.570693][ T7658] __do_fast_syscall_32+0x229/0x6e0 [ 207.570713][ T7658] ? do_fast_syscall_32+0x33/0x70 [ 207.570731][ T7658] ? lockdep_hardirqs_on+0x7a/0x110 [ 207.570760][ T7658] ? asm_int80_emulation+0x1a/0x20 [ 207.570780][ T7658] ? do_int80_emulation+0x286/0x530 [ 207.570798][ T7658] ? trace_irq_disable+0x3b/0x140 [ 207.570832][ T7658] do_fast_syscall_32+0x33/0x70 [ 207.570874][ T7658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.570892][ T7658] RIP: 0023:0xf709f01c [ 207.570906][ T7658] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 207.570919][ T7658] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 207.570935][ T7658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 207.570945][ T7658] RDX: 0000000020044084 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.570953][ T7658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.570962][ T7658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.570970][ T7658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.570991][ T7658] [ 208.145922][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.184870][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.220921][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.256504][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.300611][ T7666] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 208.531083][ T7666] bond1: entered promiscuous mode [ 208.550090][ T7666] bond1: entered allmulticast mode [ 208.564850][ T7666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.607045][ T7667] erspan1: entered allmulticast mode [ 208.637058][ T7667] bond1: (slave erspan1): making interface the new active one [ 208.655241][ T7667] erspan1: entered promiscuous mode [ 208.675562][ T7667] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 208.720460][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 208.747198][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 208.819416][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 208.991268][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 209.003655][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.025709][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.101853][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 209.122309][ T24] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 209.150387][ T24] usb 4-1: Product: syz [ 209.157743][ T24] usb 4-1: Manufacturer: syz [ 209.181308][ T24] usb 4-1: SerialNumber: syz [ 209.232117][ T24] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input26 [ 209.401657][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 209.485003][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 209.538536][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 210.279051][ T7708] netlink: 'syz.0.594': attribute type 23 has an invalid length. [ 211.744725][ T7722] fuse: Bad value for 'fd' [ 211.755334][ T7608] usb 4-1: USB disconnect, device number 22 [ 211.849643][ T7608] appletouch 4-1:1.0: input: appletouch disconnected [ 212.294994][ T7729] fuseblk: Bad value for 'group_id' [ 212.320651][ T7729] fuseblk: Bad value for 'group_id' [ 212.479274][ T7587] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 212.501745][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 212.688793][ T7587] usb 3-1: device descriptor read/64, error -32 [ 212.770828][ T29] audit: type=1326 audit(1779121364.253:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 212.816619][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.833046][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.851024][ T29] audit: type=1326 audit(1779121364.253:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 212.946939][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 212.958962][ T7587] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 213.020533][ T29] audit: type=1326 audit(1779121364.253:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 213.098981][ T29] audit: type=1326 audit(1779121364.263:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 213.215125][ T29] audit: type=1326 audit(1779121364.253:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 213.382167][ T7587] usb 3-1: Using ep0 maxpacket: 16 [ 213.410605][ T29] audit: type=1326 audit(1779121364.263:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 213.448874][ T7587] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 213.463013][ T7587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.478901][ T29] audit: type=1326 audit(1779121364.263:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 213.547034][ T7587] usb 3-1: config 0 descriptor?? [ 213.574652][ T7587] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 213.585357][ T29] audit: type=1326 audit(1779121364.263:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 213.622380][ T29] audit: type=1326 audit(1779121364.263:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 213.648451][ T29] audit: type=1326 audit(1779121364.263:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 214.073867][ T7720] ipip0: entered promiscuous mode [ 214.084073][ T7720] ipip0: entered allmulticast mode [ 214.129085][ T7587] gspca_sonixj: reg_w1 err -110 [ 214.135187][ T7587] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 214.283446][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 214.303847][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 215.028949][ T7587] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 215.174802][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 215.190848][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 215.193978][ T7587] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.217217][ T7587] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.226994][ T7587] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 215.247142][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 215.258513][ T7587] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.268454][ T7587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.277581][ T7587] usb 1-1: Product: syz [ 215.282467][ T7587] usb 1-1: Manufacturer: syz [ 215.287418][ T7587] usb 1-1: SerialNumber: syz [ 215.307809][ T7587] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 215.321840][ T7587] cdc_ncm 1-1:1.0: bind() failure [ 215.391932][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.413440][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.427926][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.439156][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.469621][ T7606] usb 3-1: USB disconnect, device number 30 [ 216.371539][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.416745][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.790169][ T7599] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 216.834378][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'. [ 216.958835][ T7599] usb 4-1: Using ep0 maxpacket: 16 [ 216.973674][ T7599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.000790][ T7599] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.028527][ T7599] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.052751][ T7599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.081481][ T7599] usb 4-1: Product: syz [ 217.090251][ T7599] usb 4-1: Manufacturer: syz [ 217.106921][ T7599] usb 4-1: SerialNumber: syz [ 217.174091][ T7599] usb 4-1: 0:2 : does not exist [ 217.232732][ T7812] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 217.568943][ T7599] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 217.803603][ T7599] usb 4-1: USB disconnect, device number 23 [ 217.844248][ T24] usb 1-1: USB disconnect, device number 30 [ 217.958533][ T7832] FAULT_INJECTION: forcing a failure. [ 217.958533][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.980943][ T5727] udevd[5727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.005681][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.048393][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.0.632 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.048418][ T7832] Tainted: [L]=SOFTLOCKUP [ 218.048423][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.048432][ T7832] Call Trace: [ 218.048438][ T7832] [ 218.048445][ T7832] dump_stack_lvl+0xe8/0x150 [ 218.048466][ T7832] should_fail_ex+0x412/0x560 [ 218.048490][ T7832] _copy_from_iter+0x1d3/0x1670 [ 218.048513][ T7832] ? rcu_is_watching+0x15/0xb0 [ 218.048536][ T7832] ? __pfx__copy_from_iter+0x10/0x10 [ 218.048561][ T7832] ? netlink_sendmsg+0x650/0xb40 [ 218.048582][ T7832] ? skb_put+0x11b/0x210 [ 218.048604][ T7832] netlink_sendmsg+0x6c0/0xb40 [ 218.048631][ T7832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.048684][ T7832] ? aa_sock_msg_perm+0xf1/0x1b0 [ 218.048730][ T7832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.048762][ T7832] ____sys_sendmsg+0x972/0x9f0 [ 218.048814][ T7832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.048840][ T7832] ? kstrtoull+0x12f/0x1d0 [ 218.048863][ T7832] ___sys_sendmsg+0x2a5/0x360 [ 218.048883][ T7832] ? __lock_acquire+0x6b5/0x2cf0 [ 218.048903][ T7832] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.048926][ T7832] ? get_pid_task+0x20/0x1f0 [ 218.048945][ T7832] ? get_pid_task+0x20/0x1f0 [ 218.048962][ T7832] ? get_pid_task+0x20/0x1f0 [ 218.048999][ T7832] ? __fget_files+0x2a/0x420 [ 218.049016][ T7832] ? __fget_files+0x3a0/0x420 [ 218.049043][ T7832] __sys_sendmsg+0x183/0x260 [ 218.049066][ T7832] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.049103][ T7832] __do_fast_syscall_32+0x229/0x6e0 [ 218.049119][ T7832] ? do_fast_syscall_32+0x33/0x70 [ 218.049132][ T7832] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.049153][ T7832] ? asm_int80_emulation+0x1a/0x20 [ 218.049167][ T7832] ? do_int80_emulation+0x286/0x530 [ 218.049180][ T7832] ? trace_irq_disable+0x3b/0x140 [ 218.049205][ T7832] do_fast_syscall_32+0x33/0x70 [ 218.049219][ T7832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.049237][ T7832] RIP: 0023:0xf709f01c [ 218.049251][ T7832] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 218.049264][ T7832] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 218.049280][ T7832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 218.049290][ T7832] RDX: 0000000000004004 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.049299][ T7832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.049307][ T7832] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.049316][ T7832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.049336][ T7832] [ 218.345289][ T7824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.369214][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 218.389386][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 218.628103][ T7838] FAULT_INJECTION: forcing a failure. [ 218.628103][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.688782][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.3.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.688816][ T7838] Tainted: [L]=SOFTLOCKUP [ 218.688823][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.688835][ T7838] Call Trace: [ 218.688844][ T7838] [ 218.688853][ T7838] dump_stack_lvl+0xe8/0x150 [ 218.688883][ T7838] should_fail_ex+0x412/0x560 [ 218.688916][ T7838] _copy_from_user+0x2d/0xb0 [ 218.688957][ T7838] move_addr_to_kernel+0x7e/0x160 [ 218.688982][ T7838] get_compat_msghdr+0x3d8/0x4c0 [ 218.689019][ T7838] ? __pfx_get_compat_msghdr+0x10/0x10 [ 218.689052][ T7838] ? kstrtoull+0x12f/0x1d0 [ 218.689083][ T7838] ___sys_sendmsg+0x201/0x360 [ 218.689112][ T7838] ? __lock_acquire+0x6b5/0x2cf0 [ 218.689139][ T7838] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.689171][ T7838] ? get_pid_task+0x20/0x1f0 [ 218.689197][ T7838] ? get_pid_task+0x20/0x1f0 [ 218.689219][ T7838] ? get_pid_task+0x20/0x1f0 [ 218.689273][ T7838] ? __fget_files+0x2a/0x420 [ 218.689296][ T7838] ? __fget_files+0x3a0/0x420 [ 218.689332][ T7838] __sys_sendmsg+0x183/0x260 [ 218.689364][ T7838] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.689416][ T7838] __do_fast_syscall_32+0x229/0x6e0 [ 218.689437][ T7838] ? do_fast_syscall_32+0x33/0x70 [ 218.689455][ T7838] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.689483][ T7838] ? asm_int80_emulation+0x1a/0x20 [ 218.689502][ T7838] ? do_int80_emulation+0x286/0x530 [ 218.689519][ T7838] ? trace_irq_disable+0x3b/0x140 [ 218.689553][ T7838] do_fast_syscall_32+0x33/0x70 [ 218.689572][ T7838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.689597][ T7838] RIP: 0023:0xf7f1601c [ 218.689616][ T7838] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 218.689634][ T7838] RSP: 002b:00000000f53b550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 218.689660][ T7838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 218.689675][ T7838] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.689687][ T7838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.689699][ T7838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.689711][ T7838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.689739][ T7838] [ 218.943778][ T7836] syzkaller0: entered promiscuous mode [ 218.949400][ T7836] syzkaller0: entered allmulticast mode [ 219.097375][ T7845] FAULT_INJECTION: forcing a failure. [ 219.097375][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.127473][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.2.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.127507][ T7845] Tainted: [L]=SOFTLOCKUP [ 219.127513][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.127521][ T7845] Call Trace: [ 219.127528][ T7845] [ 219.127534][ T7845] dump_stack_lvl+0xe8/0x150 [ 219.127566][ T7845] should_fail_ex+0x412/0x560 [ 219.127588][ T7845] _copy_from_iter+0x1d3/0x1670 [ 219.127609][ T7845] ? rcu_is_watching+0x15/0xb0 [ 219.127631][ T7845] ? __pfx__copy_from_iter+0x10/0x10 [ 219.127653][ T7845] ? netlink_sendmsg+0x650/0xb40 [ 219.127671][ T7845] ? skb_put+0x11b/0x210 [ 219.127691][ T7845] netlink_sendmsg+0x6c0/0xb40 [ 219.127715][ T7845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.127736][ T7845] ? aa_sock_msg_perm+0xf1/0x1b0 [ 219.127755][ T7845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.127775][ T7845] ____sys_sendmsg+0x972/0x9f0 [ 219.127800][ T7845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.127822][ T7845] ? kstrtoull+0x12f/0x1d0 [ 219.127842][ T7845] ___sys_sendmsg+0x2a5/0x360 [ 219.127860][ T7845] ? __lock_acquire+0x6b5/0x2cf0 [ 219.127883][ T7845] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.127903][ T7845] ? get_pid_task+0x20/0x1f0 [ 219.127920][ T7845] ? get_pid_task+0x20/0x1f0 [ 219.127936][ T7845] ? get_pid_task+0x20/0x1f0 [ 219.127969][ T7845] ? __fget_files+0x2a/0x420 [ 219.127985][ T7845] ? __fget_files+0x3a0/0x420 [ 219.128007][ T7845] __sys_sendmsg+0x183/0x260 [ 219.128028][ T7845] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.128062][ T7845] __do_fast_syscall_32+0x229/0x6e0 [ 219.128075][ T7845] ? do_fast_syscall_32+0x33/0x70 [ 219.128087][ T7845] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.128106][ T7845] ? asm_int80_emulation+0x1a/0x20 [ 219.128119][ T7845] ? do_int80_emulation+0x286/0x530 [ 219.128130][ T7845] ? trace_irq_disable+0x3b/0x140 [ 219.128153][ T7845] do_fast_syscall_32+0x33/0x70 [ 219.128165][ T7845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.128182][ T7845] RIP: 0023:0xf7fe801c [ 219.128195][ T7845] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 219.128221][ T7845] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 219.128238][ T7845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 219.128247][ T7845] RDX: 00000000000440c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.128256][ T7845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.128263][ T7845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.128271][ T7845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.128289][ T7845] [ 219.536101][ T7599] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 219.611752][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 219.741780][ T7599] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 219.752036][ T7599] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.781422][ T7599] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 219.800436][ T7599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.817315][ T7599] usb 1-1: Product: syz [ 219.829226][ T7599] usb 1-1: Manufacturer: syz [ 219.833914][ T7599] usb 1-1: SerialNumber: syz [ 219.873806][ T7599] rtl8150 1-1:1.0: couldn't find required endpoints [ 219.891183][ T7599] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 219.915435][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 219.968308][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 220.064592][ T7599] usb 1-1: USB disconnect, device number 31 [ 220.931112][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 221.766202][ T7849] syz.2.638 (7849): drop_caches: 1 [ 221.790548][ T7850] syz.2.638 (7850): drop_caches: 1 [ 222.440071][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.465120][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.626801][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 222.702423][ T7872] fuse: Unknown parameter '' [ 222.795605][ T7879] FAULT_INJECTION: forcing a failure. [ 222.795605][ T7879] name failslab, interval 1, probability 0, space 0, times 0 [ 222.850748][ T7879] CPU: 1 UID: 0 PID: 7879 Comm: syz.4.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.850781][ T7879] Tainted: [L]=SOFTLOCKUP [ 222.850789][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.850802][ T7879] Call Trace: [ 222.850809][ T7879] [ 222.850818][ T7879] dump_stack_lvl+0xe8/0x150 [ 222.850846][ T7879] should_fail_ex+0x412/0x560 [ 222.850878][ T7879] should_failslab+0xa8/0x100 [ 222.850909][ T7879] ? sk_prot_alloc+0x57/0x210 [ 222.850939][ T7879] kmem_cache_alloc_noprof+0x87/0x650 [ 222.850974][ T7879] sk_prot_alloc+0x57/0x210 [ 222.850999][ T7879] ? sk_alloc+0x27/0x390 [ 222.851028][ T7879] sk_alloc+0x3a/0x390 [ 222.851060][ T7879] inet_create+0x7a0/0x1000 [ 222.851082][ T7879] ? inet_create+0x9c/0x1000 [ 222.851106][ T7879] __sock_create+0x4b2/0x9d0 [ 222.851138][ T7879] mptcp_subflow_create_socket+0xfb/0x800 [ 222.851166][ T7879] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 222.851192][ T7879] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 222.851230][ T7879] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.851257][ T7879] ? lock_sock_nested+0x6a/0x100 [ 222.851282][ T7879] __mptcp_nmpc_sk+0x155/0x790 [ 222.851306][ T7879] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 222.851325][ T7879] ? mptcp_setsockopt+0xf0a/0x3520 [ 222.851351][ T7879] ? __local_bh_enable_ip+0xd0/0x130 [ 222.851375][ T7879] mptcp_setsockopt+0xf12/0x3520 [ 222.851404][ T7879] ? aa_sk_perm+0x6d5/0x900 [ 222.851427][ T7879] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 222.851454][ T7879] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.851490][ T7879] ? aa_sock_opt_perm+0xff/0x1a0 [ 222.851518][ T7879] ? sock_common_setsockopt+0x36/0xc0 [ 222.851540][ T7879] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 222.851565][ T7879] do_sock_setsockopt+0x17c/0x1b0 [ 222.851597][ T7879] __ia32_sys_setsockopt+0x13d/0x1b0 [ 222.851630][ T7879] __do_fast_syscall_32+0x229/0x6e0 [ 222.851651][ T7879] ? do_fast_syscall_32+0x33/0x70 [ 222.851667][ T7879] ? lockdep_hardirqs_on+0x7a/0x110 [ 222.851695][ T7879] ? asm_int80_emulation+0x1a/0x20 [ 222.851714][ T7879] ? do_int80_emulation+0x286/0x530 [ 222.851731][ T7879] ? trace_irq_disable+0x3b/0x140 [ 222.851773][ T7879] do_fast_syscall_32+0x33/0x70 [ 222.851793][ T7879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.851804][ T7881] fuse: Bad value for 'fd' [ 222.851817][ T7879] RIP: 0023:0xf6fef01c [ 222.851836][ T7879] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 222.851895][ T7879] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 222.851972][ T7879] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 222.852004][ T7879] RDX: 000000000000000f RSI: 0000000080000000 RDI: 0000000000000004 [ 222.852041][ T7879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.852088][ T7879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.852119][ T7879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.852203][ T7879] [ 223.191947][ T7883] FAULT_INJECTION: forcing a failure. [ 223.191947][ T7883] name failslab, interval 1, probability 0, space 0, times 0 [ 223.204870][ T7883] CPU: 0 UID: 0 PID: 7883 Comm: syz.0.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.204894][ T7883] Tainted: [L]=SOFTLOCKUP [ 223.204899][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.204908][ T7883] Call Trace: [ 223.204914][ T7883] [ 223.204920][ T7883] dump_stack_lvl+0xe8/0x150 [ 223.204942][ T7883] should_fail_ex+0x412/0x560 [ 223.204965][ T7883] should_failslab+0xa8/0x100 [ 223.204987][ T7883] ? alloc_empty_file+0x5b/0x1d0 [ 223.205004][ T7883] kmem_cache_alloc_noprof+0x87/0x650 [ 223.205022][ T7883] ? is_bpf_text_address+0x292/0x2b0 [ 223.205043][ T7883] alloc_empty_file+0x5b/0x1d0 [ 223.205061][ T7883] path_openat+0x10f/0x3860 [ 223.205091][ T7883] ? arch_stack_walk+0xfb/0x150 [ 223.205113][ T7883] ? do_getname+0x2e/0x250 [ 223.205127][ T7883] ? stack_trace_save+0xa9/0x100 [ 223.205147][ T7883] ? __pfx_stack_trace_save+0x10/0x10 [ 223.205168][ T7883] ? do_getname+0x2e/0x250 [ 223.205182][ T7883] ? stack_depot_save_flags+0x33/0x810 [ 223.205206][ T7883] ? do_getname+0x2e/0x250 [ 223.205220][ T7883] ? kasan_save_track+0x4f/0x80 [ 223.205237][ T7883] ? kasan_save_track+0x3e/0x80 [ 223.205253][ T7883] ? __kasan_slab_alloc+0x6c/0x80 [ 223.205290][ T7883] ? __pfx_path_openat+0x10/0x10 [ 223.205308][ T7883] ? __ia32_compat_sys_openat+0x131/0x160 [ 223.205329][ T7883] ? __lock_acquire+0x6b5/0x2cf0 [ 223.205352][ T7883] do_file_open+0x23e/0x4a0 [ 223.205375][ T7883] ? __pfx_do_file_open+0x10/0x10 [ 223.205409][ T7883] ? _raw_spin_unlock+0x28/0x50 [ 223.205427][ T7883] ? alloc_fd+0x64b/0x6c0 [ 223.205453][ T7883] do_sys_openat2+0x113/0x200 [ 223.205472][ T7883] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.205490][ T7883] ? exc_page_fault+0x6a/0xc0 [ 223.205514][ T7883] ? do_user_addr_fault+0xc6f/0x1340 [ 223.205531][ T7883] __ia32_compat_sys_openat+0x131/0x160 [ 223.205553][ T7883] do_int80_emulation+0x181/0x530 [ 223.205566][ T7883] ? trace_irq_disable+0x3b/0x140 [ 223.205587][ T7883] ? asm_int80_emulation+0x1a/0x20 [ 223.205612][ T7883] ? clear_bhb_loop+0x40/0x90 [ 223.205626][ T7883] ? clear_bhb_loop+0x40/0x90 [ 223.205642][ T7883] asm_int80_emulation+0x1a/0x20 [ 223.205655][ T7883] RIP: 0023:0xf71d61ab [ 223.205684][ T7883] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 223.205697][ T7883] RSP: 002b:00000000f548b38c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 223.205724][ T7883] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a030d [ 223.205734][ T7883] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.205742][ T7883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.205750][ T7883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.205758][ T7883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.205777][ T7883] [ 223.555073][ T7879] openvswitch: netlink: IP tunnel dst address not specified [ 223.929114][ T5722] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 224.086849][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.099596][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.100774][ T7599] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 224.120757][ T5722] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 224.205610][ T5722] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.241319][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.263459][ T7899] trusted_key: encrypted_key: master key parameter is missing [ 224.265561][ T5722] usb 4-1: Product: syz [ 224.284607][ T5722] usb 4-1: Manufacturer: syz [ 224.291014][ T5722] usb 4-1: SerialNumber: syz [ 224.314772][ T5722] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 224.325059][ T5722] cdc_ncm 4-1:1.0: bind() failure [ 224.337434][ T7599] usb 3-1: not running at top speed; connect to a high speed hub [ 224.372872][ T7599] usb 3-1: config 1 interface 0 altsetting 48 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 224.409716][ T7599] usb 3-1: config 1 interface 0 has no altsetting 0 [ 224.447363][ T7599] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 224.486132][ T7599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.511451][ T7599] usb 3-1: Product: 䑈熖渾砗蔉䣀庬읓䶆䬠ﲥ䳞鏑몓䨴ϭ䤸䥽뢂傞霆塿ᆵ咏駡㍯ꣁ夡력溸浐渁冞朁簘䩥癟繟㡋೥阗꺞삙苸➴㑕㊾숗鈡闄뷫Įˋ 壷睊匇⍁எ蘯Ḏ畮鰊ꨀ誛ᨈ譟䉮㈏槨ᰜ [ 224.580512][ T7599] usb 3-1: Manufacturer: ᰁ [ 224.595913][ T7599] usb 3-1: SerialNumber: 쎼㣥髊쥧㸝࢟뗯뉒⿑繈ࣄ选쎉췢缋塛遳᧩碸⿯鉆Ꮸꄿ館鸆䑜푑攦䃆鮩Ϥꉦ൥뻊暽弼舧ꓘ஝뙼濩괮趮髜㏖睔瓳ᮾ㙖嘲辤﹮幷됷蘿䟗 [ 224.658877][ T7891] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 225.020946][ T7909] fuse: Bad value for 'fd' [ 225.144981][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.166603][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.642630][ T7599] usbhid 3-1:1.0: can't add hid device: -71 [ 225.659461][ T7599] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 225.693449][ T7599] usb 3-1: USB disconnect, device number 31 [ 226.089660][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.656'. [ 226.180113][ T5722] usb 4-1: USB disconnect, device number 24 [ 226.665281][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 227.028953][ T7599] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 227.222439][ T7599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.250370][ T7599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.260980][ T7599] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 227.270561][ T7599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.321558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.339698][ T7599] usb 4-1: config 0 descriptor?? [ 227.989062][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.018103][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.286144][ T7938] FAULT_INJECTION: forcing a failure. [ 228.286144][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 228.355955][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.4.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.355989][ T7938] Tainted: [L]=SOFTLOCKUP [ 228.355996][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.356009][ T7938] Call Trace: [ 228.356019][ T7938] [ 228.356034][ T7938] dump_stack_lvl+0xe8/0x150 [ 228.356079][ T7938] should_fail_ex+0x412/0x560 [ 228.356112][ T7938] should_failslab+0xa8/0x100 [ 228.356148][ T7938] __kmalloc_cache_noprof+0x88/0x660 [ 228.356170][ T7938] ? init_srcu_struct_fields+0x7f/0xaa0 [ 228.356187][ T7938] ? __pfx_snprintf+0x10/0x10 [ 228.356226][ T7938] init_srcu_struct_fields+0x7f/0xaa0 [ 228.356257][ T7938] kvm_dev_ioctl+0x53f/0x1590 [ 228.356285][ T7938] ? __fget_files+0x2a/0x420 [ 228.356314][ T7938] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 228.356336][ T7938] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 228.356380][ T7938] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 228.356417][ T7938] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 228.356455][ T7938] ? __fget_files+0x3a0/0x420 [ 228.356478][ T7938] ? fput+0xa0/0xd0 [ 228.356495][ T7938] ? ksys_write+0x242/0x270 [ 228.356547][ T7938] __do_fast_syscall_32+0x229/0x6e0 [ 228.356567][ T7938] ? do_fast_syscall_32+0x33/0x70 [ 228.356584][ T7938] ? lockdep_hardirqs_on+0x7a/0x110 [ 228.356616][ T7938] ? asm_int80_emulation+0x1a/0x20 [ 228.356630][ T7938] ? do_int80_emulation+0x286/0x530 [ 228.356648][ T7938] do_fast_syscall_32+0x33/0x70 [ 228.356663][ T7938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.356702][ T7938] RIP: 0023:0xf6fef01c [ 228.356720][ T7938] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 228.356737][ T7938] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 228.356758][ T7938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae01 [ 228.356775][ T7938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.356784][ T7938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.356792][ T7938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 228.356801][ T7938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.356822][ T7938] [ 228.684575][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.664'. [ 228.979182][ T7608] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 229.143498][ T7608] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 229.168937][ T7608] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 229.223979][ T7608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.270929][ T7608] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.306292][ T7608] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.327948][ T7608] usb 1-1: Product: syz [ 229.338068][ T7608] usb 1-1: Manufacturer: syz [ 229.350962][ T7608] usb 1-1: SerialNumber: syz [ 229.370454][ T7608] usb 1-1: config 0 descriptor?? [ 229.390323][ T7947] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 229.404739][ T7965] fuse: Bad value for 'fd' [ 229.425845][ T7608] usb 1-1: selecting invalid altsetting 0 [ 229.620717][ T7947] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 229.639144][ T7587] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 229.657658][ T7947] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 229.684865][ T7947] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 229.714537][ T7947] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 229.734677][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.769103][ T7947] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 229.794738][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.831816][ T7599] hid-led 0003:1D34:000A.0007: probe with driver hid-led failed with error -71 [ 229.841559][ T7587] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.856282][ T7608] usb 1-1: USB disconnect, device number 32 [ 229.872211][ T7947] usb 1-1: cannot submit urb 0, error -19: no device [ 229.907386][ T7587] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.945052][ T7587] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 229.963790][ T7599] usb 4-1: USB disconnect, device number 25 [ 230.057743][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.078036][ T7587] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.092372][ T7975] FAULT_INJECTION: forcing a failure. [ 230.092372][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.107910][ T7587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.140777][ T7587] usb 3-1: Product: syz [ 230.158436][ T7587] usb 3-1: Manufacturer: syz [ 230.170924][ T7975] CPU: 0 UID: 0 PID: 7975 Comm: syz.3.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.170955][ T7975] Tainted: [L]=SOFTLOCKUP [ 230.170964][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.170976][ T7975] Call Trace: [ 230.170984][ T7975] [ 230.170993][ T7975] dump_stack_lvl+0xe8/0x150 [ 230.171022][ T7975] should_fail_ex+0x412/0x560 [ 230.171058][ T7975] _copy_from_iter+0x1d3/0x1670 [ 230.171089][ T7975] ? rcu_is_watching+0x15/0xb0 [ 230.171120][ T7975] ? __pfx__copy_from_iter+0x10/0x10 [ 230.171154][ T7975] ? netlink_sendmsg+0x650/0xb40 [ 230.171190][ T7975] ? skb_put+0x11b/0x210 [ 230.171222][ T7975] netlink_sendmsg+0x6c0/0xb40 [ 230.171260][ T7975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.171292][ T7975] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.171321][ T7975] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.171350][ T7975] ____sys_sendmsg+0x972/0x9f0 [ 230.171388][ T7975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.171423][ T7975] ? kstrtoull+0x12f/0x1d0 [ 230.171454][ T7975] ___sys_sendmsg+0x2a5/0x360 [ 230.171483][ T7975] ? __lock_acquire+0x6b5/0x2cf0 [ 230.171509][ T7975] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.171540][ T7975] ? get_pid_task+0x20/0x1f0 [ 230.171566][ T7975] ? get_pid_task+0x20/0x1f0 [ 230.171589][ T7975] ? get_pid_task+0x20/0x1f0 [ 230.171643][ T7975] ? __fget_files+0x2a/0x420 [ 230.171667][ T7975] ? __fget_files+0x3a0/0x420 [ 230.171703][ T7975] __sys_sendmsg+0x183/0x260 [ 230.171735][ T7975] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.171796][ T7975] __do_fast_syscall_32+0x229/0x6e0 [ 230.171817][ T7975] ? do_fast_syscall_32+0x33/0x70 [ 230.171836][ T7975] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.171864][ T7975] ? asm_int80_emulation+0x1a/0x20 [ 230.171884][ T7975] ? do_int80_emulation+0x286/0x530 [ 230.171902][ T7975] ? trace_irq_disable+0x3b/0x140 [ 230.171935][ T7975] do_fast_syscall_32+0x33/0x70 [ 230.171955][ T7975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.171980][ T7975] RIP: 0023:0xf7f1601c [ 230.171999][ T7975] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 230.172017][ T7975] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 230.172038][ T7975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 230.172052][ T7975] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.172064][ T7975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.172076][ T7975] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.172088][ T7975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.172118][ T7975] [ 230.176876][ T7587] usb 3-1: SerialNumber: syz [ 230.479451][ T7587] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 230.486364][ T7587] cdc_ncm 3-1:1.0: bind() failure [ 230.715850][ T7980] FAULT_INJECTION: forcing a failure. [ 230.715850][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 230.744474][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.1.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.744508][ T7980] Tainted: [L]=SOFTLOCKUP [ 230.744533][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.744546][ T7980] Call Trace: [ 230.744555][ T7980] [ 230.744565][ T7980] dump_stack_lvl+0xe8/0x150 [ 230.744596][ T7980] should_fail_ex+0x412/0x560 [ 230.744630][ T7980] should_failslab+0xa8/0x100 [ 230.744662][ T7980] ? skb_clone+0x212/0x3a0 [ 230.744692][ T7980] kmem_cache_alloc_noprof+0x87/0x650 [ 230.744722][ T7980] ? __netlink_lookup+0xc6/0x8b0 [ 230.744759][ T7980] skb_clone+0x212/0x3a0 [ 230.744794][ T7980] __netlink_deliver_tap+0x404/0x850 [ 230.744837][ T7980] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.744866][ T7980] netlink_deliver_tap+0x19c/0x1b0 [ 230.744897][ T7980] netlink_unicast+0x730/0x8e0 [ 230.744934][ T7980] netlink_sendmsg+0x813/0xb40 [ 230.744974][ T7980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.745007][ T7980] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.745038][ T7980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.745070][ T7980] ____sys_sendmsg+0x972/0x9f0 [ 230.745109][ T7980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.745145][ T7980] ? kstrtoull+0x12f/0x1d0 [ 230.745177][ T7980] ___sys_sendmsg+0x2a5/0x360 [ 230.745206][ T7980] ? __lock_acquire+0x6b5/0x2cf0 [ 230.745234][ T7980] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.745267][ T7980] ? get_pid_task+0x20/0x1f0 [ 230.745292][ T7980] ? get_pid_task+0x20/0x1f0 [ 230.745315][ T7980] ? get_pid_task+0x20/0x1f0 [ 230.745371][ T7980] ? __fget_files+0x2a/0x420 [ 230.745400][ T7980] ? __fget_files+0x3a0/0x420 [ 230.745436][ T7980] __sys_sendmsg+0x183/0x260 [ 230.745474][ T7980] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.745528][ T7980] __do_fast_syscall_32+0x229/0x6e0 [ 230.745550][ T7980] ? do_fast_syscall_32+0x33/0x70 [ 230.745568][ T7980] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.745597][ T7980] ? asm_int80_emulation+0x1a/0x20 [ 230.745618][ T7980] ? do_int80_emulation+0x286/0x530 [ 230.745637][ T7980] ? trace_irq_disable+0x3b/0x140 [ 230.745670][ T7980] do_fast_syscall_32+0x33/0x70 [ 230.745691][ T7980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.745717][ T7980] RIP: 0023:0xf7f6501c [ 230.745735][ T7980] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 230.745752][ T7980] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 230.745775][ T7980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 230.745789][ T7980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.745802][ T7980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.745813][ T7980] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.745826][ T7980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.745857][ T7980] [ 231.183564][ T7982] batadv_slave_0: entered promiscuous mode [ 231.221787][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 231.221807][ T29] audit: type=1326 audit(1779121382.713:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.354998][ T29] audit: type=1326 audit(1779121382.753:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.446012][ T29] audit: type=1326 audit(1779121382.753:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.543415][ T29] audit: type=1326 audit(1779121382.753:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.609911][ T29] audit: type=1326 audit(1779121382.753:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.677609][ T29] audit: type=1326 audit(1779121382.753:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.715695][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.737760][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.755213][ T29] audit: type=1326 audit(1779121382.753:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.823085][ T29] audit: type=1326 audit(1779121382.753:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.870547][ T29] audit: type=1326 audit(1779121382.753:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 231.915992][ T29] audit: type=1326 audit(1779121382.753:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.676" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf7f6501c code=0x7ffc0000 [ 232.815763][ T8012] batman_adv: batadv0: Adding interface: dummy0 [ 232.826948][ T7599] usb 3-1: USB disconnect, device number 32 [ 232.854894][ T8012] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.881933][ T8012] batman_adv: batadv0: Interface activated: dummy0 [ 232.922481][ T8016] batadv0: mtu less than device minimum [ 232.937793][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.951514][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.963424][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.975288][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.987240][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.999156][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.011051][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.022938][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.034850][ T8016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.738924][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 234.308957][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 234.471756][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 234.485488][ T24] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 234.517050][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.528702][ T24] usb 1-1: Product: syz [ 234.540627][ T24] usb 1-1: Manufacturer: syz [ 234.556071][ T24] usb 1-1: SerialNumber: syz [ 234.593414][ T24] usb 1-1: config 0 descriptor?? [ 234.630997][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 234.658395][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 234.682267][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 234.703010][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 234.713261][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 234.719759][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 234.751324][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.772270][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 234.789079][ T24] usb 1-1: media controller created [ 234.835153][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.899318][ T24] usb 1-1: selecting invalid altsetting 3 [ 234.914293][ T24] ttusb2: set interface to alts=3 failed [ 234.954041][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 235.028097][ T24] DVB: Unable to find symbol tda10086_attach() [ 235.048344][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 235.092049][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 235.112996][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 235.149568][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 235.158593][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 235.176271][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 235.209920][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 235.249472][ T24] usb 1-1: USB disconnect, device number 33 [ 235.406150][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 235.664056][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.679981][ T8050] syz.3.696 (8050): drop_caches: 1 [ 235.735789][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.751111][ T8054] syz.3.696 (8054): drop_caches: 1 [ 236.048304][ T8050] syz.3.696 (8050): drop_caches: 1 [ 236.563060][ T8086] snd_dummy snd_dummy.0: control 4:0:0:syz0:0 is already present [ 238.246880][ T8102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.708'. [ 238.289363][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 238.337186][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 238.442656][ T8106] fuse: Invalid gid '00000000000000000003' [ 238.692228][ T8113] FAULT_INJECTION: forcing a failure. [ 238.692228][ T8113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.726843][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.3.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.726885][ T8113] Tainted: [L]=SOFTLOCKUP [ 238.726893][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.726906][ T8113] Call Trace: [ 238.726920][ T8113] [ 238.726929][ T8113] dump_stack_lvl+0xe8/0x150 [ 238.726959][ T8113] should_fail_ex+0x412/0x560 [ 238.726995][ T8113] _copy_to_user+0x31/0xb0 [ 238.727036][ T8113] drm_ioctl+0x6da/0xb80 [ 238.727065][ T8113] ? __pfx_drm_mode_getresources+0x10/0x10 [ 238.727099][ T8113] ? __pfx_drm_ioctl+0x10/0x10 [ 238.727134][ T8113] ? __fget_files+0x3a0/0x420 [ 238.727158][ T8113] ? __fget_files+0x2a/0x420 [ 238.727181][ T8113] ? drm_compat_ioctl+0x128/0x360 [ 238.727211][ T8113] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 238.727247][ T8113] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 238.727283][ T8113] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 238.727320][ T8113] ? __fget_files+0x3a0/0x420 [ 238.727351][ T8113] ? fput+0xa0/0xd0 [ 238.727375][ T8113] ? ksys_write+0x242/0x270 [ 238.727417][ T8113] __do_fast_syscall_32+0x229/0x6e0 [ 238.727438][ T8113] ? do_fast_syscall_32+0x33/0x70 [ 238.727456][ T8113] ? lockdep_hardirqs_on+0x7a/0x110 [ 238.727485][ T8113] ? asm_int80_emulation+0x1a/0x20 [ 238.727504][ T8113] ? do_int80_emulation+0x286/0x530 [ 238.727524][ T8113] ? trace_irq_disable+0x3b/0x140 [ 238.727558][ T8113] do_fast_syscall_32+0x33/0x70 [ 238.727577][ T8113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.727601][ T8113] RIP: 0023:0xf7f1601c [ 238.727620][ T8113] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 238.727638][ T8113] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 238.727660][ T8113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c04064a0 [ 238.727674][ T8113] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.727686][ T8113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.727698][ T8113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 238.727710][ T8113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.727740][ T8113] [ 239.201637][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 239.459469][ T8125] batman_adv: batadv0: Adding interface: dummy0 [ 239.486164][ T8125] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.530042][ T8128] snd_dummy snd_dummy.0: control 4:0:0:syz0:0 is already present [ 239.541184][ T8121] syz.1.713 (8121): drop_caches: 1 [ 239.561196][ T8125] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 239.606150][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 239.735476][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.726'. [ 239.757881][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 240.000939][ T8121] syz.1.713 (8121): drop_caches: 1 [ 240.007072][ T8119] syz.1.713 (8119): drop_caches: 1 [ 240.704086][ T8151] syzkaller1: entered promiscuous mode [ 240.710424][ T8151] syzkaller1: entered allmulticast mode [ 241.219848][ T8156] FAULT_INJECTION: forcing a failure. [ 241.219848][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 241.237449][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.3.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.237483][ T8156] Tainted: [L]=SOFTLOCKUP [ 241.237491][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.237504][ T8156] Call Trace: [ 241.237512][ T8156] [ 241.237520][ T8156] dump_stack_lvl+0xe8/0x150 [ 241.237550][ T8156] should_fail_ex+0x412/0x560 [ 241.237583][ T8156] should_failslab+0xa8/0x100 [ 241.237617][ T8156] __kmalloc_noprof+0xe8/0x760 [ 241.237646][ T8156] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 241.237678][ T8156] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 241.237709][ T8156] genl_family_rcv_msg_doit+0xd9/0x330 [ 241.237739][ T8156] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.237771][ T8156] ? apparmor_capable+0x126/0x170 [ 241.237794][ T8156] ? bpf_lsm_capable+0x9/0x20 [ 241.237815][ T8156] ? security_capable+0x7e/0x2c0 [ 241.237847][ T8156] genl_rcv_msg+0x61c/0x7a0 [ 241.237876][ T8156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.237898][ T8156] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 241.237939][ T8156] netlink_rcv_skb+0x232/0x4b0 [ 241.237969][ T8156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.237993][ T8156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.238039][ T8156] ? down_read+0x270/0x2e0 [ 241.238057][ T8156] ? genl_rcv+0xd/0x40 [ 241.238079][ T8156] genl_rcv+0x28/0x40 [ 241.238098][ T8156] netlink_unicast+0x75c/0x8e0 [ 241.238136][ T8156] netlink_sendmsg+0x813/0xb40 [ 241.238175][ T8156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.238208][ T8156] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.238236][ T8156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.238268][ T8156] ____sys_sendmsg+0x972/0x9f0 [ 241.238308][ T8156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.238343][ T8156] ? kstrtoull+0x12f/0x1d0 [ 241.238383][ T8156] ___sys_sendmsg+0x2a5/0x360 [ 241.238412][ T8156] ? __lock_acquire+0x6b5/0x2cf0 [ 241.238439][ T8156] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.238471][ T8156] ? get_pid_task+0x20/0x1f0 [ 241.238497][ T8156] ? get_pid_task+0x20/0x1f0 [ 241.238520][ T8156] ? get_pid_task+0x20/0x1f0 [ 241.238574][ T8156] ? __fget_files+0x2a/0x420 [ 241.238598][ T8156] ? __fget_files+0x3a0/0x420 [ 241.238637][ T8156] __sys_sendmsg+0x183/0x260 [ 241.238669][ T8156] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.238722][ T8156] __do_fast_syscall_32+0x229/0x6e0 [ 241.238742][ T8156] ? do_fast_syscall_32+0x33/0x70 [ 241.238759][ T8156] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.238787][ T8156] ? asm_int80_emulation+0x1a/0x20 [ 241.238807][ T8156] ? do_int80_emulation+0x286/0x530 [ 241.238825][ T8156] ? trace_irq_disable+0x3b/0x140 [ 241.238859][ T8156] do_fast_syscall_32+0x33/0x70 [ 241.238880][ T8156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.238905][ T8156] RIP: 0023:0xf7f1601c [ 241.238924][ T8156] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 241.238941][ T8156] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 241.238964][ T8156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 241.238977][ T8156] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.238988][ T8156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.239001][ T8156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.239013][ T8156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.239043][ T8156] [ 241.682533][ T8158] FAULT_INJECTION: forcing a failure. [ 241.682533][ T8158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.739040][ T8158] CPU: 1 UID: 0 PID: 8158 Comm: syz.4.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.739074][ T8158] Tainted: [L]=SOFTLOCKUP [ 241.739082][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.739095][ T8158] Call Trace: [ 241.739103][ T8158] [ 241.739113][ T8158] dump_stack_lvl+0xe8/0x150 [ 241.739142][ T8158] should_fail_ex+0x412/0x560 [ 241.739176][ T8158] _copy_from_iter+0x1d3/0x1670 [ 241.739207][ T8158] ? rcu_is_watching+0x15/0xb0 [ 241.739239][ T8158] ? __pfx__copy_from_iter+0x10/0x10 [ 241.739285][ T8158] ? netlink_sendmsg+0x650/0xb40 [ 241.739314][ T8158] ? skb_put+0x11b/0x210 [ 241.739344][ T8158] netlink_sendmsg+0x6c0/0xb40 [ 241.739384][ T8158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.739416][ T8158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.739446][ T8158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.739477][ T8158] ____sys_sendmsg+0x972/0x9f0 [ 241.739528][ T8158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.739561][ T8158] ? kstrtoull+0x12f/0x1d0 [ 241.739592][ T8158] ___sys_sendmsg+0x2a5/0x360 [ 241.739619][ T8158] ? __lock_acquire+0x6b5/0x2cf0 [ 241.739645][ T8158] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.739676][ T8158] ? get_pid_task+0x20/0x1f0 [ 241.739701][ T8158] ? get_pid_task+0x20/0x1f0 [ 241.739724][ T8158] ? get_pid_task+0x20/0x1f0 [ 241.739775][ T8158] ? __fget_files+0x2a/0x420 [ 241.739798][ T8158] ? __fget_files+0x3a0/0x420 [ 241.739833][ T8158] __sys_sendmsg+0x183/0x260 [ 241.739863][ T8158] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.739932][ T8158] __do_fast_syscall_32+0x229/0x6e0 [ 241.739953][ T8158] ? do_fast_syscall_32+0x33/0x70 [ 241.739971][ T8158] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.740000][ T8158] ? asm_int80_emulation+0x1a/0x20 [ 241.740019][ T8158] ? do_int80_emulation+0x286/0x530 [ 241.740038][ T8158] ? trace_irq_disable+0x3b/0x140 [ 241.740072][ T8158] do_fast_syscall_32+0x33/0x70 [ 241.740092][ T8158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.740117][ T8158] RIP: 0023:0xf6fef01c [ 241.740136][ T8158] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 241.740153][ T8158] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 241.740177][ T8158] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002280 [ 241.740190][ T8158] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.740203][ T8158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.740215][ T8158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.740227][ T8158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.740257][ T8158] [ 242.079327][ T8160] tipc: Started in network mode [ 242.105643][ T8160] tipc: Node identity 26c6f8e3b375, cluster identity 4711 [ 242.135135][ T8160] tipc: Enabled bearer , priority 0 [ 242.160082][ T8160] syzkaller0: entered promiscuous mode [ 242.178834][ T8160] syzkaller0: entered allmulticast mode [ 242.375536][ T8160] tipc: Resetting bearer [ 242.418998][ T8160] net_ratelimit: 10 callbacks suppressed [ 242.419017][ T8160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.464921][ T8159] tipc: Resetting bearer [ 242.470846][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 242.542859][ T8169] input: syz0 as /devices/virtual/input/input27 [ 242.636190][ T8159] tipc: Disabling bearer [ 242.652392][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 242.694812][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.709393][ T24] usb 1-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 242.728713][ T24] usb 1-1: config 248 has 0 interfaces, different from the descriptor's value: 1 [ 242.751573][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=4c.13 [ 242.777221][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.791735][ T24] usb 1-1: Product: syz [ 242.799395][ T24] usb 1-1: Manufacturer: 슦䑮刂䬢펤쳞⏊鿪ᵰ촼陱叡㚫儃ⱸ҄᭔ꦎヽ゠뢾꥿烠黺ᣮ儦宪慌㦲謩ꋋ㟓秊ঈ맸潆㝊聾钳ᧄ뢩嵾﫣肩ᔃ阛梖㴷椌鼕 [ 242.856398][ T24] usb 1-1: SerialNumber: syz [ 242.861747][ T8171] input: syz0 as /devices/virtual/input/input28 [ 243.085283][ T24] usb 1-1: USB disconnect, device number 34 [ 243.098281][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.139658][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.409965][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.424279][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.461013][ T8173] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 243.582833][ T8182] mmap: syz.3.734 (8182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.737550][ T8189] FAULT_INJECTION: forcing a failure. [ 243.737550][ T8189] name failslab, interval 1, probability 0, space 0, times 0 [ 243.780581][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.0.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.780618][ T8189] Tainted: [L]=SOFTLOCKUP [ 243.780626][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.780638][ T8189] Call Trace: [ 243.780646][ T8189] [ 243.780656][ T8189] dump_stack_lvl+0xe8/0x150 [ 243.780684][ T8189] should_fail_ex+0x412/0x560 [ 243.780717][ T8189] should_failslab+0xa8/0x100 [ 243.780751][ T8189] __kmalloc_noprof+0xe8/0x760 [ 243.780780][ T8189] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 243.780811][ T8189] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 243.780844][ T8189] genl_family_rcv_msg_doit+0xd9/0x330 [ 243.780874][ T8189] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.780906][ T8189] ? apparmor_capable+0x126/0x170 [ 243.780928][ T8189] ? bpf_lsm_capable+0x9/0x20 [ 243.780948][ T8189] ? security_capable+0x7e/0x2c0 [ 243.780980][ T8189] genl_rcv_msg+0x61c/0x7a0 [ 243.781008][ T8189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.781029][ T8189] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 243.781054][ T8189] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 243.781079][ T8189] ? __pfx_nl80211_post_doit+0x10/0x10 [ 243.781132][ T8189] netlink_rcv_skb+0x232/0x4b0 [ 243.781164][ T8189] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.781187][ T8189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.781232][ T8189] ? down_read+0x270/0x2e0 [ 243.781251][ T8189] ? genl_rcv+0xd/0x40 [ 243.781274][ T8189] genl_rcv+0x28/0x40 [ 243.781295][ T8189] netlink_unicast+0x75c/0x8e0 [ 243.781332][ T8189] netlink_sendmsg+0x813/0xb40 [ 243.781373][ T8189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.781406][ T8189] ? aa_sock_msg_perm+0xf1/0x1b0 [ 243.781436][ T8189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.781467][ T8189] ____sys_sendmsg+0x972/0x9f0 [ 243.781507][ T8189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.781542][ T8189] ? kstrtoull+0x12f/0x1d0 [ 243.781575][ T8189] ___sys_sendmsg+0x2a5/0x360 [ 243.781604][ T8189] ? __lock_acquire+0x6b5/0x2cf0 [ 243.781631][ T8189] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.781664][ T8189] ? get_pid_task+0x20/0x1f0 [ 243.781689][ T8189] ? get_pid_task+0x20/0x1f0 [ 243.781713][ T8189] ? get_pid_task+0x20/0x1f0 [ 243.781768][ T8189] ? __fget_files+0x2a/0x420 [ 243.781792][ T8189] ? __fget_files+0x3a0/0x420 [ 243.781828][ T8189] __sys_sendmsg+0x183/0x260 [ 243.781860][ T8189] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.781913][ T8189] __do_fast_syscall_32+0x229/0x6e0 [ 243.781933][ T8189] ? do_fast_syscall_32+0x33/0x70 [ 243.781951][ T8189] ? lockdep_hardirqs_on+0x7a/0x110 [ 243.781980][ T8189] ? asm_int80_emulation+0x1a/0x20 [ 243.782000][ T8189] ? do_int80_emulation+0x286/0x530 [ 243.782018][ T8189] ? trace_irq_disable+0x3b/0x140 [ 243.782053][ T8189] do_fast_syscall_32+0x33/0x70 [ 243.782073][ T8189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.782107][ T8189] RIP: 0023:0xf709f01c [ 243.782127][ T8189] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 243.782146][ T8189] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 243.782168][ T8189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 243.782182][ T8189] RDX: 0000000000004880 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.782195][ T8189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.782207][ T8189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.782219][ T8189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.782250][ T8189] [ 244.391337][ T8196] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 244.398083][ T8196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 244.416430][ T8196] vhci_hcd vhci_hcd.0: Device attached [ 244.545608][ T8206] FAULT_INJECTION: forcing a failure. [ 244.545608][ T8206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.558893][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.2.742 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.558926][ T8206] Tainted: [L]=SOFTLOCKUP [ 244.558933][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.558945][ T8206] Call Trace: [ 244.558954][ T8206] [ 244.558971][ T8206] dump_stack_lvl+0xe8/0x150 [ 244.559000][ T8206] should_fail_ex+0x412/0x560 [ 244.559032][ T8206] _copy_from_user+0x2d/0xb0 [ 244.559064][ T8206] ia32_restore_sigcontext+0xf2/0x560 [ 244.559087][ T8206] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 244.559122][ T8206] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.559151][ T8206] __ia32_compat_sys_sigreturn+0x23e/0x2a0 [ 244.559173][ T8206] ? rcu_is_watching+0x15/0xb0 [ 244.559198][ T8206] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 244.559226][ T8206] ? asm_int80_emulation+0x1a/0x20 [ 244.559250][ T8206] do_int80_emulation+0x181/0x530 [ 244.559273][ T8206] ? trace_irq_disable+0x3b/0x140 [ 244.559301][ T8206] ? asm_int80_emulation+0x1a/0x20 [ 244.559320][ T8206] ? clear_bhb_loop+0x40/0x90 [ 244.559339][ T8206] ? clear_bhb_loop+0x40/0x90 [ 244.559362][ T8206] asm_int80_emulation+0x1a/0x20 [ 244.559382][ T8206] RIP: 0023:0xf7fe8038 [ 244.559402][ T8206] Code: c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 <0f> 0b 90 90 90 90 90 90 b8 ad 00 00 00 cd 80 0f 0b 62 e7 ff ff 68 [ 244.559418][ T8206] RSP: 002b:00000000f54a5e74 EFLAGS: 00000206 ORIG_RAX: 0000000000000077 [ 244.559438][ T8206] RAX: ffffffffffffffda RBX: 0000000000000207 RCX: 0000000000000000 [ 244.559451][ T8206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.559462][ T8206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.559475][ T8206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.559487][ T8206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.559515][ T8206] [ 244.759708][ T7599] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 244.828756][ T7587] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 244.872297][ T8209] FAULT_INJECTION: forcing a failure. [ 244.872297][ T8209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.886379][ T8209] CPU: 0 UID: 0 PID: 8209 Comm: syz.2.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.886411][ T8209] Tainted: [L]=SOFTLOCKUP [ 244.886418][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.886430][ T8209] Call Trace: [ 244.886438][ T8209] [ 244.886447][ T8209] dump_stack_lvl+0xe8/0x150 [ 244.886473][ T8209] should_fail_ex+0x412/0x560 [ 244.886504][ T8209] _copy_from_user+0x2d/0xb0 [ 244.886532][ T8209] kstrtouint_from_user+0xd6/0x180 [ 244.886559][ T8209] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 244.886598][ T8209] proc_fail_nth_write+0x8e/0x210 [ 244.886623][ T8209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.886652][ T8209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.886677][ T8209] vfs_write+0x29a/0xb90 [ 244.886712][ T8209] ? __pfx_vfs_write+0x10/0x10 [ 244.886739][ T8209] ? __fget_files+0x2a/0x420 [ 244.886766][ T8209] ? __fget_files+0x3a0/0x420 [ 244.886788][ T8209] ? __fget_files+0x2a/0x420 [ 244.886819][ T8209] ksys_write+0x150/0x270 [ 244.886853][ T8209] ? __pfx_ksys_write+0x10/0x10 [ 244.886885][ T8209] ? asm_int80_emulation+0x1a/0x20 [ 244.886909][ T8209] do_int80_emulation+0x181/0x530 [ 244.886927][ T8209] ? trace_irq_disable+0x3b/0x140 [ 244.886955][ T8209] ? asm_int80_emulation+0x1a/0x20 [ 244.886972][ T8209] ? clear_bhb_loop+0x40/0x90 [ 244.886991][ T8209] ? clear_bhb_loop+0x40/0x90 [ 244.887015][ T8209] asm_int80_emulation+0x1a/0x20 [ 244.887034][ T8209] RIP: 0023:0xf71e61ab [ 244.887053][ T8209] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 244.887069][ T8209] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 244.887089][ T8209] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 244.887102][ T8209] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.887113][ T8209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.887124][ T8209] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.887136][ T8209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.887178][ T8209] [ 245.200596][ T7599] usb 1-1: config 0 has no interfaces? [ 245.206154][ T7599] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.217002][ T7599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.229556][ T7599] usb 1-1: config 0 descriptor?? [ 245.386433][ T8213] tipc: Enabled bearer , priority 0 [ 245.395263][ T8213] syzkaller0: entered promiscuous mode [ 245.401401][ T8213] syzkaller0: entered allmulticast mode [ 245.437389][ T8213] tipc: Resetting bearer [ 245.444524][ T8213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.461033][ T8197] usb 33-1: recv xbuf, 0 [ 245.467332][ T7599] usb 1-1: string descriptor 0 read error: -71 [ 245.482750][ T112] vhci_hcd vhci_hcd.0: stop threads [ 245.485685][ T8210] tipc: Resetting bearer [ 245.496536][ T112] vhci_hcd vhci_hcd.0: release socket [ 245.524797][ T7599] usb 1-1: USB disconnect, device number 35 [ 245.538402][ T112] vhci_hcd vhci_hcd.0: disconnect device [ 245.556859][ T8210] tipc: Disabling bearer [ 245.587872][ T8220] FAULT_INJECTION: forcing a failure. [ 245.587872][ T8220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.603665][ T8220] CPU: 0 UID: 0 PID: 8220 Comm: syz.3.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.603698][ T8220] Tainted: [L]=SOFTLOCKUP [ 245.603706][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.603718][ T8220] Call Trace: [ 245.603727][ T8220] [ 245.603736][ T8220] dump_stack_lvl+0xe8/0x150 [ 245.603766][ T8220] should_fail_ex+0x412/0x560 [ 245.603799][ T8220] _copy_from_user+0x2d/0xb0 [ 245.603830][ T8220] kstrtouint_from_user+0xd6/0x180 [ 245.603858][ T8220] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 245.603900][ T8220] proc_fail_nth_write+0x8e/0x210 [ 245.603928][ T8220] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 245.603959][ T8220] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 245.603988][ T8220] vfs_write+0x29a/0xb90 [ 245.604027][ T8220] ? __pfx_vfs_write+0x10/0x10 [ 245.604058][ T8220] ? __fget_files+0x2a/0x420 [ 245.604088][ T8220] ? __fget_files+0x3a0/0x420 [ 245.604111][ T8220] ? __fget_files+0x2a/0x420 [ 245.604146][ T8220] ksys_write+0x150/0x270 [ 245.604188][ T8220] ? __pfx_ksys_write+0x10/0x10 [ 245.604222][ T8220] ? asm_int80_emulation+0x1a/0x20 [ 245.604249][ T8220] do_int80_emulation+0x181/0x530 [ 245.604270][ T8220] ? asm_int80_emulation+0x1a/0x20 [ 245.604289][ T8220] ? clear_bhb_loop+0x40/0x90 [ 245.604310][ T8220] ? clear_bhb_loop+0x40/0x90 [ 245.604335][ T8220] asm_int80_emulation+0x1a/0x20 [ 245.604355][ T8220] RIP: 0023:0xf71161ab [ 245.604374][ T8220] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 245.604392][ T8220] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 245.604414][ T8220] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 245.604428][ T8220] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.604440][ T8220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.604452][ T8220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.604464][ T8220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.604495][ T8220] [ 246.031336][ T8231] 8021q: VLANs not supported on sit0 [ 246.041557][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.750'. [ 246.064061][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.073638][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.524062][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 246.524080][ T29] audit: type=1326 audit(1779121398.013:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.556102][ T29] audit: type=1326 audit(1779121398.013:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.618037][ T29] audit: type=1326 audit(1779121398.043:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.668722][ T29] audit: type=1326 audit(1779121398.043:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.723548][ T29] audit: type=1326 audit(1779121398.043:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.748737][ T29] audit: type=1326 audit(1779121398.043:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.787576][ T29] audit: type=1326 audit(1779121398.043:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.814326][ T29] audit: type=1326 audit(1779121398.043:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 246.817138][ T8251] netlink: 'syz.4.758': attribute type 16 has an invalid length. [ 246.854382][ T8251] netlink: 'syz.4.758': attribute type 17 has an invalid length. [ 246.868940][ T29] audit: type=1326 audit(1779121398.043:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71d61ab code=0x7ffc0000 [ 246.952354][ T29] audit: type=1326 audit(1779121398.043:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.0.756" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 247.054804][ T8255] FAULT_INJECTION: forcing a failure. [ 247.054804][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.079369][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.0.760 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.079401][ T8255] Tainted: [L]=SOFTLOCKUP [ 247.079409][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.079421][ T8255] Call Trace: [ 247.079428][ T8255] [ 247.079437][ T8255] dump_stack_lvl+0xe8/0x150 [ 247.079466][ T8255] should_fail_ex+0x412/0x560 [ 247.079497][ T8255] _copy_from_user+0x2d/0xb0 [ 247.079530][ T8255] get_compat_msghdr+0xb3/0x4c0 [ 247.079565][ T8255] ? _parse_integer_limit+0x1ae/0x1f0 [ 247.079589][ T8255] ? __pfx_get_compat_msghdr+0x10/0x10 [ 247.079621][ T8255] ? kstrtoull+0x12f/0x1d0 [ 247.079651][ T8255] ___sys_sendmsg+0x201/0x360 [ 247.079680][ T8255] ? __lock_acquire+0x6b5/0x2cf0 [ 247.079708][ T8255] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.079741][ T8255] ? get_pid_task+0x20/0x1f0 [ 247.079778][ T8255] ? get_pid_task+0x20/0x1f0 [ 247.079801][ T8255] ? get_pid_task+0x20/0x1f0 [ 247.079854][ T8255] ? __fget_files+0x2a/0x420 [ 247.079884][ T8255] ? __fget_files+0x3a0/0x420 [ 247.079920][ T8255] __sys_sendmsg+0x183/0x260 [ 247.079953][ T8255] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.080004][ T8255] __do_fast_syscall_32+0x229/0x6e0 [ 247.080025][ T8255] ? do_fast_syscall_32+0x33/0x70 [ 247.080043][ T8255] ? lockdep_hardirqs_on+0x7a/0x110 [ 247.080072][ T8255] ? asm_int80_emulation+0x1a/0x20 [ 247.080091][ T8255] ? do_int80_emulation+0x286/0x530 [ 247.080109][ T8255] ? trace_irq_disable+0x3b/0x140 [ 247.080144][ T8255] do_fast_syscall_32+0x33/0x70 [ 247.080164][ T8255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.080188][ T8255] RIP: 0023:0xf709f01c [ 247.080206][ T8255] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 247.080223][ T8255] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 247.080244][ T8255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 247.080258][ T8255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.080269][ T8255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.080281][ T8255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.080293][ T8255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.080323][ T8255] [ 247.395178][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.411038][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.425029][ T5629] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 247.743850][ T8274] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.819343][ T8268] FAULT_INJECTION: forcing a failure. [ 247.819343][ T8268] name failslab, interval 1, probability 0, space 0, times 0 [ 247.852035][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.2.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.852068][ T8268] Tainted: [L]=SOFTLOCKUP [ 247.852075][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.852087][ T8268] Call Trace: [ 247.852096][ T8268] [ 247.852105][ T8268] dump_stack_lvl+0xe8/0x150 [ 247.852134][ T8268] should_fail_ex+0x412/0x560 [ 247.852167][ T8268] should_failslab+0xa8/0x100 [ 247.852199][ T8268] ? io_submit_one+0x130/0x14c0 [ 247.852218][ T8268] kmem_cache_alloc_noprof+0x87/0x650 [ 247.852258][ T8268] io_submit_one+0x130/0x14c0 [ 247.852281][ T8268] ? irqentry_exit+0x218/0x760 [ 247.852322][ T8268] ? __pfx_io_submit_one+0x10/0x10 [ 247.852343][ T8268] ? __might_fault+0xaf/0x130 [ 247.852380][ T8268] ? __might_fault+0xaf/0x130 [ 247.852409][ T8268] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 247.852443][ T8268] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 247.852490][ T8268] __do_fast_syscall_32+0x229/0x6e0 [ 247.852511][ T8268] ? do_fast_syscall_32+0x33/0x70 [ 247.852529][ T8268] ? lockdep_hardirqs_on+0x7a/0x110 [ 247.852558][ T8268] ? asm_int80_emulation+0x1a/0x20 [ 247.852578][ T8268] ? do_int80_emulation+0x286/0x530 [ 247.852595][ T8268] ? trace_irq_disable+0x3b/0x140 [ 247.852629][ T8268] do_fast_syscall_32+0x33/0x70 [ 247.852649][ T8268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.852674][ T8268] RIP: 0023:0xf7fe801c [ 247.852693][ T8268] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 247.852711][ T8268] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 247.852732][ T8268] RAX: ffffffffffffffda RBX: 00000000f7fdf000 RCX: 0000000000000002 [ 247.852745][ T8268] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.852758][ T8268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.852769][ T8268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.852782][ T8268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.852811][ T8268] [ 248.259797][ T8283] FAULT_INJECTION: forcing a failure. [ 248.259797][ T8283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.273045][ T8283] CPU: 0 UID: 0 PID: 8283 Comm: syz.3.769 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.273069][ T8283] Tainted: [L]=SOFTLOCKUP [ 248.273074][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.273083][ T8283] Call Trace: [ 248.273091][ T8283] [ 248.273097][ T8283] dump_stack_lvl+0xe8/0x150 [ 248.273120][ T8283] should_fail_ex+0x412/0x560 [ 248.273145][ T8283] _copy_from_iter+0x1d3/0x1670 [ 248.273168][ T8283] ? rcu_is_watching+0x15/0xb0 [ 248.273191][ T8283] ? __pfx__copy_from_iter+0x10/0x10 [ 248.273216][ T8283] ? netlink_sendmsg+0x650/0xb40 [ 248.273237][ T8283] ? skb_put+0x11b/0x210 [ 248.273259][ T8283] netlink_sendmsg+0x6c0/0xb40 [ 248.273287][ T8283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.273311][ T8283] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.273332][ T8283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.273354][ T8283] ____sys_sendmsg+0x972/0x9f0 [ 248.273383][ T8283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.273407][ T8283] ? kstrtoull+0x12f/0x1d0 [ 248.273429][ T8283] ___sys_sendmsg+0x2a5/0x360 [ 248.273450][ T8283] ? __lock_acquire+0x6b5/0x2cf0 [ 248.273470][ T8283] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.273493][ T8283] ? get_pid_task+0x20/0x1f0 [ 248.273511][ T8283] ? get_pid_task+0x20/0x1f0 [ 248.273529][ T8283] ? get_pid_task+0x20/0x1f0 [ 248.273566][ T8283] ? __fget_files+0x2a/0x420 [ 248.273584][ T8283] ? __fget_files+0x3a0/0x420 [ 248.273610][ T8283] __sys_sendmsg+0x183/0x260 [ 248.273633][ T8283] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.273694][ T8283] __do_fast_syscall_32+0x229/0x6e0 [ 248.273721][ T8283] ? do_fast_syscall_32+0x33/0x70 [ 248.273734][ T8283] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.273755][ T8283] ? asm_int80_emulation+0x1a/0x20 [ 248.273770][ T8283] ? do_int80_emulation+0x286/0x530 [ 248.273782][ T8283] ? trace_irq_disable+0x3b/0x140 [ 248.273807][ T8283] do_fast_syscall_32+0x33/0x70 [ 248.273821][ T8283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.273839][ T8283] RIP: 0023:0xf7f1601c [ 248.273874][ T8283] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 248.273892][ T8283] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 248.273914][ T8283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 248.273928][ T8283] RDX: 00000000040008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.273940][ T8283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.273952][ T8283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.273969][ T8283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.273991][ T8283] [ 248.754316][ T8293] FAULT_INJECTION: forcing a failure. [ 248.754316][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.770220][ T8293] CPU: 0 UID: 0 PID: 8293 Comm: syz.0.772 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.770254][ T8293] Tainted: [L]=SOFTLOCKUP [ 248.770262][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.770275][ T8293] Call Trace: [ 248.770283][ T8293] [ 248.770291][ T8293] dump_stack_lvl+0xe8/0x150 [ 248.770320][ T8293] should_fail_ex+0x412/0x560 [ 248.770352][ T8293] _copy_from_iter+0x1d3/0x1670 [ 248.770384][ T8293] ? rcu_is_watching+0x15/0xb0 [ 248.770416][ T8293] ? __pfx__copy_from_iter+0x10/0x10 [ 248.770451][ T8293] ? netlink_sendmsg+0x650/0xb40 [ 248.770485][ T8293] ? skb_put+0x11b/0x210 [ 248.770516][ T8293] netlink_sendmsg+0x6c0/0xb40 [ 248.770555][ T8293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.770587][ T8293] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.770617][ T8293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.770648][ T8293] ____sys_sendmsg+0x972/0x9f0 [ 248.770688][ T8293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.770721][ T8293] ? kstrtoull+0x12f/0x1d0 [ 248.770753][ T8293] ___sys_sendmsg+0x2a5/0x360 [ 248.770781][ T8293] ? __lock_acquire+0x6b5/0x2cf0 [ 248.770808][ T8293] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.770847][ T8293] ? get_pid_task+0x20/0x1f0 [ 248.770873][ T8293] ? get_pid_task+0x20/0x1f0 [ 248.770896][ T8293] ? get_pid_task+0x20/0x1f0 [ 248.770950][ T8293] ? __fget_files+0x2a/0x420 [ 248.770974][ T8293] ? __fget_files+0x3a0/0x420 [ 248.771009][ T8293] __sys_sendmsg+0x183/0x260 [ 248.771042][ T8293] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.771094][ T8293] __do_fast_syscall_32+0x229/0x6e0 [ 248.771114][ T8293] ? do_fast_syscall_32+0x33/0x70 [ 248.771133][ T8293] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.771161][ T8293] ? asm_int80_emulation+0x1a/0x20 [ 248.771182][ T8293] ? do_int80_emulation+0x286/0x530 [ 248.771200][ T8293] ? trace_irq_disable+0x3b/0x140 [ 248.771235][ T8293] do_fast_syscall_32+0x33/0x70 [ 248.771255][ T8293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.771280][ T8293] RIP: 0023:0xf709f01c [ 248.771299][ T8293] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 248.771317][ T8293] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 248.771338][ T8293] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 248.771353][ T8293] RDX: 0000000000048094 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.771365][ T8293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.771377][ T8293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.771389][ T8293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.771419][ T8293] [ 249.089177][ T8295] FAULT_INJECTION: forcing a failure. [ 249.089177][ T8295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.135996][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.3.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.136030][ T8295] Tainted: [L]=SOFTLOCKUP [ 249.136038][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.136051][ T8295] Call Trace: [ 249.136058][ T8295] [ 249.136067][ T8295] dump_stack_lvl+0xe8/0x150 [ 249.136096][ T8295] should_fail_ex+0x412/0x560 [ 249.136129][ T8295] _copy_to_user+0x31/0xb0 [ 249.136162][ T8295] copy_to_sockptr+0x5e/0xa0 [ 249.136194][ T8295] do_tcp_getsockopt+0x21c0/0x2940 [ 249.136232][ T8295] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 249.136259][ T8295] ? __lock_acquire+0x6b5/0x2cf0 [ 249.136281][ T8295] ? sock_common_getsockopt+0x10/0xb0 [ 249.136311][ T8295] ? aa_file_perm+0x192/0x15e0 [ 249.136339][ T8295] ? aa_label_sk_perm+0x532/0x6e0 [ 249.136372][ T8295] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 249.136400][ T8295] ? __lock_acquire+0x6b5/0x2cf0 [ 249.136425][ T8295] ? _parse_integer_limit+0x1ae/0x1f0 [ 249.136455][ T8295] ? kstrtoull+0x12f/0x1d0 [ 249.136495][ T8295] ? aa_sk_perm+0x6d5/0x900 [ 249.136528][ T8295] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.136556][ T8295] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 249.136581][ T8295] tcp_getsockopt+0x83/0x130 [ 249.136609][ T8295] ? sock_common_getsockopt+0x10/0xb0 [ 249.136632][ T8295] ? sock_common_getsockopt+0x10/0xb0 [ 249.136656][ T8295] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 249.136681][ T8295] do_sock_getsockopt+0x51d/0x7e0 [ 249.136718][ T8295] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 249.136744][ T8295] ? __fget_files+0x2a/0x420 [ 249.136799][ T8295] ? __fget_files+0x2a/0x420 [ 249.136823][ T8295] ? __fget_files+0x3a0/0x420 [ 249.136846][ T8295] ? __fget_files+0x2a/0x420 [ 249.136878][ T8295] __ia32_sys_getsockopt+0x1a4/0x240 [ 249.136916][ T8295] __do_fast_syscall_32+0x229/0x6e0 [ 249.136937][ T8295] ? do_fast_syscall_32+0x33/0x70 [ 249.136955][ T8295] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.136983][ T8295] ? asm_int80_emulation+0x1a/0x20 [ 249.137003][ T8295] ? do_int80_emulation+0x286/0x530 [ 249.137020][ T8295] ? trace_irq_disable+0x3b/0x140 [ 249.137055][ T8295] do_fast_syscall_32+0x33/0x70 [ 249.137075][ T8295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.137100][ T8295] RIP: 0023:0xf7f1601c [ 249.137118][ T8295] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 249.137136][ T8295] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 249.137158][ T8295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 249.137171][ T8295] RDX: 0000000000000023 RSI: 00000000800006c0 RDI: 0000000080000700 [ 249.137184][ T8295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.137196][ T8295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.137208][ T8295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.137238][ T8295] [ 250.079140][ T7608] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 250.260764][ T7608] usb 1-1: not running at top speed; connect to a high speed hub [ 250.284858][ T7608] usb 1-1: config 1 interface 0 altsetting 48 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 250.302471][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.330346][ T7608] usb 1-1: config 1 interface 0 has no altsetting 0 [ 250.354674][ T7608] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 250.372150][ T7608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.381755][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.393712][ T7608] usb 1-1: Product: 䑈熖渾砗蔉䣀庬읓䶆䬠ﲥ䳞鏑몓䨴ϭ䤸䥽뢂傞霆塿ᆵ咏駡㍯ꣁ夡력溸浐渁冞朁簘䩥癟繟㡋೥阗꺞삙苸➴㑕㊾숗鈡闄뷫Įˋ 壷睊匇⍁எ蘯Ḏ畮鰊ꨀ誛ᨈ譟䉮㈏槨ᰜ [ 250.473308][ T7608] usb 1-1: Manufacturer: ᰁ [ 250.497076][ T7608] usb 1-1: SerialNumber: 쎼㣥髊쥧㸝࢟뗯뉒⿑繈ࣄ选쎉췢缋塛遳᧩碸⿯鉆Ꮸꄿ館鸆䑜푑攦䃆鮩Ϥꉦ൥뻊暽弼舧ꓘ஝뙼濩괮趮髜㏖睔瓳ᮾ㙖嘲辤﹮幷됷蘿䟗 [ 250.614503][ T8312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.635267][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 250.657020][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 250.678438][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 250.835176][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.859027][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.898773][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.927102][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.057287][ T8330] netlink: 766 bytes leftover after parsing attributes in process `syz.3.784'. [ 251.086285][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.114129][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.441055][ T7608] usbhid 1-1:1.0: can't add hid device: -71 [ 251.467305][ T7608] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 251.480512][ T5629] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 251.489284][ T5629] Bluetooth: hci4: Injecting HCI hardware error event [ 251.507153][ T5629] Bluetooth: hci4: hardware error 0x00 [ 251.542704][ T7608] usb 1-1: USB disconnect, device number 36 [ 251.727937][ T8337] netlink: 9 bytes leftover after parsing attributes in process `syz.2.787'. [ 251.741806][ T8337] gretap0: entered promiscuous mode [ 252.061408][ T8339] syzkaller0: entered promiscuous mode [ 252.081083][ T8339] syzkaller0: entered allmulticast mode [ 252.598957][ T7599] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 252.738815][ T7599] usb 4-1: device descriptor read/64, error -71 [ 252.978784][ T7599] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 253.119581][ T7599] usb 4-1: device descriptor read/64, error -71 [ 253.240941][ T7599] usb usb4-port1: attempt power cycle [ 253.562063][ T5629] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 253.600198][ T7599] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 253.619436][ T7599] usb 4-1: device descriptor read/8, error -71 [ 253.858792][ T7599] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 253.880219][ T7599] usb 4-1: device descriptor read/8, error -71 [ 253.999151][ T7599] usb usb4-port1: unable to enumerate USB device [ 254.215393][ T8368] fuse: Invalid rootmode [ 254.898842][ T7587] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 254.988948][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 255.068798][ T7587] usb 3-1: Invalid ep0 maxpacket: 64 [ 255.149352][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 255.166912][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.179597][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.190137][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.203731][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 255.214871][ T7587] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 255.223433][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.234800][ T24] usb 1-1: Product: у [ 255.240084][ T24] usb 1-1: Manufacturer: 쓎⦽얜䳷 [ 255.245752][ T24] usb 1-1: SerialNumber: 牢鬡ҍ꾡敆ꗺ䵞漱ઔ穝ᚒ媁ᩚ뙌뵲ꔽ⎌탏樅ↈ抻仧콀湣킐変ﯯ䱮ꩊ莰䍲獨鴷鱁땳ᨺ黷冹꒕趑ꆔ✳幝ߕ扦憗碔䏻呪ﶇꩡ멹ꋩ뷗盡䬾ꯇ禿ሧ缦᪍࣏䤲죤捡䁠꩟퉦䗲滲㵁緮Ίڌ柕왙铔鎙潂瑙ೝ鷩쵠㲤笷菗 [ 255.327388][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.361883][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.378848][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.379071][ T7587] usb 3-1: Invalid ep0 maxpacket: 64 [ 255.388635][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.429788][ T7587] usb usb3-port1: attempt power cycle [ 255.522909][ T24] usb 1-1: unit 14 not found! [ 255.597851][ T8393] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 255.629955][ T24] usb 1-1: USB disconnect, device number 37 [ 255.683230][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.701993][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 255.789181][ T7587] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 255.800789][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.807283][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.839938][ T7587] usb 3-1: Invalid ep0 maxpacket: 64 [ 255.854770][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 255.971372][ T7587] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 255.999839][ T7587] usb 3-1: Invalid ep0 maxpacket: 64 [ 256.008157][ T7587] usb usb3-port1: unable to enumerate USB device [ 256.120622][ T7599] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 256.288755][ T7599] usb 4-1: Using ep0 maxpacket: 8 [ 256.304150][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.323028][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.342272][ T7599] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.367942][ T7599] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 256.384825][ T7599] usb 4-1: can't read configurations, error -71 [ 256.978954][ T5722] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 257.108802][ T5722] usb 1-1: device descriptor read/64, error -71 [ 257.162650][ T8427] FAULT_INJECTION: forcing a failure. [ 257.162650][ T8427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.176987][ T8427] CPU: 1 UID: 0 PID: 8427 Comm: syz.3.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.177020][ T8427] Tainted: [L]=SOFTLOCKUP [ 257.177028][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.177040][ T8427] Call Trace: [ 257.177048][ T8427] [ 257.177056][ T8427] dump_stack_lvl+0xe8/0x150 [ 257.177085][ T8427] should_fail_ex+0x412/0x560 [ 257.177116][ T8427] _copy_from_iter+0x1d3/0x1670 [ 257.177146][ T8427] ? rcu_is_watching+0x15/0xb0 [ 257.177176][ T8427] ? __pfx__copy_from_iter+0x10/0x10 [ 257.177228][ T8427] ? netlink_sendmsg+0x650/0xb40 [ 257.177256][ T8427] ? skb_put+0x11b/0x210 [ 257.177287][ T8427] netlink_sendmsg+0x6c0/0xb40 [ 257.177326][ T8427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.177358][ T8427] ? aa_sock_msg_perm+0xf1/0x1b0 [ 257.177387][ T8427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.177418][ T8427] ____sys_sendmsg+0x972/0x9f0 [ 257.177457][ T8427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.177491][ T8427] ? kstrtoull+0x12f/0x1d0 [ 257.177527][ T8427] ___sys_sendmsg+0x2a5/0x360 [ 257.177555][ T8427] ? __lock_acquire+0x6b5/0x2cf0 [ 257.177582][ T8427] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.177614][ T8427] ? get_pid_task+0x20/0x1f0 [ 257.177640][ T8427] ? get_pid_task+0x20/0x1f0 [ 257.177662][ T8427] ? get_pid_task+0x20/0x1f0 [ 257.177721][ T8427] ? __fget_files+0x2a/0x420 [ 257.177746][ T8427] ? __fget_files+0x3a0/0x420 [ 257.177779][ T8427] __sys_sendmsg+0x183/0x260 [ 257.177811][ T8427] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.177862][ T8427] __do_fast_syscall_32+0x229/0x6e0 [ 257.177883][ T8427] ? do_fast_syscall_32+0x33/0x70 [ 257.177901][ T8427] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.177930][ T8427] ? asm_int80_emulation+0x1a/0x20 [ 257.177949][ T8427] ? do_int80_emulation+0x286/0x530 [ 257.177968][ T8427] ? trace_irq_disable+0x3b/0x140 [ 257.178002][ T8427] do_fast_syscall_32+0x33/0x70 [ 257.178022][ T8427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.178046][ T8427] RIP: 0023:0xf7f1601c [ 257.178065][ T8427] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 257.178083][ T8427] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 257.178104][ T8427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000c2c0 [ 257.178118][ T8427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.178131][ T8427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.178143][ T8427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.178154][ T8427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.178184][ T8427] [ 257.588840][ T5722] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 257.718953][ T5722] usb 1-1: device descriptor read/64, error -71 [ 257.818806][ T7599] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 257.830552][ T5722] usb usb1-port1: attempt power cycle [ 257.957090][ T8432] FAULT_INJECTION: forcing a failure. [ 257.957090][ T8432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.972928][ T7599] usb 4-1: not running at top speed; connect to a high speed hub [ 257.985943][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.2.817 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.985976][ T8432] Tainted: [L]=SOFTLOCKUP [ 257.985984][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.985996][ T8432] Call Trace: [ 257.986009][ T8432] [ 257.986016][ T8432] dump_stack_lvl+0xe8/0x150 [ 257.986038][ T8432] should_fail_ex+0x412/0x560 [ 257.986061][ T8432] _copy_from_user+0x2d/0xb0 [ 257.986085][ T8432] get_compat_msghdr+0xb3/0x4c0 [ 257.986112][ T8432] ? __pfx_get_compat_msghdr+0x10/0x10 [ 257.986136][ T8432] ? kfree+0x4d/0x640 [ 257.986159][ T8432] ___sys_recvmsg+0x1dd/0x590 [ 257.986181][ T8432] ? __lock_acquire+0x6b5/0x2cf0 [ 257.986200][ T8432] ? __pfx____sys_recvmsg+0x10/0x10 [ 257.986225][ T8432] ? __fget_files+0x2a/0x420 [ 257.986264][ T8432] do_recvmmsg+0x3a5/0x800 [ 257.986292][ T8432] ? __pfx_do_recvmmsg+0x10/0x10 [ 257.986322][ T8432] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 257.986350][ T8432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.986378][ T8432] __sys_recvmmsg+0x1a5/0x290 [ 257.986401][ T8432] ? __pfx___sys_recvmmsg+0x10/0x10 [ 257.986424][ T8432] ? ksys_write+0x242/0x270 [ 257.986450][ T8432] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 257.986476][ T8432] __do_fast_syscall_32+0x229/0x6e0 [ 257.986490][ T8432] ? do_fast_syscall_32+0x33/0x70 [ 257.986502][ T8432] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.986522][ T8432] ? asm_int80_emulation+0x1a/0x20 [ 257.986536][ T8432] ? do_int80_emulation+0x286/0x530 [ 257.986548][ T8432] ? trace_irq_disable+0x3b/0x140 [ 257.986573][ T8432] do_fast_syscall_32+0x33/0x70 [ 257.986586][ T8432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.986604][ T8432] RIP: 0023:0xf7fe801c [ 257.986617][ T8432] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 257.986629][ T8432] RSP: 002b:00000000f548550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 257.986645][ T8432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 257.986654][ T8432] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 257.986663][ T8432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.986671][ T8432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.986679][ T8432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.986699][ T8432] [ 257.995118][ T7599] usb 4-1: config 1 interface 0 altsetting 48 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 258.243239][ T7599] usb 4-1: config 1 interface 0 has no altsetting 0 [ 258.252090][ T7599] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 258.261453][ T7599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.265351][ T5722] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 258.269600][ T7599] usb 4-1: Product: 䑈熖渾砗蔉䣀庬읓䶆䬠ﲥ䳞鏑몓䨴ϭ䤸䥽뢂傞霆塿ᆵ咏駡㍯ꣁ夡력溸浐渁冞朁簘䩥癟繟㡋೥阗꺞삙苸➴㑕㊾숗鈡闄뷫Įˋ 壷睊匇⍁எ蘯Ḏ畮鰊ꨀ誛ᨈ譟䉮㈏槨ᰜ [ 258.302682][ T7599] usb 4-1: Manufacturer: ᰁ [ 258.307369][ T7599] usb 4-1: SerialNumber: 쎼㣥髊쥧㸝࢟뗯뉒⿑繈ࣄ选쎉췢缋塛遳᧩碸⿯鉆Ꮸꄿ館鸆䑜푑攦䃆鮩Ϥꉦ൥뻊暽弼舧ꓘ஝뙼濩괮趮髜㏖睔瓳ᮾ㙖嘲辤﹮幷됷蘿䟗 [ 258.329992][ T5722] usb 1-1: device descriptor read/8, error -71 [ 258.339532][ T8429] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 258.358808][ T30] INFO: task kworker/1:2:809 blocked for more than 143 seconds. [ 258.366643][ T30] Tainted: G L syzkaller #0 [ 258.373292][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.382346][ T30] task:kworker/1:2 state:D stack:24320 pid:809 tgid:809 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 258.394906][ T30] Workqueue: usb_hub_wq hub_event [ 258.400087][ T30] Call Trace: [ 258.403440][ T30] [ 258.406500][ T30] __schedule+0x1821/0x5740 [ 258.411147][ T30] ? __pfx___schedule+0x10/0x10 [ 258.416094][ T30] ? schedule+0x90/0x360 [ 258.420476][ T30] schedule+0x164/0x360 [ 258.424695][ T30] schedule_timeout+0xc3/0x2c0 [ 258.429557][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 258.434990][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.440144][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.445408][ T30] ? wait_for_completion+0x274/0x5e0 [ 258.451102][ T30] wait_for_completion+0x2cc/0x5e0 [ 258.456355][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 258.462505][ T30] i2c_del_adapter+0x5c0/0x790 [ 258.467503][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 258.473762][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 258.479464][ T30] ? kfree+0x1c5/0x640 [ 258.483685][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 258.488539][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 258.493865][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 258.499600][ T30] ? usb_disable_interface+0x31d/0x350 [ 258.505124][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.511085][ T30] usb_unbind_interface+0x26e/0x910 [ 258.516419][ T30] ? kernfs_remove_by_name_ns+0x101/0x140 [ 258.522786][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 258.529227][ T30] device_release_driver_internal+0x4d9/0x870 [ 258.535479][ T30] bus_remove_device+0x455/0x570 [ 258.542204][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 258.549221][ T30] ? kernfs_remove_by_name_ns+0x101/0x140 [ 258.556780][ T30] device_del+0x527/0x8f0 [ 258.561485][ T30] ? __pfx_device_del+0x10/0x10 [ 258.566979][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 258.574663][ T30] usb_disable_device+0x3d4/0x8d0 [ 258.580515][ T30] usb_disconnect+0x32f/0x990 [ 258.585414][ T30] hub_event+0x1cc9/0x4f30 [ 258.593949][ T30] ? __pfx_hub_event+0x10/0x10 [ 258.598944][ T5722] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 258.602010][ T30] ? process_scheduled_works+0xa70/0x1860 [ 258.618755][ T30] ? process_scheduled_works+0xa70/0x1860 [ 258.625834][ T30] ? process_scheduled_works+0xa70/0x1860 [ 258.633718][ T30] process_scheduled_works+0xb5d/0x1860 [ 258.646290][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.653602][ T30] ? assign_work+0x3d5/0x5e0 [ 258.659143][ T30] worker_thread+0xa53/0xfc0 [ 258.660159][ T5722] usb 1-1: device descriptor read/8, error -71 [ 258.664684][ T30] kthread+0x389/0x470 [ 258.680309][ T30] ? __pfx_worker_thread+0x10/0x10 [ 258.688582][ T30] ? __pfx_kthread+0x10/0x10 [ 258.701434][ T30] ret_from_fork+0x514/0xb70 [ 258.709281][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 258.715634][ T30] ? __switch_to+0xc79/0x1410 [ 258.720932][ T30] ? __pfx_kthread+0x10/0x10 [ 258.726121][ T30] ret_from_fork_asm+0x1a/0x30 [ 258.732094][ T30] [ 258.737545][ T30] [ 258.737545][ T30] Showing all locks held in the system: [ 258.747121][ T30] 1 lock held by khungtaskd/30: [ 258.755860][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 258.767781][ T30] 5 locks held by kworker/1:2/809: [ 258.777353][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.787258][ T30] #0: ffff88801eab4d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 258.800207][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.814510][ T5722] usb usb1-port1: unable to enumerate USB device [ 258.820264][ T30] #1: ffffc90004a4fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 258.855499][ T30] #2: ffff88802a6681d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 258.867353][ T30] #3: ffff888035a8f1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 258.880396][ T30] #4: ffff888021ee71a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 258.892327][ T30] 2 locks held by getty/5382: [ 258.900661][ T30] #0: ffff8880367e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 258.922409][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 258.936596][ T30] 4 locks held by udevd/5727: [ 258.941849][ T30] #0: ffff888074f3fab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 258.951227][ T30] #1: ffff888068d85880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 258.961334][ T30] #2: ffff88803614a2d8 (kn->active#17){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 258.971472][ T30] #3: ffff888021ae81d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 258.981600][ T30] 5 locks held by kworker/0:9/7599: [ 258.986896][ T30] #0: ffff88801eab4d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 258.998431][ T30] #1: ffffc9001c567c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 259.011089][ T30] #2: ffff88802a9631d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 259.020452][ T30] #3: ffff888021ae81d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 259.029999][ T30] #4: ffff888022af0268 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 259.042394][ T30] 3 locks held by syz.3.816/8429: [ 259.047552][ T30] #0: ffffffff9032b8a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 259.057581][ T30] #1: ffffffff8fdd0800 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 259.067037][ T30] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 259.080504][ T30] [ 259.083059][ T30] ============================================= [ 259.083059][ T30] [ 259.093576][ T30] NMI backtrace for cpu 0 [ 259.093596][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 259.093622][ T30] Tainted: [L]=SOFTLOCKUP [ 259.093629][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.093641][ T30] Call Trace: [ 259.093649][ T30] [ 259.093660][ T30] dump_stack_lvl+0xe8/0x150 [ 259.093690][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 259.093713][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.093736][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 259.093763][ T30] sys_info+0x135/0x170 [ 259.093782][ T30] watchdog+0xfd3/0x1030 [ 259.093818][ T30] ? watchdog+0x1c9/0x1030 [ 259.093852][ T30] kthread+0x389/0x470 [ 259.093878][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.093903][ T30] ? __pfx_kthread+0x10/0x10 [ 259.093929][ T30] ret_from_fork+0x514/0xb70 [ 259.093953][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 259.093974][ T30] ? __switch_to+0xc79/0x1410 [ 259.094004][ T30] ? __pfx_kthread+0x10/0x10 [ 259.094030][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.094070][ T30] [ 259.094101][ T30] Sending NMI from CPU 0 to CPUs 1: [ 259.210616][ C1] NMI backtrace for cpu 1 [ 259.210635][ C1] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 259.210659][ C1] Tainted: [L]=SOFTLOCKUP [ 259.210666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.210676][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x70 [ 259.210707][ C1] Code: 68 9b 73 11 65 8b 15 89 9b 73 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 d4 16 00 00 00 74 2c 8b 91 b0 16 00 00 <83> fa 02 75 21 48 8b 91 b8 16 00 00 48 8b 32 48 8d 7e 01 8b 89 b4 [ 259.210726][ C1] RSP: 0018:ffffc9000386f798 EFLAGS: 00000246 [ 259.210742][ C1] RAX: ffffffff846fd934 RBX: 0000000000000000 RCX: ffff888035aa9ec0 [ 259.210761][ C1] RDX: 0000000000000000 RSI: ffff88801bebd8f8 RDI: ffff88801df8c300 [ 259.210773][ C1] RBP: ffffc9000386f9b0 R08: ffff88807896b400 R09: 0000000000000000 [ 259.210785][ C1] R10: ffffc9000386fbd8 R11: fffff5200070df7d R12: ffff88801df8c300 [ 259.210799][ C1] R13: ffff88807896b400 R14: ffff888074f15180 R15: 1ffff9200070df00 [ 259.210812][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0063) knlGS:0000000056dbf4c0 [ 259.210826][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 259.210838][ C1] CR2: 00000000f7477a54 CR3: 0000000074f8c000 CR4: 00000000003526f0 [ 259.210855][ C1] Call Trace: [ 259.210865][ C1] [ 259.210872][ C1] aa_label_sk_perm+0x124/0x6e0 [ 259.210896][ C1] ? __update_idle_core+0x48/0x540 [ 259.210920][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 259.210938][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 259.210959][ C1] ? finish_task_switch+0x15f/0xbe0 [ 259.210974][ C1] ? lock_acquire+0x106/0x350 [ 259.211012][ C1] aa_sk_perm+0x60e/0x900 [ 259.211037][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 259.211059][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 259.211076][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.211098][ C1] security_socket_recvmsg+0x9f/0x2c0 [ 259.211127][ C1] sock_recvmsg+0x53/0x1b0 [ 259.211150][ C1] ? sock_read_iter+0x23d/0x320 [ 259.211167][ C1] sock_read_iter+0x251/0x320 [ 259.211185][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 259.211207][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 259.211232][ C1] ? security_file_permission+0x75/0x260 [ 259.211254][ C1] vfs_read+0x582/0xa70 [ 259.211279][ C1] ? debug_object_free+0x2d7/0x490 [ 259.211306][ C1] ? __pfx_vfs_read+0x10/0x10 [ 259.211339][ C1] ksys_read+0x150/0x270 [ 259.211364][ C1] ? __pfx_ksys_read+0x10/0x10 [ 259.211392][ C1] __do_fast_syscall_32+0x229/0x6e0 [ 259.211411][ C1] ? do_fast_syscall_32+0x33/0x70 [ 259.211430][ C1] ? irqentry_exit+0x10f/0x760 [ 259.211456][ C1] do_fast_syscall_32+0x33/0x70 [ 259.211472][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.211494][ C1] RIP: 0023:0xf705f01c [ 259.211510][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 259.211525][ C1] RSP: 002b:00000000ffad83b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 259.211541][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffad848c [ 259.211555][ C1] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.211567][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.211578][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 259.211588][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.211611][ C1] [ 259.558304][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 259.565214][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 259.576033][ T30] Tainted: [L]=SOFTLOCKUP [ 259.580381][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.590462][ T30] Call Trace: [ 259.593761][ T30] [ 259.596714][ T30] vpanic+0x56c/0xa60 [ 259.600722][ T30] ? __pfx___schedule+0x10/0x10 [ 259.605617][ T30] ? __pfx_vpanic+0x10/0x10 [ 259.610143][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 259.616331][ T30] panic+0xc5/0xd0 [ 259.620112][ T30] ? __pfx_panic+0x10/0x10 [ 259.624549][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 259.629955][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 259.636131][ T30] watchdog+0x102c/0x1030 [ 259.640614][ T30] ? watchdog+0x1c9/0x1030 [ 259.645067][ T30] kthread+0x389/0x470 [ 259.649249][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.653946][ T30] ? __pfx_kthread+0x10/0x10 [ 259.658567][ T30] ret_from_fork+0x514/0xb70 [ 259.663181][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 259.668316][ T30] ? __switch_to+0xc79/0x1410 [ 259.673052][ T30] ? __pfx_kthread+0x10/0x10 [ 259.677690][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.682519][ T30] [ 259.686607][ T30] Kernel Offset: disabled [ 259.690953][ T30] Rebooting in 86400 seconds..