last executing test programs: 5.860605412s ago: executing program 4 (id=2713): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 5.813180375s ago: executing program 3 (id=2714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000002000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 5.625508438s ago: executing program 3 (id=2715): r0 = socket$tipc(0x1e, 0x1, 0x0) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 5.398557628s ago: executing program 3 (id=2716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00'}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@private=0xa010101, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x4}, [@XFRMA_IF_ID={0x8}, @tmpl={0x44, 0x1c, [{{@in6=@private2, 0xfffffffc}, 0x0, @in=@multicast2}]}]}, 0x174}}, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x25, 0x1, 0x70bd2a, 0xfffffffc, {0x10}, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x36, 0x0, 0x0, @fd=r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 4.968592632s ago: executing program 3 (id=2717): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x3, 0xf8) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (fail_nth: 24) pipe2(&(0x7f0000000000), 0x880) 4.870366049s ago: executing program 4 (id=2718): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 4.640106457s ago: executing program 3 (id=2719): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x404480, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x5, 0x1811, 0x0, 0x0}], 0x1}) 4.519510369s ago: executing program 2 (id=2720): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_clone(0x2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_ORPHAN_MASK={0x0, 0xa, 0x7}]}}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000e14010028bd7000fcdbdf2508002c"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1f, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000d00)={@rand_addr=' \x01\x00', @loopback, @empty, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x200}) 4.511570182s ago: executing program 4 (id=2721): openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b", 0xbf}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b34", 0xb4}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r1, 0x0, 0x0, 0x800) syz_open_dev$sndctrl(&(0x7f0000000500), 0x39, 0x1000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000000)=0x3, 0x4) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 2', 0x1b) bind$packet(r5, &(0x7f0000000280)={0x11, 0x0, r7, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES8=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.180741134s ago: executing program 4 (id=2723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5", 0x90) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.112328271s ago: executing program 2 (id=2725): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x219a2, 0x201}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffffc0, 0x6, 0x1}}]}]}]}, 0x4c}}, 0x20084084) 3.736556366s ago: executing program 2 (id=2726): r0 = socket$tipc(0x1e, 0x1, 0x0) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 3.448265908s ago: executing program 2 (id=2727): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xc3b, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x6300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0xce21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000140)=0x1, 0x4) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x8, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x5, 0x6, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x0, 0xba55, 0x8da8, 0x1, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x101, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0xed, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x0, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x2, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x1956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x8000ffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x81, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 3.328883077s ago: executing program 0 (id=2728): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000140000012abd7000fbdbdf250a0171c8", @ANYRES32=r1, @ANYBLOB="14000100fe8800000000000000000000000000011400060080000000ff0f0000060000000d000000140006000500000009000000ffffff7f0f000000"], 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x4010) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) 2.932608554s ago: executing program 0 (id=2729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x58) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x3, 0x0, 0x80, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x1000000000000000, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000c19, 0xfffffffffffffffc, 0x7, 0x5, 0x0, 0x2, 0x6, 0x40, 0x0, 0x3, 0x100000000, 0x0, 0x0, 0xc, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x1000000000000c, 0x0, 0x0, 0x0, 0x0, 0x103, 0xc1, 0x3, 0x80100000000000, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x400, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100000000, 0x8001, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x400000000000, 0x0, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4044054}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x100082) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0xffffffff, 0x9, 0x2, 0xffffffff}}) fcntl$notify(r2, 0x402, 0x8000003d) fanotify_mark(0xffffffffffffffff, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000180)=0xa241) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = inotify_init1(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) inotify_add_watch(r7, &(0x7f0000000040)='./file1\x00', 0x7f7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0c0000000420000000000000", @ANYRES32, @ANYBLOB="35c7bb3e0c8e8731ef7f783e5c8f4b066d891e3984d1d5d0835a09670b191cd64a0947120015841cba8edce59dad3623d289658f30d359adfc1492c6cb1c", @ANYRES64=0x0], 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x19) 2.932107403s ago: executing program 3 (id=2730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000007500)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a41f6ad2bbb17a38b1f78c28a0803c3fb1b767366f324ffd6c3967a370f2918e48e74794baee39ff44f61bad1eeae5fd1317ca1f21d30b2507edb0c2c2bf027d5545fd329e945154bdb802df560b3a65a69f215a015c1097eb5dc0705526778b276cc86c352ea0b8554f064db1d0992a43a7758b86e4c18701957e618e96b8d13612de8b89161ae4109ea7d5b194dfbdc612226a08d5822add73aa683d6f85369bc6452c34b47765b3", 0xa9}], 0x1, &(0x7f00000011c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x4d, "70b3570717c4f9d65d39b6b82e6e5a8b287e74afcc72fc9b903e67d6878aa73116ea9428dab193b3fba03b23ddcb46a3b6ca6ed2d4169e3551b1a15ed6b72cea03d2619247f3e4ff6c89389a4d"}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x20, 0x117, 0x2, 0x7, "f2ddc3b181db3a"}, @iv={0x30, 0x117, 0x2, 0x1c, "81686df21bc805fcd66967797d6c9f01654a91e510c4cf04c58b282f"}], 0x1100, 0x4010}, {0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)="2aa78557b82453cccd94802d69a890895e74ea63221126b8ce2dcc54b1bb0df57a3eed2ed3a0c5fbad940cc3fe944d94487da78e4d6e245e1b84f1bd88177e3cc07e5d02a59367d3c2194aa4e87238552c3a991373995621f4703d40f82b58bc61b3729b4207218565a91ca014cdc4d080e6645aea8840c9553d5682fb100261c137fa25cc31ea0721f09215a6c5bf10c2feb6376a200d386c1af31d5e9be331ea17", 0xa2}], 0x1, &(0x7f00000023c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x9a, "7ba9328270816243fa42d198363aad866f0280f3a9ec686bc7515e81c28a6065fa8d2bbf14d465d63e3b263a86e07cd41c5f0e0cbbf1c0e41176c2a57f5e797bf31ab12124a7ee7149cb99b3ba927867a68d8ed1bd1e2c190be91d96f260587860de60575d127411624b17217a56f1bf4bcad4ec33dd56144e28f0d98c028c86caea1f273b3a08f76975572ce8f2b9b28741bdb6977951a90fae"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x90, 0x117, 0x2, 0x79, "3a10b9c62f2b4936566aeb3b3f5d13c836453bec169609a1fcbca133f2e510910a18955fc4b09dc8f16a8e390e38d1dd99b13ce0fdd6a8a6082c4f24f50c5b88cfce9a6205eefc58e075bdd4c64dbe79343e6a17fe8be7d3ae54a683f3d96e6f5b26bdd7dbc66b7c5c665b87b629d8b75e412179da9b485b31"}], 0x11a0}, {0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000004580)="6846f76351a1e230493b92e2c9cae5df546e0da9c945ebbd35bc08c6c77bacb921e0632b3ac79c9119316fe38668e0423c4fdb33299c554344669489ef56096031efebcf914e9c7a676c1f2a2dbbfe55", 0x50}, {&(0x7f0000004600)="a81623c7f457a3d516aca842a72ed273a20f24c5118d468c1eefd58ef9d86255a01d2ac7480277c891c55f093de99f39761bee9d9d153982b12f7c681d7762b9da0c8f3b89f6b030e7ec481ee05380e84a609d9ee361f5fb47f4b00282cbcda275c42b857e517e6acc8fa3dc8ef28a6316", 0x71}, {&(0x7f0000004680)="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", 0xfa}], 0x4, &(0x7f00000047c0)=[@assoc={0x18, 0x117, 0x4, 0x80000000}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x69, "a9add1abd3678f58e8d0d04d7d651faaf9ecee70877e3300ab61375386024eef44a92b0df2dae9952294fb79a69697710b7c25c17b85b15c87eb90b50d7a64187879d77ed23cda6028d1a56693ab499fb1c504294de726d957db75938ecb5bc23fcd875fbcf4c731d5"}, @assoc={0x18, 0x117, 0x4, 0xe901}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7a, "c6621a9673e5964fe3daae1133a075ac17589545ad44d3cd79ce628bcb6af8700b7eebeb4547f606217afc8b79db7bfc6765de4c21fc4047346cd3f0a814fe5a5087ee87166f0ab66a137e98ba3fa170d843df0d84cc2d19ea9c8ebef8b82ed2b5b4b40772716632fb385318e1d8fe253fefc0c614c75fa6080c"}], 0x170, 0x40000}, {0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004940)="2459a9b5b685984a6fc00cea41876538edc5df1ffab78927776637af1aecf38017a607eb984fe2470e6ee8d6308ad3967d4573390d353701a312faef7eec2ac71ea798dd7abe1574cebf132abd8dbff8fa65603140cc210944973f7c73dfd4b6d8fa4d8a", 0x64}, {&(0x7f0000004a80)="e3abad91cc945f3b5fc844d19f0d9e8ab2c4fb7319c61b759d80818d8bb081a35e82be56457f05a7bf9c494e0d00f8e79dfbee8e2f2e2dfa849c82288a2c18348574b9cb566cdc4af6279d7e3f012e50326cd5abfb7293480c647134f440d9d39bd29ae802872790c047364f6b138d5d0d7560840a2a2cba9190c3cb3f27d516273ddb493dcf157493f5a88df1e7b5abc5bc10a795f6e24cfe4ad595b8fc793d9cae56bb581ac1fcaa8d", 0xaa}, {&(0x7f0000004b40)="ac9e20e1254b486eb965c74865758936ea4b46152c", 0x15}, {&(0x7f0000004b80)="cf5add57439f7b0c6427cdde35339a02fbe86a0ea94ffa70f2deb47f0f6f5b77dfd68d94738d091d06552503341ba604637edc9a95c6a180e610e84c541d339a2b3ac99cf5542244485efa0fc1f8cf8d0cdc94a832b8ece59e68ee11a04c12e2237d86881b183bcd", 0x68}, {&(0x7f0000004c00)="e63e9043237399ef434e5a41063bd2ae9b520360ff95602833d7b5640088525723453acd92b613e556964eb8ac8401bb116aa582b1a1d5e0a4e43e08e8b4f13ef8f47b4f9f871f72ff81542091f379c64bd355807ec2b35431", 0x59}, {&(0x7f0000004c80)="e62c1a552dcd44c6e18cb15c8302dd7ebe7bba4b290a2f49b5ca2de3ef1045c514a527415b44463335163036ca69a1d084a26c971b46867c883adb6f0ce0a4f2fd16be021e0f7ac827b1555cabfb9f649cbcb03e47ee581e002938b8b9f204c4891ed97e90d64f11a29c0a91f7812811d698", 0x72}], 0x6, &(0x7f0000004d80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030, 0x40000}, {0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005dc0)="19cb15d88bad13e3a2edb2eca566928f688ff81dec9ae441d8383a6fbc8a5f84c543aab2b41ece417da4e884f23b4809b1c2b71e2b87e48fa1456495281b0b599ff225f79ebf3e07f8af7a70a6b8e914b9d9df58363c7e5f925c5d94e4cf063364cfca", 0x63}, {&(0x7f0000005e40)="a9e42ca0a80d7a7d8ccedb3cdcff8ef1498188c5cf7db978e81a98f508eff582f2de8d306bc27183b331d3059a435cdec3e0db024c60d108391269db19fc81b2e9b823251882b800af6f01e82929a7c0ec121279a31192e2f2f36c16e4c553940d74e09d1578bdb750dcb765c102d6e9681be8e23559a4649047d8a3f7d1638d5a56a1d796234814d576dbc2e62bafa19a97afb923c4c52c04841bd54ddd4f0ccce63a", 0xa3}, {&(0x7f0000005f00)="494c16ea0b3430ce130f70aeb8641981146d6ea67ae8882c4de71e2b5ef5ee47482b61c4b1f0b8bfe6d1423ef1e7f73b992f033cd93b09486ba1dc53d53503a54e83c5269b8209f629f207e4cf1e8edfe8f006862b8349b52478115131087ab08df3b606af9cfca291d84d302fe49b499be44bbad0986d9aaf80401c099bd569fc260308c01191aff3e5de72", 0x8c}, {&(0x7f0000005fc0)="3122b9bc808a099cd424b8e3de025026b1441eb4f7ff52f33dfe14d56c49c7fdf47b9beb4e1fb8b7b76f347a7e80e3982aa32a2eeaa717f48787c8bd695dadea56dff588ebbc56cd227e2d1e5f447ed4cca4ba97d11a3dcab487dcc2d8181ce5c780b08991da202c97de25a363eeda0f737eb37fbf943d6ad24f24ff6a9265b8f0a5e515372236522beaf327fc0005ecc54acdf79fd40e694c", 0x99}, {&(0x7f0000006080)="a7ce9ec18267db967db86ae7ad9f5d9e5b2430169725597740785b3b6506c9b54337884d5cb0f5e6def1b15a95a43cd5a9d1810a33467a806e1624a1365009bae98a6c78373bec787b4a594e", 0x4c}, {&(0x7f0000006100)="1acad417688e85e4edfc7c88b699229410e1626e30fd850780a3fae608306e31ecd622cdbe3fea0bcd76596a61d311a318763a60e40b814a5219c7ca811ee0a7f8020df2d47872086ac68afbb745a8b9b502444f6052a38b45c6e0af07e90a79", 0x60}], 0x6, 0x0, 0x0, 0xc004}, {0x0, 0x0, &(0x7f0000007480)=[{&(0x7f0000006200)="7194e6fe319f9dc8301f8a7a0349d457ca38b5dd91eba25570a6ecd67803be675d99e008a7de75a8f5c1cd9de3382815530f10de365f9129da15d042cbe0cdd98ab6ee7f65c109973d5171409e96964f39f54d1547f4dbc429de9216c6398a71d2aff0839b14", 0x66}, {&(0x7f0000006280)="e0f213227f6da414eb8e0eeb031ea1b420fa579f50ef1d6e3518df78b3c0629db12a6c02183582039e0bb2cc5302bd8820c73885d1223affe7e61665137f814a2d1b2504dc32227615bcf5b0aca630f092f8f9a320864b23f44a7fb51171fe375101b5c36c13f62dd727e6a93c705dbdc23b5ff89567c6e9d5bf9e19b95c78a69405d7725ffacfe9ecfa9733fa92159613b2658d2bbee3e420104a884222c38ad5cc54a171385f3cdedeaefc261b39b37f3e4232bbb808d149b89875bc8ecc845b4d03ca008a87", 0xc7}, {&(0x7f0000006380)="8ef3fdbe6b31e17e246b06b75633b2548eb202034cc1ac300d0c8068a99c63cf0b642d42b920cf2c926d3574bbf29de42725ba738f44e972d0819988ae713d41553b8cb97cbfff0228654d6961cc10eb93fbb04dec9953f509c1eb804f6a1503b6a0fb1b9cf81b699553b0b893215fc33bc863785b35c8992373ead7ebef421e6e64c2c47568291fcc809a806ff81fe73dffe4f320b05fa91c9bd9708f060c7eb6f7ec4c5e77b29b5b04742d7310f8ac3f4e37c1544bba3ec31591b8fcd6cb372dce173e64f84a8febe0a2ce2bbcbf0ec75672e49de20d6d1cc7603d61fb5a5b712e93c36d16a49c96d5c052e0583eebd083749823a4", 0xf6}, {&(0x7f0000006480)="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", 0x1000}], 0x4, &(0x7f00000074c0), 0x0, 0x8800}], 0x6, 0x4040) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x34, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}]}, 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) listen(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000100)="4027b4cbc6df9918cc4f3e6ed6b7e8e47ed37d15e490491bb8e2f914db101a324b379b8e2b0a7ab66686e12bd4001a1e8de6704dde64d080a46f121edd35086eeda8782828fd262343f907c40d3895f72ec9579f949e37b7", &(0x7f0000000180)=""/121, &(0x7f0000000200)="4a042588317f5e4cc8fe5a807e95a2adfa6508945c0d13d7d40963c15b90ca8cba44ac73d365af1ea58fe7d5c9f577c4e9ce5bc192428f82f60f6d9d42dd07fbd36de507c91269870c6e421d3dd69d5234a415b7fdef", &(0x7f00000002c0), 0x1, r5, 0x4}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) write$char_usb(r8, 0x0, 0x0) 2.20446688s ago: executing program 1 (id=2733): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) 2.051899751s ago: executing program 1 (id=2734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000180)=0x1100010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000000)={'gretap0\x00', @ifru_flags=0x1000}) 1.368158541s ago: executing program 4 (id=2735): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) syz_clone(0x2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_ORPHAN_MASK={0x0, 0xa, 0x7}]}}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000e14010028bd7000fcdbdf2508002c"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1f, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000d00)={@rand_addr=' \x01\x00', @loopback, @empty, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x200}) 1.317166971s ago: executing program 0 (id=2736): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/70, 0x46}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r4 = dup(r3) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r4, 0x0) execveat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000180)='memory.stat\x00', &(0x7f00000001c0)=').^]\x00', &(0x7f0000000200)='!\\\']\x00']}, &(0x7f00000003c0)={[&(0x7f00000002c0)='\x00', &(0x7f0000000380)='%.,\x00']}, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.066523845s ago: executing program 4 (id=2737): socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$notify(0xffffffffffffffff, 0x402, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x88, 0x4, 0x3, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0x80000c74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7ffffffb, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0b0, 0x9, 0x6, 0x2, 0x80, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc488, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0x8, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0xffffffff, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) close(r2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504be93"], 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c035}, 0x40) 1.008494089s ago: executing program 1 (id=2738): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @private}, &(0x7f0000000100)=0xc) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x3, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r6, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 908.541266ms ago: executing program 2 (id=2739): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x68, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x70, 0x20}}, @val={0x76, 0x6, {0x0, 0xfe, 0x7, 0x401}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) 656.429005ms ago: executing program 1 (id=2740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x1000000000000000, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8, 0xb, r5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) stat(0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1157d27a36c007f1}, 0x0) 606.41618ms ago: executing program 2 (id=2741): socket$xdp(0x2c, 0x3, 0x0) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xf0}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0xe4ffffff, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x14}}, 0x0) fsopen(0x0, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, 0x0}, 0x4048043) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 362.061653ms ago: executing program 1 (id=2742): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 359.036334ms ago: executing program 0 (id=2743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x45}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000012c0)={r5, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x9, 0xfffffffe, 0x5e8], [0x0, 0x0, 0x0, 0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001400)={{r1}, "b12ed99b517e63f7609991e9d8daa16015b5fd5bf164e25d33f4dd94f34e8dd9987154ac633ee5136bd9fad3030f02862b11fcb0b3d7a2462c2544bd6de4e09908b2aaf4bd2a06297fbeffe4ab2d646e3fe2c7d14d7ba0e9a7a8af88e107c5e2d58a0cb32ef04f3713b730278c9e2352c190b9b4813dd3a405a7614a089be312e7887b7e08e47353e2db94afa3d9919ddf8e29728220a31d3e6e7ce5cf14e3c6118e3e40adefec70b4047b1bd31e855aeea8e2e217dc3ed0bbbc116b5c8f5eeb64836034693f47da900307dbf0e4c81da7430ce1d39cbcd50daf27b68387d4f5d9b9c7017fe5c02f2e0126a179a2f134959e69e110ebf1e70fccdccd10cace30f5f7bebc9ab9ac9ae706aec373fbcf86d455700aab3e7153106106a6bd8f664a5a50b8cd1121c48ff6ecf786efbad864a0660159613043054da196ae124096591fa1d13a5ef28e091ca2399136192f557dfe9228221abd5b13ecce813a49472a0f4dcd66c6b768653c6f5150f853aa41e924c4ab3c01e986d2e06d995bc4d05bc863a262b5165ed317a0ee904952838cee4e3c7b4cf56f0dbca8b4be293fc672bd385ccb4970ecdce7fcb05e71a219ece01d003d85be70b856ef8d1201c4acb722dda2931e0f6642ae4391cd657210cc0cb366437e4da2c61f559dca692ae88b7dd86d399d2993ade037d1482be4b4594f82b2bc9a7395951d6dde283bd3576905fc48302eca757aa6a0465fa2b20961b1dfafc78a7fab1221870d0a2321bd223a33da61255ed7d1233cca4e224b35bdb0bfe22080ccc3eb0bbe6ceb9f42bee580ec95187b264996b151a2f4905745d88d4a2f0916bc5e3d4b2925ee475778e1835699e4a786111ef4a4d6a75cdcaa5de00da8bfcaa9149c5a1904449e862d43b33dd028ea21145460ccb471a85d4afb6dc5145639575c8bf85c5e5c7529eb8b3f9942f9a5521feeccbc8d5fec8eae0554850aa946ea5a9484978492663784ef77ecd12e2dd5f6846f87171ab125166d47dc9124d0f1b46cea0f8d99684984f75487326e27f1a184a2b40541a4fbc7c719a74aef594047d11c5c1da05d0eaac5e78ec360ac86e34a999988b247c12e4611e7de600c6d9b3036b70ca2ef009d6ee511141907d2593b162963fdeeeb3f64664715aefde234e5814af24ed5f7400f7677c0620640fbf2ed3260e58d90765484e9cda5036d0d59628e1fb2bf5e883bd04b07cac2c3564544f9ec98e917dd4c37f461452318da2180fb4a9336c22604ad99dabae08f380b8952a0f3ff77eacdaab49732582e2762f6f67bc7b13eb76a9c3e007248c761782d31ed9476a47e6889d1c2651463ae32db9a3dc8a933b8be5322ebd161af4f9603d6e77de610786d143c980d30165bc864dd2073de8181dfd1ea3e463a2ec5cb0dd9a0d6ebecd5734591037e6496ff5e2d56722f806a6d850076729460461d2ececdbb8e4276fb8ae3e7cc481f1c3f3a3a27ab8a76f4785123b47afc7073b04974c8847115ffcca9224b549267aa987991b3f4cd28d677bd3dd380b3d79090141c52931e328950909129345bd59cd5185fcc5a9bb9e5f97b50cc1afc7079e7b4faa8eec165c8c0391a7f1391496ed678cd51040fbaa6391880115587a4fbeafd5e4a496ddf6b80d6c490ba5a86a37a44caf63d4035bd5d6bba3fcc1358a2c4d9b399ea0b1ef71744b4cc48172ea605aca2531f35ecee8602bf23b669ec2682a2d7b14199a4549199cbfce1b67b754caab0081a860413542babe564832f456bbc95194ec9d1297defa5e540779e96b9bd276b361500d677150d888ba9d18385cb1abbb65ebd2f70c10a0b1fb97fbbdaa1c5535f21c5c6667277b416fa1d15a0afc152415cb08c62c02eb4d84aee24e09a580261edba99f6213154b97c84082f3a2e96f498c8ef9e906488c3daf41e62ac713af3f02ddd4f371f548ae0e1b8e76fb2e77fa25de82b0b632e2c27690ba91e6b064bddc10337a54a2e981b63a3a9eca1304ff2fbf90ba06096bf5369d9e06c4850981f64207af74e85f2c19b829568762adbcbd1ac12e25587e4d08066fc2767d34caa6aa732e790bb970bdb85ec49a68eeb094cca3bbdf62069d982c648029e2144785cca583e32a5b7c145b481d6fc51fc1afeefe1fedf4217bcb156a762b210e000088894192da658893fff0fe7ef1500adba7f3f01e6cfee9f0d7fb6606658835f9276eec4e3f5dd8069ce51dd77add145313e347aae10c2461079de058de2c520de316c33aa6cfb1279b3f0ee74f9d94cd9900d3cb234d31d1384665c91a0c6750335759e07d71d2420114d31792cc835672867331eeb9da9fd21f222965e72f596d53a4ebfde2b9c9a19541ee6f07760dc8eac59f19fc1ffc5fc1d3aa095fd77c972b64873e04996e4f9eefdbfdc6ecba9b4b00c2183e0c75d709bf435d1c695b0cb2862af6f835549681af6cf5594b1722ae04d66a44de079b1fdb99aaa9ea6af85e2bccf4ca70dd46dc4a64de78f23e3dda11dcfec003e64c0f84bcc399132d85c5a9b3eac556f5f752f5bfb9d1cfff81fcd48e676bd873044acb23a0f4aec9b4081fe249d38dac58f228d11a8f228b4230fb9c0c5ac58f6b57902e69234d559856adf5f1293f18b7c35741fdcac97495b201119ebe399a933711759ab0ed92351a51ac53ddea4a19950811847ff84a573f780aa26919cdffab21285d94d8efccd9adfe835e5bbbf9ed0b474d8ba2382f896680398291ac17bb4ad2048de32fad3b0deadab1c4608f4374bd1952ec56768031bd037ba3eb546a65f37b2cc9ba8f8ebcf61ab64c18045e04ddcb474237ddcd78b91db96ed60f38786fd1b3356b4aad02b7cffbfb084229e9ee9ea9d999fba2643528e9f11e6b4d90df6e506f3445ed4f0a2c1ad9bc0fa296f76a70562deea3eaf23227cd6d55b9d972e474786a62b075e047d81990c1c8d5240261896b6d7fe781f8e76baa10d92c0af56214ff30c62425f7786f10c778c7553e2ac32c43b84492276cf444832dee884ffdcb41fde754eb771742399b81b612d5958c85962528ceab3dceb2457fab7da9ca792fa9337da7687a7fa6b30d82abf561f7fcd304848efaa7bf6349ea35d963af89954ee2c41d4feaaa3ceb16929a6fa94b7c20710621380c830ca6f51c8ec970b31fadc070af3ed5bdb4f0278208c00e734c30f2c0abbfe5461e3726777ab4faa0bf9b72b966abd783107b5116d76757b10e56103c2cb3efe84aca15d3f34e661670c560399239c25840bd5b199e964b1afa7f46af57382890b0c5bef5e413d3cb52e064ced1ea777c53ef0516cedc2f8bab187786d02515dfa4b0ad528fddfccc71c9993cdc5c79b4a2865b3dfa83e7a042c952a312f5fb5ebb105c358afe414848e1ed6c2f577e62eba778ed986a1ffd4d4ed265bc575f8a467456a56707746f309da607729238da27a47e50b60ccc45bb50a4df89f22df9eb0e433bebcf32c78053710a75b829b07726a12c23942d142f57500452cb89753d640c9c3d4b5d3b8096822d59ff1256ac91bf06910eb1bb0a5f15cb13184893ad50215fef9d98fe4025eee143fa0b914ffb427dc4f66722d048f1f2e2f93d73aadbb6332b654a776e3953fb16de7840779e3ed2ed462abc8cf0f72d3d1dedadbcbb134e84bb60059a893c4cba1d7440951eca9cb12b560ba920592dec9b494d8b8c5764f882019ac6482b2f56dc102e21de9a9bf139b796c8242dce65c65d882ff0173aac4af31be620185ccf3ddfa76e5da753a00b447f36ecdcefae5724dbc89570fbc21ce27a6ffdb4b2bd9460e05c1f598ab7c880dfdcb075380059fde2faf0c089462811bb768184dac6f2613ec163c5a86a16926f1b48981321e2ac6e33a515297c216f7f1206ac4b7b7a1db300cf2a1f61d2c7d2c1a5cf40d887cdc4ac2c4d2ca05b77d1644ddccd239d87ff56bad2cd45418585c144aa7debebb97eeb2a311bd164700c71c30d0f42cd937a6eb16e4092c4b0c6a7ef4f7523236184f76caacd9c6df94a6a5d61a66c12cba2add43d1c0e933ebc469d49d7fcaf639277cb963551bbdc15971be9cfc9b42e69b8dc933edc40331fe0e68447d336b46ae837a28dea5740286c385dc008282e9e357b09b5c0f765fd9b3cdf6f94f7ce906d1d438b6773d6a75f9bbbaeca15d378cacdbc4fc7f1988d92d78494d7d37415910961e968b49502a965ed51847a1ea069563ebb0d3dc85484c92497c0c2511c4f2d995096bb5eeb5108b4b77a90459815bc82bd838c2ebccde47c6892caf4643767748116e632087077bd31e30161e5791a7cf3297c913332192d56cf4197630d99e6ce9c881915e9325f102605ac20a58c5664b00e789f53d1c76fdacc42d0ee6b5dab9bf000315d2a1c9974457a0e26b6633bcc5e2903a9801884beb4b668f2cf241ca9a7818ed2258e9dd20840a38dba395b2bc8deac5e991eccb90737c9357f0fce9416b7a14944d19b265b872bf9270a8fd41513dd2953658addf5d5db4948c99e7130fcf086d779998d094853af37ba04b6cd7f7fd7b8b9984a13635ef52222b4c1d98c6ed5bdf6eb60f7f195e43b956313105b6d26d7344327d1f24e908080db060059be849d25f3d59079bf79f671495beb3a85d82de8531e9f7c0e2d96a844ca76068eba829729fcf3bb507380f23c49a7c61eb8f5afbd9bd0e46ce63993c32b3b3817b4c6e3f459307058c6c33240d53ef7245e71457102d273efd5bab5c2862f8d8aa5f01d32d9f88f53a0087abf7e53c2d1d72c6ae521320a162a63d31397442f9d51765d4c1236a40d13d59c796e3f3d42d37c936a798b773bddbed61acfabc5506f5ba8519a5c71968aa3cfa29344ed5f8098ba04ce87d08e98a3e496fddd5f8e2a9af9c1ada99873bf7664d821afed338dd0bf7638e09bc02f356d0bc092e3169bb178834c687d2c3b9850fef504e97d456a05da122552d9cd86c97fba6338b7a574974c7b566037c9aa3651c26bfdf4eb540cbafb9430e6dccd81e8bd32829a2183dcb278e20846dbe9d66036630399564f176efd61195c69e57a5ae0eeaa6f7496573427ba814db324f4a100f39fbce0e96eb4b6ba4ccf766023d8fc241a482d1338b011486a899c5878494eb4ec4b7f1268a00dde6cb6bb14899195b05c4349845e5de693277320a7670c80387761a67edd1c8db9a9a1a70a94290177551675229cc96015bc1cc824139619484b192236cb732ddd2d5ff1d84f5b9293764a799d223e4a38860734fbdfb0f516e0f90e331fa87664029b32e3931e8fb33ebf691c6e817e8984298a589098c4af3f31bfaa7e218a7431b29b3b56f515aca632b227052c25a9515c00d816ad84de30520b0b0f75324131a9709348a782cf6c74cc64ed89c433f7d01e96d248a63ca26a42eb2c16c5dc40fd68fe9ea839c2d1e9575d2a8856ef06fd97ff488d6b3c5bc136b8e97f062a0921ce33fffaa15aa2144a06ed34552079c6c5f7a97fb426b9e2760566474f9d56981044ad32bf453396ce063c55a3c92ed047ad40c3395bcf0538f941fa3edaf01dbcc47a8247b8503c289a63364d0e026074e94b696808abb397ca939f9bd40581c77de6a9c5a6d2e1193f69957bbd20dd587c87bdaf65755d66e4725370545eb06b081f76f514a4327f6b8f31ef2a712660cf6cf15dbcf6023c0c76e81ce5b551d86063503489ffae9d580c087e0c1abc565aedea4a030c36cb7c3bc3b40627e9fff57f147ae46c5aed04ccbd1edac4e12fe57b6a576002fa557bdb266a500417158b9292d"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 149.367967ms ago: executing program 0 (id=2744): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x1, 0x100, 0x6, {0x200009, 0xbdd, 0x200, 0x86e}}) 100.984766ms ago: executing program 0 (id=2745): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) (fail_nth: 9) 0s ago: executing program 1 (id=2746): socket$key(0xf, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f00000002c0)={&(0x7f0000000200)="1a167f09adc1173486476dd2b87047c889f0eccc6897ead2d1e5978ca143c89b57d3cca1e849be12491e5aae911cb21f3248772ee8c17d0fb48f5cd0d314fa990943c1c80ed2852aeda67f750d", 0x4d}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40043, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000025c0)={[0xd]}, 0x8) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r3 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB="07b0cf7e2c89cc"], 0x0) kernel console output (not intermixed with test programs): +0x94/0xb0 [ 587.401904][T13408] do_arpt_set_ctl+0xac0/0x1050 [ 587.401936][T13408] ? __mutex_trylock_common+0x158/0x260 [ 587.401964][T13408] ? __pfx___mutex_trylock_common+0x10/0x10 [ 587.401990][T13408] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 587.402018][T13408] ? rcu_is_watching+0x15/0xb0 [ 587.402042][T13408] ? trace_contention_end+0x3d/0x140 [ 587.402086][T13408] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 587.402110][T13408] ? nf_setsockopt+0x3a/0x290 [ 587.402133][T13408] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 587.402158][T13408] ? __pfx___mutex_lock+0x10/0x10 [ 587.402185][T13408] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 587.402216][T13408] ? __pfx___mutex_lock+0x10/0x10 [ 587.402254][T13408] nf_setsockopt+0x26f/0x290 [ 587.402281][T13408] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 587.402312][T13408] smc_setsockopt+0x249/0xac0 [ 587.402368][T13408] ? __pfx_smc_setsockopt+0x10/0x10 [ 587.402400][T13408] ? aa_sock_opt_perm+0xff/0x1a0 [ 587.402432][T13408] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 587.402457][T13408] ? __pfx_smc_setsockopt+0x10/0x10 [ 587.402493][T13408] do_sock_setsockopt+0x17c/0x1b0 [ 587.402530][T13408] __x64_sys_setsockopt+0x13d/0x1b0 [ 587.402565][T13408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.402602][T13408] do_syscall_64+0x15f/0xf80 [ 587.402623][T13408] ? trace_irq_disable+0x3b/0x140 [ 587.402653][T13408] ? clear_bhb_loop+0x40/0x90 [ 587.402682][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.402706][T13408] RIP: 0033:0x7f095e39c819 [ 587.402727][T13408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.402747][T13408] RSP: 002b:00007f095f326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 587.402772][T13408] RAX: ffffffffffffffda RBX: 00007f095e615fa0 RCX: 00007f095e39c819 [ 587.402790][T13408] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 587.402806][T13408] RBP: 00007f095f326090 R08: 0000000000020058 R09: 0000000000000000 [ 587.402822][T13408] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.402836][T13408] R13: 00007f095e616038 R14: 00007f095e615fa0 R15: 00007f095e73fa48 [ 587.402872][T13408] [ 587.798937][T13408] syz.4.2262: vmalloc error: size 320, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 587.825828][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.4.2262 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.825861][T13408] Tainted: [L]=SOFTLOCKUP [ 587.825870][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 587.825883][T13408] Call Trace: [ 587.825891][T13408] [ 587.825901][T13408] dump_stack_lvl+0xe8/0x150 [ 587.825938][T13408] warn_alloc+0x249/0x340 [ 587.825968][T13408] ? __pfx_warn_alloc+0x10/0x10 [ 587.825994][T13408] ? __get_vm_area_node+0x13f/0x300 [ 587.826031][T13408] ? __get_vm_area_node+0x2b5/0x300 [ 587.826070][T13408] __vmalloc_node_range_noprof+0x38f/0x1750 [ 587.826093][T13408] ? __pfx_stack_trace_save+0x10/0x10 [ 587.826123][T13408] ? stack_depot_save_flags+0x33/0x810 [ 587.826163][T13408] ? kfree+0x4d/0x640 [ 587.826192][T13408] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 587.826268][T13408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 587.826298][ T13] hsr_slave_0: left promiscuous mode [ 587.826299][T13408] ? __do_replace+0xc2/0xab0 [ 587.826326][T13408] vzalloc_noprof+0xb2/0xe0 [ 587.826394][T13408] ? __do_replace+0xc2/0xab0 [ 587.826490][T13408] __do_replace+0xc2/0xab0 [ 587.826557][T13408] ? __might_fault+0xaf/0x130 [ 587.826654][T13408] ? __pfx_translate_table+0x10/0x10 [ 587.826753][T13408] ? __pfx___do_replace+0x10/0x10 [ 587.826852][T13408] ? _copy_from_user+0x94/0xb0 [ 587.826940][T13408] do_arpt_set_ctl+0xac0/0x1050 [ 587.827018][T13408] ? __mutex_trylock_common+0x158/0x260 [ 587.827094][T13408] ? __pfx___mutex_trylock_common+0x10/0x10 [ 587.827160][T13408] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 587.827228][T13408] ? rcu_is_watching+0x15/0xb0 [ 587.827290][T13408] ? trace_contention_end+0x3d/0x140 [ 587.827401][T13408] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 587.827461][T13408] ? nf_setsockopt+0x3a/0x290 [ 587.827521][T13408] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 587.827578][T13408] ? __pfx___mutex_lock+0x10/0x10 [ 587.827641][T13408] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 587.827710][T13408] ? __pfx___mutex_lock+0x10/0x10 [ 587.827798][T13408] nf_setsockopt+0x26f/0x290 [ 587.827870][T13408] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 587.827966][T13408] smc_setsockopt+0x249/0xac0 [ 587.828073][T13408] ? __pfx_smc_setsockopt+0x10/0x10 [ 587.828149][T13408] ? aa_sock_opt_perm+0xff/0x1a0 [ 587.828246][T13408] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 587.828312][T13408] ? __pfx_smc_setsockopt+0x10/0x10 [ 587.828399][T13408] do_sock_setsockopt+0x17c/0x1b0 [ 587.828492][T13408] __x64_sys_setsockopt+0x13d/0x1b0 [ 587.828580][T13408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.828638][T13408] do_syscall_64+0x15f/0xf80 [ 587.828700][T13408] ? trace_irq_disable+0x3b/0x140 [ 587.828769][T13408] ? clear_bhb_loop+0x40/0x90 [ 587.828844][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.828901][T13408] RIP: 0033:0x7f095e39c819 [ 587.828965][T13408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.829010][T13408] RSP: 002b:00007f095f326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 587.829066][T13408] RAX: ffffffffffffffda RBX: 00007f095e615fa0 RCX: 00007f095e39c819 [ 587.829110][T13408] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 587.829152][T13408] RBP: 00007f095f326090 R08: 0000000000020058 R09: 0000000000000000 [ 587.829186][T13408] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.829236][T13408] R13: 00007f095e616038 R14: 00007f095e615fa0 R15: 00007f095e73fa48 [ 587.829352][T13408] [ 587.882328][T13408] Mem-Info: [ 588.211427][ T13] hsr_slave_1: left promiscuous mode [ 588.231492][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.245635][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.260409][ T7372] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 588.268577][ T7372] usb 1-1: can't read configurations, error -61 [ 588.278379][T13408] active_anon:9422 inactive_anon:0 isolated_anon:0 [ 588.278379][T13408] active_file:16782 inactive_file:40210 isolated_file:0 [ 588.278379][T13408] unevictable:768 dirty:229 writeback:0 [ 588.278379][T13408] slab_reclaimable:11602 slab_unreclaimable:121354 [ 588.278379][T13408] mapped:30969 shmem:4227 pagetables:1667 [ 588.278379][T13408] sec_pagetables:0 bounce:0 [ 588.278379][T13408] kernel_misc_reclaimable:0 [ 588.278379][T13408] free:1279505 free_pcp:7023 free_cma:0 [ 588.330136][T13408] Node 0 active_anon:37688kB inactive_anon:0kB active_file:67128kB inactive_file:160636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123876kB dirty:912kB writeback:0kB shmem:15372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12648kB pagetables:6564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 588.366734][T13408] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 588.433286][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.449733][T13408] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.489201][ T7372] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 588.499852][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.536443][ T7372] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 588.555420][T13408] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 588.564772][ T7372] usb 1-1: can't read configurations, error -61 [ 588.581078][T13408] Node 0 DMA32 free:1169416kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37788kB inactive_anon:0kB active_file:67128kB inactive_file:160636kB unevictable:1536kB writepending:912kB zspages:0kB present:3129332kB managed:2551216kB mlocked:0kB bounce:0kB free_pcp:27336kB local_pcp:14604kB free_cma:0kB [ 588.624625][ T7372] usb usb1-port1: unable to enumerate USB device [ 588.645236][ T13] veth1_macvtap: left promiscuous mode [ 588.661548][ T13] veth0_macvtap: left promiscuous mode [ 588.667304][ T13] veth1_vlan: left promiscuous mode [ 588.672973][T13408] lowmem_reserve[]: 0 0 0 0 0 [ 588.682578][ T13] veth0_vlan: left promiscuous mode [ 588.692681][T13408] [ 588.695067][T13408] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:600kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.737659][T13408] lowmem_reserve[]: 0 0 0 0 0 [ 588.744743][T13408] Node 1 Normal free:3933244kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.778901][T13408] lowmem_reserve[]: 0 0 0 0 0 [ 588.784245][T13408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 588.799451][T13408] Node 0 DMA32: 5180*4kB (UME) 4037*8kB (UME) 2527*16kB (UME) 348*32kB (ME) 275*64kB (UME) 386*128kB (UM) 210*256kB (UME) 108*512kB (UME) 50*1024kB (UM) 5*2048kB (UM) 200*4096kB (UM) = 1161288kB [ 588.843251][T13408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 588.884709][ T802] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 588.914587][T13408] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 5*16kB (UM) 8*32kB (UM) 5*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3933244kB [ 588.973540][T13408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 588.983355][T13408] Node 0 hugepages_total=6 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 589.002242][T13408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.052246][T13408] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 589.064354][T13408] 61217 total pagecache pages [ 589.090443][T13408] 0 pages in swap cache [ 589.095790][ T802] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 589.096507][T13408] Free swap = 124996kB [ 589.109211][T13408] Total swap = 124996kB [ 589.114116][T13408] 2097051 pages RAM [ 589.117257][ T802] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 589.118027][T13408] 0 pages HighMem/MovableOnly [ 589.144943][ T802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.158520][T13408] 427482 pages reserved [ 589.168652][T13408] 0 pages cma reserved [ 589.184382][ T802] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 589.207680][ T802] usb 4-1: config 1 has no interface number 0 [ 589.226313][ T802] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 589.241198][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.274569][ T802] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 589.573771][ T802] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 589.600638][ T802] snd_usb_pod 4-1:1.1: invalid control EP [ 589.625862][ T802] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 589.650463][ T802] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 589.684238][ T802] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 589.767546][ T13] team0 (unregistering): Port device team_slave_1 removed [ 589.799694][ T7372] usb 4-1: USB disconnect, device number 89 [ 589.931869][ T13] team0 (unregistering): Port device team_slave_0 removed [ 590.136977][T13441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.534833][T13465] Cannot find del_set index 4 as target [ 590.717702][ T802] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 590.729760][ T5839] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 590.891410][ T5839] usb 2-1: device descriptor read/64, error -71 [ 590.901565][ T802] usb 1-1: Using ep0 maxpacket: 32 [ 590.913966][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.936933][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.966546][ T802] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 590.995108][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.026869][ T802] usb 1-1: config 0 descriptor?? [ 591.131354][ T5839] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 591.271352][ T5839] usb 2-1: device descriptor read/64, error -71 [ 591.332879][ T802] usbhid 1-1:0.0: can't add hid device: -71 [ 591.357526][ T802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 591.412007][ T5839] usb usb2-port1: attempt power cycle [ 591.440819][ T802] usb 1-1: USB disconnect, device number 87 [ 591.487221][T13473] sctp: [Deprecated]: syz.0.2279 (pid 13473) Use of int in max_burst socket option. [ 591.487221][T13473] Use struct sctp_assoc_value instead [ 591.690988][T13473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 591.781366][ T5839] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 591.814274][ T5839] usb 2-1: device descriptor read/8, error -71 [ 591.884025][ T7372] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 592.065104][ T7372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.081573][ T5839] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 592.089834][ T7372] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 592.111775][ T7372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.131870][ T7372] usb 4-1: config 0 descriptor?? [ 592.142105][ T5839] usb 2-1: device descriptor read/8, error -71 [ 592.271777][ T5839] usb usb2-port1: unable to enumerate USB device [ 592.299283][T13487] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 592.353796][T13488] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 592.397411][ T7372] usbhid 4-1:0.0: can't add hid device: -71 [ 592.406864][ T7372] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 592.454549][ T7372] usb 4-1: USB disconnect, device number 90 [ 592.902622][T13493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.921625][T13493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.941358][ T7372] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 593.138895][ T7372] usb 4-1: Using ep0 maxpacket: 32 [ 593.169993][ T7372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.189589][ T7372] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 593.218039][ T7372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.242818][ T7372] usb 4-1: config 0 descriptor?? [ 593.256964][ T7372] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 593.285046][ T7372] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 593.658352][T13475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.670978][ T7372] usb 4-1: USB disconnect, device number 91 [ 593.677114][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 593.687796][T13475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.718479][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.725009][ T7372] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 593.741375][ T5839] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 593.782378][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.932692][ T5839] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 593.974204][ T5839] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 594.000496][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.026420][ T5839] usb 2-1: Product: syz [ 594.039109][ T5839] usb 2-1: Manufacturer: syz [ 594.052572][ T5839] usb 2-1: SerialNumber: syz [ 594.084304][T13497] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 594.320026][T13497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.352013][T13497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.419735][T13497] xt_hashlimit: size too large, truncated to 1048576 [ 594.652963][ T7372] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 594.834299][ T7372] usb 4-1: unable to get BOS descriptor or descriptor too short [ 594.858627][ T7372] usb 4-1: not running at top speed; connect to a high speed hub [ 594.898851][ T7372] usb 4-1: config 5 has an invalid interface number: 150 but max is 0 [ 594.917882][ T7372] usb 4-1: config 5 has no interface number 0 [ 594.937769][ T7372] usb 4-1: config 5 interface 150 has no altsetting 0 [ 594.976425][ T7372] usb 4-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=7a.a6 [ 595.003860][ T7372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.034445][ T7372] usb 4-1: Product: syz [ 595.048200][ T7372] usb 4-1: Manufacturer: syz [ 595.064548][ T7372] usb 4-1: SerialNumber: syz [ 595.157548][ T5839] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 595.208795][ T5839] usb 2-1: USB disconnect, device number 90 [ 595.273816][ T5839] usblp0: removed [ 595.919162][ T7372] usb 4-1: USB disconnect, device number 92 [ 596.441925][ T7372] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 596.614029][ T7372] usb 2-1: Using ep0 maxpacket: 16 [ 596.631510][ T7372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.666244][ T7372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.705096][ T7372] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 596.731952][ T7372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.759847][T13542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2301'. [ 596.774698][ T7372] usb 2-1: config 0 descriptor?? [ 597.061485][ T7373] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 597.201428][ T7373] usb 4-1: device descriptor read/64, error -71 [ 597.216433][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.239163][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.441410][ T7373] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 597.458711][ T7372] corsair 0003:1B1C:1B02.002B: unbalanced delimiter at end of report description [ 597.482347][ T7372] corsair 0003:1B1C:1B02.002B: parse failed [ 597.494202][ T7372] corsair 0003:1B1C:1B02.002B: probe with driver corsair failed with error -22 [ 597.514289][ T7372] usb 2-1: USB disconnect, device number 91 [ 597.581584][ T7373] usb 4-1: device descriptor read/64, error -71 [ 597.645490][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.658172][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.666606][ T5897] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 597.702332][ T7373] usb usb4-port1: attempt power cycle [ 597.769262][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.778978][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.789349][T13558] netlink: 'syz.4.2305': attribute type 3 has an invalid length. [ 597.824255][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 597.833843][ T5897] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 597.849272][ T5897] usb 1-1: string descriptor 0 read error: -22 [ 597.856001][ T5897] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 597.865407][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.951127][T13560] FAULT_INJECTION: forcing a failure. [ 597.951127][T13560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.971443][T13560] CPU: 1 UID: 0 PID: 13560 Comm: syz.2.2306 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.971478][T13560] Tainted: [L]=SOFTLOCKUP [ 597.971487][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 597.971502][T13560] Call Trace: [ 597.971512][T13560] [ 597.971521][T13560] dump_stack_lvl+0xe8/0x150 [ 597.971561][T13560] should_fail_ex+0x412/0x560 [ 597.971592][T13560] _copy_to_iter+0x1e4/0x17d0 [ 597.971633][T13560] ? __pfx__copy_to_iter+0x10/0x10 [ 597.971665][T13560] ? hash_recvmsg+0x130/0x840 [ 597.971695][T13560] ? __local_bh_enable_ip+0xd0/0x130 [ 597.971731][T13560] hash_recvmsg+0x570/0x840 [ 597.971763][T13560] ? __pfx_hash_recvmsg+0x10/0x10 [ 597.971810][T13560] sock_recvmsg+0x172/0x1b0 [ 597.971839][T13560] __sys_recvfrom+0x240/0x3c0 [ 597.971871][T13560] ? __pfx___sys_recvfrom+0x10/0x10 [ 597.971918][T13560] ? exc_page_fault+0x6a/0xc0 [ 597.971936][T13560] ? do_user_addr_fault+0xc6f/0x1340 [ 597.971980][T13560] __x64_sys_recvfrom+0xde/0x100 [ 597.972009][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.972032][T13560] do_syscall_64+0x15f/0xf80 [ 597.972055][T13560] ? trace_irq_disable+0x3b/0x140 [ 597.972074][T13560] ? clear_bhb_loop+0x40/0x90 [ 597.972093][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.972122][T13560] RIP: 0033:0x7f3b9515d04e [ 597.972144][T13560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 597.972162][T13560] RSP: 002b:00007f3b95fece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 597.972185][T13560] RAX: ffffffffffffffda RBX: 00007f3b95fee6c0 RCX: 00007f3b9515d04e [ 597.972199][T13560] RDX: 0000000000001000 RSI: 00007f3b95fed000 RDI: 0000000000000004 [ 597.972215][T13560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.972223][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 597.972232][T13560] R13: 00007f3b95fecf58 R14: 00007f3b95fed000 R15: 0000000000000000 [ 597.972255][T13560] [ 598.186966][ T7373] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 598.213452][ T7373] usb 4-1: device descriptor read/8, error -71 [ 598.451439][ T7373] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 598.472085][ T7373] usb 4-1: device descriptor read/8, error -71 [ 598.501487][ T7372] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 598.583170][ T7373] usb usb4-port1: unable to enumerate USB device [ 598.594877][T13570] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2310'. [ 598.654192][ T7372] usb 3-1: not running at top speed; connect to a high speed hub [ 598.665312][T13572] support for the xor transformation has been removed. [ 598.683889][ T7372] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 598.698677][ T7372] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4 [ 598.714452][ T7372] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 598.727443][ T7372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.736385][ T7372] usb 3-1: Product: syz [ 598.740803][ T7372] usb 3-1: Manufacturer: syz [ 598.746614][ T7372] usb 3-1: SerialNumber: syz [ 599.139958][ T7372] usb 3-1: 1:1 : unsupported format bits 0x200c [ 599.164009][ T7372] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 599.190783][ T7372] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 599.230653][ T7372] usb 3-1: unit 1 not found! [ 599.246752][ T7372] usb 3-1: unit 130 not found! [ 599.399860][T13586] xt_hashlimit: size too large, truncated to 1048576 [ 599.478430][ T7372] usb 3-1: USB disconnect, device number 97 [ 599.682292][T12820] udevd[12820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.914448][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 599.940006][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.963221][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.988795][T13592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2316'. [ 600.281311][ T5839] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 600.421449][ T7372] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 600.451306][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 600.460832][ T5839] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 600.469677][ T5839] usb 3-1: config 0 has no interface number 1 [ 600.480154][ T5839] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 600.492546][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 600.507960][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 600.530482][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.542969][ T5897] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 600.562428][ T5839] usb 3-1: Product: syz [ 600.570420][ T5839] usb 3-1: Manufacturer: syz [ 600.584805][ T7372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.605064][ T5839] usb 3-1: SerialNumber: syz [ 600.616339][ T5897] usb 1-1: USB disconnect, device number 88 [ 600.629678][ T7372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.648247][ T5839] usb 3-1: config 0 descriptor?? [ 600.668310][ T7372] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 600.693573][ T7372] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 600.725234][ T5839] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 600.744957][ T7372] usb 2-1: Manufacturer: syz [ 600.776821][ T7372] usb 2-1: config 0 descriptor?? [ 601.085437][T13601] [U]  [ 601.241658][ T7367] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 601.391384][ T7367] usb 1-1: device descriptor read/64, error -71 [ 601.398179][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2321'. [ 601.731380][ T7367] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 601.881403][ T7367] usb 1-1: device descriptor read/64, error -71 [ 602.013661][ T7367] usb usb1-port1: attempt power cycle [ 602.200350][T13631] FAULT_INJECTION: forcing a failure. [ 602.200350][T13631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.214955][T13631] CPU: 1 UID: 0 PID: 13631 Comm: syz.3.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.214989][T13631] Tainted: [L]=SOFTLOCKUP [ 602.215002][T13631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 602.215015][T13631] Call Trace: [ 602.215024][T13631] [ 602.215034][T13631] dump_stack_lvl+0xe8/0x150 [ 602.215072][T13631] should_fail_ex+0x412/0x560 [ 602.215115][T13631] _copy_from_user+0x2d/0xb0 [ 602.215148][T13631] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 602.215200][T13631] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 602.215240][T13631] ? rcu_is_watching+0x15/0xb0 [ 602.215262][T13631] ? trace_kmalloc+0x2a/0xf0 [ 602.215288][T13631] ip_generic_getfrag+0x149/0x2d0 [ 602.215323][T13631] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 602.215355][T13631] ? __alloc_skb+0x4e5/0x7d0 [ 602.215378][T13631] ? skb_put+0x11b/0x210 [ 602.215409][T13631] __ip6_append_data+0x3902/0x3e90 [ 602.215457][T13631] ? __pfx_raw6_getfrag+0x10/0x10 [ 602.215505][T13631] ? __pfx___ip6_append_data+0x10/0x10 [ 602.215532][T13631] ? ip6_setup_cork+0x544/0xf30 [ 602.215560][T13631] ? ip6_append_data+0x1b7/0x280 [ 602.215588][T13631] ip6_append_data+0x10f/0x280 [ 602.215616][T13631] ? __pfx_raw6_getfrag+0x10/0x10 [ 602.215647][T13631] rawv6_sendmsg+0x12d3/0x18e0 [ 602.215698][T13631] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 602.215741][T13631] ? aa_sk_perm+0x6d5/0x900 [ 602.215773][T13631] ? __pfx_aa_sk_perm+0x10/0x10 [ 602.215800][T13631] ? sock_rps_record_flow+0x19/0x350 [ 602.215824][T13631] ? inet_sendmsg+0x2f4/0x370 [ 602.215858][T13631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.215885][T13631] ____sys_sendmsg+0x80a/0x9f0 [ 602.215914][T13631] ? __might_fault+0xaf/0x130 [ 602.215953][T13631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.215991][T13631] ? import_iovec+0x73/0xa0 [ 602.216024][T13631] ___sys_sendmsg+0x2a5/0x360 [ 602.216053][T13631] ? __lock_acquire+0x6b5/0x2cf0 [ 602.216093][T13631] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.216147][T13631] ? __fget_files+0x2a/0x420 [ 602.216185][T13631] ? __fget_files+0x3a0/0x420 [ 602.216224][T13631] __x64_sys_sendmsg+0x1bd/0x2a0 [ 602.216259][T13631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.216288][T13631] ? __pfx_ksys_write+0x10/0x10 [ 602.216309][T13631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.216345][T13631] do_syscall_64+0x15f/0xf80 [ 602.216369][T13631] ? clear_bhb_loop+0x40/0x90 [ 602.216394][T13631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.216419][T13631] RIP: 0033:0x7f885159c819 [ 602.216434][T13631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.216447][T13631] RSP: 002b:00007f8852468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.216464][T13631] RAX: ffffffffffffffda RBX: 00007f8851815fa0 RCX: 00007f885159c819 [ 602.216488][T13631] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 602.216502][T13631] RBP: 00007f8852468090 R08: 0000000000000000 R09: 0000000000000000 [ 602.216517][T13631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.216529][T13631] R13: 00007f8851816038 R14: 00007f8851815fa0 R15: 00007f885193fa48 [ 602.216561][T13631] [ 602.611364][ T7367] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 602.651912][ T7367] usb 1-1: device descriptor read/8, error -71 [ 602.709803][T13633] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20001 [ 602.723120][T13633] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 602.891382][ T7367] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 602.912730][ T7367] usb 1-1: device descriptor read/8, error -71 [ 603.021884][ T7367] usb usb1-port1: unable to enumerate USB device [ 603.065296][ T5839] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 603.099496][ T2353] pvrusb2: Invalid read control endpoint [ 603.134158][ T5839] usb 3-1: USB disconnect, device number 98 [ 603.200349][ T2353] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 603.236734][ T2353] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 603.524446][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.622880][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.702278][T13649] geneve2: entered promiscuous mode [ 603.711058][T13649] geneve2: entered allmulticast mode [ 603.724337][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.744435][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.764607][T13656] FAULT_INJECTION: forcing a failure. [ 603.764607][T13656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.790395][T13656] CPU: 1 UID: 0 PID: 13656 Comm: syz.2.2338 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.790433][T13656] Tainted: [L]=SOFTLOCKUP [ 603.790439][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 603.790450][T13656] Call Trace: [ 603.790456][T13656] [ 603.790464][T13656] dump_stack_lvl+0xe8/0x150 [ 603.790512][T13656] should_fail_ex+0x412/0x560 [ 603.790544][T13656] _copy_from_user+0x2d/0xb0 [ 603.790574][T13656] snd_seq_oss_write+0x5b1/0x8f0 [ 603.790597][T13656] ? kstrtoull+0x12f/0x1d0 [ 603.790627][T13656] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 603.790660][T13656] ? apparmor_file_permission+0x1f4/0x300 [ 603.790689][T13656] ? security_file_permission+0x75/0x260 [ 603.790715][T13656] odev_write+0x5a/0x80 [ 603.790735][T13656] vfs_writev+0x4bd/0x990 [ 603.790761][T13656] ? __pfx_odev_write+0x10/0x10 [ 603.790778][T13656] ? __pfx_vfs_writev+0x10/0x10 [ 603.790823][T13656] ? __fget_files+0x2a/0x420 [ 603.790858][T13656] ? __fget_files+0x3a0/0x420 [ 603.790884][T13656] ? __fget_files+0x2a/0x420 [ 603.790921][T13656] do_writev+0x154/0x2e0 [ 603.790943][T13656] ? __pfx_do_writev+0x10/0x10 [ 603.790986][T13656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.791010][T13656] do_syscall_64+0x15f/0xf80 [ 603.791030][T13656] ? trace_irq_disable+0x3b/0x140 [ 603.791058][T13656] ? clear_bhb_loop+0x40/0x90 [ 603.791076][T13656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.791092][T13656] RIP: 0033:0x7f3b9519c819 [ 603.791107][T13656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.791135][T13656] RSP: 002b:00007f3b95fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 603.791158][T13656] RAX: ffffffffffffffda RBX: 00007f3b95415fa0 RCX: 00007f3b9519c819 [ 603.791173][T13656] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003 [ 603.791185][T13656] RBP: 00007f3b95fee090 R08: 0000000000000000 R09: 0000000000000000 [ 603.791198][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.791210][T13656] R13: 00007f3b95416038 R14: 00007f3b95415fa0 R15: 00007f3b9553fa48 [ 603.791239][T13656] [ 604.085648][ T7373] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 604.303113][ T7373] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 604.319464][ T7373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.327894][ T7373] usb 4-1: Product: syz [ 604.343477][ T7373] usb 4-1: Manufacturer: syz [ 604.371358][ T7373] usb 4-1: SerialNumber: syz [ 604.379950][ T7373] usb 4-1: config 0 descriptor?? [ 604.404029][ T7373] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 604.627546][T13651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.662882][ T7372] usbhid 2-1:0.0: can't add hid device: -71 [ 604.669659][T13651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.693375][ T7372] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 604.734370][ T7372] usb 2-1: USB disconnect, device number 92 [ 604.919134][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.952766][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.004170][T13685] loop3: detected capacity change from 0 to 7 [ 605.021185][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.021742][T13685] Dev loop3: unable to read RDB block 7 [ 605.041470][T13685] loop3: unable to read partition table [ 605.054990][T13685] loop3: partition table beyond EOD, truncated [ 605.056361][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 605.056414][ T29] audit: type=1326 audit(1776464302.533:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.073949][T13685] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 605.130675][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.149614][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.197993][T13686] bond0: option lacp_rate: invalid value (4) [ 605.221995][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.230515][ T29] audit: type=1326 audit(1776464302.533:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.266178][T13686] bond0 (unregistering): Released all slaves [ 605.286091][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.307941][ T29] audit: type=1326 audit(1776464302.533:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.343479][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.393925][ T29] audit: type=1326 audit(1776464302.533:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.430047][T13695] IPv6: NLM_F_REPLACE set, but no existing node found! [ 605.437471][ T29] audit: type=1326 audit(1776464302.543:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.437524][ T29] audit: type=1326 audit(1776464302.543:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.437568][ T29] audit: type=1326 audit(1776464302.543:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.563765][ T29] audit: type=1326 audit(1776464303.053:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.631058][ T29] audit: type=1326 audit(1776464303.053:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.1.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 605.712044][T13702] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 606.385084][T13727] FAULT_INJECTION: forcing a failure. [ 606.385084][T13727] name failslab, interval 1, probability 0, space 0, times 0 [ 606.399140][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.4.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.399173][T13727] Tainted: [L]=SOFTLOCKUP [ 606.399182][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 606.399194][T13727] Call Trace: [ 606.399203][T13727] [ 606.399212][T13727] dump_stack_lvl+0xe8/0x150 [ 606.399250][T13727] should_fail_ex+0x412/0x560 [ 606.399283][T13727] should_failslab+0xa8/0x100 [ 606.399310][T13727] __kmalloc_cache_noprof+0x88/0x660 [ 606.399335][T13727] ? ima_calc_file_hash+0x128f/0x17f0 [ 606.399365][T13727] ? __asan_memcpy+0x40/0x70 [ 606.399402][T13727] ima_calc_file_hash+0x128f/0x17f0 [ 606.399440][T13727] ? unwind_next_frame+0xa6/0x2550 [ 606.399471][T13727] ? unwind_next_frame+0xa6/0x2550 [ 606.399496][T13727] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 606.399526][T13727] ? is_bpf_text_address+0x26/0x2b0 [ 606.399591][T13727] ? inode_query_iversion+0x110/0x180 [ 606.399625][T13727] ? __pfx_inode_query_iversion+0x10/0x10 [ 606.399660][T13727] ? look_up_lock_class+0x57/0x110 [ 606.399688][T13727] ? generic_fillattr+0x66e/0x9a0 [ 606.399721][T13727] ? shmem_getattr+0x5c3/0x760 [ 606.399761][T13727] ima_collect_measurement+0x48b/0x930 [ 606.399799][T13727] ? __pfx_ima_collect_measurement+0x10/0x10 [ 606.399832][T13727] ? __mutex_lock+0x319/0x1550 [ 606.399884][T13727] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 606.399924][T13727] process_measurement+0x12cd/0x1c80 [ 606.399974][T13727] ? __pfx_process_measurement+0x10/0x10 [ 606.400050][T13727] ? tomoyo_find_next_domain+0x1730/0x1aa0 [ 606.400094][T13727] ima_bprm_check+0x121/0x180 [ 606.400126][T13727] ? __pfx_ima_bprm_check+0x10/0x10 [ 606.400154][T13727] ? tomoyo_bprm_check_security+0xef/0x180 [ 606.400187][T13727] ? tomoyo_bprm_check_security+0xef/0x180 [ 606.400218][T13727] ? tomoyo_bprm_check_security+0xef/0x180 [ 606.400247][T13727] ? tomoyo_bprm_check_security+0x161/0x180 [ 606.400281][T13727] security_bprm_check+0xcd/0x240 [ 606.400308][T13727] bprm_execve+0x8a4/0x1440 [ 606.400346][T13727] ? __pfx_bprm_execve+0x10/0x10 [ 606.400364][T13727] ? do_raw_spin_unlock+0xf5/0x210 [ 606.400395][T13727] ? alloc_bprm+0x508/0x5c0 [ 606.400414][T13727] ? count+0x1cb/0x230 [ 606.400438][T13727] do_execveat_common+0x50d/0x690 [ 606.400472][T13727] __x64_sys_execveat+0xc7/0xf0 [ 606.400494][T13727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.400518][T13727] do_syscall_64+0x15f/0xf80 [ 606.400538][T13727] ? trace_irq_disable+0x3b/0x140 [ 606.400565][T13727] ? clear_bhb_loop+0x40/0x90 [ 606.400591][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.400613][T13727] RIP: 0033:0x7f095e39c819 [ 606.400634][T13727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.400651][T13727] RSP: 002b:00007f095f326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 606.400675][T13727] RAX: ffffffffffffffda RBX: 00007f095e615fa0 RCX: 00007f095e39c819 [ 606.400691][T13727] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 606.400704][T13727] RBP: 00007f095f326090 R08: 0000000000000000 R09: 0000000000000000 [ 606.400717][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.400729][T13727] R13: 00007f095e616038 R14: 00007f095e615fa0 R15: 00007f095e73fa48 [ 606.400763][T13727] [ 606.401072][ T29] audit: type=1800 audit(1776464303.893:5156): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2361" name="file1" dev="tmpfs" ino=2528 res=0 errno=0 [ 606.940090][ T7367] usb 4-1: USB disconnect, device number 97 [ 607.027243][T13739] netlink: 440 bytes leftover after parsing attributes in process `syz.1.2366'. [ 607.117199][T13741] fuse: Unknown parameter '{roupid' [ 607.295926][T13751] netlink: 'syz.4.2370': attribute type 1 has an invalid length. [ 607.316338][T13745] FAULT_INJECTION: forcing a failure. [ 607.316338][T13745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.346407][T13753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2370'. [ 607.387658][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.0.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.387699][T13745] Tainted: [L]=SOFTLOCKUP [ 607.387708][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 607.387722][T13745] Call Trace: [ 607.387731][T13745] [ 607.387740][T13745] dump_stack_lvl+0xe8/0x150 [ 607.387778][T13745] should_fail_ex+0x412/0x560 [ 607.387809][T13745] _copy_from_user+0x2d/0xb0 [ 607.387842][T13745] kstrtouint_from_user+0xd6/0x180 [ 607.387871][T13745] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 607.387914][T13745] proc_fail_nth_write+0x8e/0x210 [ 607.387945][T13745] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 607.387982][T13745] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 607.388016][T13745] vfs_write+0x29a/0xb90 [ 607.388048][T13745] ? __pfx_vfs_write+0x10/0x10 [ 607.388073][T13745] ? __fget_files+0x2a/0x420 [ 607.388107][T13745] ? __fget_files+0x3a0/0x420 [ 607.388134][T13745] ? __fget_files+0x2a/0x420 [ 607.388172][T13745] ksys_write+0x150/0x270 [ 607.388198][T13745] ? __pfx_ksys_write+0x10/0x10 [ 607.388228][T13745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.388251][T13745] do_syscall_64+0x15f/0xf80 [ 607.388273][T13745] ? trace_irq_disable+0x3b/0x140 [ 607.388299][T13745] ? clear_bhb_loop+0x40/0x90 [ 607.388325][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.388340][T13745] RIP: 0033:0x7f1d8db5d04e [ 607.388354][T13745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 607.388367][T13745] RSP: 002b:00007f1d8ea23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 607.388383][T13745] RAX: ffffffffffffffda RBX: 00007f1d8ea246c0 RCX: 00007f1d8db5d04e [ 607.388395][T13745] RDX: 0000000000000001 RSI: 00007f1d8ea240a0 RDI: 0000000000000005 [ 607.388404][T13745] RBP: 00007f1d8ea24090 R08: 0000000000000000 R09: 0000000000000000 [ 607.388414][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.388423][T13745] R13: 00007f1d8de16038 R14: 00007f1d8de15fa0 R15: 00007f1d8df3fa48 [ 607.388447][T13745] [ 607.889368][T13757] bond2: (slave gretap1): making interface the new active one [ 607.941944][T13757] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 608.072290][T13770] fuse: Bad value for 'fd' [ 608.304039][T13779] FAULT_INJECTION: forcing a failure. [ 608.304039][T13779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.317539][T13779] CPU: 1 UID: 0 PID: 13779 Comm: syz.4.2378 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.317573][T13779] Tainted: [L]=SOFTLOCKUP [ 608.317581][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 608.317595][T13779] Call Trace: [ 608.317604][T13779] [ 608.317613][T13779] dump_stack_lvl+0xe8/0x150 [ 608.317652][T13779] should_fail_ex+0x412/0x560 [ 608.317683][T13779] _copy_from_user+0x2d/0xb0 [ 608.317713][T13779] __copy_msghdr+0x3c5/0x5b0 [ 608.317747][T13779] ___sys_sendmsg+0x213/0x360 [ 608.317775][T13779] ? __lock_acquire+0x6b5/0x2cf0 [ 608.317810][T13779] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.317852][T13779] ? kstrtouint+0x6e/0xe0 [ 608.317902][T13779] ? __fget_files+0x2a/0x420 [ 608.317931][T13779] ? __fget_files+0x3a0/0x420 [ 608.317970][T13779] __sys_sendmmsg+0x27c/0x4e0 [ 608.318005][T13779] ? __pfx___sys_sendmmsg+0x10/0x10 [ 608.318032][T13779] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 608.318082][T13779] ? ksys_write+0x242/0x270 [ 608.318106][T13779] ? __pfx_ksys_write+0x10/0x10 [ 608.318134][T13779] __x64_sys_sendmmsg+0xa0/0xc0 [ 608.318163][T13779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.318184][T13779] do_syscall_64+0x15f/0xf80 [ 608.318204][T13779] ? trace_irq_disable+0x3b/0x140 [ 608.318231][T13779] ? clear_bhb_loop+0x40/0x90 [ 608.318256][T13779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.318277][T13779] RIP: 0033:0x7f095e39c819 [ 608.318296][T13779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.318313][T13779] RSP: 002b:00007f095f326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 608.318335][T13779] RAX: ffffffffffffffda RBX: 00007f095e615fa0 RCX: 00007f095e39c819 [ 608.318351][T13779] RDX: 0000000000000002 RSI: 0000200000003100 RDI: 0000000000000003 [ 608.318364][T13779] RBP: 00007f095f326090 R08: 0000000000000000 R09: 0000000000000000 [ 608.318377][T13779] R10: 927c408517621174 R11: 0000000000000246 R12: 0000000000000001 [ 608.318411][T13779] R13: 00007f095e616038 R14: 00007f095e615fa0 R15: 00007f095e73fa48 [ 608.318444][T13779] [ 608.546234][ T7367] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 608.851362][ T7367] usb 2-1: Using ep0 maxpacket: 32 [ 608.863744][ T7367] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 608.872742][ T7367] usb 2-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 608.897633][ T7367] usb 2-1: config 0 has no interface number 0 [ 608.934052][ T7367] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.978719][T13791] loop2: detected capacity change from 0 to 7 [ 608.989127][ T7367] usb 2-1: config 0 interface 89 has no altsetting 0 [ 609.010222][ T7367] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 609.022759][T13791] Dev loop2: unable to read RDB block 7 [ 609.028621][ T7367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.028652][ T7367] usb 2-1: Product: syz [ 609.028668][ T7367] usb 2-1: Manufacturer: syz [ 609.028686][ T7367] usb 2-1: SerialNumber: syz [ 609.052216][ T7367] usb 2-1: config 0 descriptor?? [ 609.079980][T13791] loop2: AHDI p1 p2 p3 [ 609.086352][T13791] loop2: partition table partially beyond EOD, truncated [ 609.111698][T13791] loop2: p1 start 1601398130 is beyond EOD, truncated [ 609.135338][T13791] loop2: p2 start 1702059890 is beyond EOD, truncated [ 609.143900][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2384'. [ 609.285716][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.306354][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.401129][ T7367] usb 2-1: USB disconnect, device number 93 [ 609.513022][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'. [ 609.572345][T13802] unsupported nla_type 216 [ 609.580558][T13805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2388'. [ 609.648982][T13802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2388'. [ 609.902520][ T7372] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 610.023031][ T7367] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 610.082988][ T7372] usb 1-1: Using ep0 maxpacket: 32 [ 610.129465][ T7372] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 610.148935][ T7372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.167526][ T7372] usb 1-1: Product: syz [ 610.185602][ T7367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.196614][ T7372] usb 1-1: Manufacturer: syz [ 610.205442][ T7367] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 610.219102][ T7372] usb 1-1: SerialNumber: syz [ 610.242567][ T7372] usb 1-1: config 0 descriptor?? [ 610.246856][ T7367] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 610.308244][ T7367] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 610.327991][ T7367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.357854][ T7367] usb 4-1: Product: syz [ 610.369126][ T7367] usb 4-1: Manufacturer: syz [ 610.384671][ T7367] usb 4-1: SerialNumber: syz [ 610.410768][ T7367] usb 4-1: config 0 descriptor?? [ 610.425507][ T7367] uvcvideo 4-1:0.0: Found Unit with invalid ID 0 [ 610.489131][ T7372] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 093 [ 610.790388][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.790888][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.823041][T13808] i2c i2c-1: failure reading data [ 610.906250][ T5948] usb 1-1: USB disconnect, device number 93 [ 612.145797][ T29] audit: type=1326 audit(1776464309.633:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.204574][ T29] audit: type=1326 audit(1776464309.633:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.257506][ T29] audit: type=1326 audit(1776464309.633:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.314057][ T29] audit: type=1326 audit(1776464309.633:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.344311][ T29] audit: type=1326 audit(1776464309.633:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.400275][ T29] audit: type=1326 audit(1776464309.633:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.500889][ T29] audit: type=1326 audit(1776464309.773:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.587953][ T29] audit: type=1326 audit(1776464309.773:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.768631][ T29] audit: type=1326 audit(1776464309.953:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 612.889480][ T7367] uvcvideo 4-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 612.929576][ T7367] uvcvideo 4-1:0.0: No valid video chain found. [ 612.967837][ T7367] usb 4-1: USB disconnect, device number 98 [ 613.003525][T13876] cgroup: fork rejected by pids controller in /syz2 [ 613.020724][ T29] audit: type=1326 audit(1776464310.103:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13854 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d359c819 code=0x7ffc0000 [ 613.384362][ T7367] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 613.583878][ T7367] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 613.601693][ T7367] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 613.645086][ T7367] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 613.683365][ T7367] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 613.731597][ T7367] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 613.775184][ T7367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 613.805821][ T7367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 613.850401][ T7367] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 613.941802][ T7367] usb 4-1: string descriptor 0 read error: -22 [ 613.979865][ T7367] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 614.018520][ T7367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.102174][ T7367] usb 4-1: config 0 descriptor?? [ 614.121835][ T7367] hub 4-1:0.0: bad descriptor, ignoring hub [ 614.146575][ T7367] hub 4-1:0.0: probe with driver hub failed with error -5 [ 614.431844][ T7367] usb 4-1: USB disconnect, device number 99 [ 614.503720][T12847] syz_tun (unregistering): left allmulticast mode [ 615.475090][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.491738][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.503461][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.529590][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.539077][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.839999][T14020] syzkaller0: entered promiscuous mode [ 615.859565][T14020] syzkaller0: entered allmulticast mode [ 615.882787][T14022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2423'. [ 616.344433][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.424863][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.616946][T14012] chnl_net:caif_netlink_parms(): no params data found [ 616.994364][T14012] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.014766][T14048] FAULT_INJECTION: forcing a failure. [ 617.014766][T14048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.033495][T14012] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.053293][T14012] bridge_slave_0: entered allmulticast mode [ 617.073511][T14012] bridge_slave_0: entered promiscuous mode [ 617.082810][T14048] CPU: 1 UID: 0 PID: 14048 Comm: syz.0.2429 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.082843][T14048] Tainted: [L]=SOFTLOCKUP [ 617.082849][T14048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 617.082859][T14048] Call Trace: [ 617.082888][T14048] [ 617.082897][T14048] dump_stack_lvl+0xe8/0x150 [ 617.082941][T14048] should_fail_ex+0x412/0x560 [ 617.082964][T14048] _copy_from_user+0x2d/0xb0 [ 617.082987][T14048] ___sys_sendmsg+0x1c6/0x360 [ 617.083008][T14048] ? __lock_acquire+0x6b5/0x2cf0 [ 617.083033][T14048] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.083080][T14048] ? __fget_files+0x2a/0x420 [ 617.083101][T14048] ? __fget_files+0x3a0/0x420 [ 617.083129][T14048] __x64_sys_sendmsg+0x1bd/0x2a0 [ 617.083152][T14048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 617.083180][T14048] ? __pfx_ksys_write+0x10/0x10 [ 617.083202][T14048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.083218][T14048] do_syscall_64+0x15f/0xf80 [ 617.083234][T14048] ? trace_irq_disable+0x3b/0x140 [ 617.083253][T14048] ? clear_bhb_loop+0x40/0x90 [ 617.083271][T14048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.083286][T14048] RIP: 0033:0x7f1d8db9c819 [ 617.083301][T14048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.083313][T14048] RSP: 002b:00007f1d8ea24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.083329][T14048] RAX: ffffffffffffffda RBX: 00007f1d8de15fa0 RCX: 00007f1d8db9c819 [ 617.083340][T14048] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 617.083350][T14048] RBP: 00007f1d8ea24090 R08: 0000000000000000 R09: 0000000000000000 [ 617.083359][T14048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.083368][T14048] R13: 00007f1d8de16038 R14: 00007f1d8de15fa0 R15: 00007f1d8df3fa48 [ 617.083391][T14048] [ 617.363620][T14012] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.495599][T14012] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.528045][T14012] bridge_slave_1: entered allmulticast mode [ 617.563382][T14012] bridge_slave_1: entered promiscuous mode [ 617.593737][ T5835] Bluetooth: hci2: command tx timeout [ 617.722136][T14012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.781506][T14012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.901454][T14012] team0: Port device team_slave_0 added [ 617.922232][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 617.922250][ T29] audit: type=1800 audit(1776464315.413:5179): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2432" name="/" dev="fuse" ino=1 res=0 errno=0 [ 617.949444][T14012] team0: Port device team_slave_1 added [ 618.041365][ T5948] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 618.112555][T14012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.148541][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.204451][ T5948] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 618.218730][ T5948] usb 1-1: config 0 has no interface number 0 [ 618.236309][ T5948] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 618.251384][T14012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.283551][ T5948] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.324442][ T5948] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 618.335020][T14070] syzkaller0: entered promiscuous mode [ 618.343056][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.354075][T14070] syzkaller0: entered allmulticast mode [ 618.361516][ T5948] usb 1-1: Product: syz [ 618.376286][T14012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.376760][ T5948] usb 1-1: Manufacturer: syz [ 618.407276][ T5948] usb 1-1: SerialNumber: syz [ 618.416589][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.421047][ T5948] usb 1-1: config 0 descriptor?? [ 618.449064][T14056] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 618.467657][ T5948] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 618.487634][ T5948] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 618.497303][T14012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.664418][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 618.813397][T14012] hsr_slave_0: entered promiscuous mode [ 618.822855][T14012] hsr_slave_1: entered promiscuous mode [ 619.058668][ T7373] usb 1-1: USB disconnect, device number 94 [ 619.096511][ T7373] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 619.124083][ T7373] cyberjack 1-1:0.69: device disconnected [ 619.201670][ T5948] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 619.376985][ T5948] usb 2-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 619.391046][ T5948] usb 2-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 619.414316][ T5948] usb 2-1: Product: syz [ 619.419983][ T5948] usb 2-1: Manufacturer: syz [ 619.426603][ T5948] usb 2-1: SerialNumber: syz [ 619.455076][ T5948] usb 2-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 619.489221][ T5948] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 619.503505][ T5948] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 619.522640][ T5948] usb 2-1: media controller created [ 619.558734][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.583906][ T5948] usb 2-1: selecting invalid altsetting 1 [ 619.589937][ T5948] set interface failed [ 619.629379][ T5948] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 619.646170][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.673304][ T5835] Bluetooth: hci2: command tx timeout [ 619.696066][ T5948] error writing reg: 0xff, val: 0x00 [ 619.774511][T14107] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 619.792879][ T5948] dvb_usb_mxl111sf 2-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 619.833342][ T5948] usb 2-1: USB disconnect, device number 94 [ 619.878819][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.950216][T14109] syzkaller0: entered promiscuous mode [ 619.971405][T14109] syzkaller0: entered allmulticast mode [ 620.015184][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.143331][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.436124][T14117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.562636][T14123] Option '/frontend' to dns_resolver key: bad/missing value [ 620.640825][ T5948] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 620.811399][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 620.827574][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.861697][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.905660][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 620.939350][ T5948] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 620.960673][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.031418][ T802] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 621.040029][ T5948] usb 4-1: config 0 descriptor?? [ 621.213140][ T802] usb 2-1: Using ep0 maxpacket: 8 [ 621.227772][ T802] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 621.256674][ T802] usb 2-1: config 179 has no interface number 0 [ 621.283088][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 621.320653][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 621.396060][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 621.438420][ T802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 621.459520][ T802] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 621.517336][ T802] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 621.533220][ T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.552995][ T5948] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002C/input/input38 [ 621.580489][T14126] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 621.685522][ T5948] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 621.751398][ T5835] Bluetooth: hci2: command tx timeout [ 621.838669][ T5948] usb 4-1: USB disconnect, device number 100 [ 621.879523][T14141] Invalid option length (869) for dns_resolver key [ 621.888052][ T802] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input39 [ 622.022466][ T7373] usb 2-1: USB disconnect, device number 95 [ 622.022698][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 622.036817][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 622.167155][T14142] fido_id[14142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 622.979843][ T35] bond0 (unregistering): Released all slaves [ 623.055534][ T35] bond1 (unregistering): Released all slaves [ 623.301566][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 623.373263][ T5494] 8021q: adding VLAN 0 to HW filter on device eth1 [ 623.381333][ T35] tipc: Disabling bearer [ 623.394012][ T35] tipc: Left network mode [ 623.578696][T14161] syzkaller0: entered promiscuous mode [ 623.641301][T14161] syzkaller0: entered allmulticast mode [ 623.831466][ T5835] Bluetooth: hci2: command tx timeout [ 624.559928][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.569837][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.652243][T14182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.807708][T14182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.950401][T14190] bond3: option arp_all_targets: invalid value (129) [ 624.960294][T14190] bond3 (unregistering): Released all slaves [ 625.275269][ T35] hsr_slave_0: left promiscuous mode [ 625.282568][ T35] hsr_slave_1: left promiscuous mode [ 625.298273][ T35] veth1_vlan: left promiscuous mode [ 625.306107][ T35] veth0_vlan: left promiscuous mode [ 625.743436][T14212] FAULT_INJECTION: forcing a failure. [ 625.743436][T14212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.759604][T14212] CPU: 1 UID: 0 PID: 14212 Comm: syz.0.2473 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.759639][T14212] Tainted: [L]=SOFTLOCKUP [ 625.759648][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 625.759661][T14212] Call Trace: [ 625.759670][T14212] [ 625.759679][T14212] dump_stack_lvl+0xe8/0x150 [ 625.759718][T14212] should_fail_ex+0x412/0x560 [ 625.759750][T14212] _copy_from_user+0x2d/0xb0 [ 625.759780][T14212] ___sys_recvmsg+0x175/0x590 [ 625.759817][T14212] ? __pfx____sys_recvmsg+0x10/0x10 [ 625.759852][T14212] ? __fget_files+0x2a/0x420 [ 625.759912][T14212] do_recvmmsg+0x334/0x800 [ 625.759949][T14212] ? __pfx_do_recvmmsg+0x10/0x10 [ 625.759992][T14212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 625.760032][T14212] __x64_sys_recvmmsg+0x198/0x250 [ 625.760065][T14212] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 625.760105][T14212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.760128][T14212] do_syscall_64+0x15f/0xf80 [ 625.760149][T14212] ? trace_irq_disable+0x3b/0x140 [ 625.760175][T14212] ? clear_bhb_loop+0x40/0x90 [ 625.760201][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.760221][T14212] RIP: 0033:0x7f1d8db9c819 [ 625.760241][T14212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.760259][T14212] RSP: 002b:00007f1d8ea24028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 625.760282][T14212] RAX: ffffffffffffffda RBX: 00007f1d8de15fa0 RCX: 00007f1d8db9c819 [ 625.760298][T14212] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 625.760312][T14212] RBP: 00007f1d8ea24090 R08: 0000000000000000 R09: 0000000000000000 [ 625.760324][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 625.760337][T14212] R13: 00007f1d8de16038 R14: 00007f1d8de15fa0 R15: 00007f1d8df3fa48 [ 625.760377][T14212] [ 626.409813][T14224] FAULT_INJECTION: forcing a failure. [ 626.409813][T14224] name failslab, interval 1, probability 0, space 0, times 0 [ 626.472414][T14224] CPU: 1 UID: 0 PID: 14224 Comm: syz.0.2477 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.472451][T14224] Tainted: [L]=SOFTLOCKUP [ 626.472459][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 626.472472][T14224] Call Trace: [ 626.472480][T14224] [ 626.472489][T14224] dump_stack_lvl+0xe8/0x150 [ 626.472525][T14224] should_fail_ex+0x412/0x560 [ 626.472553][T14224] ? __d_alloc+0x37/0x6f0 [ 626.472574][T14224] should_failslab+0xa8/0x100 [ 626.472603][T14224] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 626.472646][T14224] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 626.472675][T14224] __d_alloc+0x37/0x6f0 [ 626.472701][T14224] d_alloc_pseudo+0x21/0xc0 [ 626.472724][T14224] alloc_file_pseudo+0xdd/0x240 [ 626.472758][T14224] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 626.472786][T14224] ? register_lock_class+0x31/0x2e0 [ 626.472820][T14224] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 626.472854][T14224] create_pipe_files+0x32a/0x7e0 [ 626.472886][T14224] __do_pipe_flags+0x46/0x1f0 [ 626.472912][T14224] do_pipe2+0xaa/0x190 [ 626.472937][T14224] ? fput+0xa0/0xd0 [ 626.472963][T14224] ? __pfx_do_pipe2+0x10/0x10 [ 626.472987][T14224] ? ksys_write+0x242/0x270 [ 626.473020][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.473045][T14224] __x64_sys_pipe2+0x5a/0x70 [ 626.473070][T14224] do_syscall_64+0x15f/0xf80 [ 626.473092][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.473116][T14224] ? clear_bhb_loop+0x40/0x90 [ 626.473142][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.473164][T14224] RIP: 0033:0x7f1d8db9c819 [ 626.473183][T14224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.473202][T14224] RSP: 002b:00007f1d8ea24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 626.473224][T14224] RAX: ffffffffffffffda RBX: 00007f1d8de15fa0 RCX: 00007f1d8db9c819 [ 626.473240][T14224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 626.473253][T14224] RBP: 00007f1d8ea24090 R08: 0000000000000000 R09: 0000000000000000 [ 626.473266][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.473278][T14224] R13: 00007f1d8de16038 R14: 00007f1d8de15fa0 R15: 00007f1d8df3fa48 [ 626.473310][T14224] [ 626.977712][T14012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 626.999645][T14012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 627.020158][T14012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 627.048865][T14012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 627.127828][T14012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 627.181651][T14012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 627.286899][T14012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 627.326112][T14012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.767837][T14012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.835973][ T35] IPVS: stop unused estimator thread 0... [ 627.846434][T14252] netlink: 'syz.3.2482': attribute type 64 has an invalid length. [ 627.885656][T14012] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.925195][T14088] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.945080][T14088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.958991][T14254] FAULT_INJECTION: forcing a failure. [ 627.958991][T14254] name failslab, interval 1, probability 0, space 0, times 0 [ 627.976791][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2482'. [ 628.030320][T14252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.055503][T14254] CPU: 1 UID: 0 PID: 14254 Comm: syz.1.2481 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.055537][T14254] Tainted: [L]=SOFTLOCKUP [ 628.055545][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.055558][T14254] Call Trace: [ 628.055566][T14254] [ 628.055576][T14254] dump_stack_lvl+0xe8/0x150 [ 628.055615][T14254] should_fail_ex+0x412/0x560 [ 628.055645][T14254] should_failslab+0xa8/0x100 [ 628.055672][T14254] __kmalloc_noprof+0xe8/0x760 [ 628.055693][T14254] ? __list_lru_init+0xba/0x5d0 [ 628.055724][T14254] __list_lru_init+0xba/0x5d0 [ 628.055757][T14254] alloc_super+0x8b5/0xab0 [ 628.055795][T14254] sget_fc+0x329/0xa40 [ 628.055829][T14254] ? __pfx_set_anon_super_fc+0x10/0x10 [ 628.055850][T14254] ? __pfx_fuse_fill_super+0x10/0x10 [ 628.055882][T14254] get_tree_nodev+0x2a/0x150 [ 628.055906][T14254] fuse_get_tree+0x295/0x3b0 [ 628.055950][T14254] vfs_get_tree+0x92/0x2a0 [ 628.055976][T14254] do_new_mount+0x341/0xd30 [ 628.056002][T14254] ? apparmor_capable+0x126/0x170 [ 628.056039][T14254] ? __pfx_do_new_mount+0x10/0x10 [ 628.056067][T14254] ? ns_capable+0x89/0xe0 [ 628.056097][T14254] ? path_mount+0x690/0x10e0 [ 628.056130][T14254] ? user_path_at+0xd4/0x160 [ 628.056162][T14254] __se_sys_mount+0x31d/0x420 [ 628.056198][T14254] ? __pfx___se_sys_mount+0x10/0x10 [ 628.056233][T14254] ? __x64_sys_mount+0x20/0xc0 [ 628.056260][T14254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.056284][T14254] do_syscall_64+0x15f/0xf80 [ 628.056349][T14254] ? trace_irq_disable+0x3b/0x140 [ 628.056377][T14254] ? clear_bhb_loop+0x40/0x90 [ 628.056403][T14254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.056425][T14254] RIP: 0033:0x7f51d359c819 [ 628.056446][T14254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.056463][T14254] RSP: 002b:00007f51d4407028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.056485][T14254] RAX: ffffffffffffffda RBX: 00007f51d3816090 RCX: 00007f51d359c819 [ 628.056500][T14254] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 628.056513][T14254] RBP: 00007f51d4407090 R08: 0000200000000500 R09: 0000000000000000 [ 628.056527][T14254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.056539][T14254] R13: 00007f51d3816128 R14: 00007f51d3816090 R15: 00007f51d393fa48 [ 628.056573][T14254] [ 628.463745][T14012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.477227][T14012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.520014][T14088] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.527300][T14088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.757497][T14012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.871720][ T7367] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 628.948774][T14278] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 629.046349][ T7367] usb 1-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 629.064963][ T7367] usb 1-1: too many endpoints for config 0 interface 0 altsetting 72: 48, using maximum allowed: 30 [ 629.138043][ T7367] usb 1-1: config 0 interface 0 altsetting 72 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 629.175306][ T7367] usb 1-1: config 0 interface 0 has no altsetting 0 [ 629.193312][ T7367] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 629.211796][ T7367] usb 1-1: New USB device strings: Mfr=0, Product=11, SerialNumber=109 [ 629.226935][ T7367] usb 1-1: Product: syz [ 629.240989][ T7367] usb 1-1: SerialNumber: syz [ 629.294313][ T7367] usb 1-1: config 0 descriptor?? [ 629.596291][ T7367] usb 1-1: USB disconnect, device number 95 [ 629.856159][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 629.856189][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 629.894841][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 629.915359][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 630.098486][T14012] veth0_vlan: entered promiscuous mode [ 630.182350][T14012] veth1_vlan: entered promiscuous mode [ 630.389712][T14012] veth0_macvtap: entered promiscuous mode [ 630.493902][T14012] veth1_macvtap: entered promiscuous mode [ 630.540438][T14012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.570897][T14012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.582393][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2491'. [ 630.604030][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2491'. [ 630.605635][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.647257][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.675096][T14308] netlink: 'syz.3.2489': attribute type 44 has an invalid length. [ 630.683290][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.695039][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.008389][ T29] audit: type=1800 audit(1776464328.493:5180): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="file0" dev="tmpfs" ino=2762 res=0 errno=0 [ 631.340068][T14090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.355899][T14327] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2493'. [ 631.500484][T14090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.632215][T14088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.644535][T14088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.101670][ T7373] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 632.241399][ T5948] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 632.254178][ T7373] usb 1-1: device descriptor read/64, error -71 [ 632.425598][ T5948] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 632.447308][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.462493][ T5948] usb 4-1: Product: syz [ 632.474344][ T5948] usb 4-1: Manufacturer: syz [ 632.483843][ T5948] usb 4-1: SerialNumber: syz [ 632.498348][ T5948] usb 4-1: config 0 descriptor?? [ 632.510953][ T7373] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 632.528227][ T5948] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 632.561782][ T5897] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 632.651992][ T7373] usb 1-1: device descriptor read/64, error -71 [ 632.731353][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 632.756455][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 632.772271][ T7373] usb usb1-port1: attempt power cycle [ 632.972598][T14365] netlink: 'syz.2.2502': attribute type 44 has an invalid length. [ 633.089279][ T5948] gspca_sunplus: reg_w_riv err -71 [ 633.102486][ T5948] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 633.121719][ T7373] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 633.130148][ T5948] usb 4-1: USB disconnect, device number 101 [ 633.162544][ T7373] usb 1-1: device descriptor read/8, error -71 [ 633.175299][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2503'. [ 633.421375][ T7373] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 633.452383][ T7373] usb 1-1: device descriptor read/8, error -71 [ 633.565271][ T7373] usb usb1-port1: unable to enumerate USB device [ 633.693999][T14382] FAULT_INJECTION: forcing a failure. [ 633.693999][T14382] name failslab, interval 1, probability 0, space 0, times 0 [ 633.708992][T14382] CPU: 1 UID: 0 PID: 14382 Comm: syz.3.2506 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.709028][T14382] Tainted: [L]=SOFTLOCKUP [ 633.709036][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 633.709050][T14382] Call Trace: [ 633.709059][T14382] [ 633.709068][T14382] dump_stack_lvl+0xe8/0x150 [ 633.709105][T14382] should_fail_ex+0x412/0x560 [ 633.709137][T14382] should_failslab+0xa8/0x100 [ 633.709162][T14382] ? io_submit_one+0x130/0x14c0 [ 633.709187][T14382] kmem_cache_alloc_noprof+0x87/0x650 [ 633.709230][T14382] io_submit_one+0x130/0x14c0 [ 633.709257][T14382] ? irqentry_exit+0x218/0x730 [ 633.709279][T14382] ? lockdep_hardirqs_on+0x7a/0x110 [ 633.709301][T14382] ? irqentry_exit+0x218/0x730 [ 633.709327][T14382] ? __pfx_io_submit_one+0x10/0x10 [ 633.709353][T14382] ? __might_fault+0xaf/0x130 [ 633.709396][T14382] ? __might_fault+0xaf/0x130 [ 633.709431][T14382] __se_sys_io_submit+0x195/0x340 [ 633.709465][T14382] ? __pfx___se_sys_io_submit+0x10/0x10 [ 633.709485][T14382] ? ksys_write+0x242/0x270 [ 633.709522][T14382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.709547][T14382] do_syscall_64+0x15f/0xf80 [ 633.709567][T14382] ? trace_irq_disable+0x3b/0x140 [ 633.709595][T14382] ? clear_bhb_loop+0x40/0x90 [ 633.709621][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.709644][T14382] RIP: 0033:0x7f885159c819 [ 633.709665][T14382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.709684][T14382] RSP: 002b:00007f8852446028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 633.709706][T14382] RAX: ffffffffffffffda RBX: 00007f8851816090 RCX: 00007f885159c819 [ 633.709721][T14382] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 00007f8852447000 [ 633.709736][T14382] RBP: 00007f8852446090 R08: 0000000000000000 R09: 0000000000000000 [ 633.709749][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.709763][T14382] R13: 00007f8851816128 R14: 00007f8851816090 R15: 00007f885193fa48 [ 633.709797][T14382] [ 633.831172][T14385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.961718][T14385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.049327][T14387] FAULT_INJECTION: forcing a failure. [ 634.049327][T14387] name failslab, interval 1, probability 0, space 0, times 0 [ 634.063614][T14387] CPU: 0 UID: 0 PID: 14387 Comm: syz.3.2508 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.063642][T14387] Tainted: [L]=SOFTLOCKUP [ 634.063648][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 634.063658][T14387] Call Trace: [ 634.063665][T14387] [ 634.063672][T14387] dump_stack_lvl+0xe8/0x150 [ 634.063707][T14387] should_fail_ex+0x412/0x560 [ 634.063730][T14387] should_failslab+0xa8/0x100 [ 634.063749][T14387] ? skb_clone+0x212/0x3a0 [ 634.063771][T14387] kmem_cache_alloc_noprof+0x87/0x650 [ 634.063796][T14387] ? __netlink_lookup+0xc6/0x8b0 [ 634.063820][T14387] skb_clone+0x212/0x3a0 [ 634.063844][T14387] __netlink_deliver_tap+0x404/0x850 [ 634.063895][T14387] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.063925][T14387] netlink_deliver_tap+0x19c/0x1b0 [ 634.063955][T14387] netlink_unicast+0x730/0x8e0 [ 634.063986][T14387] netlink_sendmsg+0x813/0xb40 [ 634.064012][T14387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.064034][T14387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.064055][T14387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.064075][T14387] ____sys_sendmsg+0x972/0x9f0 [ 634.064096][T14387] ? __might_fault+0xaf/0x130 [ 634.064124][T14387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.064152][T14387] ? import_iovec+0x73/0xa0 [ 634.064176][T14387] ___sys_sendmsg+0x2a5/0x360 [ 634.064197][T14387] ? __lock_acquire+0x6b5/0x2cf0 [ 634.064222][T14387] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.064269][T14387] ? __fget_files+0x2a/0x420 [ 634.064290][T14387] ? __fget_files+0x3a0/0x420 [ 634.064318][T14387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.064341][T14387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.064369][T14387] ? __pfx_ksys_write+0x10/0x10 [ 634.064383][T14387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.064405][T14387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.064421][T14387] do_syscall_64+0x15f/0xf80 [ 634.064438][T14387] ? trace_irq_disable+0x3b/0x140 [ 634.064457][T14387] ? clear_bhb_loop+0x40/0x90 [ 634.064476][T14387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.064491][T14387] RIP: 0033:0x7f885159c819 [ 634.064506][T14387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.064519][T14387] RSP: 002b:00007f8852468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.064535][T14387] RAX: ffffffffffffffda RBX: 00007f8851815fa0 RCX: 00007f885159c819 [ 634.064546][T14387] RDX: 0000000004000094 RSI: 0000200000000480 RDI: 0000000000000003 [ 634.064557][T14387] RBP: 00007f8852468090 R08: 0000000000000000 R09: 0000000000000000 [ 634.064566][T14387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.064575][T14387] R13: 00007f8851816038 R14: 00007f8851815fa0 R15: 00007f885193fa48 [ 634.064599][T14387] [ 634.797976][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.807496][ T5897] usb 2-1: no configurations [ 634.812589][ T5897] usb 2-1: can't read configurations, error -22 [ 634.851436][ T7372] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 634.984859][ T7372] usb 4-1: device descriptor read/64, error -71 [ 635.121473][T14406] FAULT_INJECTION: forcing a failure. [ 635.121473][T14406] name failslab, interval 1, probability 0, space 0, times 0 [ 635.142259][T14406] CPU: 0 UID: 0 PID: 14406 Comm: syz.0.2515 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.142296][T14406] Tainted: [L]=SOFTLOCKUP [ 635.142307][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 635.142317][T14406] Call Trace: [ 635.142324][T14406] [ 635.142331][T14406] dump_stack_lvl+0xe8/0x150 [ 635.142360][T14406] should_fail_ex+0x412/0x560 [ 635.142383][T14406] should_failslab+0xa8/0x100 [ 635.142404][T14406] __kmalloc_noprof+0xe8/0x760 [ 635.142420][T14406] ? security_prepare_creds+0x52/0x360 [ 635.142442][T14406] security_prepare_creds+0x52/0x360 [ 635.142461][T14406] prepare_creds+0x57d/0x820 [ 635.142483][T14406] lookup_user_key+0x319/0x1170 [ 635.142500][T14406] ? __might_fault+0xaf/0x130 [ 635.142528][T14406] ? __pfx_lookup_user_key+0x10/0x10 [ 635.142574][T14406] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 635.142607][T14406] ? _copy_from_user+0x94/0xb0 [ 635.142636][T14406] ? memdup_user+0x99/0xd0 [ 635.142680][T14406] __se_sys_request_key+0x22b/0x350 [ 635.142706][T14406] ? __pfx___se_sys_request_key+0x10/0x10 [ 635.142738][T14406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.142754][T14406] do_syscall_64+0x15f/0xf80 [ 635.142770][T14406] ? trace_irq_disable+0x3b/0x140 [ 635.142789][T14406] ? clear_bhb_loop+0x40/0x90 [ 635.142807][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.142822][T14406] RIP: 0033:0x7f1d8db9c819 [ 635.142837][T14406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.142850][T14406] RSP: 002b:00007f1d8ea03028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 635.142866][T14406] RAX: ffffffffffffffda RBX: 00007f1d8de16090 RCX: 00007f1d8db9c819 [ 635.142877][T14406] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000001d40 [ 635.142887][T14406] RBP: 00007f1d8ea03090 R08: 0000000000000000 R09: 0000000000000000 [ 635.142897][T14406] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 635.142907][T14406] R13: 00007f1d8de16128 R14: 00007f1d8de16090 R15: 00007f1d8df3fa48 [ 635.142930][T14406] [ 635.421544][ T7372] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 635.553919][ T7372] usb 4-1: device descriptor read/64, error -71 [ 635.662440][ T7372] usb usb4-port1: attempt power cycle [ 636.014874][ T7372] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 636.043171][ T7372] usb 4-1: device descriptor read/8, error -71 [ 636.291454][ T7372] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 636.322901][ T7372] usb 4-1: device descriptor read/8, error -71 [ 636.441856][ T7372] usb usb4-port1: unable to enumerate USB device [ 637.398339][T14090] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.420073][T14090] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.445218][T14090] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.466609][T14090] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.642744][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 637.765684][T14436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.812334][T14436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.143265][T14459] loop2: detected capacity change from 0 to 7 [ 639.198832][T14459] Dev loop2: unable to read RDB block 7 [ 639.209714][T14459] loop2: unable to read partition table [ 639.220698][T14459] loop2: partition table beyond EOD, truncated [ 639.239666][T14459] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 639.248905][ T29] audit: type=1326 audit(1776464336.723:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14460 comm="syz.3.2533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f885159c819 code=0x0 [ 640.065686][T14480] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 640.483685][T14488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2540'. [ 640.808901][T14493] fuse: Bad value for 'fd' [ 642.101885][T14535] fuse: Bad value for 'fd' [ 643.001437][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.015919][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.123245][T14555] FAULT_INJECTION: forcing a failure. [ 644.123245][T14555] name failslab, interval 1, probability 0, space 0, times 0 [ 644.182369][T14555] CPU: 1 UID: 0 PID: 14555 Comm: syz.3.2562 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.182395][T14555] Tainted: [L]=SOFTLOCKUP [ 644.182401][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 644.182411][T14555] Call Trace: [ 644.182418][T14555] [ 644.182425][T14555] dump_stack_lvl+0xe8/0x150 [ 644.182454][T14555] should_fail_ex+0x412/0x560 [ 644.182477][T14555] should_failslab+0xa8/0x100 [ 644.182497][T14555] __kmalloc_cache_noprof+0x88/0x660 [ 644.182512][T14555] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 644.182527][T14555] ? sctp_v6_cmp_addr+0x15/0xd0 [ 644.182541][T14555] ? sctp_add_bind_addr+0x8c/0x370 [ 644.182571][T14555] sctp_add_bind_addr+0x8c/0x370 [ 644.182597][T14555] sctp_copy_local_addr_list+0x314/0x4f0 [ 644.182624][T14555] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 644.182654][T14555] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 644.182703][T14555] ? sctp_association_new+0x1894/0x25e0 [ 644.182732][T14555] ? sctp_v6_is_any+0x64/0x80 [ 644.182755][T14555] ? sctp_copy_one_addr+0x93/0x360 [ 644.182793][T14555] sctp_bind_addr_copy+0xb3/0x3c0 [ 644.182826][T14555] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 644.182850][T14555] sctp_connect_new_asoc+0x2ff/0x6b0 [ 644.182872][T14555] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 644.182897][T14555] ? __local_bh_enable_ip+0xd0/0x130 [ 644.182918][T14555] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 644.182937][T14555] ? security_sctp_bind_connect+0x7e/0x2c0 [ 644.182955][T14555] sctp_sendmsg+0x1528/0x2c10 [ 644.182983][T14555] ? __pfx_sctp_sendmsg+0x10/0x10 [ 644.183003][T14555] ? aa_sk_perm+0x6d5/0x900 [ 644.183020][T14555] ? __might_fault+0xaf/0x130 [ 644.183048][T14555] ? __pfx_aa_sk_perm+0x10/0x10 [ 644.183068][T14555] ? sock_rps_record_flow+0x19/0x350 [ 644.183089][T14555] ? __pfx_inet_sendmsg+0x10/0x10 [ 644.183135][T14555] ? inet_sendmsg+0x2f4/0x370 [ 644.183162][T14555] ? __pfx_inet_sendmsg+0x10/0x10 [ 644.183184][T14555] __sys_sendto+0x5de/0x710 [ 644.183206][T14555] ? __pfx___sys_sendto+0x10/0x10 [ 644.183224][T14555] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 644.183249][T14555] ? __fget_files+0x3a0/0x420 [ 644.183278][T14555] ? ksys_write+0x242/0x270 [ 644.183296][T14555] ? __pfx_ksys_write+0x10/0x10 [ 644.183314][T14555] __x64_sys_sendto+0xde/0x100 [ 644.183334][T14555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.183351][T14555] do_syscall_64+0x15f/0xf80 [ 644.183366][T14555] ? trace_irq_disable+0x3b/0x140 [ 644.183385][T14555] ? clear_bhb_loop+0x40/0x90 [ 644.183403][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.183418][T14555] RIP: 0033:0x7f885159c819 [ 644.183432][T14555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.183445][T14555] RSP: 002b:00007f8852468028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 644.183461][T14555] RAX: ffffffffffffffda RBX: 00007f8851815fa0 RCX: 00007f885159c819 [ 644.183472][T14555] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 644.183482][T14555] RBP: 00007f8852468090 R08: 0000200000000140 R09: 000000000000001c [ 644.183492][T14555] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 644.183501][T14555] R13: 00007f8851816038 R14: 00007f8851815fa0 R15: 00007f885193fa48 [ 644.183525][T14555] [ 644.882024][ T7372] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 645.061457][ T7372] usb 1-1: Using ep0 maxpacket: 8 [ 645.081557][ T7372] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 645.103087][ T7372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.127672][ T7372] usb 1-1: Product: syz [ 645.139259][ T7372] usb 1-1: Manufacturer: syz [ 645.149663][ T7372] usb 1-1: SerialNumber: syz [ 645.168300][ T7372] usb 1-1: config 0 descriptor?? [ 645.173589][ T5897] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 645.341582][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 645.358515][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 645.387286][ T5897] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 645.408477][ T7372] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 645.422309][ T5897] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 645.449891][ T5897] usb 4-1: Product: syz [ 645.462886][ T5897] usb 4-1: Manufacturer: syz [ 645.475203][ T5897] usb 4-1: SerialNumber: syz [ 645.704920][ T5897] usb 4-1: Invalid connection information received from device [ 645.911319][T14320] usb 4-1: USB disconnect, device number 106 [ 646.504917][T14567] fuse: Bad value for 'fd' [ 646.643626][T14575] netlink: 'syz.4.2570': attribute type 6 has an invalid length. [ 646.652211][T14575] IPv6: NLM_F_CREATE should be specified when creating new route [ 646.660132][T14575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 646.667545][T14575] IPv6: NLM_F_CREATE should be set when creating new route [ 646.677963][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.693441][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.737815][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 646.748605][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 646.762124][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 646.773693][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 646.793798][T14320] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 646.814820][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 646.917732][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 646.933912][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 646.953551][T14320] usb 4-1: Using ep0 maxpacket: 32 [ 646.966051][T14320] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 646.983392][T14320] usb 4-1: config 2 has no interface number 0 [ 646.997274][T14320] usb 4-1: config 2 interface 88 has no altsetting 0 [ 647.013565][T14320] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 647.026477][T14320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.037817][T14320] usb 4-1: Product: syz [ 647.044170][T14320] usb 4-1: Manufacturer: syz [ 647.050066][T14320] usb 4-1: SerialNumber: syz [ 647.082611][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 647.106142][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 647.137781][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 647.219771][ T7372] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 647.241512][ T7372] dvbdev: DVB: registering new adapter (Terratec H7) [ 647.255098][ T7372] usb 1-1: media controller created [ 647.323803][ T7372] usb read operation failed. (-32) [ 647.336910][T14578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.357531][ T7372] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 647.379607][T14578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.503754][ T5948] usb 1-1: USB disconnect, device number 100 [ 647.563885][T14577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.353457][ T7365] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 648.524053][ T7365] usb 1-1: config 0 has an invalid interface number: 115 but max is 0 [ 648.542856][ T7365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.569317][ T7365] usb 1-1: config 0 has no interface number 0 [ 648.584403][ T7365] usb 1-1: config 0 interface 115 has no altsetting 0 [ 648.607985][ T7365] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.645094][ T7365] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 648.678355][ T7365] usb 1-1: Manufacturer: syz [ 648.700901][ T7365] usb 1-1: config 0 descriptor?? [ 648.776712][T14606] FAULT_INJECTION: forcing a failure. [ 648.776712][T14606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.793127][T14606] CPU: 1 UID: 0 PID: 14606 Comm: syz.4.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.793162][T14606] Tainted: [L]=SOFTLOCKUP [ 648.793170][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.793182][T14606] Call Trace: [ 648.793191][T14606] [ 648.793200][T14606] dump_stack_lvl+0xe8/0x150 [ 648.793248][T14606] should_fail_ex+0x412/0x560 [ 648.793279][T14606] _copy_from_iter+0x1d3/0x1670 [ 648.793316][T14606] ? rcu_is_watching+0x15/0xb0 [ 648.793341][T14606] ? __pfx__copy_from_iter+0x10/0x10 [ 648.793375][T14606] ? netlink_sendmsg+0x650/0xb40 [ 648.793401][T14606] ? skb_put+0x11b/0x210 [ 648.793430][T14606] netlink_sendmsg+0x6c0/0xb40 [ 648.793465][T14606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.793501][T14606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 648.793529][T14606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 648.793555][T14606] ____sys_sendmsg+0x972/0x9f0 [ 648.793581][T14606] ? lockdep_hardirqs_on+0x7a/0x110 [ 648.793611][T14606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.793648][T14606] ? import_iovec+0x73/0xa0 [ 648.793680][T14606] ___sys_sendmsg+0x2a5/0x360 [ 648.793707][T14606] ? __lock_acquire+0x6b5/0x2cf0 [ 648.793742][T14606] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.793803][T14606] ? __fget_files+0x2a/0x420 [ 648.793832][T14606] ? __fget_files+0x3a0/0x420 [ 648.793871][T14606] __x64_sys_sendmsg+0x1bd/0x2a0 [ 648.793905][T14606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.793943][T14606] ? __pfx_ksys_write+0x10/0x10 [ 648.793972][T14606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.793994][T14606] do_syscall_64+0x15f/0xf80 [ 648.794017][T14606] ? clear_bhb_loop+0x40/0x90 [ 648.794042][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.794064][T14606] RIP: 0033:0x7f095e39c819 [ 648.794083][T14606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.794101][T14606] RSP: 002b:00007f095f326028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.794123][T14606] RAX: ffffffffffffffda RBX: 00007f095e615fa0 RCX: 00007f095e39c819 [ 648.794139][T14606] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 648.794152][T14606] RBP: 00007f095f326090 R08: 0000000000000000 R09: 0000000000000000 [ 648.794165][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.794178][T14606] R13: 00007f095e616038 R14: 00007f095e615fa0 R15: 00007f095e73fa48 [ 648.794210][T14606] [ 649.811425][ T5948] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 649.907345][T14612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.949354][T14612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.993520][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.029933][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 650.061449][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 650.099867][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 650.132542][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 650.206051][ T5948] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 650.220678][T14320] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 650.233749][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 650.250969][T14320] asix 4-1:2.88: probe with driver asix failed with error -71 [ 650.268350][ T5948] usb 2-1: Product: syz [ 650.282824][ T5948] usb 2-1: Manufacturer: syz [ 650.293595][T14320] usb 4-1: USB disconnect, device number 107 [ 650.304099][ T5948] usb 2-1: SerialNumber: syz [ 650.348295][ T5948] usb 2-1: config 0 descriptor?? [ 650.571292][ T5948] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 650.599278][ T5948] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 650.755234][T14622] fuse: Bad value for 'fd' [ 650.773300][ T5948] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 650.789189][ T5948] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 650.818054][ T5948] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 650.975182][ T5948] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 651.091156][T14320] usb 1-1: USB disconnect, device number 101 [ 651.297012][T14638] netlink: 'syz.0.2585': attribute type 16 has an invalid length. [ 651.359397][T14638] netlink: 'syz.0.2585': attribute type 17 has an invalid length. [ 651.603052][T14650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.862682][T14657] sg_write: data in/out 294876/90 bytes for SCSI command 0x0-- guessing data in; [ 651.862682][T14657] program syz.0.2588 not setting count and/or reply_len properly [ 652.031931][ T5948] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 652.047914][ T5948] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 652.806730][ T7372] usb 2-1: USB disconnect, device number 98 [ 652.918392][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.948401][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.964181][T14664] syzkaller1: entered promiscuous mode [ 652.990131][T14664] syzkaller1: entered allmulticast mode [ 653.120882][T14670] fuse: Bad value for 'fd' [ 653.571413][ T5897] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 653.609682][T14680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.619512][T14680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.711356][ T5897] usb 1-1: device descriptor read/64, error -71 [ 653.721384][T13251] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 653.881485][T13251] usb 2-1: Using ep0 maxpacket: 16 [ 653.893997][T13251] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.918914][T13251] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.947061][T13251] usb 2-1: config 0 interface 0 has no altsetting 0 [ 653.954785][ T5897] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 653.971900][T13251] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 653.983894][T13251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.996703][T13251] usb 2-1: config 0 descriptor?? [ 654.042259][T14682] netlink: 'syz.3.2598': attribute type 44 has an invalid length. [ 654.111619][ T5897] usb 1-1: device descriptor read/64, error -71 [ 654.224737][ T5897] usb usb1-port1: attempt power cycle [ 654.229244][T14678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.263578][T14678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.441600][T14320] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 654.581395][ T5897] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 654.611309][T14320] usb 4-1: Using ep0 maxpacket: 32 [ 654.617988][ T5897] usb 1-1: device descriptor read/8, error -71 [ 654.627658][T14320] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 654.648014][T14320] usb 4-1: config 0 has no interface number 0 [ 654.662945][T14320] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 654.690066][T14320] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 654.708590][T14320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.723127][T14691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.727734][T14320] usb 4-1: Product: syz [ 654.745956][T14320] usb 4-1: Manufacturer: syz [ 654.757737][T14691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.758888][T14320] usb 4-1: SerialNumber: syz [ 654.778453][T14320] usb 4-1: config 0 descriptor?? [ 654.786981][T14687] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 654.796620][T13251] hid (null): invalid report_count 61992006 [ 654.812655][T13251] hid (null): invalid report_size 1498650101 [ 654.821614][T14703] fuse: Bad value for 'fd' [ 654.829296][T13251] hid (null): unknown global tag 0xc [ 654.864693][ T5897] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 654.901385][ T5897] usb 1-1: device descriptor read/8, error -71 [ 655.010895][T14687] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 655.042803][ T5897] usb usb1-port1: unable to enumerate USB device [ 655.456233][T14320] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 655.468010][T14320] asix 4-1:0.188: probe with driver asix failed with error -61 [ 655.712273][T14711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.722441][T14711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.529588][T14320] usb 2-1: USB disconnect, device number 99 [ 656.728354][T14725] sg_write: data in/out 393432/56 bytes for SCSI command 0x0-- guessing data in; [ 656.728354][T14725] program syz.4.2613 not setting count and/or reply_len properly [ 657.029849][T14737] fuse: Bad value for 'fd' [ 657.736605][T14757] program syz.4.2619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 658.026473][T14764] binder_alloc: 14763: binder_alloc_buf, no vma [ 658.538044][T14778] __nla_validate_parse: 9 callbacks suppressed [ 658.538060][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'. [ 658.967081][T14320] usb 4-1: USB disconnect, device number 108 [ 661.353825][ T802] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 661.526565][ T802] usb 2-1: Using ep0 maxpacket: 32 [ 661.550400][ T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.639300][ T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.655577][ T802] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 661.674417][ T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.725659][ T802] usb 2-1: config 0 descriptor?? [ 661.916606][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 661.945919][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 662.216796][ T802] hid_parser_main: 3 callbacks suppressed [ 662.216825][ T802] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 662.270272][ T802] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 662.382990][ T802] ft260 0003:0403:6030.002E: chip code: 0000 0000 [ 662.585334][ T802] ft260 0003:0403:6030.002E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 662.671915][T14830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2642'. [ 662.672356][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.722865][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.785915][ T802] ft260 0003:0403:6030.002E: failed to retrieve status: -32, no wakeup [ 663.011402][T14809] i2c i2c-1: adapter quirk: too many messages (addr 0x0006, size 0, read) [ 663.045539][T13251] usb 2-1: USB disconnect, device number 100 [ 664.063937][T14857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2655'. [ 665.210410][ T5835] Bluetooth: hci0: unexpected event 0x22 length: 763 > 260 [ 665.210466][ T5835] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 665.605925][ T2353] pvrusb2: request_firmware fatal error with code=-110 [ 665.632445][ T2353] pvrusb2: Failure uploading firmware1 [ 665.639758][ T2353] pvrusb2: Device initialization was not successful. [ 665.662163][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 665.673218][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 665.688227][ T2353] pvrusb2: Failed to submit write-control URB status=-19 [ 665.688509][ T5839] pvrusb2: Device being rendered inoperable [ 665.704522][ T2353] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 665.742316][ T2353] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 670.677186][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 671.570989][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 672.976902][T14952] binder: 14950:14952 ioctl c0285840 200000000000 returned -22 [ 673.215952][T14958] tipc: Enabling of bearer rejected, already enabled [ 673.615714][ T29] audit: type=1326 audit(1776464371.103:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.2698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f095e39c819 code=0x0 [ 673.711347][T14320] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 673.884986][T14320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 673.894835][T14320] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.906379][T14320] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 673.916113][T14320] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 673.928284][T14320] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 673.944040][T14320] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 673.955850][T14320] usb 1-1: config 1 interface 1 has no altsetting 0 [ 673.967411][T14320] usb 1-1: string descriptor 0 read error: -22 [ 673.974487][T14320] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 673.984428][T14320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.620656][T14320] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 674.653310][T14988] fuse: Bad value for 'fd' [ 674.859383][T14320] usb 1-1: USB disconnect, device number 106 [ 675.499232][T14997] netlink: 'syz.4.2705': attribute type 44 has an invalid length. [ 676.509069][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'. [ 676.531086][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 676.590280][ T1164] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.602987][ T1164] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.623037][ T1164] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.634051][ T1164] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.403989][T15038] netlink: 'syz.3.2716': attribute type 54 has an invalid length. [ 678.242853][T15047] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2721'. [ 678.301787][T15049] netlink: 'syz.2.2720': attribute type 44 has an invalid length. [ 678.333863][ T5897] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 678.522569][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 678.546668][ T5897] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 678.573749][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.598054][ T5897] usb 4-1: Product: syz [ 678.614132][ T5897] usb 4-1: Manufacturer: syz [ 678.632539][ T5897] usb 4-1: SerialNumber: syz [ 678.653637][ T5897] usb 4-1: config 0 descriptor?? [ 678.680648][ T5897] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 678.704894][ T5897] dvb-usb: bulk message failed: -22 (4/0) [ 678.724387][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 678.752642][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 678.776140][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 678.819372][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 678.845335][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 678.865958][ T5897] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 678.885675][T15045] dvb-usb: bulk message failed: -22 (7/0) [ 678.897222][ T5897] usb 4-1: media controller created [ 678.903139][T15045] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 678.946437][T15045] ttusb2: i2c transfer failed. [ 678.956092][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.055755][ T5897] usb 4-1: selecting invalid altsetting 3 [ 679.073803][ T5897] ttusb2: set interface to alts=3 failed [ 679.206981][ T5897] DVB: Unable to find symbol tda10086_attach() [ 679.242930][ T5897] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 679.268668][ T5897] dvb-usb: bulk message failed: -22 (4/0) [ 679.288363][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.309245][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 679.325339][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.350073][ T5897] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 679.375620][ T5897] usb 4-1: USB disconnect, device number 109 [ 679.524972][ T5897] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 679.662806][T15073] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 679.725097][T15072] binfmt_misc: register: failed to install interpreter file ./file0 [ 680.301359][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 680.501319][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 680.620619][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 680.666473][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 680.706757][ T10] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.742251][T15093] TC_ACT_REPEAT abuse ? [ 680.753353][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 681.155015][ T10] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 681.188114][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.223087][ T10] usb 4-1: Product: syz [ 681.254980][ T10] usb 4-1: Manufacturer: syz [ 681.286388][ T10] usb 4-1: SerialNumber: syz [ 681.425218][T15100] netlink: 'syz.4.2735': attribute type 44 has an invalid length. [ 681.546154][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 681.792816][T14320] usb 4-1: USB disconnect, device number 110 [ 681.880300][T15106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.964576][T15106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.517680][T15128] FAULT_INJECTION: forcing a failure. [ 682.517680][T15128] name failslab, interval 1, probability 0, space 0, times 0 [ 682.591775][T15128] CPU: 0 UID: 0 PID: 15128 Comm: syz.0.2745 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.591811][T15128] Tainted: [L]=SOFTLOCKUP [ 682.591820][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 682.591833][T15128] Call Trace: [ 682.591842][T15128] [ 682.591852][T15128] dump_stack_lvl+0xe8/0x150 [ 682.591892][T15128] should_fail_ex+0x412/0x560 [ 682.591925][T15128] should_failslab+0xa8/0x100 [ 682.591953][T15128] __kmalloc_cache_noprof+0x88/0x660 [ 682.591977][T15128] ? hugetlb_vma_lock_alloc+0xe3/0x1c0 [ 682.592009][T15128] ? up_write+0x1ab/0x410 [ 682.592037][T15128] hugetlb_vma_lock_alloc+0xe3/0x1c0 [ 682.592071][T15128] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 682.592101][T15128] mmap_action_complete+0x315/0x590 [ 682.592139][T15128] ? __pfx_mmap_action_complete+0x10/0x10 [ 682.592171][T15128] ? mmap_action_prepare+0xd4/0x150 [ 682.592208][T15128] ? __compat_vma_mmap+0x137/0x260 [ 682.592241][T15128] compat_vma_mmap+0x243/0x2c0 [ 682.592272][T15128] ? __pfx_compat_vma_mmap+0x10/0x10 [ 682.592327][T15128] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 682.592361][T15128] ? __shm_open+0x340/0x3b0 [ 682.592395][T15128] ? __shm_open+0x351/0x3b0 [ 682.592427][T15128] shm_mmap+0xda/0x200 [ 682.592458][T15128] mmap_region+0x1ab2/0x2280 [ 682.592514][T15128] ? __pfx_mmap_region+0x10/0x10 [ 682.592548][T15128] ? unwind_next_frame+0xa6/0x2550 [ 682.592595][T15128] ? is_bpf_text_address+0x292/0x2b0 [ 682.592625][T15128] ? is_bpf_text_address+0x26/0x2b0 [ 682.592695][T15128] ? security_file_alloc+0x34/0x310 [ 682.592717][T15128] ? kasan_save_track+0x4f/0x80 [ 682.592737][T15128] ? kasan_save_track+0x3e/0x80 [ 682.592755][T15128] ? __kasan_slab_alloc+0x6c/0x80 [ 682.592814][T15128] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 682.592845][T15128] ? cap_mmap_addr+0xaf/0x100 [ 682.592868][T15128] ? bpf_lsm_mmap_addr+0x9/0x50 [ 682.592897][T15128] ? shmem_mapping+0xd/0x50 [ 682.592923][T15128] ? memfd_check_seals_mmap+0x165/0x200 [ 682.592957][T15128] do_mmap+0xc39/0x10c0 [ 682.592999][T15128] ? __pfx_do_mmap+0x10/0x10 [ 682.593029][T15128] ? __pfx_down_write_killable+0x10/0x10 [ 682.593058][T15128] ? apparmor_mmap_file+0x2da/0x3e0 [ 682.593084][T15128] do_shmat+0x8d8/0xc10 [ 682.593121][T15128] ? __pfx_do_shmat+0x10/0x10 [ 682.593139][T15128] ? __pfx_ksys_write+0x10/0x10 [ 682.593157][T15128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.593174][T15128] __x64_sys_shmat+0x9c/0xf0 [ 682.593195][T15128] do_syscall_64+0x15f/0xf80 [ 682.593210][T15128] ? trace_irq_disable+0x3b/0x140 [ 682.593229][T15128] ? clear_bhb_loop+0x40/0x90 [ 682.593247][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.593262][T15128] RIP: 0033:0x7f1d8db9c819 [ 682.593277][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.593290][T15128] RSP: 002b:00007f1d8ea24028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 682.593306][T15128] RAX: ffffffffffffffda RBX: 00007f1d8de15fa0 RCX: 00007f1d8db9c819 [ 682.593317][T15128] RDX: bbdccba4532b703b RSI: 0000200000000000 RDI: 0000000000000005 [ 682.593328][T15128] RBP: 00007f1d8ea24090 R08: 0000000000000000 R09: 0000000000000000 [ 682.593337][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.593346][T15128] R13: 00007f1d8de16038 R14: 00007f1d8de15fa0 R15: 00007f1d8df3fa48 [ 682.593370][T15128] [ 683.013613][T15128] HugeTLB: unable to allocate vma specific lock [ 683.043792][T15128] ------------[ cut here ]------------ [ 683.049377][T15128] !vma_is_attached(vma) [ 683.049398][T15128] WARNING: ./include/linux/mmap_lock.h:435 at vma_mark_detached+0x198/0x260, CPU#1: syz.0.2745/15128 [ 683.065125][T15128] Modules linked in: [ 683.071350][T15128] CPU: 1 UID: 0 PID: 15128 Comm: syz.0.2745 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.082432][T15128] Tainted: [L]=SOFTLOCKUP [ 683.086773][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.097299][T15128] RIP: 0010:vma_mark_detached+0x198/0x260 [ 683.103123][T15128] Code: 01 00 00 00 89 ee e8 57 5f a4 ff 85 ed 7e 4b e8 0e 5b a4 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 7e db f3 ff e8 f9 5a a4 ff 90 <0f> 0b 90 eb 95 e8 ee 5a a4 ff 90 0f 0b 90 e9 04 ff ff ff e8 e0 5a [ 683.122892][T15128] RSP: 0018:ffffc9000e316df0 EFLAGS: 00010293 [ 683.129774][T15128] RAX: ffffffff8220ba17 RBX: ffff888052ba53c0 RCX: ffff888031cfbd80 [ 683.137837][T15128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.145882][T15128] RBP: 0000000000000000 R08: ffff888052ba5443 R09: 1ffff1100a574a88 [ 683.154151][T15128] R10: dffffc0000000000 R11: ffffed100a574a89 R12: dffffc0000000000 [ 683.162338][T15128] R13: ffffc9000e317130 R14: ffff888052ba5440 R15: 0000000000000001 [ 683.170345][T15128] FS: 00007f1d8ea246c0(0000) GS:ffff88812532b000(0000) knlGS:0000000000000000 [ 683.179582][T15128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.186313][T15128] CR2: 000020000008e030 CR3: 00000000591fe000 CR4: 00000000003526f0 [ 683.194418][T15128] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 683.202500][T15128] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 683.210514][T15128] Call Trace: [ 683.213863][T15128] [ 683.216809][T15128] vms_gather_munmap_vmas+0x6ab/0x1380 [ 683.222483][T15128] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 683.228395][T15128] ? __schedule+0x17ca/0x5680 [ 683.233162][T15128] ? panic_on_this_cpu+0x32/0x40 [ 683.238131][T15128] do_vmi_align_munmap+0x2b4/0x4b0 [ 683.243358][T15128] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 683.249041][T15128] do_vmi_munmap+0x252/0x2d0 [ 683.253701][T15128] do_munmap+0xf9/0x170 [ 683.257886][T15128] ? __pfx_do_munmap+0x10/0x10 [ 683.262888][T15128] ? up_write+0x1ab/0x410 [ 683.267231][T15128] ? hugetlb_vma_lock_alloc+0x19b/0x1c0 [ 683.273097][T15128] mmap_action_complete+0x480/0x590 [ 683.278325][T15128] ? __pfx_mmap_action_complete+0x10/0x10 [ 683.284208][T15128] ? mmap_action_prepare+0xd4/0x150 [ 683.289463][T15128] ? __compat_vma_mmap+0x137/0x260 [ 683.294686][T15128] compat_vma_mmap+0x243/0x2c0 [ 683.299490][T15128] ? __pfx_compat_vma_mmap+0x10/0x10 [ 683.305724][T15128] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 683.314013][T15128] ? __shm_open+0x340/0x3b0 [ 683.319092][T15128] ? __shm_open+0x351/0x3b0 [ 683.324766][T15128] shm_mmap+0xda/0x200 [ 683.329686][T15128] mmap_region+0x1ab2/0x2280 [ 683.334478][T15128] ? __pfx_mmap_region+0x10/0x10 [ 683.340255][T15128] ? unwind_next_frame+0xa6/0x2550 [ 683.346750][T15128] ? is_bpf_text_address+0x292/0x2b0 [ 683.353254][T15128] ? is_bpf_text_address+0x26/0x2b0 [ 683.358616][T15128] ? security_file_alloc+0x34/0x310 [ 683.364299][T15128] ? kasan_save_track+0x4f/0x80 [ 683.369351][T15128] ? kasan_save_track+0x3e/0x80 [ 683.375409][T15128] ? __kasan_slab_alloc+0x6c/0x80 [ 683.380826][T15128] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 683.387204][T15128] ? cap_mmap_addr+0xaf/0x100 [ 683.392289][T15128] ? bpf_lsm_mmap_addr+0x9/0x50 [ 683.397222][T15128] ? shmem_mapping+0xd/0x50 [ 683.402317][T15128] ? memfd_check_seals_mmap+0x165/0x200 [ 683.408027][T15128] do_mmap+0xc39/0x10c0 [ 683.412349][T15128] ? __pfx_do_mmap+0x10/0x10 [ 683.417133][T15128] ? __pfx_down_write_killable+0x10/0x10 [ 683.422989][T15128] ? apparmor_mmap_file+0x2da/0x3e0 [ 683.428260][T15128] do_shmat+0x8d8/0xc10 [ 683.436595][T15128] ? __pfx_do_shmat+0x10/0x10 [ 683.441454][T15128] ? __pfx_ksys_write+0x10/0x10 [ 683.446363][T15128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.452853][T15128] __x64_sys_shmat+0x9c/0xf0 [ 683.458024][T15128] do_syscall_64+0x15f/0xf80 [ 683.462712][T15128] ? trace_irq_disable+0x3b/0x140 [ 683.468034][T15128] ? clear_bhb_loop+0x40/0x90 [ 683.472836][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.478804][T15128] RIP: 0033:0x7f1d8db9c819 [ 683.483309][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.503200][T15128] RSP: 002b:00007f1d8ea24028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 683.511762][T15128] RAX: ffffffffffffffda RBX: 00007f1d8de15fa0 RCX: 00007f1d8db9c819 [ 683.519773][T15128] RDX: bbdccba4532b703b RSI: 0000200000000000 RDI: 0000000000000005 [ 683.527947][T15128] RBP: 00007f1d8ea24090 R08: 0000000000000000 R09: 0000000000000000 [ 683.536244][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.544293][T15128] R13: 00007f1d8de16038 R14: 00007f1d8de15fa0 R15: 00007f1d8df3fa48 [ 683.552399][T15128] [ 683.555456][T15128] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 683.562862][T15128] CPU: 1 UID: 0 PID: 15128 Comm: syz.0.2745 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.573947][T15128] Tainted: [L]=SOFTLOCKUP [ 683.578296][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.588588][T15128] Call Trace: [ 683.591929][T15128] [ 683.594882][T15128] vpanic+0x56c/0xa60 [ 683.598903][T15128] ? __pfx__printk+0x10/0x10 [ 683.603514][T15128] ? __pfx_vpanic+0x10/0x10 [ 683.608139][T15128] ? is_bpf_text_address+0x292/0x2b0 [ 683.613673][T15128] ? is_bpf_text_address+0x26/0x2b0 [ 683.618954][T15128] panic+0xc5/0xd0 [ 683.622759][T15128] ? __pfx_panic+0x10/0x10 [ 683.627250][T15128] __warn+0x315/0x4c0 [ 683.631315][T15128] ? vma_mark_detached+0x198/0x260 [ 683.636469][T15128] ? vma_mark_detached+0x198/0x260 [ 683.641652][T15128] __report_bug+0x29a/0x540 [ 683.646201][T15128] ? __lock_acquire+0x6b5/0x2cf0 [ 683.651243][T15128] ? vma_mark_detached+0x198/0x260 [ 683.656432][T15128] ? __pfx___report_bug+0x10/0x10 [ 683.661544][T15128] ? mas_start+0x481/0x560 [ 683.666017][T15128] ? mas_prealloc_calc+0x392/0x440 [ 683.671166][T15128] ? mas_store_gfp+0x784/0x850 [ 683.676090][T15128] ? vma_mark_detached+0x198/0x260 [ 683.681240][T15128] report_bug+0x16a/0x220 [ 683.685798][T15128] ? vma_mark_detached+0x198/0x260 [ 683.690964][T15128] ? vma_mark_detached+0x19a/0x260 [ 683.696096][T15128] handle_bug+0x9c/0x200 [ 683.700400][T15128] exc_invalid_op+0x1a/0x50 [ 683.704984][T15128] asm_exc_invalid_op+0x1a/0x20 [ 683.709880][T15128] RIP: 0010:vma_mark_detached+0x198/0x260 [ 683.715829][T15128] Code: 01 00 00 00 89 ee e8 57 5f a4 ff 85 ed 7e 4b e8 0e 5b a4 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 7e db f3 ff e8 f9 5a a4 ff 90 <0f> 0b 90 eb 95 e8 ee 5a a4 ff 90 0f 0b 90 e9 04 ff ff ff e8 e0 5a [ 683.735642][T15128] RSP: 0018:ffffc9000e316df0 EFLAGS: 00010293 [ 683.741734][T15128] RAX: ffffffff8220ba17 RBX: ffff888052ba53c0 RCX: ffff888031cfbd80 [ 683.749751][T15128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.757764][T15128] RBP: 0000000000000000 R08: ffff888052ba5443 R09: 1ffff1100a574a88 [ 683.766052][T15128] R10: dffffc0000000000 R11: ffffed100a574a89 R12: dffffc0000000000 [ 683.774085][T15128] R13: ffffc9000e317130 R14: ffff888052ba5440 R15: 0000000000000001 [ 683.782698][T15128] ? vma_mark_detached+0x197/0x260 [ 683.788204][T15128] vms_gather_munmap_vmas+0x6ab/0x1380 [ 683.793807][T15128] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 683.799729][T15128] ? __schedule+0x17ca/0x5680 [ 683.804464][T15128] ? panic_on_this_cpu+0x32/0x40 [ 683.809602][T15128] do_vmi_align_munmap+0x2b4/0x4b0 [ 683.814787][T15128] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 683.820797][T15128] do_vmi_munmap+0x252/0x2d0 [ 683.825489][T15128] do_munmap+0xf9/0x170 [ 683.829714][T15128] ? __pfx_do_munmap+0x10/0x10 [ 683.834541][T15128] ? up_write+0x1ab/0x410 [ 683.838980][T15128] ? hugetlb_vma_lock_alloc+0x19b/0x1c0 [ 683.844594][T15128] mmap_action_complete+0x480/0x590 [ 683.849867][T15128] ? __pfx_mmap_action_complete+0x10/0x10 [ 683.855642][T15128] ? mmap_action_prepare+0xd4/0x150 [ 683.860889][T15128] ? __compat_vma_mmap+0x137/0x260 [ 683.866166][T15128] compat_vma_mmap+0x243/0x2c0 [ 683.870998][T15128] ? __pfx_compat_vma_mmap+0x10/0x10 [ 683.876494][T15128] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 683.883455][T15128] ? __shm_open+0x340/0x3b0 [ 683.887994][T15128] ? __shm_open+0x351/0x3b0 [ 683.892536][T15128] shm_mmap+0xda/0x200 [ 683.896641][T15128] mmap_region+0x1ab2/0x2280 [ 683.901325][T15128] ? __pfx_mmap_region+0x10/0x10 [ 683.906320][T15128] ? unwind_next_frame+0xa6/0x2550 [ 683.911517][T15128] ? is_bpf_text_address+0x292/0x2b0 [ 683.916864][T15128] ? is_bpf_text_address+0x26/0x2b0 [ 683.922129][T15128] ? security_file_alloc+0x34/0x310 [ 683.927384][T15128] ? kasan_save_track+0x4f/0x80 [ 683.932341][T15128] ? kasan_save_track+0x3e/0x80 [ 683.937324][T15128] ? __kasan_slab_alloc+0x6c/0x80 [ 683.942689][T15128] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 683.948738][T15128] ? cap_mmap_addr+0xaf/0x100 [ 683.953482][T15128] ? bpf_lsm_mmap_addr+0x9/0x50 [ 683.958401][T15128] ? shmem_mapping+0xd/0x50 [ 683.962945][T15128] ? memfd_check_seals_mmap+0x165/0x200 [ 683.968858][T15128] do_mmap+0xc39/0x10c0 [ 683.973171][T15128] ? __pfx_do_mmap+0x10/0x10 [ 683.977987][T15128] ? __pfx_down_write_killable+0x10/0x10 [ 683.984056][T15128] ? apparmor_mmap_file+0x2da/0x3e0 [ 683.989299][T15128] do_shmat+0x8d8/0xc10 [ 683.993512][T15128] ? __pfx_do_shmat+0x10/0x10 [ 683.998248][T15128] ? __pfx_ksys_write+0x10/0x10 [ 684.003130][T15128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.009247][T15128] __x64_sys_shmat+0x9c/0xf0 [ 684.013990][T15128] do_syscall_64+0x15f/0xf80 [ 684.019689][T15128] ? trace_irq_disable+0x3b/0x140 [ 684.024882][T15128] ? clear_bhb_loop+0x40/0x90 [ 684.029600][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.035531][T15128] RIP: 0033:0x7f1d8db9c819 [ 684.039984][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.059617][T15128] RSP: 002b:00007f1d8ea24028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 684.068186][T15128] RAX: ffffffffffffffda RBX: 00007f1d8de15fa0 RCX: 00007f1d8db9c819 [ 684.076179][T15128] RDX: bbdccba4532b703b RSI: 0000200000000000 RDI: 0000000000000005 [ 684.084206][T15128] RBP: 00007f1d8ea24090 R08: 0000000000000000 R09: 0000000000000000 [ 684.092225][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.100352][T15128] R13: 00007f1d8de16038 R14: 00007f1d8de15fa0 R15: 00007f1d8df3fa48 [ 684.108546][T15128] [ 684.112228][T15128] Kernel Offset: disabled [ 684.116581][T15128] Rebooting in 86400 seconds..