last executing test programs:

8.04527869s ago: executing program 2 (id=1993):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x108843, 0x98)
signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffffe]}, 0x8)
bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x1000)
fcntl$setlease(r1, 0x400, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10103c, 0x140)
open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x20)
fcntl$setlease(r1, 0x400, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$RTC_UIE_ON(r2, 0x7003)
ioctl$RTC_AIE_ON(r2, 0x7001)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000140)={0x11, 0x27, 0x17, 0x12, 0x7, 0x3, 0x6, 0x8, 0x1})
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x401}, 0x1c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000380)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000800)=0x6, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000880)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000008c0)={0x48, 0x2, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000940)={0x28, 0x5, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
mkdir(&(0x7f00000009c0)='./file0\x00', 0x104)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)

7.363973169s ago: executing program 4 (id=1996):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x4000000, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x18, 0x0, 0x12})

6.900021082s ago: executing program 4 (id=1999):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000000c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0xd4ad, 0x10000, 0x0, 0x4e}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
io_uring_enter(r4, 0x1ffd, 0x9c3a, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000400)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000540)={0x0, 0xe6e6, 0x0, 0x3, 0x188}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x20, 0x2000, 0x10000004, 0x0, r7}, <r8=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c60, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x20, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367, 0x0, r4}}], 0x1, &(0x7f0000000840)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000008c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000900), 0x7, 0x2)
fcntl$getown(r8, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000940)={0x0, 0x30b5, 0x2000, 0x2, 0x377}, &(0x7f00000009c0), &(0x7f0000000a00)=<r10=>0x0, &(0x7f0000000a40)=<r11=>0x0)
syz_ublk_add_dev(r9, r1, r10, r11, &(0x7f0000000a80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b00)=@any_dev={0x2, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000b40)=<r12=>0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup(r13)
syz_ublk_setup_queues(r14, r12, &(0x7f0000000b80)={0x0, 0x20fb87, 0x401, 0x1, 0x12b}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x1000003, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x2, 0xbe}}], 0x1, &(0x7f0000000e80)={0x2e, 0x40, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0xaae, 0x0, 0x0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f00)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmsg$inet(r16, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000fc0), 0x200000, 0x0)
recvmmsg(r15, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=""/71, 0x47}, 0x4}], 0x1, 0x40000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r17 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00'})

6.352696446s ago: executing program 3 (id=2001):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x11, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001440), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000031c0)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0)

6.280316468s ago: executing program 2 (id=2002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@delchain={0x2c, 0x64, 0xf31, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x500)

5.981043104s ago: executing program 3 (id=2004):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000068a000002730000041f00181801000020696c2500000000002020207ba1d8ff000000007ba1000000000000040100000400ffffb702000008000000b70300000200000085000000d300000095"], &(0x7f0000000240)='GPL\x00', 0xa, 0xffa, &(0x7f0000000a40)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)

5.853589221s ago: executing program 3 (id=2006):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
pipe2(&(0x7f0000000800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
pipe2(&(0x7f0000000840)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r3, 0x0, 0xfffd, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8fe000000009408000000001700638af0ff00000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b7030000080000007a0000001900000095"], &(0x7f0000000b00)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000b40)=0x8, 0x4)
capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0xf0, 0x8, 0x7, 0xcac, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000400030006010000418e01400004fcff", 0x58}], 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x128, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="bb5bbedc986f238966f182dd77eb441e418304179130aacc8885c160dd1c5b8b892e730210a571739fdd5395e393717a75b42d4a6f14e99dec443eddf25b4b50ad5236c6bd0b89a66ba56e1fa8dd273b70169c8b67bdda19a942856091ebd171473ccf35079a4ef5e66b42154f3a8c69a14cee7a96621e8b74914b13ba8f02f7ea68725a1dfe444c0f3b440a4ee999cdd72d25a4bf3a6e9bc301762e208e7649b0e76bef4ea57b1655f79c2ca5739fc81327de0ca09ca2bc890c5a4cf4716b0841f08946232e8b2d61ecb8", @typed={0x4, 0x3}, @generic="ddfbfd2c6cc1755ec1482a7f6f8ed20bf4e86f2a50d93a3bbd618b34000b99a0d1b8134cd6cddfb766655898772b616700"]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x128}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, r8, 0x5, 0x20000, 0xffffffff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000d80)=@ctrl_frame=@ack={{}, {0x2}, @broadcast}, 0xa)
nanosleep(&(0x7f0000000540)={0x0, 0x4c4b40}, &(0x7f0000000580))
r11 = mq_open(&(0x7f0000000880)='asymmetric\x00', 0x40, 0x8, &(0x7f00000008c0)={0x9, 0x4, 0x38000, 0x7a6c})
mq_getsetattr(r11, &(0x7f0000000900)={0x7, 0x0, 0xd, 0x7}, &(0x7f0000000940))
syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
write$UHID_CREATE2(r2, &(0x7f0000000b80)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xbd, 0x41c, 0x7e575325, 0x4, 0x400, 0xf, "a9271850ff6889980c39e34bea7ec07c440b3c6219a42c6c672f2e27f7242f0a2ca96f1156d0d2e0528b8f5d78c7e6443c21d13ffea68b35c4c74ace97cd1254ffda0eb439795d7699416c8dcfe563460cfe7910f94646394181ea41553b29983f5ab619809b30dc42d5ec16526a051960d1396de28b03c735ff52d8d6dab183417a82d0b917a50b24def6a50bfdaa0a42642f6a247985c7737738278847c3a76b28a75d8515fcd7daf8a1168dbba2be5d0a1d1fe8605b2fd06f23f750"}}, 0x1d5)
r12 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r12, 0x1, 0x0)

5.729657182s ago: executing program 2 (id=2007):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = gettid()
timer_create(0x7, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180))
r2 = gettid()
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480))
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000001a80)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r3, &(0x7f0000001ac0)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
signalfd4(0xffffffffffffffff, &(0x7f0000001900)={[0xffeffffffffffffa]}, 0x8, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
pselect6(0x40, &(0x7f0000001a00)={0x0, 0xfffffffffffffdfc, 0xffffffffffffffff, 0x0, 0x800, 0xffffffff, 0x4, 0x400}, 0x0, &(0x7f0000001a40)={0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffb}, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)

5.52562189s ago: executing program 4 (id=2008):
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102000000085247110040f1d8e4c9d8c76a48000301f9f004080b0200010020010904000000010120000924010600080900050904010000010220000904010101010220000905010908000f0fa9082501833c07ae0009040200000102200009040201010102200009058209ff03047281082501020003ff7f"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000ec0)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000f40)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000f80)={0x0, 0xfffffcc7, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x1}, 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0)
syz_io_uring_setup(0x4c8b, 0x0, &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100))
recvfrom(r3, &(0x7f0000001140)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x100000, 0x3)
r5 = landlock_create_ruleset(&(0x7f0000001180)={0x1010, 0x3}, 0x30, 0x0)
landlock_restrict_self(r5, 0x8)
syz_usb_connect$printer(0x4, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x3, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x3, 0xab}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x14, 0xdc, 0x80}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0xd, 0x0, 0xf0, 0x10, 0x5}, 0x5, &(0x7f0000000e80)={0x5, 0xf, 0x5}})
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1c0000005e007f029e3b479bc33bf284bb9f726d8e47c8de23301cab", 0x1c}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000e40)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1, 0x2}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000140)="07654606c3baa3ace0911f1fe3c7370f01e414e388be3aebd5dd717219550d08992c2ae353cf0ea68d5e0127d5e761a5297af1e11c77f4cf194e9b2e748fe1ea06201def015f2b5bded9d5346affc6c8a342c8e1a3115a5d848533f197ab5063e7b794d05fd494ed2174a2b3", 0x6c}, {&(0x7f00000001c0)="8104c4a404ff5fa848981b24c374d0c5a84f7f7041d79a6c482ac2bd040831445c41fc0e31cf8a187ea163d895c418217cb6e5ba366c6fb775d515f45a5b7d41a5d83a915725ec7118796541a95df8736f054db7d1cf11e6da31766221bb3a4624ded236d2204da92dd11e8242fa47756287b9c6", 0x74}, {&(0x7f0000000240)="cec4ce81b7c75e02c83f9a9e1285e41b5bd77cc85824d661d37d670c6b259719a80638f95a5ff8142ba1fe79afc83e5b7ef6e1417bfb420a98171ab7a6f9b3531cefd5900f4495ca40cd16b57c8e114b6bff9081e8be34a1b0daf9998a7494c9ea66e7598eb018a0c76b66750e8bb1232bc429521c60065b70d5103d8269c1fb6a4a79c6f12a6302cd5c0992099164dec71c25fa2715f55b79dbe49ec64075ba3cab35a33b76b6569acb253d601c57fffff512ec70b145d9a8afaee1402c86be3c7e1ce1fb65c1573d769f46f2605e485e32e57746bd7e52c9b0069096f0b0dc617e2d6bf17d1ee00380e28c57846113f4060ae72958cedcd543", 0xfa}, {&(0x7f0000000340)="a39766", 0x3}, {&(0x7f0000000400)="21595b1bf328bc75eea1b9726b9218a1031b1da7d4e9e3a145e4418f7d1694abe935062d5f7440d61613a8391eaf07e8294c3917c5e1a13cf0f12483a7d067567ad36ef0e8ec28951b92e800e679ff83117a2e81a7ad55743e1c47a5a7b3e25415aff733ac17e63ed04bba9c5c661d4b9faad7f13b0dcfd1ad7bd24554cf0c55497200283d6b71b925210b28fce74027ea390b7f700a678933755c617384547a2722fcfd5600a255d67fe3b7698a55f9d0d1af069740a1eb432c627c825adecfe821dbb00ba24bf277c3e33de11cc00350d3921011bb252d34165135f23680a6872b0db2f3d4ce75ab9495505925f99a512e664de489", 0xf6}, {&(0x7f0000000500)="cd2e1fcd5b1fc9c7eb32891339164065d1d22dafe53035ceb61d743c70dfa130240e2929e1682d965e769ae97ac11d339d092d009690f9ec9392fea1cf7a8d8de8e2ba20f8e17e4b4a07745deac07472c31271", 0x53}, {&(0x7f0000000580)="86d9bdceb6654b74e25b61dae2ceaa47803ad9d93049e647f387c40163017e30aaad398558062a7ef3aaf5e2d444639f16a6ffa2ec1cdc0b488075ba2ec34bb04dd145b40ac1558528601ed55e44ebbcd0372fced6bf3e201c05c187a7cd7215d663e5569dad30f93cdf4a14ada1d071af8881ea50cd03a716facede85a8478431eb49273720e1b28975e084dfa72b9587f47b3694de6ec4b737c57a30fc0e5b7ace", 0xa2}, {&(0x7f0000000640)="2cceb96c3ceb0a508c045a9cd5c7e4bce8afae8f606f252e1ec36d0c3a79310c31c2e7f881915791692e021130347875b2b30f2594918256875cc6e07453dcc964998151b3244ee68e7fc3fceb6ab1730121b207e51249f5af2703c8a8a319e449a1415f77165a78", 0x68}, {&(0x7f00000006c0)="c3df34d9c1df22c0628415d44575e74c4b9b5881ad1a2d888cd8c8537f7a952919dfb366e5cd47019506522f01844b4bc862df1667cdbe18fc3aa4f861ff2aa12b213f359cf7e9eba1bb481ebbd8446fce4b65b1758315b25f394c672f5bafc62a865a1802b5946fca889ae67113bf1b11596072255d9dd45592cd133255b49dcda3eb7165a2929bd8aa800880c6e85280c000faa69f45f7f82d9327edb45189829cca9a7769cf248fec1fa374dbe2fe2a6e85ce7cfd899bf1bcc2eca889fd92562d16293dae7db55ebb", 0xca}], 0x9, &(0x7f0000000940)=[{0xf8, 0x0, 0xdd89, "c7748c07034e0c8106d09d330e2ce64974a70b881a152a51b896fc542205d414311750cef0cbb4da2c2d1d60e1a6304a430a5e31339979fca91631bec4f187923efe27de15e2a912f36a28db4bbc2ae1f554150a8f16ad72b107b547d58f7ee80c4ffa65ca97136a5473528d328bbf4c162436a1b17be8eff69ae76ccc4703962bed6520c5aaa82496fb5cca0939233ab068ae8b5a73630cb31f2d348719bf6b6f2ad4b2d6c210fc4c8f0269e655ca4cfcd67d05026e1257f533ba28bbfbf780df4d6c83b98aaf8ed6bae4c062fdbab53bf560ca27ec67f26848a7630b04da00cc45444c9187"}, {0xb0, 0x0, 0x1000, "4894ef0d2e7d9f544d491f61062a3f4044766344b126cd1a5823f8f58e1809b616c382e882d1ec2dea329f56a04b18f19a01ab6525f0dc0f0da046abe48275f94350dabedb2a44e5e75df00558633787dbac39604264cdf2715bc941e3588309e8c65aeebe893586dc5704a92dffe078c884d4d9077a815fe5b329674ebaa1c7ddbb76fd2e723a2d4f9d1493eca9a11ac51623016490afc2b1d6bd"}, {0xc0, 0x116, 0x5c00, "28e557e10276b92afed8a53a27c9f180662ec98d6cef6cf376207b39a127641a4d1b6620f9c2aefb011f3023ae47f4ed1da5c97644163bb792db5204f060045acf971f9b4a21e496a526f4ad4780f51ddd172d949fc071df04605eebe71e7e343954fa3264d3cd9d498cdad16911baefdcba39b1aa48c10b5fb6c47127c8c1f768f0edbbab31a4cb140b6a1e9b87a45302c3e68c6abb6575e3aa909376aa8b0a2ae19da04561a1cc4d6d1408406d2395"}, {0x80, 0x119, 0x3, "b22728127ca232aa851f3e4a7e75ce5d3ccb0b3c57798b13d514495520d30deeef32cc39f5e2074b6c23cfd3de2d8a66c8e24d665a6dfdf6391df3e5252347569ade8d58d8e294819a55e29bd6037ee9931573f593fa8c74a182c3f7cbcf358dee52acd8d1a7c83cbe4876"}, {0xc8, 0x113, 0x80, "9b1913a4e2dc59e9eccd0c6f03a1d75786fa29865b6125d8d042d6fa899221ff9a58b9faa023526530edff0eeb4592db226fe834ae809d1faac47f60aa4ba34cfaed295e44741897b6303189952d8e184073fffe82a5b7cbeea771e62704953cf8d21104d04cb70ec8c08c3601a9c274313dec4c460bb0ca785d3b8ef691d97bebb35d8eb742f6e2cfa3540c7c23ce8791804280367597c1c38fd6550e015d502e29f8f56ff6d02b5eee05e356cc3932dfcc41"}, {0x38, 0x104, 0x8, "b9eb65910cc834c44a72565970a4cf925e848abb68d0feb4a12478d91d5fcb6130f13d73"}, {0x110, 0x112, 0x7, "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"}], 0x4f8}, 0x4080)

4.438415039s ago: executing program 1 (id=2009):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x2d, &(0x7f0000000140)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7bfc, 0x1000001, 0x80010, 0xffffffffffffffff, 0x20000000)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x6416, 0x2000, 0x0, 0x275}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfcef, 0x400, 0x2, 0x274}, 0xffffffffffffffff, 0x0, 0x0, <r2=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x503f, 0x10000, 0x3, 0x3c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cd2, 0x2, 0x0, 0x26e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6b9, 0x40, 0x2, 0x32a}}], 0x4, &(0x7f00000016c0)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xb96c}, 0x0, 0x0, '\x00', {0x3, 0x11e, 0x0, &(0x7f00000006c0)=@buf_512="ff817eb0f2127be725bad2a23e871b54a428fec18853a5329d5e1cdfbfefbea3ee63470f4472cbe971e48c03659e1801f1427caa27e8fc532bb2d4074f3ff4a6f403f52cff9ee4c7318c018e601bb69a95f4e971664741da864961ac002f76c7bb009c56381cd1138ef2f3810f4516ac47868f59f131a600e4f33dd8855ec950e78de0152fcf6c0487b2eaa40937f1741d85f957b8d45770f67d990d354235ef1623f939f1068fe61e9ddaa942a1060d646898b2637b8a2588d70c5185458b1c761f26eb6cd12fba042ed76f7b80f5d90d24e5f16f9ac2e12fed42e5d43bcf98ead5ea47940c32e6b5985ddf0da388bdbba86a67c646696bc6c557ac8292cb301e03bf015cb24020ce7ba092ce901b91abe2b2f8f025767a7aa23678e2d6b932e4192336de90dc3238a6f18db59fe6230cfb7b8905f7398cf3cbe04eaf5fa33192e5a901c554600aea74bf297f5d29c98695f8378ae88e9be52f2d2e1c6753c622596fb089f7fc98000f519a6eda04c51ece4feea4eb2b0719318ffe750c4715dfe2b106be7d6ac7dd752b230fd82b23c1ba59042869c20df87660ee5aeb8db4b21918f2c99a5b33b2a5164bd840efc2bac9ceb2048fc897869e08e0e3cfe91319d4c083379669f3c1931fbdf262de1a0406db3ae82b6ad865bb83c1c451c5fe48e6c36378cddd1b656a4afa0e1afe44942674c56fd846f48e01f6124cd25832"}}, &(0x7f0000001740))
syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000018c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x4b, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0xef, '\x00', &(0x7f0000001880)={0x401, 0x3, 0xd2, &(0x7f0000001780)="d5b5d77a804dac8104c65ec1ebe03eec294b0546eb4a05d0b355b8d26cb637bbf7ef211af7032f2999f71cef10892c7ef22965de946070d59ceba534f49d8d0d38575b8cd9efbad09679b27d7b63037f2026b6e659a20c30f49af904c10a118523a89b8a7f3a0b74e17c1352177b4e08abc2572007cfd5a2568a79201826fa7c3199a92eb2b5de974ee6fe6ba41bbbb2c6a7e51b0b0a5530f28b50608df8b5c6e283423e7c37cf3ed398ff787f3d440a14688d5f65ccffbe659168ab38b453dfbc9b08264fe5972b3b4e958421385ff9a29f", 0x9}, 0xb02}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)

4.301776095s ago: executing program 1 (id=2010):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) (fail_nth: 1)

4.279960613s ago: executing program 0 (id=2011):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair(0x1a, 0x2, 0xdc, 0x0)
close(r8)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x1f00, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x18020000, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}})
write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x2b, 'memory'}]}, 0x8)

3.953788714s ago: executing program 1 (id=2012):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001940), 0x4)
sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000019c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001a80)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4000)

3.886344242s ago: executing program 3 (id=2013):
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000180)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d414000000000000002900000002000000", 0xfe60)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1d1603, 0x0)

3.349185662s ago: executing program 1 (id=2014):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000020", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.920595312s ago: executing program 1 (id=2015):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0)
r0 = syz_ublk_setup_io_uring(0x35b, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x300, 0x0, 0x1f3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x2000000000000000, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

2.743630221s ago: executing program 0 (id=2016):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$notify(r1, 0x402, 0x8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) (fail_nth: 3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00'})

2.444864207s ago: executing program 0 (id=2017):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x8, 0x7b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001380], 0x0, 0x0, &(0x7f0000001380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x7, 0x8809, 'ip6gretap0\x00', 'ipvlan0\x00', 'veth0_macvtap\x00', 'bond_slave_1\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0x45764352def57fcb, 0x0, 0xff], 0x0, 0xb8, 0xb8, 0xe8, [@limit={{'limit\x00', 0x0, 0x20}, {{0x0, 0x10000, 0x9, 0x8, 0xffff7fff, 0x80000000}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}, {0x3, 0x1, 0x0, 'veth0_vlan\x00', 'rose0\x00', 'batadv_slave_0\x00', 'wlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x8, 0x88f8, 'hsr0\x00', 'pimreg0\x00', 'team0\x00', 'ip6erspan0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, {0x4}}}}}, {0x9, 0x12, 0x9, 'lo\x00', 'ip6gretap0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0x1a0, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x13, 'system_u:object_r:dpkg_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x11, 0x2, 0x62fd, 'erspan0\x00', 'veth0_virt_wifi\x00', 'ipvlan1\x00', 'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x5, "78de006c3a2cd8556fce57b1930f26af6db62c936ed4f9a48183a4997729", 0x1}}}}, {0x3, 0x0, 0x3, 'wg2\x00', 'vlan1\x00', 'team_slave_0\x00', 'veth1_macvtap\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz1\x00', {0x8}}}}}]}, {0x0, '\x00', 0x6, 0xfffffffffffffffc, 0x2, [{0x5, 0x28, 0x1b, 'tunl0\x00', 'veth0_to_batadv\x00', 'veth1_to_batadv\x00', 'veth1_to_bond\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0x24f0a0e1b0f92d0c], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2c58}}}}, {0x3, 0x9, 0x6003, 'macsec0\x00', 'veth1_vlan\x00', 'veth1_to_batadv\x00', 'veth0_macvtap\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0x3b2b057f90e9a531, 0xff], @empty, [0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x200, 0xfff6, 0xa, 0x1, 0x0, "2a9f4b8ef6b7d1d98df033b36d2de329baefe1fda200246b03109f1982baaf1dbe6f20af9722c8a8eb499276b00be300e4cbc039e0f8ef471ab89367f1868ae3"}}}}]}]}, 0x828) (fail_nth: 31)

2.07501684s ago: executing program 0 (id=2018):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_create_resource$binfmt(&(0x7f0000001640)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="fc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
close(r2)
r4 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0)
write(r4, &(0x7f0000001900)="01", 0x1)
close(r4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x154}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001b80)={0x1, &(0x7f0000001bc0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000001c40)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @empty, 0x10}}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000001c80)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40004, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81f}, {0x2, 0xfff1, 0xc60, @empty, 0x100}, 0xffffffffffffffff, 0x9dff7ffc}}, 0x48)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000001d40)=0x2, 0x4)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000001d80)=0x1, 0xa)
connect$inet(r7, &(0x7f0000001dc0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
sendto(r7, &(0x7f0000001e00)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0)
close(r6)
fchmodat(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x1ff)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000015c0)=@filter={'filter\x00', 0xe, 0x3, 0xd50, [0x0, 0x200000000380, 0x200000000d80, 0x2000000010a0], 0x0, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x5, 0x6006, 'syz_tun\x00', 'veth1_macvtap\x00', 'bond_slave_1\x00', 'netdevsim0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff], @empty, [0x80, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x970, 0x9a0, 0x9d0, [@among={{'among\x00', 0x0, 0x898}, {{@offset=0xc, @offset=0x474, 0x2, {[0x80, 0x5, 0x7, 0x15a, 0x8001, 0x28, 0x1, 0x3, 0x6, 0x91, 0x7, 0x2, 0x149ffd6c, 0x4, 0x3, 0x8, 0x9, 0xa073, 0xfff, 0x9, 0xa, 0x9, 0x9, 0x4, 0x0, 0x3, 0x3, 0x7f, 0xd, 0x81c3, 0x4, 0x578, 0x1, 0x6, 0x7ff, 0x8, 0x6, 0x66, 0x3, 0x8, 0x4, 0x3, 0x8003, 0xfffffffc, 0x4, 0x6, 0x0, 0x1, 0x800, 0x12000, 0x0, 0x8, 0x25, 0xb, 0x9, 0x6, 0x3af3, 0x2, 0x8, 0x1, 0x9, 0xfffffff9, 0x8f8, 0x8001, 0xbd2, 0x6, 0x5, 0x7, 0x0, 0x2, 0x4, 0x6, 0x507b977c, 0x6, 0x8, 0x3, 0xfd, 0x83, 0x9, 0x0, 0x7, 0x8, 0x1, 0xfffffff7, 0xd, 0x40, 0x9, 0xade6, 0xfffffff9, 0x7, 0x10, 0x7, 0x4, 0xd, 0x401, 0x3, 0xfff, 0x9, 0x100, 0xffffffff, 0x9, 0xfffffff7, 0x80000000, 0xffffff80, 0x2, 0xa5b0, 0x8, 0xfff, 0xff, 0x9, 0xda, 0x5, 0x9, 0x8, 0x4, 0x8, 0x3, 0x5, 0x3, 0x5, 0x3, 0x9, 0x0, 0x4, 0x7f, 0x4c, 0x4, 0x2, 0x0, 0x3, 0x7, 0x7, 0x0, 0x8, 0x9, 0x4, 0x8, 0xc, 0x0, 0xd22, 0x7, 0x4, 0x7, 0x1, 0xfff, 0x9, 0x553c13c2, 0x3, 0x4, 0x6, 0x4, 0x401, 0x3ff, 0x3, 0x1, 0x1, 0x4, 0x4, 0x5d8, 0x5, 0xa, 0x401, 0x6, 0x9, 0x2, 0xfffffffb, 0xd, 0x3, 0x80000000, 0x4, 0x0, 0x3ff, 0xe, 0x8001, 0x0, 0x8, 0x9, 0x7, 0x8001, 0x1, 0x5, 0x2, 0x7ff, 0xb, 0x2, 0x5, 0x500000, 0x0, 0x0, 0x5, 0x5, 0x6, 0x7, 0x5, 0x8000, 0x1000, 0x6, 0xa65d, 0x7ff, 0x2, 0x321, 0x9, 0x5, 0x7, 0x5, 0x2000, 0x7, 0x1, 0x43b, 0x7, 0xfffffeff, 0x0, 0x0, 0x7, 0x8001, 0x8, 0x6, 0x6, 0x0, 0xc, 0x80000001, 0x0, 0x2, 0xc, 0x634, 0x100, 0x5, 0x3, 0xa625, 0x3, 0x4, 0x3, 0xffffffff, 0x1, 0x6, 0x2, 0x67800, 0x1, 0x9, 0x10000, 0x10, 0xa, 0x6, 0x9, 0x1, 0x8, 0xc, 0x0, 0x100, 0x40, 0x4, 0x4, 0x7, 0xffffffff, 0x0, 0x7, 0x6], 0x8, [{[0x3ff, 0xea9c], @private=0xa010101}, {[0x2, 0x1], @multicast1}, {[0x7ff, 0x6ed7], @dev={0xac, 0x14, 0x14, 0x32}}, {[0xffff, 0x3], @dev={0xac, 0x14, 0x14, 0x14}}, {[0x1, 0x7], @remote}, {[0x6, 0x6], @multicast1}, {[0x4, 0x7], @private=0xa010101}, {[0x200, 0xd], @empty}]}, {[0x4, 0x6, 0x7, 0xa906, 0x6, 0xfffffffb, 0xc967, 0x2, 0x3, 0x9, 0x3, 0xc0, 0x7e1, 0x30, 0x2, 0x4, 0x5, 0x4, 0x7, 0x1, 0x5, 0x7, 0x3ff, 0x7, 0x0, 0x5, 0x3, 0x9, 0x7, 0x7fff, 0x400, 0x2, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x8, 0x4, 0x1, 0x5, 0x3, 0x2, 0x12ed, 0x709, 0xfffffe00, 0x1, 0x0, 0x2, 0xcc, 0xffffffff, 0x80000001, 0x3, 0x1ff, 0x800, 0x200, 0x3, 0x5, 0x4678, 0xfff, 0x7, 0xe61a, 0x0, 0x2, 0x5, 0x4, 0x10001, 0x8001, 0x4c02, 0x1000, 0xff, 0x3, 0x8000, 0x5, 0x1, 0xcb1, 0x9, 0x2, 0x1000, 0x1, 0x5, 0x4, 0x2, 0x3ff, 0xffffffff, 0x6, 0xfffffff6, 0x7, 0x1, 0x4, 0x4, 0x7, 0x6, 0x4, 0x7f0, 0x0, 0x9, 0x0, 0x9, 0x9c2e, 0x9, 0x41, 0x9, 0x9, 0x5, 0xfffffffd, 0x9, 0x8001, 0x21c, 0xaf05, 0x3a3, 0x7f, 0x80000001, 0x6, 0x0, 0xffffffa4, 0x7, 0x9, 0x800, 0x1, 0xff, 0x8000, 0x6, 0x2, 0x0, 0xffff, 0x0, 0x5, 0xfffffffe, 0x2, 0x8, 0xfff, 0x4, 0x6, 0x7, 0x7fffffff, 0xd, 0x8, 0xb, 0x5, 0x3, 0xf, 0x9, 0x8, 0x5, 0xb, 0x1ff, 0xfff, 0x9, 0x6, 0x800401, 0x1, 0x3, 0x5, 0xe, 0x8001, 0x8, 0xfffffffe, 0x6, 0x10001, 0x4, 0x8, 0x1, 0x0, 0x4, 0xc4, 0x2, 0x7, 0x3, 0xf, 0xedb, 0x400, 0x42e9, 0x0, 0x6, 0xf4b2, 0x3, 0x0, 0x5, 0xff, 0x1, 0xfffffff9, 0x0, 0x0, 0x9, 0x28, 0xa68d, 0x1, 0x1, 0x401, 0xfffffff2, 0x7f, 0x401, 0x5, 0x7, 0x0, 0x2, 0x1, 0x15, 0xfffffffd, 0x9, 0x15, 0x8, 0x80000001, 0x1, 0x9, 0x2, 0xc6b0, 0x6, 0xc, 0x2, 0x7, 0x2, 0x671b, 0x8e2, 0x1, 0xfffffffe, 0xfffffffa, 0x101, 0x2, 0x3, 0xffff, 0x800, 0x4, 0x1, 0x81, 0x40000000, 0x2e6, 0x1, 0x8, 0x4, 0x177c5c22, 0x8, 0x800, 0xc, 0x80000001, 0x0, 0x4a60, 0x8, 0x0, 0x2, 0x90, 0x1, 0x1, 0xd4, 0xd, 0x0, 0x7fff, 0xfffffffa, 0x662, 0x7, 0x81, 0x8, 0x493, 0x4, 0x8, 0x6], 0x2, [{[0x80000000, 0x9], @multicast1}, {[0x1fbd, 0x5], @dev={0xac, 0x14, 0x14, 0xd}}]}}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x8, 0x9, 0x0, 0x3}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x6002, 'ip6tnl0\x00', 'veth1_vlan\x00', 'batadv_slave_1\x00', 'dvmrp1\x00', @random="49c7910c4c16", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @random="6d38e8ad9799", [0xff, 0xff, 0x1fe, 0x9c8e3b9eb298d5f5, 0x0, 0xff], 0x0, 0x70, 0xf0, 0x140, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}, @common=@log={'log\x00', 0x28, {{0x2e, "c00b4b93c51feb49edd362e366e3ae040acf490ba5b34a993eae21733a1d", 0x6}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xb84, 'syz1\x00', {0x3}}}}}, {0x9, 0x50, 0x6007, 'tunl0\x00', 'macvlan0\x00', 'veth1_virt_wifi\x00', 'bridge0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0xd0, 0x178, 0x1b0, [@arp={{'arp\x00', 0x0, 0x38}, {{0x321, 0x2, 0x8, @empty, 0xff0000ff, @remote, 0xff, @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @random="cd11155fdbfb", [0xff, 0x0, 0x0, 0xff], 0x24, 0x48}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@nflog={'nflog\x00', 0x50, {{0xfffffc00, 0x8, 0x7, 0x0, 0x0, "88e77732270e6d47535f98f28edfa2fdf6b210942e8d740e51a1595f4eb8e9cad40b83cd84c46d21e5f2a50412c2ecb83dc04c6d5b7a3ac1eed9df61d3d93b81"}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0xdc8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000001540)={{r9, &(0x7f0000000000)='(^\x00', 0x103000, &(0x7f0000000040)={@_ha_fsid={[0x4, 0xfffffffa]}, {0x5, 0x5, 0x1, 0xffffffffffffff1e}}, 0x80000001, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x4}, 0x6, &(0x7f0000001480)=[{0x1, 0x7, &(0x7f0000000100)='\x00', &(0x7f0000000140)="2a14bbae65d1ea23980b7b31efcd2988729a5ec11cdf95c1d50b9d5a4f5162f3b68521f3b4005d788c93d27fba95ef2744e8aeb6b30931c04699cd5e6256c12fd117cf966c74ead1f3a58e29576da4146f41eb960cdb1f069e0b1445a706d9753efaa6ec584a95c2bdcf56102ca802f6c3c2b4d2c7e765afa3c197a0a0259985c12bdd03fb958150816a3b57fd7cecddd21e79c2cb8bb68a4e44fa22a9bce2af06ad144d29fc5c5bcfcd2d0e770f62d65ae42f84af02a69d6fca0b50679cf46ae9b31fd6646c9b0cef33d86d022db5aea47cecf7efb7a7b193e4b48a8c293a", 0xdf, 0x1a}, {0x0, 0x5, &(0x7f0000000240)='nflog\x00', &(0x7f0000000280)="cd70b281722983ec666230769f9446cc5c9448fec32ea77489af92b000f1b59d492c2f89037feb2cb0b576c64f44e7522230b67b994981c3685f0a60c5cc2705aa0c75000000000000000774c023f82437c6a3ec5288e6875566d8c3e4934c25a39622ab807b9438610f25401e9904b855cd91278e5e01c1c13e602af348272b3fea8107429f2105a48dbaf30514c3c6aa83e72c", 0x94, 0x10}, {0x2, 0x8, &(0x7f0000000340)='veth1_vlan\x00', &(0x7f0000001180)="0917c74a815f5cf75130da1441127c35561be3f5e8acc0b397f821ee85cf3c6a6e4a24144e522f1604ae550b610534d4899c3a4a35207c2517a5aa4045bf629735df3aed379adce94586a087a5ab598173923f5446e43b87cc4d5cf4d1c7c0973183e0b98c132d0f681cdd44a5aebb285e8f979064334fc1ccc02b0c01bf2c873abe5cae97e392406bf0c866901246360c7d77042cdc59b751be19e414d40a0a3c2911fb4684", 0xa6, 0x10}, {0x1, 0x1e7, &(0x7f0000001240)='%}!:\xb3--\x00', &(0x7f0000001280)="114f8ad94982928506eb949440f9f5191a8d10d9f69e8a3803e6bad303ef10b434e6db9641ef5c162e39f968d3e94607d5dad5cddf686331e345152b0df18738d2364bd7c76c8ba83ef32672f42190afb7775aacf4b56d35eb0d30e2c4b573ecb4d72f8c5806f6868556f3d89247b10c5af8361f6c0bd075ece579da5c96f37c8cf0f29aedb1a107b55041bf4ecc554612e2b17de1a4d46e5d07fb8f3120290798f9", 0xa2, 0x8}, {0x3, 0xd13e, &(0x7f0000001340)='veth1_macvtap\x00', &(0x7f0000001380)="de1b1e72e73bc01ef41b1db91ea245dc6df510f383b19bbf95221406446dda4c7e1d344ccef3de51235d07bb8dc0f370be851d9e64193824dce74cd02d8ea0fe8609d1f2f43cf3ef1a9c8fea0350e0b2f7b917ef9aa3b19ad3c8cb2323ca45fbe5114c596168fe", 0x67}, {0x3, 0xffff, &(0x7f0000001400)='arp\x00', &(0x7f0000001440)="ac771da13a2d42e5fdb58f604197cdd954fa7d6cf08ae9dfc61ca624514d10213d8a8b1969effbeaa900b465d21e14d9d7e2b645", 0x34}]})

2.034858031s ago: executing program 4 (id=2019):
r0 = syz_io_uring_setup(0x7075, &(0x7f00000032c0)={0x0, 0xeea3, 0x10000, 0x2, 0x11c}, &(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000003600)={0x9, 0xffffffffffffffff, 0x50, {0x5, 0x101}, 0xfd}, 0x1)

1.700771737s ago: executing program 1 (id=2020):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014c"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000a40)=ANY=[@ANYBLOB="201885000000aa82f728340b548932e94d221f4038cb90d8914ca213da8ea6e70e6590e437e1f7ddc17e1446dd934f0678c146dbf845567f88bdfb46a89e3ac9fd650470ea4aa416c103b2ed19bf13d458b79c00ca199fc1d0025324fe8fec7aa7fcf9b079c831d1b13a655316dab0e37f39a1b4ffb8748fc0e569cbe0a41f013dcb5d737cfb84c3c97ed1bf23c979354de31f6f1b6f060000000000000001b852f2c9869d120deb5759bb3e75c065a1c6e67659aa55d541479816012dfbf9f4e3f235903d80b5dfc7190b41f60692faaf294f399895c892b11ba3f777828ef97ce8b95745691691350fa402c00d72ca73f7b5bd3aa7a535c7da5abfe37ce4d1416587fbba95f70d2afd7d4f11e5e22ff55174df445c80f63aea8a85c8657313d0dda9d45014298aba50dfbda14dfdf884eb0ffe785ecd4f546900b00e56ebb333042788ba7f8eea0a4803e52cbe4a99ce3ec98b27a9f588cb5f1eb54dc1b29ce818e2bc04024cabe08e198a95012652121f6a4a172f2547f6ac17d68931f69222605e56a016869994abea1e2c1291a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080051)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x10000001, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
r15 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000000)="0fc736420f79b3d02edc93410f01c966b884000f00d066bad004b800800000ef3e410f08410f01cb48b800000000000001000f23d00f21f8350000000d0f23f86766450f38818a0700000066baf80cb8a620328bef66bafc0c66ed", 0x5b}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xffff1000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x1, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x80, 0xd6, '\x00', 0x67}, {0x0, 0x5, 0x6, '\x00', 0xf}, {0x5, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd1, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0x4, '\x00', 0x8}, {0xd7, 0xd, 0xcc, '\x00', 0xff}, {0x0, 0x28, 0x80, '\x00', 0x9c}, {0xff, 0x1, 0xfe, '\x00', 0x2c}, {0xfe, 0x47, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x3}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x5}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x47, '\x00', 0xc2}, {0x8, 0x80, 0xf, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x66}, {0x1, 0x6, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x2}]}})

1.429006571s ago: executing program 2 (id=2021):
unshare(0x22020600)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x18, 0x4)
r0 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000002a40)={0x10, 0x0, 0x25dfdbfb}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000002940)={{<r2=>r1, &(0x7f0000000040)='\x00', 0x101000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0xfffffffd]}, {0x10, 0x400, 0xffff, 0x9}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}, 0x9, &(0x7f0000002800)=[{0x3, 0x3, &(0x7f0000000140)='^%*&\x9c\x00', &(0x7f0000000180)="96f061838c2158ed2c06f4b517f0620b1d176dde7ac6d4684d213b4369c34af604f89d65c8a0a0a972cc30b44fe29e2640e9ded6881506dca7e98075636f597539326a5f5be7ff10753db463c37b5e970a831c8376d4f49a06237bb85cd36cc0", 0x60, 0x10}, {0x1, 0x2, &(0x7f0000000200)='$\x00', &(0x7f0000000240)="84d05bb5c40964209d63b10fffd13e27d3d11d75986511860c6b15a83cd0f3ccd1663799d8ea309074d8eed4800ae682f242469c8e5c6c00b9fd57541cc64721e24ba57ad7b80b966d93f40c7c3fce0ed83bec50db741b0ce27e06f0c83ef9bd98d1f1f03c8f98c281f285a163f62d8cbbea8e6bd2d09ea3ff1de5871c7beb65a3b4d401316bc34599e1e197818cd219c39136b9c5775a5ab6fd9ddccc7929dcd2390f0ed9f8fc31e61fdd2e0f12039b44517f1e7b910866adf622ab27f6cb96a3e01123069214dfd122193782a0dbd2adf33e3fa6255a7fd6f8040e59c3bc693529929eb09d79bb2cbb8ba749ac8d4d64fc7b246167e243", 0xf8, 0x2}, {0x2, 0x632f, &(0x7f0000000340)='\x00', &(0x7f0000000380)="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", 0x1000, 0x10}, {0x3, 0x1, &(0x7f0000001380)='\'\x00', &(0x7f00000013c0)="0f2ba673859d3f7153b4552ca980a112ca9c4c4c1ba31a6648c7a46e540503eaa36e9f1274004e75f6e997e83b9f757a4e12a7c32dff5792feedae7b242954ca20d2d8913a99232d2426", 0x4a, 0x2a}, {0x2, 0x1, &(0x7f0000001440)='\x00', &(0x7f0000001480)="bfc3c3b9d62bbe12208062d9c3465f", 0xf, 0x12}, {0x1, 0x4, &(0x7f00000014c0)='>(+^\x00', &(0x7f0000001500)="4561bd5329824295ccbfade75d8361c82858325fe25f3cf6ad8c6e86", 0x1c}, {0x2, 0x3, &(0x7f0000001540)='\'+/%\x00', &(0x7f0000001580)="f458d43dd1269ffa3deb77ac9e8e426d783bbcb13d09d1a7a0954f45712150548818cc29573d8c5179147dd4633e7497cc06c226e8130a894da79bb4ba02f5a7897d93aa31c78be2deba3609cd846099260cb7464cd7cde47d0f31fa73d506c939f76a623718a97f39262c90fcf510a1b2b97674443fb458262e810d53d5254a4d6d4c60e75bb7a1d51ca6f808c76074405b4613a2bb7b3c37eb4ba6b0bde79f27f3505ec2244304ce58697f358352fa7fe371369da76a551cddfd8d082d8a7b2fbbef38858fc47bc171d4a641", 0xcd, 0x20}, {0x2, 0xb, &(0x7f0000001680)='#+*&$@\x00', &(0x7f00000016c0)="8838e5e4929c4c4969e2a06d3d1248dd161d62a355f97041eb542ddcb71bb29630fa49780fdeab4204c4bc168262b23f6104466f1f1e761eea12a86cd2d44386fa5ce11cbb7d8e7d18ef9066cc0580ea09c46b1ad7fc11421d69cb459cbc820e4f58ddf992a39a39fa483276946e40c9c376e527067c8a9d4aed20ebf416d7315d172490611160a44f7332a4cc8ffe6751d5f493f014969e02c2790968fcca6c7169f214ace2c6bc07ffb568a7be65e0a68b5e1ab00c5c96108b399a619abe53e1ff2cad34dbe4f96d92ec5ac7fc3475eeb58fc8a251", 0xd6, 0xa9aade9f9bad3a68}, {0x1, 0x1cb, &(0x7f00000017c0)='/:[!$\xb9\xba\x10#{/[]\\\x00', &(0x7f0000001800)="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", 0x1000, 0x32}]})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000029c0), &(0x7f0000002a00)=0x4)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x1e0)

1.212455651s ago: executing program 0 (id=2022):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async, rerun: 64)
socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
r1 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) (async)
r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_open_dev$loop(&(0x7f0000000200), 0xffff, 0x14f600) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f00000002c0), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000300)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) (async, rerun: 64)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x24058041) (async)
r5 = io_uring_setup(0x7, &(0x7f0000000500)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000580)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl(r2, 0xc4c85513, &(0x7f0000000200)) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x5, 0xfff1}, {0x10, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x3}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x20008880}, 0x0)

974.171643ms ago: executing program 4 (id=2023):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000000000000000000ffff0002", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c000280060010"], 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ftruncate(0xffffffffffffffff, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x0, 0x62400)
r1 = fsopen(&(0x7f0000000640)='ext3\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000680)='test_dummy_encryption', &(0x7f00000006c0)='v1\xa1\xb5\xd2\xd4\x93\x86\xe3\xd5\t\x85|v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xea\xff\xff\xe3\x00\x00\x00\x00\xd3\xbb\xeb9L\x03\x0e\xdc}U\x8c\xdd\n\xaaq\x1d\x9em_\x97\xccN\x00\x00\x00\x00\x00\xb5\\\x9bF\xca\x18$L\x03!mm\fq\x91\xcd\x8etu\xa1^ds\x0f\xd3\x8dI>\x11-\xbe\x89y\xd2\x8dm&\xd6[\xf3\xe09f\xb6\xc9I\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00', 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000740)={0x5, {"cf8aa115d0d8d0f21c00", "af86a7d62fdce0b68c2a7502b5b00c9f", "fa2896391039e5ef6f8200"}, 0xe, 0x4})
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xa60)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
semop(0x0, &(0x7f0000000780)=[{0x2, 0x7f, 0x1800}], 0x1f4)
sched_setattr(0x0, &(0x7f00000007c0)={0x38, 0x0, 0x21, 0x3ff, 0x7, 0x18, 0x400, 0x1, 0x2, 0x8}, 0x0)
memfd_create(&(0x7f0000000800)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
mprotect(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0)
userfaultfd(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x101, 0x0)

745.089819ms ago: executing program 2 (id=2024):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x2272, 0x71, 0x8409, 0xb, 0x7f, 0x9, 0x5, 0x4, 0x2}, &(0x7f0000000080)=0x20)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x22}], 0x1, 0x29, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r4, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000140)=0x1)

506.18858ms ago: executing program 3 (id=2025):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="ebe3a0e9796cfd164781f4a75803e2be", 0x10}], 0x1, 0x0, 0x0, 0x20048044}], 0x1, 0x4048854)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x8d, &(0x7f0000000440)=[{&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/194, 0xc2}], 0x2}, 0x0)

443.577813ms ago: executing program 2 (id=2026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a3000000000186df2e69b6bc2b8830900030073797a300000000058000000060a010400000000000000000500000008000bc000000000300004802c0001800b00010074756e6e656c00001c0002800800014000000001080002400000000908000340000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x487, 0x0, 0x20020165}]})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0xf0, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @remote, 0xff, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000280)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13d", 0xb4, 0xfffffffffffffffd)
r3 = socket(0xe, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a00"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4}]})
ioctl$TUNGETVNETLE(r5, 0x40107446, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000a40)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000a80)={"2486910284ed923431d4c5d5fbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x300})
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='\x00', 0x89901)
fchdir(r9)
close(r9)
socket(0x1e, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x800, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x10)

317.148057ms ago: executing program 3 (id=2027):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x3, 0x0, 0x81, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r1, 0x0, 0x20000005)
openat$nullb(0xffffffffffffff9c, 0x0, 0x214000, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000005c0)={0x0})
ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000600)={&(0x7f0000000640)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f0584", 0x27})
syz_open_procfs(r2, &(0x7f0000000680)='personality\x00')
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20046f39, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10)
write(r3, &(0x7f0000000200)="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", 0x2e7)
sendto$inet(r3, &(0x7f0000000500)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0x98, 0x10048cc5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x288, 0x43, 0xa0, 0x0, 0x98, 0x3d0, 0x178, 0x178, 0x3d0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x3, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x3, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x5, 0x7, 0x80000000, 'syz0\x00', 'syz0\x00', {0xff80}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)

231.877171ms ago: executing program 0 (id=2028):
set_mempolicy(0x4005, 0x0, 0x9)
pipe(0x0)
fanotify_init(0x200, 0x0)
r0 = socket(0x28, 0x80005, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x10000001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000680001040000000000000000020000000000000008", @ANYRES32=0x1, @ANYBLOB="db6f72ce6a6a6b807f4f39bb92edf82d0fb32a317cf2bc351f4ac2df210e6545face248855834522ccaa942934a0919684943484a4cd9febfec0b78590501127f0ba884ad4ba062b2e6810920ecc9a49f6c210d80c45d4860346cdb563324a19d38219664a"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x50}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv4_newnexthop={0x28, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) (fail_nth: 7)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a000b0049935ade4a460c89b6ec0cff3959547f509058ba86c902004a32000407160012000a0000000000e000e218d1dd3b6ed538f25232504b00001df6c72ab7b5ca47f829db56fae0d0ed9f642ba3ad", 0x25, 0x4048845, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x6, 0x6a, 0x9, 0x5, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_address={0x3, 0x7, 0x32, 0x20, 0x0, @in={0x2, 0x4a22, @private=0xa010105}}]}, 0x28}}, 0x40000)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = syz_usb_connect$lan78xx(0x2, 0x0, 0x0, 0x0)
syz_usb_disconnect(r4)

0s ago: executing program 4 (id=2029):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x111, 0x2}}, 0x20)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0))
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r3 = getpid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = syz_pidfd_open(r3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x2000114)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x48100)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000600)={0x2000, 0x101, 0x0, 'queue0\x00'})
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000006c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a408000000000031a00030014000200fc0200000000000000000800000000"], 0x44}}, 0x40000)
sendmsg$nl_route(r8, 0x0, 0x0)
r9 = syz_open_dev$vim2m(0x0, 0x1, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f0000000800)=@multiplanar_userptr={0x1, 0x1, 0x4, 0x4, 0x21, {}, {0x1, 0xc, 0xb, 0x1, 0x9, 0x4, "fe3a8c75"}, 0x2b1, 0x2, {0x0}, 0x8})
write$sndseq(r7, &(0x7f0000000880)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x1f00]}}], 0xffc8)
syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000a00)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r4, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):


[  421.904256][ T5678] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  421.904256][ T5678]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  421.995608][   T31] audit: type=1326 audit(1791956711.321:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  421.995682][   T31] audit: type=1326 audit(1791956711.321:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  421.995720][   T31] audit: type=1326 audit(1791956711.321:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  421.995757][   T31] audit: type=1326 audit(1791956711.321:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  421.998799][   T31] audit: type=1326 audit(1791956711.321:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  422.007411][   T31] audit: type=1326 audit(1791956711.331:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  422.021142][   T31] audit: type=1326 audit(1791956711.351:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  422.021410][   T31] audit: type=1326 audit(1791956711.351:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  422.041730][   T31] audit: type=1326 audit(1791956711.351:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x7ffc0000
[  422.046261][  T192] usb 5-1: Using ep0 maxpacket: 16
[  422.096563][  T192] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  422.146382][  T192] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  422.146414][  T192] usb 5-1: config 1 has no interface number 0
[  422.146455][  T192] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  422.146480][  T192] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  422.146503][  T192] usb 5-1: config 1 interface 105 has no altsetting 0
[  422.251344][ T5678] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5
[  422.289581][  T192] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  422.289607][  T192] usb 5-1: Product: syz
[  422.289620][  T192] usb 5-1: Manufacturer: syz
[  422.289631][  T192] usb 5-1: SerialNumber: syz
[  422.312488][T11803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1832'.
[  422.327527][T11796] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  422.327638][T11796] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  422.461253][T11810] futex_wake_op: syz.2.1834 tries to shift op by -1; fix this program
[  422.531208][T11812] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  422.531281][T11812] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  422.732018][  T192] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  422.732181][  T192] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71
[  422.755733][  T192] usb 5-1: USB disconnect, device number 65
[  422.865609][T11818] wg2: Caught tx_queue_len zero misconfig
[  422.882111][T11818] raw_sendmsg: syz.1.1837 forgot to set AF_INET. Fix it!
[  422.884486][T11818] overlayfs: missing 'lowerdir'
[  422.898326][ T5705] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  423.055922][ T5705] usb 3-1: Using ep0 maxpacket: 8
[  423.056619][ T5705] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  423.057877][ T5705] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  423.057892][ T5705] usb 3-1: config 0 has no interface number 0
[  423.057914][ T5705] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  423.057928][ T5705] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  423.057941][ T5705] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  423.057955][ T5705] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  423.057978][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.062417][ T5705] usb 3-1: config 0 descriptor??
[  423.161424][ T5705] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  423.350073][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-1)
[  423.725996][ T5678] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  423.857782][ T5678] usb 5-1: device descriptor read/64, error -71
[  424.096653][ T5678] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  424.226028][ T5678] usb 5-1: device descriptor read/64, error -71
[  424.257070][ T5705] usb 2-1: new low-speed USB device number 69 using dummy_hcd
[  424.287349][   T59] IPVS: starting estimator thread 0...
[  424.338187][ T5678] usb usb5-port1: attempt power cycle
[  424.376543][T11841] IPVS: using max 53 ests per chain, 127200 per kthread
[  424.393018][ T5705] usb 2-1: device descriptor read/64, error -71
[  424.491011][ T5899] usb 1-1: USB disconnect, device number 73
[  424.545398][T11848] FAULT_INJECTION: forcing a failure.
[  424.545398][T11848] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  424.545422][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.0.1847 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.545438][T11848] Tainted: [L]=SOFTLOCKUP
[  424.545443][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  424.545449][T11848] Call Trace:
[  424.545455][T11848]  <TASK>
[  424.545460][T11848]  dump_stack_lvl+0xe8/0x150
[  424.545480][T11848]  should_fail_ex+0x410/0x560
[  424.545498][T11848]  prepare_alloc_pages+0x223/0x600
[  424.545515][T11848]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  424.545531][T11848]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  424.545549][T11848]  ? __pfx_policy_nodemask+0x10/0x10
[  424.545563][T11848]  ? __get_vm_area_node+0x155/0x2f0
[  424.545573][T11848]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  424.545584][T11848]  ? __vmalloc_noprof+0xd2/0x120
[  424.545594][T11848]  ? translate_table+0x13e9/0x3520
[  424.545609][T11848]  ? do_replace_finish+0xa72/0x18c0
[  424.545619][T11848]  ? do_ebt_set_ctl+0x2fb/0x1020
[  424.545629][T11848]  ? nf_setsockopt+0x26f/0x290
[  424.545639][T11848]  ? do_sock_setsockopt+0x17c/0x1b0
[  424.545649][T11848]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  424.545659][T11848]  ? do_syscall_64+0x166/0x520
[  424.545673][T11848]  alloc_pages_mpol+0x21e/0x390
[  424.545691][T11848]  alloc_pages_noprof+0xb1/0x2b0
[  424.545707][T11848]  get_free_pages_noprof+0xf/0x80
[  424.545720][T11848]  __kasan_populate_vmalloc+0x38/0x1c0
[  424.545733][T11848]  ? do_raw_spin_unlock+0xf5/0x200
[  424.545751][T11848]  alloc_vmap_area+0xd1a/0x1420
[  424.545774][T11848]  ? __pfx_alloc_vmap_area+0x10/0x10
[  424.545788][T11848]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  424.545808][T11848]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  424.545828][T11848]  ? __get_vm_area_node+0x155/0x2f0
[  424.545849][T11848]  __get_vm_area_node+0x200/0x2f0
[  424.545878][T11848]  __vmalloc_node_range_noprof+0x343/0x1540
[  424.545899][T11848]  ? translate_table+0x13e9/0x3520
[  424.545934][T11848]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  424.545944][T11848]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  424.545960][T11848]  ? translate_table+0x13e9/0x3520
[  424.545974][T11848]  __vmalloc_noprof+0xd2/0x120
[  424.545985][T11848]  ? translate_table+0x13e9/0x3520
[  424.546001][T11848]  translate_table+0x13e9/0x3520
[  424.546027][T11848]  ? __pfx_translate_table+0x10/0x10
[  424.546057][T11848]  ? __lock_acquire+0x747/0x2de0
[  424.546098][T11848]  do_replace_finish+0xa72/0x18c0
[  424.546140][T11848]  do_replace+0x344/0x470
[  424.546161][T11848]  ? __pfx_do_replace+0x10/0x10
[  424.546189][T11848]  ? bpf_lsm_capable+0x9/0x20
[  424.546209][T11848]  ? security_capable+0x7e/0x2c0
[  424.546243][T11848]  do_ebt_set_ctl+0x2fb/0x1020
[  424.546265][T11848]  ? __lock_acquire+0x747/0x2de0
[  424.546288][T11848]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  424.546320][T11848]  ? kstrtouint+0x6e/0xe0
[  424.546342][T11848]  ? begin_current_label_crit_section+0x2a3/0x830
[  424.546375][T11848]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  424.546405][T11848]  ? get_pid_task+0x20/0x1f0
[  424.546433][T11848]  ? __mutex_trylock_common+0x15f/0x270
[  424.546463][T11848]  ? __pfx___mutex_trylock_common+0x10/0x10
[  424.546492][T11848]  ? rcu_is_watching+0x16/0xb0
[  424.546516][T11848]  ? trace_contention_end+0x3d/0x140
[  424.546552][T11848]  ? nf_setsockopt+0x221/0x290
[  424.546575][T11848]  ? __mutex_unlock_slowpath+0x731/0x900
[  424.546618][T11848]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  424.546654][T11848]  nf_setsockopt+0x26f/0x290
[  424.546676][T11848]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  424.546705][T11848]  do_sock_setsockopt+0x17c/0x1b0
[  424.546729][T11848]  __x64_sys_setsockopt+0x13d/0x1b0
[  424.546755][T11848]  do_syscall_64+0x166/0x520
[  424.546777][T11848]  ? trace_irq_disable+0x3b/0x140
[  424.546799][T11848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.546819][T11848]  ? clear_bhb_loop+0x70/0xc0
[  424.546843][T11848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.546864][T11848] RIP: 0033:0x7f9dc6d9e2d9
[  424.546883][T11848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.546900][T11848] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  424.546922][T11848] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  424.546937][T11848] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  424.546950][T11848] RBP: 00007f9dc7cbc090 R08: 0000000000000e58 R09: 0000000000000000
[  424.546963][T11848] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000002
[  424.546976][T11848] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  424.547007][T11848]  </TASK>
[  424.561387][T11848] warn_alloc: 2 callbacks suppressed
[  424.561404][T11848] syz.0.1847: vmalloc error: size 64, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  424.561464][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.0.1847 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.561490][T11848] Tainted: [L]=SOFTLOCKUP
[  424.561497][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  424.561508][T11848] Call Trace:
[  424.561516][T11848]  <TASK>
[  424.561525][T11848]  dump_stack_lvl+0xe8/0x150
[  424.561555][T11848]  warn_alloc+0x24d/0x270
[  424.561582][T11848]  ? lockdep_hardirqs_on+0x7b/0x110
[  424.561608][T11848]  ? __pfx_warn_alloc+0x10/0x10
[  424.561628][T11848]  ? kfree+0x1c5/0x650
[  424.561651][T11848]  ? __get_vm_area_node+0x219/0x2f0
[  424.561678][T11848]  __vmalloc_node_range_noprof+0x36b/0x1540
[  424.561724][T11848]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  424.561743][T11848]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  424.561773][T11848]  ? translate_table+0x13e9/0x3520
[  424.561800][T11848]  __vmalloc_noprof+0xd2/0x120
[  424.561820][T11848]  ? translate_table+0x13e9/0x3520
[  424.561849][T11848]  translate_table+0x13e9/0x3520
[  424.561898][T11848]  ? __pfx_translate_table+0x10/0x10
[  424.561932][T11848]  ? __lock_acquire+0x747/0x2de0
[  424.561973][T11848]  do_replace_finish+0xa72/0x18c0
[  424.562016][T11848]  do_replace+0x344/0x470
[  424.562043][T11848]  ? __pfx_do_replace+0x10/0x10
[  424.562073][T11848]  ? bpf_lsm_capable+0x9/0x20
[  424.562092][T11848]  ? security_capable+0x7e/0x2c0
[  424.562125][T11848]  do_ebt_set_ctl+0x2fb/0x1020
[  424.562147][T11848]  ? __lock_acquire+0x747/0x2de0
[  424.562168][T11848]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  424.562198][T11848]  ? kstrtouint+0x6e/0xe0
[  424.562220][T11848]  ? begin_current_label_crit_section+0x2a3/0x830
[  424.562252][T11848]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  424.562283][T11848]  ? get_pid_task+0x20/0x1f0
[  424.562309][T11848]  ? __mutex_trylock_common+0x15f/0x270
[  424.562337][T11848]  ? __pfx___mutex_trylock_common+0x10/0x10
[  424.562365][T11848]  ? rcu_is_watching+0x16/0xb0
[  424.562390][T11848]  ? trace_contention_end+0x3d/0x140
[  424.562424][T11848]  ? nf_setsockopt+0x221/0x290
[  424.562447][T11848]  ? __mutex_unlock_slowpath+0x731/0x900
[  424.562476][T11848]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  424.562511][T11848]  nf_setsockopt+0x26f/0x290
[  424.562530][T11848]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  424.562559][T11848]  do_sock_setsockopt+0x17c/0x1b0
[  424.562582][T11848]  __x64_sys_setsockopt+0x13d/0x1b0
[  424.562607][T11848]  do_syscall_64+0x166/0x520
[  424.562628][T11848]  ? trace_irq_disable+0x3b/0x140
[  424.562648][T11848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.562668][T11848]  ? clear_bhb_loop+0x70/0xc0
[  424.562691][T11848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.562710][T11848] RIP: 0033:0x7f9dc6d9e2d9
[  424.562728][T11848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.562744][T11848] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  424.562764][T11848] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  424.562779][T11848] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  424.562790][T11848] RBP: 00007f9dc7cbc090 R08: 0000000000000e58 R09: 0000000000000000
[  424.562803][T11848] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000002
[  424.562816][T11848] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  424.562845][T11848]  </TASK>
[  424.571909][T11848] Mem-Info:
[  424.571924][T11848] active_anon:6721 inactive_anon:43 isolated_anon:0
[  424.571924][T11848]  active_file:2563 inactive_file:54759 isolated_file:0
[  424.571924][T11848]  unevictable:0 dirty:201 writeback:0
[  424.571924][T11848]  slab_reclaimable:12801 slab_unreclaimable:95160
[  424.571924][T11848]  mapped:31177 shmem:649 pagetables:1602
[  424.571924][T11848]  sec_pagetables:0 bounce:0
[  424.571924][T11848]  kernel_misc_reclaimable:0
[  424.571924][T11848]  free:1287477 free_pcp:20162 free_cma:0
[  424.571978][T11848] Node 0 active_anon:26884kB inactive_anon:172kB active_file:10252kB inactive_file:218828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124708kB dirty:804kB writeback:0kB shmem:2596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13976kB pagetables:6280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  424.572039][T11848] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  424.572089][T11848] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.572146][T11848] lowmem_reserve[]: 0 2468 2468 2468 2468
[  424.572181][T11848] Node 0 DMA32 free:1224156kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26884kB inactive_anon:172kB active_file:10252kB inactive_file:218828kB unevictable:0kB writepending:804kB zspages:1112kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:47976kB local_pcp:24916kB free_cma:0kB
[  424.572240][T11848] lowmem_reserve[]: 0 0 0 0 0
[  424.572270][T11848] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.572319][T11848] lowmem_reserve[]: 0 0 0 0 0
[  424.572349][T11848] Node 1 Normal free:3910392kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:32672kB local_pcp:16180kB free_cma:0kB
[  424.572403][T11848] lowmem_reserve[]: 0 0 0 0 0
[  424.572436][T11848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  424.572536][T11848] Node 0 DMA32: 1728*4kB (UME) 1820*8kB (UM) 1118*16kB (UM) 946*32kB (UM) 704*64kB (UME) 379*128kB (UME) 114*256kB (ME) 81*512kB (M) 25*1024kB (UME) 11*2048kB (UME) 230*4096kB (UM) = 1224064kB
[  424.572678][T11848] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  424.572748][T11848] Node 1 Normal: 15*4kB (UM) 10*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 4*128kB (UM) 2*256kB (U) 5*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 952*4096kB (UM) = 3910444kB
[  424.572857][T11848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  424.572869][T11848] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  424.572881][T11848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  424.572893][T11848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  424.572904][T11848] 57993 total pagecache pages
[  424.572911][T11848] 28 pages in swap cache
[  424.572916][T11848] Free swap  = 123984kB
[  424.572921][T11848] Total swap = 124996kB
[  424.572927][T11848] 2097051 pages RAM
[  424.572933][T11848] 0 pages HighMem/MovableOnly
[  424.572938][T11848] 433558 pages reserved
[  424.572944][T11848] 0 pages cma reserved
[  424.676357][ T5678] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  424.702441][ T5678] usb 5-1: device descriptor read/8, error -71
[  424.716497][ T5705] usb 2-1: new low-speed USB device number 70 using dummy_hcd
[  424.856238][ T5705] usb 2-1: device descriptor read/64, error -71
[  424.946614][ T5678] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  424.967317][ T5678] usb 5-1: device descriptor read/8, error -71
[  425.013501][ T5705] usb usb2-port1: attempt power cycle
[  425.076218][ T5678] usb usb5-port1: unable to enumerate USB device
[  425.392301][T11850] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  425.468968][ T5705] usb 2-1: new low-speed USB device number 71 using dummy_hcd
[  425.643920][ T5705] usb 2-1: device descriptor read/8, error -71
[  425.866563][   T30] usb 3-1: USB disconnect, device number 76
[  425.883410][ T5705] usb 2-1: new low-speed USB device number 72 using dummy_hcd
[  425.895789][   T30] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  425.899076][ T5705] usb 2-1: device descriptor read/8, error -71
[  426.007070][ T5705] usb usb2-port1: unable to enumerate USB device
[  426.052639][T11858] FAULT_INJECTION: forcing a failure.
[  426.052639][T11858] name failslab, interval 1, probability 0, space 0, times 0
[  426.052663][T11858] CPU: 1 UID: 0 PID: 11858 Comm: syz.0.1851 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  426.052678][T11858] Tainted: [L]=SOFTLOCKUP
[  426.052683][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  426.052690][T11858] Call Trace:
[  426.052695][T11858]  <TASK>
[  426.052700][T11858]  dump_stack_lvl+0xe8/0x150
[  426.052720][T11858]  should_fail_ex+0x410/0x560
[  426.052738][T11858]  should_failslab+0xa8/0x100
[  426.052763][T11858]  __kmalloc_node_noprof+0x100/0x720
[  426.052775][T11858]  ? __get_vm_area_node+0x200/0x2f0
[  426.052786][T11858]  ? __get_vm_area_node+0x283/0x2f0
[  426.052795][T11858]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  426.052806][T11858]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  426.052821][T11858]  __vmalloc_node_range_noprof+0x5b4/0x1540
[  426.052846][T11858]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  426.052863][T11858]  ? do_replace+0x297/0x470
[  426.052873][T11858]  __vmalloc_noprof+0xd2/0x120
[  426.052884][T11858]  ? do_replace+0x297/0x470
[  426.052895][T11858]  do_replace+0x297/0x470
[  426.052906][T11858]  ? __pfx_do_replace+0x10/0x10
[  426.052922][T11858]  ? bpf_lsm_capable+0x9/0x20
[  426.052934][T11858]  ? security_capable+0x7e/0x2c0
[  426.052953][T11858]  do_ebt_set_ctl+0x2fb/0x1020
[  426.052965][T11858]  ? __lock_acquire+0x747/0x2de0
[  426.052977][T11858]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  426.052994][T11858]  ? kstrtouint+0x6e/0xe0
[  426.053007][T11858]  ? begin_current_label_crit_section+0x2a3/0x830
[  426.053026][T11858]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  426.053042][T11858]  ? get_pid_task+0x20/0x1f0
[  426.053057][T11858]  ? __mutex_trylock_common+0x15f/0x270
[  426.053074][T11858]  ? __pfx___mutex_trylock_common+0x10/0x10
[  426.053089][T11858]  ? rcu_is_watching+0x16/0xb0
[  426.053104][T11858]  ? trace_contention_end+0x3d/0x140
[  426.053123][T11858]  ? nf_setsockopt+0x221/0x290
[  426.053136][T11858]  ? __mutex_unlock_slowpath+0x731/0x900
[  426.053152][T11858]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  426.053171][T11858]  nf_setsockopt+0x26f/0x290
[  426.053182][T11858]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  426.053199][T11858]  do_sock_setsockopt+0x17c/0x1b0
[  426.053212][T11858]  __x64_sys_setsockopt+0x13d/0x1b0
[  426.053226][T11858]  do_syscall_64+0x166/0x520
[  426.053237][T11858]  ? trace_irq_disable+0x3b/0x140
[  426.053252][T11858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.053263][T11858]  ? clear_bhb_loop+0x70/0xc0
[  426.053276][T11858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.053287][T11858] RIP: 0033:0x7f9dc6d9e2d9
[  426.053298][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.053307][T11858] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  426.053319][T11858] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  426.053327][T11858] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  426.053334][T11858] RBP: 00007f9dc7cbc090 R08: 00000000000001b0 R09: 0000000000000000
[  426.053341][T11858] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000002
[  426.053347][T11858] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  426.053363][T11858]  </TASK>
[  426.081105][T11860] netlink: 'syz.2.1852': attribute type 12 has an invalid length.
[  426.508451][T11866] netlink: 'syz.0.1855': attribute type 2 has an invalid length.
[  426.688099][T11878] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  426.689751][T11878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.697371][T11878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.856063][ T5705] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  426.856149][ T5678] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  426.896024][  T192] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  427.006204][ T5678] usb 1-1: Using ep0 maxpacket: 8
[  427.006893][ T5678] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  427.007815][ T5678] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  427.007839][ T5678] usb 1-1: config 0 has no interface number 0
[  427.007866][ T5678] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  427.007879][ T5678] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  427.007892][ T5678] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  427.007906][ T5678] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  427.007927][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.010796][ T5678] usb 1-1: config 0 descriptor??
[  427.039926][ T5678] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  427.057128][ T5705] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  427.068953][  T192] usb 3-1: Using ep0 maxpacket: 8
[  427.080476][  T192] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  427.140408][  T192] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  427.140489][  T192] usb 3-1: config 0 has no interface number 0
[  427.140528][  T192] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  427.140551][  T192] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  427.140575][  T192] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  427.140671][  T192] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  427.140713][  T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.143368][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.143392][ T5705] usb 4-1: Product: syz
[  427.143407][ T5705] usb 4-1: Manufacturer: syz
[  427.143422][ T5705] usb 4-1: SerialNumber: syz
[  427.165545][T11882] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  427.169221][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.180424][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.230001][  T192] usb 3-1: config 0 descriptor??
[  427.282248][ T5705] ums-karma 4-1:1.0: USB Mass Storage device detected
[  427.283953][  T192] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  427.304812][ T5705] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  427.304812][ T5705]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  427.550967][ T5705] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5
[  427.776087][   T30] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  427.933092][   T30] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  427.950380][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.961205][   T30] usb 5-1: config 0 descriptor??
[  428.009086][   T30] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  428.072030][ T5705] usb 1-1: USB disconnect, device number 74
[  428.085716][ T5705] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  428.366271][ T5899] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  428.516017][ T5899] usb 2-1: Using ep0 maxpacket: 16
[  428.517698][ T5899] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  428.518636][ T5899] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  428.518651][ T5899] usb 2-1: config 0 has no interface number 0
[  428.518674][ T5899] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.518688][ T5899] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.518699][ T5899] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  428.518820][ T5899] usb 2-1: config 0 interface 1 has no altsetting 0
[  428.518839][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.528508][ T5899] usb 2-1: config 0 descriptor??
[  428.601514][ T5899] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count
[  428.668251][T11887] loop4: detected capacity change from 0 to 2640
[  428.702696][ T5619] buffer_io_error: 10 callbacks suppressed
[  428.702718][ T5619] Buffer I/O error on dev loop4, logical block 0, async page read
[  428.707701][ T5619] Buffer I/O error on dev loop4, logical block 0, async page read
[  428.756894][T11891] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16
[  428.794835][T11887] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  428.794898][T11887] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  428.794966][T11887] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  428.794991][T11887] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  428.795036][T11887] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  428.795060][T11887] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  428.795109][T11887] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  428.795133][T11887] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  428.865953][ T5620] Bluetooth: hci2: unexpected event for opcode 0x2010
[  428.911676][   T30] usb 5-1: USB disconnect, device number 70
[  428.979240][ T5899] usbhid 2-1:0.1: can't add hid device: -71
[  428.979339][ T5899] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  428.991753][ T5899] usb 2-1: USB disconnect, device number 73
[  429.619470][   T30] usb 4-1: USB disconnect, device number 63
[  429.658422][T11906] FAULT_INJECTION: forcing a failure.
[  429.658422][T11906] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  429.658461][T11906] CPU: 0 UID: 0 PID: 11906 Comm: syz.4.1867 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  429.658487][T11906] Tainted: [L]=SOFTLOCKUP
[  429.658494][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  429.658506][T11906] Call Trace:
[  429.658514][T11906]  <TASK>
[  429.658523][T11906]  dump_stack_lvl+0xe8/0x150
[  429.658555][T11906]  should_fail_ex+0x410/0x560
[  429.658583][T11906]  prepare_alloc_pages+0x223/0x600
[  429.658616][T11906]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  429.658643][T11906]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  429.658673][T11906]  ? __pfx_policy_nodemask+0x10/0x10
[  429.658711][T11906]  alloc_pages_mpol+0x21e/0x390
[  429.658745][T11906]  folio_alloc_mpol_noprof+0x39/0x160
[  429.658776][T11906]  vma_alloc_folio_noprof+0xe1/0x1e0
[  429.658807][T11906]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  429.658846][T11906]  do_wp_page+0x117d/0x4b80
[  429.658894][T11906]  ? __pfx_do_wp_page+0x10/0x10
[  429.658929][T11906]  ? do_raw_spin_lock+0x12b/0x2f0
[  429.658961][T11906]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  429.659000][T11906]  handle_mm_fault+0x15d7/0x3750
[  429.659041][T11906]  ? handle_mm_fault+0xf1/0x3750
[  429.659081][T11906]  ? __pfx_handle_mm_fault+0x10/0x10
[  429.659123][T11906]  ? __pfx___up_read+0x10/0x10
[  429.659156][T11906]  ? lock_mm_and_find_vma+0xa7/0x340
[  429.659181][T11906]  do_user_addr_fault+0x746/0x1340
[  429.659218][T11906]  exc_page_fault+0x6a/0xc0
[  429.659243][T11906]  asm_exc_page_fault+0x26/0x30
[  429.659264][T11906] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  429.659294][T11906] Code: 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 0f 68 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  429.659312][T11906] RSP: 0018:ffffc900039b73f8 EFLAGS: 00050206
[  429.659331][T11906] RAX: ffffffff84de1401 RBX: ffff88807bff0000 RCX: 00000000000038c0
[  429.659347][T11906] RDX: 0000000000000000 RSI: ffff88807bff4740 RDI: 000020000003c000
[  429.659361][T11906] RBP: ffffc900039b7578 R08: ffff88807bff7fff R09: 1ffff1100f7fefff
[  429.659376][T11906] R10: dffffc0000000000 R11: ffffed100f7ff000 R12: 1ffff92000736fc3
[  429.659391][T11906] R13: 00002000000378c0 R14: ffffc900039b7e28 R15: 0000000000008000
[  429.659414][T11906]  ? _copy_to_iter+0x1e1/0x1810
[  429.659448][T11906]  _copy_to_iter+0x255/0x1810
[  429.659478][T11906]  ? __mutex_trylock_common+0x15f/0x270
[  429.659515][T11906]  ? __pfx__copy_to_iter+0x10/0x10
[  429.659546][T11906]  ? __mutex_lock+0x30b/0x1550
[  429.659579][T11906]  __skb_datagram_iter+0x419/0x980
[  429.659605][T11906]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  429.659636][T11906]  skb_copy_datagram_iter+0xb5/0x240
[  429.659664][T11906]  unix_stream_read_actor+0x6c/0xb0
[  429.659693][T11906]  unix_stream_read_generic+0xa73/0x22e0
[  429.659748][T11906]  ? __pfx_unix_stream_read_generic+0x10/0x10
[  429.659774][T11906]  ? __pfx_autoremove_wake_function+0x10/0x10
[  429.659803][T11906]  ? irqentry_exit+0x218/0x920
[  429.659840][T11906]  ? trace_irq_disable+0x3b/0x140
[  429.659875][T11906]  unix_stream_recvmsg+0x16b/0x1d0
[  429.659905][T11906]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  429.659936][T11906]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  429.659963][T11906]  ? aa_sock_msg_perm+0x129/0x210
[  429.659997][T11906]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  429.660024][T11906]  ? security_socket_recvmsg+0x7e/0x2c0
[  429.660048][T11906]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  429.660072][T11906]  sock_recvmsg+0x196/0x1e0
[  429.660100][T11906]  ____sys_recvmsg+0x1e6/0x4a0
[  429.660130][T11906]  ? __pfx_____sys_recvmsg+0x10/0x10
[  429.660168][T11906]  ? import_iovec+0x73/0xa0
[  429.660202][T11906]  ___sys_recvmsg+0x213/0x5a0
[  429.660231][T11906]  ? __pfx____sys_recvmsg+0x10/0x10
[  429.660259][T11906]  ? lock_acquire+0x115/0x350
[  429.660299][T11906]  ? __fget_files+0x3a2/0x420
[  429.660330][T11906]  __x64_sys_recvmsg+0x1ae/0x290
[  429.660356][T11906]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  429.660402][T11906]  do_syscall_64+0x166/0x520
[  429.660423][T11906]  ? trace_irq_disable+0x3b/0x140
[  429.660444][T11906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.660466][T11906]  ? clear_bhb_loop+0x70/0xc0
[  429.660491][T11906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.660511][T11906] RIP: 0033:0x7fee69b9e2d9
[  429.660530][T11906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.660547][T11906] RSP: 002b:00007fee6ab15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  429.660568][T11906] RAX: ffffffffffffffda RBX: 00007fee69e26090 RCX: 00007fee69b9e2d9
[  429.660584][T11906] RDX: 0000000040000100 RSI: 0000200000001100 RDI: 0000000000000005
[  429.660598][T11906] RBP: 00007fee6ab15090 R08: 0000000000000000 R09: 0000000000000000
[  429.660611][T11906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  429.660624][T11906] R13: 00007fee69e26128 R14: 00007fee69e26090 R15: 00007fee69f4fa48
[  429.660657][T11906]  </TASK>
[  429.850349][   T30] usb 3-1: USB disconnect, device number 77
[  429.893944][   T30] ldusb 3-1:0.55: LD USB Device #1 now disconnected
[  430.566000][T11922] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  430.584680][T11922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.611505][T11922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.710288][T11924] ebt_among: dst integrity fail: 100
[  431.233464][T11933] ebt_among: dst integrity fail: 100
[  431.656341][  T192] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  431.756579][ T5705] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  431.835913][  T192] usb 4-1: Using ep0 maxpacket: 8
[  431.838902][  T192] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  431.842359][  T192] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  431.842385][  T192] usb 4-1: config 0 has no interface number 0
[  431.842413][  T192] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  431.842426][  T192] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  431.842439][  T192] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  431.842453][  T192] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  431.842476][  T192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.845392][  T192] usb 4-1: config 0 descriptor??
[  431.911447][ T5705] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  431.950890][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.950918][ T5705] usb 3-1: Product: syz
[  431.950933][ T5705] usb 3-1: Manufacturer: syz
[  431.950948][ T5705] usb 3-1: SerialNumber: syz
[  431.982012][ T5705] ums-karma 3-1:1.0: USB Mass Storage device detected
[  431.984094][  T192] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  432.022070][ T5705] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  432.022070][ T5705]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  432.312009][ T5705] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5
[  432.787565][T11952] syz_tun: entered allmulticast mode
[  432.793663][T11952] syz_tun: left allmulticast mode
[  433.213066][T11957] FAULT_INJECTION: forcing a failure.
[  433.213066][T11957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  433.213102][T11957] CPU: 0 UID: 0 PID: 11957 Comm: syz.0.1885 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.213133][T11957] Tainted: [L]=SOFTLOCKUP
[  433.213141][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  433.213154][T11957] Call Trace:
[  433.213162][T11957]  <TASK>
[  433.213171][T11957]  dump_stack_lvl+0xe8/0x150
[  433.213205][T11957]  should_fail_ex+0x410/0x560
[  433.213238][T11957]  _copy_to_user+0x31/0xb0
[  433.213261][T11957]  simple_read_from_buffer+0xe1/0x170
[  433.213296][T11957]  proc_fail_nth_read+0x1bb/0x230
[  433.213320][T11957]  ? common_file_perm+0x20e/0x2b0
[  433.213351][T11957]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  433.213378][T11957]  ? rw_verify_area+0x24a/0x4c0
[  433.213401][T11957]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  433.213423][T11957]  vfs_read+0x213/0xa80
[  433.213447][T11957]  ? __pfx___mutex_lock+0x10/0x10
[  433.213471][T11957]  ? __pfx_vfs_read+0x10/0x10
[  433.213492][T11957]  ? __fget_files+0x2a/0x420
[  433.213515][T11957]  ? __fget_files+0x3a2/0x420
[  433.213541][T11957]  ? __fget_files+0x2a/0x420
[  433.213568][T11957]  ksys_read+0x150/0x270
[  433.213592][T11957]  ? __pfx_ksys_read+0x10/0x10
[  433.213625][T11957]  do_syscall_64+0x166/0x520
[  433.213662][T11957]  ? trace_irq_disable+0x3b/0x140
[  433.213684][T11957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.213705][T11957]  ? clear_bhb_loop+0x70/0xc0
[  433.213730][T11957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.213751][T11957] RIP: 0033:0x7f9dc6d5eb0e
[  433.213770][T11957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  433.213788][T11957] RSP: 002b:00007f9dc7cbbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  433.213811][T11957] RAX: ffffffffffffffda RBX: 00007f9dc7cbc6c0 RCX: 00007f9dc6d5eb0e
[  433.213825][T11957] RDX: 000000000000000f RSI: 00007f9dc7cbc0a0 RDI: 0000000000000005
[  433.213838][T11957] RBP: 00007f9dc7cbc090 R08: 0000000000000000 R09: 0000000000000000
[  433.213851][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.213863][T11957] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  433.213895][T11957]  </TASK>
[  433.739584][T11965] FAULT_INJECTION: forcing a failure.
[  433.739584][T11965] name failslab, interval 1, probability 0, space 0, times 0
[  433.739623][T11965] CPU: 0 UID: 0 PID: 11965 Comm: syz.0.1889 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.739650][T11965] Tainted: [L]=SOFTLOCKUP
[  433.739658][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  433.739671][T11965] Call Trace:
[  433.739679][T11965]  <TASK>
[  433.739689][T11965]  dump_stack_lvl+0xe8/0x150
[  433.739722][T11965]  should_fail_ex+0x410/0x560
[  433.739756][T11965]  should_failslab+0xa8/0x100
[  433.739784][T11965]  ? __kernfs_new_node+0xe6/0x980
[  433.739808][T11965]  kmem_cache_alloc_noprof+0xa1/0x600
[  433.739834][T11965]  ? __kernfs_new_node+0xe6/0x980
[  433.739865][T11965]  __kernfs_new_node+0xe6/0x980
[  433.739895][T11965]  ? __pfx___kernfs_new_node+0x10/0x10
[  433.739919][T11965]  ? kernfs_root+0x1c/0x230
[  433.739948][T11965]  ? kernfs_root+0x1c/0x230
[  433.739969][T11965]  ? kernfs_root+0x1c/0x230
[  433.739989][T11965]  ? kernfs_root+0x1c/0x230
[  433.740017][T11965]  kernfs_new_node+0xea/0x140
[  433.740050][T11965]  __kernfs_create_file+0x4b/0x2e0
[  433.740083][T11965]  sysfs_add_file_mode_ns+0x237/0x300
[  433.740122][T11965]  internal_create_group+0x679/0x1180
[  433.740162][T11965]  ? __pfx_internal_create_group+0x10/0x10
[  433.740189][T11965]  ? up_write+0x19d/0x4a0
[  433.740223][T11965]  sysfs_create_groups+0x59/0x120
[  433.740250][T11965]  device_add_attrs+0xde/0x600
[  433.740281][T11965]  ? __pfx_device_add_attrs+0x10/0x10
[  433.740312][T11965]  ? device_add_class_symlinks+0x21f/0x240
[  433.740343][T11965]  device_add+0x488/0xb80
[  433.740372][T11965]  netdev_register_kobject+0x197/0x350
[  433.740405][T11965]  register_netdevice+0x1433/0x1eb0
[  433.740444][T11965]  ? __pfx_register_netdevice+0x10/0x10
[  433.740474][T11965]  ? validate_linkmsg+0x765/0x950
[  433.740508][T11965]  ? rtnl_create_link+0xa04/0xd70
[  433.740543][T11965]  vxcan_newlink+0x3c8/0x720
[  433.740564][T11965]  ? __kvmalloc_node_noprof+0x50f/0x820
[  433.740606][T11965]  ? alloc_netdev_mqs+0xd44/0x12a0
[  433.740629][T11965]  ? rtnl_create_link+0x321/0xd70
[  433.740659][T11965]  ? __pfx_vxcan_newlink+0x10/0x10
[  433.740679][T11965]  ? ___sys_sendmsg+0x2a5/0x360
[  433.740765][T11965]  ? validate_linkmsg+0x765/0x950
[  433.740798][T11965]  ? rtnl_create_link+0xa04/0xd70
[  433.740824][T11965]  ? __pfx_vxcan_newlink+0x10/0x10
[  433.740849][T11965]  rtnl_newlink_create+0x305/0x7b0
[  433.740878][T11965]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  433.740905][T11965]  ? __pfx___mutex_lock+0x10/0x10
[  433.740940][T11965]  ? ns_capable+0x89/0xe0
[  433.740970][T11965]  rtnl_newlink+0x166d/0x1c30
[  433.741006][T11965]  ? __pfx_rtnl_newlink+0x10/0x10
[  433.741023][T11965]  ? do_syscall_64+0x166/0x520
[  433.741045][T11965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.741139][T11965]  ? __local_bh_enable_ip+0xd6/0x140
[  433.741167][T11965]  ? lockdep_hardirqs_on+0x7b/0x110
[  433.741189][T11965]  ? __dev_queue_xmit+0x29b/0x3920
[  433.741211][T11965]  ? __local_bh_enable_ip+0xd6/0x140
[  433.741246][T11965]  ? lock_acquire+0x115/0x350
[  433.741283][T11965]  ? __pfx_rtnl_newlink+0x10/0x10
[  433.741302][T11965]  rtnetlink_rcv_msg+0x802/0xc00
[  433.741337][T11965]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  433.741366][T11965]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  433.741395][T11965]  ? ref_tracker_free+0x689/0x830
[  433.741427][T11965]  ? __pfx_ref_tracker_free+0x10/0x10
[  433.741472][T11965]  netlink_rcv_skb+0x226/0x4a0
[  433.741499][T11965]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  433.741531][T11965]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  433.741569][T11965]  ? netlink_deliver_tap+0x2e/0x1b0
[  433.741594][T11965]  ? netlink_deliver_tap+0x2e/0x1b0
[  433.741625][T11965]  netlink_unicast+0x7bd/0x940
[  433.741659][T11965]  netlink_sendmsg+0x813/0xb40
[  433.741694][T11965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.741728][T11965]  ? apparmor_socket_sendmsg+0x98/0x360
[  433.741758][T11965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.741783][T11965]  sock_sendmsg_nosec+0x13a/0x180
[  433.741813][T11965]  ____sys_sendmsg+0x54e/0x850
[  433.741840][T11965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  433.741873][T11965]  ? import_iovec+0x73/0xa0
[  433.741906][T11965]  ___sys_sendmsg+0x2a5/0x360
[  433.741927][T11965]  ? __lock_acquire+0x747/0x2de0
[  433.741954][T11965]  ? __pfx____sys_sendmsg+0x10/0x10
[  433.742004][T11965]  ? __fget_files+0x2a/0x420
[  433.742023][T11965]  ? __fget_files+0x3a2/0x420
[  433.742053][T11965]  __x64_sys_sendmsg+0x1b1/0x290
[  433.742077][T11965]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  433.742120][T11965]  do_syscall_64+0x166/0x520
[  433.742142][T11965]  ? trace_irq_disable+0x3b/0x140
[  433.742164][T11965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.742185][T11965]  ? clear_bhb_loop+0x70/0xc0
[  433.742210][T11965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.742231][T11965] RIP: 0033:0x7f9dc6d9e2d9
[  433.742251][T11965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.742269][T11965] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.742292][T11965] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  433.742308][T11965] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  433.742322][T11965] RBP: 00007f9dc7cbc090 R08: 0000000000000000 R09: 0000000000000000
[  433.742335][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  433.742348][T11965] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  433.742381][T11965]  </TASK>
[  433.812938][T11970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1889'.
[  434.026199][ T5899] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  434.177403][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  434.178710][ T5899] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  434.179843][ T5899] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  434.181765][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.181788][ T5899] usb 5-1: Product: syz
[  434.181825][ T5899] usb 5-1: Manufacturer: syz
[  434.181840][ T5899] usb 5-1: SerialNumber: syz
[  434.189157][ T5899] usb 5-1: config 0 descriptor??
[  434.202695][ T5899] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  434.202757][ T5899] usb 5-1: setting power ON
[  434.202776][ T5899] dvb-usb: bulk message failed: -22 (2/0)
[  434.222063][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  434.222781][ T5899] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  434.222833][ T5899] usb 5-1: media controller created
[  434.283856][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  434.300599][T11968] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  434.311313][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.334510][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.358342][ T5899] usb 5-1: selecting invalid altsetting 6
[  434.358365][ T5899] usb 5-1: digital interface selection failed (-22)
[  434.359703][ T5899] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  434.373398][ T5899] usb 5-1: setting power OFF
[  434.373463][ T5899] dvb-usb: bulk message failed: -22 (2/0)
[  434.373478][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  434.373490][ T5899] (NULL device *): no alternate interface
[  434.428983][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.434993][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.443183][T11969] dvb-usb: bulk message failed: -22 (3/0)
[  434.443204][T11969] dvb-usb: bulk message failed: -22 (3/0)
[  434.541621][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  434.555548][ T5899] usb 5-1: USB disconnect, device number 71
[  434.583284][  T192] usb 4-1: USB disconnect, device number 64
[  434.639653][ T5705] usb 3-1: USB disconnect, device number 78
[  434.643140][  T192] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  436.090254][  T192] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  436.204862][T12014] random: crng reseeded on system resumption
[  436.266758][  T192] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  436.270283][  T192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.270309][  T192] usb 1-1: Product: syz
[  436.270331][  T192] usb 1-1: Manufacturer: syz
[  436.270345][  T192] usb 1-1: SerialNumber: syz
[  436.315742][  T192] ums-karma 1-1:1.0: USB Mass Storage device detected
[  436.340486][  T192] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  436.340486][  T192]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  436.843341][  T192] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5
[  436.973976][   T30] usb 1-1: USB disconnect, device number 75
[  437.546034][  T192] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  437.706165][  T192] usb 4-1: Using ep0 maxpacket: 32
[  437.709704][  T192] usb 4-1: unable to get BOS descriptor or descriptor too short
[  437.709736][  T192] usb 4-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf
[  437.713117][  T192] usb 4-1: config 14 has an invalid interface number: 64 but max is 0
[  437.713136][  T192] usb 4-1: config 14 has no interface number 0
[  437.713153][  T192] usb 4-1: config 14 interface 64 has no altsetting 0
[  437.763185][  T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.763205][  T192] usb 4-1: Product: syz
[  437.763213][  T192] usb 4-1: Manufacturer: syz
[  437.763221][  T192] usb 4-1: SerialNumber: syz
[  438.106212][T12042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.114090][T12042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.235179][  T192] belkin_sa 4-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  438.247792][  T192] usb 4-1: bcdDevice: e7cf, bfc: 0
[  438.263128][  T192] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  438.277728][  T192] usb 4-1: USB disconnect, device number 65
[  438.295339][  T192] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  438.309783][  T192] belkin_sa 4-1:14.64: device disconnected
[  438.601972][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'.
[  438.689375][T12049] FAULT_INJECTION: forcing a failure.
[  438.689375][T12049] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  438.689414][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.0.1917 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.689441][T12049] Tainted: [L]=SOFTLOCKUP
[  438.689449][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  438.689462][T12049] Call Trace:
[  438.689470][T12049]  <TASK>
[  438.689478][T12049]  dump_stack_lvl+0xe8/0x150
[  438.689511][T12049]  should_fail_ex+0x410/0x560
[  438.689543][T12049]  prepare_alloc_pages+0x223/0x600
[  438.689573][T12049]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  438.689602][T12049]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  438.689631][T12049]  ? __pfx_policy_nodemask+0x10/0x10
[  438.689656][T12049]  ? __get_vm_area_node+0x155/0x2f0
[  438.689674][T12049]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  438.689693][T12049]  ? __vmalloc_noprof+0xd2/0x120
[  438.689712][T12049]  ? do_replace+0x22f/0x470
[  438.689730][T12049]  ? do_ebt_set_ctl+0x2fb/0x1020
[  438.689748][T12049]  ? do_sock_setsockopt+0x17c/0x1b0
[  438.689767][T12049]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  438.689787][T12049]  ? do_syscall_64+0x166/0x520
[  438.689809][T12049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.689834][T12049]  alloc_pages_mpol+0x21e/0x390
[  438.689867][T12049]  alloc_pages_noprof+0xb1/0x2b0
[  438.689897][T12049]  get_free_pages_noprof+0xf/0x80
[  438.689923][T12049]  __kasan_populate_vmalloc+0x38/0x1c0
[  438.689945][T12049]  ? do_raw_spin_unlock+0xf5/0x200
[  438.689979][T12049]  alloc_vmap_area+0xd1a/0x1420
[  438.690033][T12049]  ? __pfx_alloc_vmap_area+0x10/0x10
[  438.690062][T12049]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  438.690087][T12049]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  438.690111][T12049]  ? __get_vm_area_node+0x155/0x2f0
[  438.690135][T12049]  __get_vm_area_node+0x200/0x2f0
[  438.690162][T12049]  __vmalloc_node_range_noprof+0x343/0x1540
[  438.690184][T12049]  ? do_replace+0x22f/0x470
[  438.690223][T12049]  ? lock_acquire+0x115/0x350
[  438.690247][T12049]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  438.690279][T12049]  ? do_replace+0x22f/0x470
[  438.690296][T12049]  __vmalloc_noprof+0xd2/0x120
[  438.690316][T12049]  ? do_replace+0x22f/0x470
[  438.690338][T12049]  do_replace+0x22f/0x470
[  438.690360][T12049]  ? __pfx_do_replace+0x10/0x10
[  438.690393][T12049]  ? bpf_lsm_capable+0x9/0x20
[  438.690414][T12049]  ? security_capable+0x7e/0x2c0
[  438.690450][T12049]  do_ebt_set_ctl+0x2fb/0x1020
[  438.690472][T12049]  ? __lock_acquire+0x747/0x2de0
[  438.690494][T12049]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  438.690530][T12049]  ? ip4_datagram_release_cb+0xa2/0xbe0
[  438.690562][T12049]  ? ip4_datagram_release_cb+0x976/0xbe0
[  438.690593][T12049]  ? __mutex_trylock_common+0x15f/0x270
[  438.690621][T12049]  ? __pfx___mutex_trylock_common+0x10/0x10
[  438.690649][T12049]  ? rcu_is_watching+0x16/0xb0
[  438.690672][T12049]  ? trace_contention_end+0x3d/0x140
[  438.690707][T12049]  ? nf_setsockopt+0x221/0x290
[  438.690731][T12049]  ? __mutex_unlock_slowpath+0x731/0x900
[  438.690758][T12049]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  438.690790][T12049]  nf_setsockopt+0x26f/0x290
[  438.690803][T12049]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  438.690820][T12049]  do_sock_setsockopt+0x17c/0x1b0
[  438.690833][T12049]  __x64_sys_setsockopt+0x13d/0x1b0
[  438.690847][T12049]  do_syscall_64+0x166/0x520
[  438.690859][T12049]  ? trace_irq_disable+0x3b/0x140
[  438.690871][T12049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.690882][T12049]  ? clear_bhb_loop+0x70/0xc0
[  438.690895][T12049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.690906][T12049] RIP: 0033:0x7f9dc6d9e2d9
[  438.690917][T12049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.690927][T12049] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  438.690940][T12049] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  438.690948][T12049] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  438.690955][T12049] RBP: 00007f9dc7cbc090 R08: 0000000000000488 R09: 0000000000000000
[  438.690962][T12049] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  438.690968][T12049] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  438.690992][T12049]  </TASK>
[  438.691030][T12049] warn_alloc: 1 callbacks suppressed
[  438.691037][T12049] syz.0.1917: vmalloc error: size 256, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  438.691072][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.0.1917 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.691087][T12049] Tainted: [L]=SOFTLOCKUP
[  438.691091][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  438.691098][T12049] Call Trace:
[  438.691103][T12049]  <TASK>
[  438.691107][T12049]  dump_stack_lvl+0xe8/0x150
[  438.691123][T12049]  warn_alloc+0x24d/0x270
[  438.691136][T12049]  ? lockdep_hardirqs_on+0x7b/0x110
[  438.691150][T12049]  ? __pfx_warn_alloc+0x10/0x10
[  438.691161][T12049]  ? kfree+0x1c5/0x650
[  438.691175][T12049]  ? __get_vm_area_node+0x219/0x2f0
[  438.691189][T12049]  __vmalloc_node_range_noprof+0x36b/0x1540
[  438.691211][T12049]  ? lock_acquire+0x115/0x350
[  438.691224][T12049]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  438.691241][T12049]  ? do_replace+0x22f/0x470
[  438.691250][T12049]  __vmalloc_noprof+0xd2/0x120
[  438.691261][T12049]  ? do_replace+0x22f/0x470
[  438.691272][T12049]  do_replace+0x22f/0x470
[  438.691284][T12049]  ? __pfx_do_replace+0x10/0x10
[  438.691299][T12049]  ? bpf_lsm_capable+0x9/0x20
[  438.691310][T12049]  ? security_capable+0x7e/0x2c0
[  438.691328][T12049]  do_ebt_set_ctl+0x2fb/0x1020
[  438.691341][T12049]  ? __lock_acquire+0x747/0x2de0
[  438.691352][T12049]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  438.691371][T12049]  ? ip4_datagram_release_cb+0xa2/0xbe0
[  438.691387][T12049]  ? ip4_datagram_release_cb+0x976/0xbe0
[  438.691403][T12049]  ? __mutex_trylock_common+0x15f/0x270
[  438.691418][T12049]  ? __pfx___mutex_trylock_common+0x10/0x10
[  438.691434][T12049]  ? rcu_is_watching+0x16/0xb0
[  438.691447][T12049]  ? trace_contention_end+0x3d/0x140
[  438.691473][T12049]  ? nf_setsockopt+0x221/0x290
[  438.691487][T12049]  ? __mutex_unlock_slowpath+0x731/0x900
[  438.691504][T12049]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  438.691523][T12049]  nf_setsockopt+0x26f/0x290
[  438.691534][T12049]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  438.691550][T12049]  do_sock_setsockopt+0x17c/0x1b0
[  438.691563][T12049]  __x64_sys_setsockopt+0x13d/0x1b0
[  438.691576][T12049]  do_syscall_64+0x166/0x520
[  438.691587][T12049]  ? trace_irq_disable+0x3b/0x140
[  438.691598][T12049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.691609][T12049]  ? clear_bhb_loop+0x70/0xc0
[  438.691622][T12049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.691633][T12049] RIP: 0033:0x7f9dc6d9e2d9
[  438.691642][T12049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.691651][T12049] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  438.691662][T12049] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  438.691669][T12049] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  438.691675][T12049] RBP: 00007f9dc7cbc090 R08: 0000000000000488 R09: 0000000000000000
[  438.691682][T12049] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  438.691689][T12049] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  438.691705][T12049]  </TASK>
[  438.691709][T12049] Mem-Info:
[  438.691715][T12049] active_anon:14818 inactive_anon:10948 isolated_anon:0
[  438.691715][T12049]  active_file:8746 inactive_file:51790 isolated_file:0
[  438.691715][T12049]  unevictable:0 dirty:367 writeback:0
[  438.691715][T12049]  slab_reclaimable:12821 slab_unreclaimable:95787
[  438.691715][T12049]  mapped:33871 shmem:19655 pagetables:1604
[  438.691715][T12049]  sec_pagetables:0 bounce:0
[  438.691715][T12049]  kernel_misc_reclaimable:0
[  438.691715][T12049]  free:1261530 free_pcp:21733 free_cma:0
[  438.691742][T12049] Node 0 active_anon:59272kB inactive_anon:43792kB active_file:34984kB inactive_file:206952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135484kB dirty:1468kB writeback:0kB shmem:78620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14124kB pagetables:6288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  438.691775][T12049] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  438.691822][T12049] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  438.692952][T12049] lowmem_reserve[]: 0 2468 2468 2468 2468
[  438.693426][T12049] Node 0 DMA32 free:1119864kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:59272kB inactive_anon:43792kB active_file:34984kB inactive_file:206952kB unevictable:0kB writepending:1468kB zspages:1164kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:54888kB local_pcp:12608kB free_cma:0kB
[  438.693487][T12049] lowmem_reserve[]: 0 0 0 0 0
[  438.693521][T12049] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  438.693576][T12049] lowmem_reserve[]: 0 0 0 0 0
[  438.693610][T12049] Node 1 Normal free:3910896kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:32168kB local_pcp:16004kB free_cma:0kB
[  438.693676][T12049] lowmem_reserve[]: 0 0 0 0 0
[  438.693710][T12049] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  438.693856][T12049] Node 0 DMA32: 234*4kB (UE) 358*8kB (UE) 242*16kB (UME) 53*32kB (UM) 164*64kB (UME) 345*128kB (UME) 118*256kB (UME) 89*512kB (UM) 29*1024kB (UME) 6*2048kB (UME) 229*4096kB (UM) = 1119768kB
[  438.694019][T12049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  438.694113][T12049] Node 1 Normal: 15*4kB (UM) 9*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 4*128kB (UM) 2*256kB (U) 4*512kB (UM) 4*1024kB (UM) 0*2048kB 953*4096kB (UM) = 3910948kB
[  438.694273][T12049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  438.694290][T12049] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  438.694306][T12049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  438.694323][T12049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  438.694340][T12049] 80163 total pagecache pages
[  438.694348][T12049] 26 pages in swap cache
[  438.694362][T12049] Free swap  = 123904kB
[  438.694369][T12049] Total swap = 124996kB
[  438.694378][T12049] 2097051 pages RAM
[  438.694385][T12049] 0 pages HighMem/MovableOnly
[  438.694393][T12049] 433558 pages reserved
[  438.694400][T12049] 0 pages cma reserved
[  439.932767][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  439.932825][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  440.359586][T12074] netlink: 'syz.2.1924': attribute type 4 has an invalid length.
[  440.436047][ T5707] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  440.576754][  T192] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  440.605972][ T5707] usb 5-1: Using ep0 maxpacket: 16
[  440.606785][ T5707] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  440.607892][ T5707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  440.607915][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  440.622204][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.622222][ T5707] usb 5-1: Product: syz
[  440.622230][ T5707] usb 5-1: Manufacturer: syz
[  440.622237][ T5707] usb 5-1: SerialNumber: syz
[  440.697307][ T5707] usb 5-1: 0:2 : does not exist
[  440.697389][ T5707] usb 5-1: unit 3 not found!
[  440.756628][  T192] usb 4-1: Using ep0 maxpacket: 16
[  440.758397][  T192] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  440.760178][  T192] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8
[  440.760223][  T192] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  440.764703][  T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.764718][  T192] usb 4-1: Product: 赒�䤦༮믷⚕雪ṟ즈頼㋓묺ꅲ毒��꾨⩃궘隸찼᱊罧戼�ᔾ祌ۉ㓞괘খ퉔�
[  440.764729][  T192] usb 4-1: Manufacturer: �
[  440.764736][  T192] usb 4-1: SerialNumber: syz
[  441.043142][  T192] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  441.043171][  T192] cdc_ncm 4-1:1.0: bind() failure
[  441.076573][  T192] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  441.076618][  T192] cdc_ncm 4-1:1.1: bind() failure
[  441.083155][  T192] usb 4-1: USB disconnect, device number 66
[  441.199487][   T25] usb 5-1: USB disconnect, device number 72
[  441.252100][T12082] FAULT_INJECTION: forcing a failure.
[  441.252100][T12082] name failslab, interval 1, probability 0, space 0, times 0
[  441.252150][T12082] CPU: 1 UID: 0 PID: 12082 Comm: syz.1.1928 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  441.252177][T12082] Tainted: [L]=SOFTLOCKUP
[  441.252184][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  441.252198][T12082] Call Trace:
[  441.252206][T12082]  <TASK>
[  441.252216][T12082]  dump_stack_lvl+0xe8/0x150
[  441.252257][T12082]  should_fail_ex+0x410/0x560
[  441.252286][T12082]  should_failslab+0xa8/0x100
[  441.252312][T12082]  ? anon_vma_clone+0x3f3/0x9f0
[  441.252331][T12082]  kmem_cache_alloc_noprof+0xa1/0x600
[  441.252356][T12082]  ? anon_vma_clone+0x3f3/0x9f0
[  441.252382][T12082]  anon_vma_clone+0x3f3/0x9f0
[  441.252412][T12082]  __split_vma+0x3e0/0xa60
[  441.252440][T12082]  ? mas_next_slot+0xc91/0xd70
[  441.252465][T12082]  ? __pfx___split_vma+0x10/0x10
[  441.252502][T12082]  ? mas_find+0x6d6/0xcb0
[  441.252529][T12082]  vms_gather_munmap_vmas+0x4e3/0x1370
[  441.252571][T12082]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  441.252605][T12082]  ? mas_walk+0x37e/0x490
[  441.252636][T12082]  mmap_region+0x925/0x25b0
[  441.252678][T12082]  ? __pfx_mmap_region+0x10/0x10
[  441.252710][T12082]  ? __lock_acquire+0x747/0x2de0
[  441.252740][T12082]  ? __lock_acquire+0x747/0x2de0
[  441.252777][T12082]  ? lock_acquire+0x115/0x350
[  441.252862][T12082]  ? kstrtoull+0x137/0x1d0
[  441.252887][T12082]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  441.252918][T12082]  ? rcu_is_watching+0x16/0xb0
[  441.252944][T12082]  ? cap_capable+0x123/0x460
[  441.252973][T12082]  ? security_capable+0xb9/0x2c0
[  441.253007][T12082]  do_mmap+0xe0a/0x1300
[  441.253045][T12082]  ? __pfx_do_mmap+0x10/0x10
[  441.253085][T12082]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  441.253109][T12082]  ? down_write_killable+0x17e/0x240
[  441.253138][T12082]  ? __pfx_down_write_killable+0x10/0x10
[  441.253163][T12082]  ? __fget_files+0x2a/0x420
[  441.253181][T12082]  ? apparmor_mmap_file+0xbe/0xe0
[  441.253210][T12082]  vm_mmap_pgoff+0x272/0x4e0
[  441.253251][T12082]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  441.253275][T12082]  ? ksys_write+0x242/0x270
[  441.253299][T12082]  ? __pfx_ksys_write+0x10/0x10
[  441.253323][T12082]  ? ksys_mmap_pgoff+0xf3/0x760
[  441.253352][T12082]  ? __x64_sys_mmap+0x7f/0x140
[  441.253376][T12082]  do_syscall_64+0x166/0x520
[  441.253396][T12082]  ? trace_irq_disable+0x3b/0x140
[  441.253418][T12082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.253438][T12082]  ? clear_bhb_loop+0x70/0xc0
[  441.253462][T12082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.253481][T12082] RIP: 0033:0x7fdece79e2d9
[  441.253499][T12082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.253515][T12082] RSP: 002b:00007fdecf723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  441.253535][T12082] RAX: ffffffffffffffda RBX: 00007fdecea26090 RCX: 00007fdece79e2d9
[  441.253550][T12082] RDX: 0000000000000000 RSI: 0000000000000930 RDI: 0000200000eb2000
[  441.253562][T12082] RBP: 00007fdecf723090 R08: ffffffffffffffff R09: 0000000000000000
[  441.253575][T12082] R10: 32e7851d6de9e532 R11: 0000000000000246 R12: 0000000000000001
[  441.253587][T12082] R13: 00007fdecea26128 R14: 00007fdecea26090 R15: 00007fdeceb4fa48
[  441.253617][T12082]  </TASK>
[  441.806242][   T25] usb 1-1: new low-speed USB device number 76 using dummy_hcd
[  441.965913][  T192] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  441.965914][   T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  441.967030][   T25] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  441.967055][   T25] usb 1-1: config 0 has no interface number 0
[  441.967093][   T25] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  441.967114][   T25] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  441.967140][   T25] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  441.967165][   T25] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  441.967189][   T25] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  441.967213][   T25] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  441.967252][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.979251][   T25] usb 1-1: config 0 descriptor??
[  441.982637][T12084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  441.982767][T12084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  442.007152][   T25] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  442.156077][  T192] usb 2-1: Using ep0 maxpacket: 8
[  442.157489][  T192] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  442.158540][  T192] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  442.158584][  T192] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  442.158611][  T192] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  442.158634][  T192] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  442.158657][  T192] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  442.158677][  T192] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.158714][  T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.373361][  T192] usb 2-1: GET_CAPABILITIES returned 0
[  442.373413][  T192] usbtmc 2-1:16.0: can't read capabilities
[  442.408913][   T25] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  442.536095][   T25] usb 4-1: device descriptor read/64, error -71
[  442.596162][T12124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  442.598194][  T192] usb 1-1: USB disconnect, device number 76
[  442.622411][  T192] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  442.712440][T12128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1942'.
[  442.776686][   T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  442.880486][T12135] ebt_among: dst integrity fail: 100
[  442.906434][   T25] usb 4-1: device descriptor read/64, error -71
[  442.954775][T12139] xt_hashlimit: size too large, truncated to 1048576
[  443.016417][   T25] usb usb4-port1: attempt power cycle
[  443.299619][T12148] FAULT_INJECTION: forcing a failure.
[  443.299619][T12148] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  443.299656][T12148] CPU: 0 UID: 0 PID: 12148 Comm: syz.2.1951 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  443.299684][T12148] Tainted: [L]=SOFTLOCKUP
[  443.299691][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  443.299704][T12148] Call Trace:
[  443.299712][T12148]  <TASK>
[  443.299721][T12148]  dump_stack_lvl+0xe8/0x150
[  443.299755][T12148]  should_fail_ex+0x410/0x560
[  443.299790][T12148]  prepare_alloc_pages+0x223/0x600
[  443.299821][T12148]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  443.299851][T12148]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  443.299881][T12148]  ? __pfx_policy_nodemask+0x10/0x10
[  443.299907][T12148]  ? __get_vm_area_node+0x155/0x2f0
[  443.299925][T12148]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  443.299946][T12148]  ? __vmalloc_noprof+0xd2/0x120
[  443.299965][T12148]  ? translate_table+0x13e9/0x3520
[  443.299992][T12148]  ? do_replace_finish+0xa72/0x18c0
[  443.300012][T12148]  ? do_ebt_set_ctl+0x2fb/0x1020
[  443.300028][T12148]  ? nf_setsockopt+0x26f/0x290
[  443.300043][T12148]  ? do_sock_setsockopt+0x17c/0x1b0
[  443.300060][T12148]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  443.300080][T12148]  ? do_syscall_64+0x166/0x520
[  443.300106][T12148]  alloc_pages_mpol+0x21e/0x390
[  443.300140][T12148]  alloc_pages_noprof+0xb1/0x2b0
[  443.300170][T12148]  get_free_pages_noprof+0xf/0x80
[  443.300195][T12148]  __kasan_populate_vmalloc+0x38/0x1c0
[  443.300218][T12148]  ? do_raw_spin_unlock+0xf5/0x200
[  443.300252][T12148]  alloc_vmap_area+0xd1a/0x1420
[  443.300296][T12148]  ? __pfx_alloc_vmap_area+0x10/0x10
[  443.300324][T12148]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  443.300348][T12148]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  443.300372][T12148]  ? __get_vm_area_node+0x155/0x2f0
[  443.300396][T12148]  __get_vm_area_node+0x200/0x2f0
[  443.300424][T12148]  __vmalloc_node_range_noprof+0x343/0x1540
[  443.300446][T12148]  ? translate_table+0x13e9/0x3520
[  443.300501][T12148]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  443.300522][T12148]  ? percpu_ref_get_many+0x19/0x140
[  443.300573][T12148]  ? translate_table+0x13e9/0x3520
[  443.300601][T12148]  __vmalloc_noprof+0xd2/0x120
[  443.300622][T12148]  ? translate_table+0x13e9/0x3520
[  443.300653][T12148]  translate_table+0x13e9/0x3520
[  443.300705][T12148]  ? __pfx_translate_table+0x10/0x10
[  443.300744][T12148]  ? __lock_acquire+0x747/0x2de0
[  443.300787][T12148]  do_replace_finish+0xa72/0x18c0
[  443.300833][T12148]  do_replace+0x344/0x470
[  443.300855][T12148]  ? __pfx_do_replace+0x10/0x10
[  443.300886][T12148]  ? bpf_lsm_capable+0x9/0x20
[  443.300907][T12148]  ? security_capable+0x7e/0x2c0
[  443.300941][T12148]  do_ebt_set_ctl+0x2fb/0x1020
[  443.300964][T12148]  ? __lock_acquire+0x747/0x2de0
[  443.300986][T12148]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  443.301019][T12148]  ? kstrtouint+0x6e/0xe0
[  443.301041][T12148]  ? begin_current_label_crit_section+0x2a3/0x830
[  443.301075][T12148]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  443.301106][T12148]  ? get_pid_task+0x20/0x1f0
[  443.301135][T12148]  ? __mutex_trylock_common+0x15f/0x270
[  443.301165][T12148]  ? __pfx___mutex_trylock_common+0x10/0x10
[  443.301195][T12148]  ? rcu_is_watching+0x16/0xb0
[  443.301221][T12148]  ? trace_contention_end+0x3d/0x140
[  443.301258][T12148]  ? nf_setsockopt+0x221/0x290
[  443.301281][T12148]  ? __mutex_unlock_slowpath+0x731/0x900
[  443.301311][T12148]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  443.301347][T12148]  nf_setsockopt+0x26f/0x290
[  443.301369][T12148]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  443.301399][T12148]  do_sock_setsockopt+0x17c/0x1b0
[  443.301424][T12148]  __x64_sys_setsockopt+0x13d/0x1b0
[  443.301450][T12148]  do_syscall_64+0x166/0x520
[  443.301471][T12148]  ? trace_irq_disable+0x3b/0x140
[  443.301492][T12148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.301513][T12148]  ? clear_bhb_loop+0x70/0xc0
[  443.301543][T12148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.301563][T12148] RIP: 0033:0x7f8d4c59e2d9
[  443.301582][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.301600][T12148] RSP: 002b:00007f8d4d489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  443.301621][T12148] RAX: ffffffffffffffda RBX: 00007f8d4c825fa0 RCX: 00007f8d4c59e2d9
[  443.301636][T12148] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  443.301649][T12148] RBP: 00007f8d4d489090 R08: 0000000000001450 R09: 0000000000000000
[  443.301662][T12148] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002
[  443.301676][T12148] R13: 00007f8d4c826038 R14: 00007f8d4c825fa0 R15: 00007f8d4c94fa48
[  443.301707][T12148]  </TASK>
[  443.356218][   T25] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  443.602838][   T25] usb 4-1: device descriptor read/8, error -71
[  443.836149][   T25] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  443.856481][   T25] usb 4-1: device descriptor read/8, error -71
[  443.966165][   T25] usb usb4-port1: unable to enumerate USB device
[  444.017953][T12153] FAULT_INJECTION: forcing a failure.
[  444.017953][T12153] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  444.017979][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.0.1953 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  444.017994][T12153] Tainted: [L]=SOFTLOCKUP
[  444.017998][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  444.018005][T12153] Call Trace:
[  444.018010][T12153]  <TASK>
[  444.018015][T12153]  dump_stack_lvl+0xe8/0x150
[  444.018035][T12153]  should_fail_ex+0x410/0x560
[  444.018053][T12153]  prepare_alloc_pages+0x223/0x600
[  444.018070][T12153]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  444.018086][T12153]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  444.018098][T12153]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  444.018113][T12153]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  444.018128][T12153]  ? __pfx_policy_nodemask+0x10/0x10
[  444.018142][T12153]  ? __get_vm_area_node+0x155/0x2f0
[  444.018151][T12153]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  444.018162][T12153]  ? __vmalloc_noprof+0xd2/0x120
[  444.018174][T12153]  __alloc_pages_noprof+0x10/0x100
[  444.018187][T12153]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  444.018204][T12153]  ? alloc_pages_noprof+0x140/0x2b0
[  444.018221][T12153]  __kasan_populate_vmalloc+0xb7/0x1c0
[  444.018236][T12153]  alloc_vmap_area+0xd1a/0x1420
[  444.018260][T12153]  ? __pfx_alloc_vmap_area+0x10/0x10
[  444.018274][T12153]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  444.018287][T12153]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  444.018299][T12153]  ? __get_vm_area_node+0x155/0x2f0
[  444.018312][T12153]  __get_vm_area_node+0x200/0x2f0
[  444.018326][T12153]  __vmalloc_node_range_noprof+0x343/0x1540
[  444.018338][T12153]  ? translate_table+0x13e9/0x3520
[  444.018367][T12153]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  444.018378][T12153]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  444.018395][T12153]  ? translate_table+0x13e9/0x3520
[  444.018409][T12153]  __vmalloc_noprof+0xd2/0x120
[  444.018420][T12153]  ? translate_table+0x13e9/0x3520
[  444.018436][T12153]  translate_table+0x13e9/0x3520
[  444.018470][T12153]  ? __pfx_translate_table+0x10/0x10
[  444.018490][T12153]  ? __lock_acquire+0x747/0x2de0
[  444.018513][T12153]  do_replace_finish+0xa72/0x18c0
[  444.018537][T12153]  do_replace+0x344/0x470
[  444.018548][T12153]  ? __pfx_do_replace+0x10/0x10
[  444.018564][T12153]  ? bpf_lsm_capable+0x9/0x20
[  444.018575][T12153]  ? security_capable+0x7e/0x2c0
[  444.018594][T12153]  do_ebt_set_ctl+0x2fb/0x1020
[  444.018606][T12153]  ? __lock_acquire+0x747/0x2de0
[  444.018617][T12153]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  444.018634][T12153]  ? kstrtouint+0x6e/0xe0
[  444.018649][T12153]  ? begin_current_label_crit_section+0x2a3/0x830
[  444.018684][T12153]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  444.018714][T12153]  ? get_pid_task+0x20/0x1f0
[  444.018741][T12153]  ? __mutex_trylock_common+0x15f/0x270
[  444.018768][T12153]  ? __pfx___mutex_trylock_common+0x10/0x10
[  444.018783][T12153]  ? rcu_is_watching+0x16/0xb0
[  444.018799][T12153]  ? trace_contention_end+0x3d/0x140
[  444.018818][T12153]  ? nf_setsockopt+0x221/0x290
[  444.018830][T12153]  ? __mutex_unlock_slowpath+0x731/0x900
[  444.018847][T12153]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  444.018866][T12153]  nf_setsockopt+0x26f/0x290
[  444.018877][T12153]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  444.018893][T12153]  do_sock_setsockopt+0x17c/0x1b0
[  444.018907][T12153]  __x64_sys_setsockopt+0x13d/0x1b0
[  444.018920][T12153]  do_syscall_64+0x166/0x520
[  444.018932][T12153]  ? trace_irq_disable+0x3b/0x140
[  444.018944][T12153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.018956][T12153]  ? clear_bhb_loop+0x70/0xc0
[  444.018971][T12153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.018981][T12153] RIP: 0033:0x7f9dc6d9e2d9
[  444.018992][T12153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.019002][T12153] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  444.019015][T12153] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  444.019023][T12153] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  444.019030][T12153] RBP: 00007f9dc7cbc090 R08: 00000000000004e0 R09: 0000000000000000
[  444.019037][T12153] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000002
[  444.019044][T12153] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  444.019060][T12153]  </TASK>
[  444.125623][T12156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1954'.
[  444.246209][ T5899] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  444.396005][ T5899] usb 3-1: Using ep0 maxpacket: 8
[  444.396810][ T5899] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  444.397925][ T5899] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  444.397949][ T5899] usb 3-1: config 0 has no interface number 0
[  444.397985][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  444.398008][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  444.398067][ T5899] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  444.398092][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  444.398152][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.401056][ T5899] usb 3-1: config 0 descriptor??
[  444.407688][ T5899] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  444.825623][ T5899] usb 2-1: USB disconnect, device number 74
[  446.126719][ T5705] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  446.286843][ T5705] usb 1-1: Using ep0 maxpacket: 32
[  446.288695][ T5705] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  446.290387][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.290433][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.333157][ T5705] usb 1-1: config 0 descriptor??
[  446.348517][ T5705] hub 1-1:0.0: USB hub found
[  446.545271][ T5705] hub 1-1:0.0: 1 port detected
[  446.661689][T12201] ebt_among: dst integrity fail: 100
[  447.016216][ T5678] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  447.114478][ T5899] usb 3-1: USB disconnect, device number 79
[  447.133101][ T5899] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  447.167586][ T5678] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  447.171428][ T5678] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  447.171456][ T5678] usb 2-1: config 0 has no interface number 0
[  447.171496][ T5678] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  447.186527][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[  447.216293][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.216320][ T5678] usb 2-1: Product: syz
[  447.216335][ T5678] usb 2-1: Manufacturer: syz
[  447.216350][ T5678] usb 2-1: SerialNumber: syz
[  447.218852][ T5678] usb 2-1: config 0 descriptor??
[  447.248089][ T5678] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  447.321893][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'.
[  447.324304][T12218] netlink: 'syz.2.1971': attribute type 1 has an invalid length.
[  447.389195][T12218] 8021q: adding VLAN 0 to HW filter on device bond3
[  447.593152][T12193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.593570][T12193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.789638][ T5899] usb 1-1: USB disconnect, device number 77
[  447.975843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  448.637590][T12240] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  448.656521][T12240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.700791][T12240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.796295][ T5707] usb 1-1: new low-speed USB device number 78 using dummy_hcd
[  448.940971][T12249] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  448.955089][ T5707] usb 1-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00
[  448.965450][ T5707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  448.965501][ T5707] usb 1-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  448.965536][ T5707] usb 1-1: config 1 interface 0 has no altsetting 0
[  449.011383][ T5707] usb 1-1: string descriptor 0 read error: -22
[  449.011472][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  449.197640][T12252] ebt_among: dst integrity fail: 100
[  449.528200][    C1] usb 2-1: yurex_control_callback - control failed: -2
[  449.530948][  T192] usb 2-1: USB disconnect, device number 75
[  449.557323][  T192] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  449.803508][  T192] usb 1-1: USB disconnect, device number 78
[  449.866166][ T5707] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  450.017401][ T5707] usb 3-1: Using ep0 maxpacket: 16
[  450.017986][ T5707] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  450.019079][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  450.019109][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  450.023083][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.023108][ T5707] usb 3-1: Product: syz
[  450.023291][ T5707] usb 3-1: Manufacturer: syz
[  450.023307][ T5707] usb 3-1: SerialNumber: syz
[  450.054101][ T5707] usb 3-1: config 0 descriptor??
[  450.100236][ T5707] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  450.100269][ T5707] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  450.348030][T12269] FAULT_INJECTION: forcing a failure.
[  450.348030][T12269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.348067][T12269] CPU: 0 UID: 0 PID: 12269 Comm: syz.4.1983 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  450.348094][T12269] Tainted: [L]=SOFTLOCKUP
[  450.348102][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  450.348114][T12269] Call Trace:
[  450.348122][T12269]  <TASK>
[  450.348133][T12269]  dump_stack_lvl+0xe8/0x150
[  450.348167][T12269]  should_fail_ex+0x410/0x560
[  450.348199][T12269]  strncpy_from_user+0x36/0x2c0
[  450.348230][T12269]  do_getname+0x77/0x250
[  450.348259][T12269]  __se_sys_quotactl+0x1f1/0x9f0
[  450.348290][T12269]  ? fput+0xa0/0xd0
[  450.348320][T12269]  ? __pfx___se_sys_quotactl+0x10/0x10
[  450.348346][T12269]  ? __pfx_ksys_write+0x10/0x10
[  450.348378][T12269]  do_syscall_64+0x166/0x520
[  450.348399][T12269]  ? trace_irq_disable+0x3b/0x140
[  450.348420][T12269]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.348441][T12269]  ? clear_bhb_loop+0x70/0xc0
[  450.348466][T12269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.348485][T12269] RIP: 0033:0x7fee69b9e2d9
[  450.348504][T12269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.348522][T12269] RSP: 002b:00007fee6ab36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  450.348545][T12269] RAX: ffffffffffffffda RBX: 00007fee69e25fa0 RCX: 00007fee69b9e2d9
[  450.348560][T12269] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000701
[  450.348574][T12269] RBP: 00007fee6ab36090 R08: 0000000000000000 R09: 0000000000000000
[  450.348588][T12269] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  450.348600][T12269] R13: 00007fee69e26038 R14: 00007fee69e25fa0 R15: 00007fee69f4fa48
[  450.348631][T12269]  </TASK>
[  450.450034][   T31] kauditd_printk_skb: 125 callbacks suppressed
[  450.450053][   T31] audit: type=1326 audit(1791956739.771:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.4.1983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee69b9e2d9 code=0x0
[  450.788669][ T5707] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  450.789688][ T5707] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  451.357987][ T5698] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  451.401118][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.420671][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.436657][ T5707] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  451.527363][ T5698] usb 1-1: Using ep0 maxpacket: 16
[  451.528166][ T5698] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  451.529378][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.529405][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.529425][ T5698] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  451.529486][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.535058][ T5698] usb 1-1: config 0 descriptor??
[  451.646620][ T5707] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  451.646976][ T5707] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  451.647347][ T5707] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  451.647727][ T5707] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  451.648142][ T5707] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  451.698037][ T5707] usb 3-1: USB disconnect, device number 80
[  451.920776][ T5698] usbhid 1-1:0.0: can't add hid device: -71
[  451.920839][ T5698] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  451.945465][ T5698] usb 1-1: USB disconnect, device number 79
[  452.141841][T12289] netlink: 'syz.3.1991': attribute type 267 has an invalid length.
[  452.197686][T12287] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  452.204735][T12287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.244058][T12287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.305112][   T31] audit: type=1326 audit(1791956741.631:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.3.1992" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87a0b9e2d9 code=0x0
[  452.472633][T12295] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  452.623295][T12298] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  452.895890][ T5707] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  453.057474][ T5707] usb 1-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00
[  453.058799][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  453.058830][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  453.058852][ T5707] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  453.058892][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.118996][ T5707] usb 1-1: config 0 descriptor??
[  453.341896][T12309] ip_tables: iptables: counters copy to user failed while replacing table
[  453.356264][T12309] ip_tables: iptables: counters copy to user failed while replacing table
[  453.537046][T12295] 8021q: adding VLAN 0 to HW filter on device bond4
[  453.596073][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.598819][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.644940][ T5707] usbhid 1-1:0.0: can't add hid device: -71
[  453.645046][ T5707] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  453.666940][ T5707] usb 1-1: USB disconnect, device number 80
[  454.155609][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2002'.
[  454.277949][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'.
[  454.705904][   T25] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  454.856586][   T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  454.859793][   T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  454.859819][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  454.859833][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  454.859845][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  454.859868][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.864289][   T25] usb 1-1: config 0 descriptor??
[  454.887925][ T5707] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  455.055945][ T5707] usb 3-1: Using ep0 maxpacket: 8
[  455.060164][ T5707] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  455.061701][ T5707] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  455.061728][ T5707] usb 3-1: config 0 has no interface number 0
[  455.061765][ T5707] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  455.062135][ T5707] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  455.062175][ T5707] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  455.062201][ T5707] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  455.062243][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.150400][ T5707] usb 3-1: config 0 descriptor??
[  455.171579][ T5707] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  455.257209][ T5678] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[  455.336647][T12338] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  455.339109][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  455.339208][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  455.356538][   T25] usb 1-1: USB disconnect, device number 81
[  455.363257][T12338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.406390][T12338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.450475][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short
[  455.451090][ T5678] usb 5-1: not running at top speed; connect to a high speed hub
[  455.451109][ T5678] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=f1.40
[  455.451129][ T5678] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  455.472221][ T5678] usb 5-1: unable to read config index 0 descriptor/start: -61
[  455.472257][ T5678] usb 5-1: can't read configurations, error -61
[  455.596303][ T5678] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  455.759638][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short
[  455.760309][ T5678] usb 5-1: not running at top speed; connect to a high speed hub
[  455.760378][ T5678] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=f1.40
[  455.760404][ T5678] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  455.766722][ T5678] usb 5-1: unable to read config index 0 descriptor/start: -61
[  455.766823][ T5678] usb 5-1: can't read configurations, error -61
[  455.767103][ T5678] usb usb5-port1: attempt power cycle
[  456.032558][T12349] FAULT_INJECTION: forcing a failure.
[  456.032558][T12349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  456.032594][T12349] CPU: 0 UID: 0 PID: 12349 Comm: syz.1.2010 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  456.032621][T12349] Tainted: [L]=SOFTLOCKUP
[  456.032630][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  456.032642][T12349] Call Trace:
[  456.032650][T12349]  <TASK>
[  456.032660][T12349]  dump_stack_lvl+0xe8/0x150
[  456.032692][T12349]  should_fail_ex+0x410/0x560
[  456.032724][T12349]  _copy_from_user+0x2d/0xb0
[  456.032754][T12349]  do_sock_getsockopt+0x200/0x7e0
[  456.032782][T12349]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  456.032817][T12349]  ? __fget_files+0x3a2/0x420
[  456.032835][T12349]  ? __fget_files+0x2a/0x420
[  456.032858][T12349]  __x64_sys_getsockopt+0x1a4/0x240
[  456.032896][T12349]  do_syscall_64+0x166/0x520
[  456.032918][T12349]  ? trace_irq_disable+0x3b/0x140
[  456.032940][T12349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.032960][T12349]  ? clear_bhb_loop+0x70/0xc0
[  456.032983][T12349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.033001][T12349] RIP: 0033:0x7fdece79e2d9
[  456.033019][T12349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.033035][T12349] RSP: 002b:00007fdecf744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  456.033056][T12349] RAX: ffffffffffffffda RBX: 00007fdecea25fa0 RCX: 00007fdece79e2d9
[  456.033071][T12349] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003
[  456.033084][T12349] RBP: 00007fdecf744090 R08: 00002000000016c0 R09: 0000000000000000
[  456.033098][T12349] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001
[  456.033111][T12349] R13: 00007fdecea26038 R14: 00007fdecea25fa0 R15: 00007fdeceb4fa48
[  456.033143][T12349]  </TASK>
[  456.118763][ T5678] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  456.187794][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short
[  456.191099][ T5678] usb 5-1: not running at top speed; connect to a high speed hub
[  456.191192][ T5678] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=f1.40
[  456.191225][ T5678] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  456.204836][ T5678] usb 5-1: unable to read config index 0 descriptor/start: -61
[  456.204933][ T5678] usb 5-1: can't read configurations, error -61
[  456.326350][ T5678] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  456.365245][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short
[  456.374581][ T5678] usb 5-1: not running at top speed; connect to a high speed hub
[  456.374618][ T5678] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=f1.40
[  456.374720][ T5678] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  456.387271][ T5678] usb 5-1: unable to read config index 0 descriptor/start: -61
[  456.387372][ T5678] usb 5-1: can't read configurations, error -61
[  456.387804][ T5678] usb usb5-port1: unable to enumerate USB device
[  456.671967][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'.
[  457.048204][ T5707] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  457.186349][ T5707] usb 4-1: device descriptor read/64, error -71
[  457.428221][ T5707] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  457.481850][ T5705] usb 3-1: USB disconnect, device number 81
[  457.496375][ T5705] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  457.576219][ T5707] usb 4-1: device descriptor read/64, error -71
[  457.694007][T12369] FAULT_INJECTION: forcing a failure.
[  457.694007][T12369] name failslab, interval 1, probability 0, space 0, times 0
[  457.694043][T12369] CPU: 1 UID: 0 PID: 12369 Comm: syz.0.2016 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  457.694070][T12369] Tainted: [L]=SOFTLOCKUP
[  457.694077][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  457.694089][T12369] Call Trace:
[  457.694098][T12369]  <TASK>
[  457.694107][T12369]  dump_stack_lvl+0xe8/0x150
[  457.694140][T12369]  should_fail_ex+0x410/0x560
[  457.694174][T12369]  should_failslab+0xa8/0x100
[  457.694203][T12369]  __kmalloc_cache_noprof+0xa3/0x600
[  457.694228][T12369]  ? tipc_nametbl_lookup_group+0x78c/0xc10
[  457.694253][T12369]  ? tipc_nametbl_lookup_group+0x78c/0xc10
[  457.694285][T12369]  tipc_nametbl_lookup_group+0x78c/0xc10
[  457.694320][T12369]  ? tipc_nametbl_lookup_group+0xac/0xc10
[  457.694348][T12369]  __tipc_sendmsg+0x14d2/0x2b60
[  457.694376][T12369]  ? arch_stack_walk+0xfb/0x150
[  457.694401][T12369]  ? look_up_lock_class+0x57/0x110
[  457.694424][T12369]  ? register_lock_class+0x31/0x2e0
[  457.694449][T12369]  ? __pfx___tipc_sendmsg+0x10/0x10
[  457.694479][T12369]  ? __lock_acquire+0x747/0x2de0
[  457.694512][T12369]  ? ima_match_policy+0x21a6/0x2230
[  457.694549][T12369]  ? lock_acquire+0x115/0x350
[  457.694585][T12369]  ? process_measurement+0x7b2/0x1c10
[  457.694618][T12369]  ? __lock_acquire+0x747/0x2de0
[  457.694649][T12369]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  457.694685][T12369]  __tipc_sendstream+0x105f/0x12a0
[  457.694704][T12369]  ? __lock_acquire+0x747/0x2de0
[  457.694737][T12369]  ? __lock_acquire+0x747/0x2de0
[  457.694772][T12369]  ? do_raw_spin_lock+0x12b/0x2f0
[  457.694804][T12369]  ? __pfx___tipc_sendstream+0x10/0x10
[  457.694828][T12369]  ? tipc_send_packet+0x6e/0xa0
[  457.694851][T12369]  ? __local_bh_enable_ip+0xd6/0x140
[  457.694883][T12369]  tipc_send_packet+0x7c/0xa0
[  457.694905][T12369]  ? __pfx_tipc_send_packet+0x10/0x10
[  457.694923][T12369]  sock_sendmsg_nosec+0x13a/0x180
[  457.694954][T12369]  ____sys_sendmsg+0x54e/0x850
[  457.694985][T12369]  ? __pfx_____sys_sendmsg+0x10/0x10
[  457.695016][T12369]  ? import_iovec+0x73/0xa0
[  457.695049][T12369]  ___sys_sendmsg+0x2a5/0x360
[  457.695070][T12369]  ? __lock_acquire+0x747/0x2de0
[  457.695096][T12369]  ? __pfx____sys_sendmsg+0x10/0x10
[  457.695153][T12369]  ? __fget_files+0x2a/0x420
[  457.695172][T12369]  ? __fget_files+0x3a2/0x420
[  457.695202][T12369]  __x64_sys_sendmsg+0x1b1/0x290
[  457.695227][T12369]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  457.695271][T12369]  do_syscall_64+0x166/0x520
[  457.695293][T12369]  ? trace_irq_disable+0x3b/0x140
[  457.695315][T12369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.695336][T12369]  ? clear_bhb_loop+0x70/0xc0
[  457.695361][T12369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.695381][T12369] RIP: 0033:0x7f9dc6d9e2d9
[  457.695400][T12369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.695418][T12369] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  457.695440][T12369] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  457.695456][T12369] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  457.695468][T12369] RBP: 00007f9dc7cbc090 R08: 0000000000000000 R09: 0000000000000000
[  457.695481][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.695494][T12369] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  457.695526][T12369]  </TASK>
[  457.696215][ T5707] usb usb4-port1: attempt power cycle
[  458.004911][T12371] FAULT_INJECTION: forcing a failure.
[  458.004911][T12371] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  458.004945][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.0.2017 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  458.004972][T12371] Tainted: [L]=SOFTLOCKUP
[  458.004980][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  458.004992][T12371] Call Trace:
[  458.005001][T12371]  <TASK>
[  458.005010][T12371]  dump_stack_lvl+0xe8/0x150
[  458.005044][T12371]  should_fail_ex+0x410/0x560
[  458.005075][T12371]  prepare_alloc_pages+0x223/0x600
[  458.005105][T12371]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  458.005133][T12371]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  458.005157][T12371]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  458.005183][T12371]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  458.005214][T12371]  ? __pfx_policy_nodemask+0x10/0x10
[  458.005239][T12371]  ? __get_vm_area_node+0x155/0x2f0
[  458.005257][T12371]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  458.005276][T12371]  ? __vmalloc_noprof+0xd2/0x120
[  458.005298][T12371]  __alloc_pages_noprof+0x10/0x100
[  458.005323][T12371]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  458.005354][T12371]  ? alloc_pages_noprof+0x140/0x2b0
[  458.005385][T12371]  __kasan_populate_vmalloc+0xb7/0x1c0
[  458.005413][T12371]  alloc_vmap_area+0xd1a/0x1420
[  458.005455][T12371]  ? __pfx_alloc_vmap_area+0x10/0x10
[  458.005481][T12371]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  458.005505][T12371]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  458.005528][T12371]  ? __get_vm_area_node+0x155/0x2f0
[  458.005551][T12371]  __get_vm_area_node+0x200/0x2f0
[  458.005577][T12371]  __vmalloc_node_range_noprof+0x343/0x1540
[  458.005598][T12371]  ? translate_table+0x13e9/0x3520
[  458.005657][T12371]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  458.005677][T12371]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  458.005706][T12371]  ? translate_table+0x13e9/0x3520
[  458.005732][T12371]  __vmalloc_noprof+0xd2/0x120
[  458.005753][T12371]  ? translate_table+0x13e9/0x3520
[  458.005783][T12371]  translate_table+0x13e9/0x3520
[  458.005831][T12371]  ? __pfx_translate_table+0x10/0x10
[  458.005872][T12371]  ? __lock_acquire+0x747/0x2de0
[  458.005913][T12371]  do_replace_finish+0xa72/0x18c0
[  458.005957][T12371]  do_replace+0x344/0x470
[  458.005978][T12371]  ? __pfx_do_replace+0x10/0x10
[  458.006006][T12371]  ? bpf_lsm_capable+0x9/0x20
[  458.006025][T12371]  ? security_capable+0x7e/0x2c0
[  458.006058][T12371]  do_ebt_set_ctl+0x2fb/0x1020
[  458.006080][T12371]  ? __lock_acquire+0x747/0x2de0
[  458.006101][T12371]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  458.006131][T12371]  ? kstrtouint+0x6e/0xe0
[  458.006156][T12371]  ? begin_current_label_crit_section+0x2a3/0x830
[  458.006190][T12371]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  458.006219][T12371]  ? get_pid_task+0x20/0x1f0
[  458.006245][T12371]  ? __mutex_trylock_common+0x15f/0x270
[  458.006278][T12371]  ? __pfx___mutex_trylock_common+0x10/0x10
[  458.006306][T12371]  ? rcu_is_watching+0x16/0xb0
[  458.006331][T12371]  ? trace_contention_end+0x3d/0x140
[  458.006365][T12371]  ? nf_setsockopt+0x221/0x290
[  458.006389][T12371]  ? __mutex_unlock_slowpath+0x731/0x900
[  458.006422][T12371]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  458.006457][T12371]  nf_setsockopt+0x26f/0x290
[  458.006477][T12371]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  458.006506][T12371]  do_sock_setsockopt+0x17c/0x1b0
[  458.006530][T12371]  __x64_sys_setsockopt+0x13d/0x1b0
[  458.006555][T12371]  do_syscall_64+0x166/0x520
[  458.006575][T12371]  ? trace_irq_disable+0x3b/0x140
[  458.006596][T12371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.006622][T12371]  ? clear_bhb_loop+0x70/0xc0
[  458.006646][T12371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.006665][T12371] RIP: 0033:0x7f9dc6d9e2d9
[  458.006683][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.006700][T12371] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  458.006722][T12371] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  458.006737][T12371] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  458.006750][T12371] RBP: 00007f9dc7cbc090 R08: 0000000000000828 R09: 0000000000000000
[  458.006763][T12371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  458.006775][T12371] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  458.006806][T12371]  </TASK>
[  458.015766][T12371] warn_alloc: 2 callbacks suppressed
[  458.015782][T12371] syz.0.2017: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  458.017738][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.0.2017 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  458.017765][T12371] Tainted: [L]=SOFTLOCKUP
[  458.017773][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  458.017786][T12371] Call Trace:
[  458.017793][T12371]  <TASK>
[  458.017802][T12371]  dump_stack_lvl+0xe8/0x150
[  458.017834][T12371]  warn_alloc+0x24d/0x270
[  458.017858][T12371]  ? lockdep_hardirqs_on+0x7b/0x110
[  458.017883][T12371]  ? __pfx_warn_alloc+0x10/0x10
[  458.017903][T12371]  ? kfree+0x1c5/0x650
[  458.017928][T12371]  ? __get_vm_area_node+0x219/0x2f0
[  458.017954][T12371]  __vmalloc_node_range_noprof+0x36b/0x1540
[  458.018000][T12371]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  458.018019][T12371]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  458.018050][T12371]  ? translate_table+0x13e9/0x3520
[  458.018076][T12371]  __vmalloc_noprof+0xd2/0x120
[  458.018097][T12371]  ? translate_table+0x13e9/0x3520
[  458.018125][T12371]  translate_table+0x13e9/0x3520
[  458.018175][T12371]  ? __pfx_translate_table+0x10/0x10
[  458.018212][T12371]  ? __lock_acquire+0x747/0x2de0
[  458.018253][T12371]  do_replace_finish+0xa72/0x18c0
[  458.018297][T12371]  do_replace+0x344/0x470
[  458.018318][T12371]  ? __pfx_do_replace+0x10/0x10
[  458.018345][T12371]  ? bpf_lsm_capable+0x9/0x20
[  458.018366][T12371]  ? security_capable+0x7e/0x2c0
[  458.018399][T12371]  do_ebt_set_ctl+0x2fb/0x1020
[  458.018421][T12371]  ? __lock_acquire+0x747/0x2de0
[  458.018441][T12371]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  458.018472][T12371]  ? kstrtouint+0x6e/0xe0
[  458.018494][T12371]  ? begin_current_label_crit_section+0x2a3/0x830
[  458.018527][T12371]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  458.018556][T12371]  ? get_pid_task+0x20/0x1f0
[  458.018583][T12371]  ? __mutex_trylock_common+0x15f/0x270
[  458.018618][T12371]  ? __pfx___mutex_trylock_common+0x10/0x10
[  458.018647][T12371]  ? rcu_is_watching+0x16/0xb0
[  458.018671][T12371]  ? trace_contention_end+0x3d/0x140
[  458.018706][T12371]  ? nf_setsockopt+0x221/0x290
[  458.018729][T12371]  ? __mutex_unlock_slowpath+0x731/0x900
[  458.018757][T12371]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  458.018793][T12371]  nf_setsockopt+0x26f/0x290
[  458.018813][T12371]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  458.018842][T12371]  do_sock_setsockopt+0x17c/0x1b0
[  458.018866][T12371]  __x64_sys_setsockopt+0x13d/0x1b0
[  458.018890][T12371]  do_syscall_64+0x166/0x520
[  458.018912][T12371]  ? trace_irq_disable+0x3b/0x140
[  458.018932][T12371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.018951][T12371]  ? clear_bhb_loop+0x70/0xc0
[  458.018977][T12371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.018995][T12371] RIP: 0033:0x7f9dc6d9e2d9
[  458.019013][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.019029][T12371] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  458.019049][T12371] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  458.019063][T12371] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  458.019074][T12371] RBP: 00007f9dc7cbc090 R08: 0000000000000828 R09: 0000000000000000
[  458.019087][T12371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  458.019099][T12371] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  458.019127][T12371]  </TASK>
[  458.026840][T12371] Mem-Info:
[  458.026852][T12371] active_anon:34943 inactive_anon:36 isolated_anon:0
[  458.026852][T12371]  active_file:8746 inactive_file:50640 isolated_file:0
[  458.026852][T12371]  unevictable:0 dirty:139 writeback:0
[  458.026852][T12371]  slab_reclaimable:12600 slab_unreclaimable:96027
[  458.026852][T12371]  mapped:42549 shmem:28808 pagetables:1703
[  458.026852][T12371]  sec_pagetables:0 bounce:0
[  458.026852][T12371]  kernel_misc_reclaimable:0
[  458.026852][T12371]  free:1253530 free_pcp:23007 free_cma:0
[  458.026905][T12371] Node 0 active_anon:139772kB inactive_anon:144kB active_file:34984kB inactive_file:202352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170196kB dirty:556kB writeback:0kB shmem:115232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14152kB pagetables:6684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  458.026960][T12371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  458.027011][T12371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  458.027081][T12371] lowmem_reserve[]: 0 2468 2468 2468 2468
[  458.027116][T12371] Node 0 DMA32 free:1086048kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:139772kB inactive_anon:144kB active_file:34984kB inactive_file:202352kB unevictable:0kB writepending:556kB zspages:1116kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:61640kB local_pcp:34472kB free_cma:0kB
[  458.027174][T12371] lowmem_reserve[]: 0 0 0 0 0
[  458.027207][T12371] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  458.027259][T12371] lowmem_reserve[]: 0 0 0 0 0
[  458.027291][T12371] Node 1 Normal free:3912712kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:30388kB local_pcp:15912kB free_cma:0kB
[  458.027347][T12371] lowmem_reserve[]: 0 0 0 0 0
[  458.027380][T12371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  458.027514][T12371] Node 0 DMA32: 462*4kB (UME) 1260*8kB (UME) 1202*16kB (UME) 708*32kB (UME) 132*64kB (UME) 17*128kB (UME) 7*256kB (UME) 76*512kB (UM) 26*1024kB (UME) 8*2048kB (UME) 229*4096kB (UM) = 1086136kB
[  458.027669][T12371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  458.033196][T12371] Node 1 Normal: 16*4kB (UM) 11*8kB (UM) 5*16kB (UM) 5*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (U) 5*512kB (UM) 5*1024kB (UM) 0*2048kB 953*4096kB (UM) = 3912712kB
[  458.033341][T12371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  458.033357][T12371] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  458.033373][T12371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  458.033389][T12371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  458.033404][T12371] 88213 total pagecache pages
[  458.033412][T12371] 23 pages in swap cache
[  458.033419][T12371] Free swap  = 123936kB
[  458.033427][T12371] Total swap = 124996kB
[  458.033436][T12371] 2097051 pages RAM
[  458.033443][T12371] 0 pages HighMem/MovableOnly
[  458.033450][T12371] 433558 pages reserved
[  458.033458][T12371] 0 pages cma reserved
[  458.368796][ T5707] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  458.459085][ T5707] usb 4-1: device descriptor read/8, error -71
[  458.732421][ T5707] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  458.775085][ T5707] usb 4-1: device descriptor read/8, error -71
[  458.833600][T12373] ebt_among: dst integrity fail: 100
[  458.925362][ T5707] usb usb4-port1: unable to enumerate USB device
[  459.235990][ T5678] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  459.394239][ T5678] usb 2-1: unable to get BOS descriptor or descriptor too short
[  459.394272][ T5678] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  459.403879][ T5678] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.403906][ T5678] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  459.403946][ T5678] usb 2-1: config 1 interface 1 has no altsetting 0
[  459.441162][T12383] loop5: detected capacity change from 0 to 7
[  459.445267][T12383] Dev loop5: unable to read RDB block 7
[  459.445309][T12383]  loop5: unable to read partition table
[  459.445389][ T5678] usb 2-1: string descriptor 0 read error: -22
[  459.445499][T12383] loop5: partition table beyond EOD, truncated
[  459.445515][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.445517][T12383] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  459.547779][T12387] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  459.704693][ T5678] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  459.967897][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2026'.
[  460.144165][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'.
[  460.157747][T12402] lo: entered promiscuous mode
[  460.157775][T12402] FAULT_INJECTION: forcing a failure.
[  460.157775][T12402] name failslab, interval 1, probability 0, space 0, times 0
[  460.157803][T12402] CPU: 0 UID: 0 PID: 12402 Comm: syz.0.2028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.157830][T12402] Tainted: [L]=SOFTLOCKUP
[  460.157838][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  460.157850][T12402] Call Trace:
[  460.157859][T12402]  <TASK>
[  460.157868][T12402]  dump_stack_lvl+0xe8/0x150
[  460.157905][T12402]  should_fail_ex+0x410/0x560
[  460.157935][T12402]  ? __alloc_skb+0x1db/0x7a0
[  460.157964][T12402]  should_failslab+0xa8/0x100
[  460.157992][T12402]  ? __alloc_skb+0x1db/0x7a0
[  460.158019][T12402]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  460.158043][T12402]  ? __alloc_skb+0x18d/0x7a0
[  460.158072][T12402]  ? __alloc_skb+0x1db/0x7a0
[  460.158107][T12402]  __alloc_skb+0x1db/0x7a0
[  460.158141][T12402]  rtmsg_ifinfo_build_skb+0x7f/0x260
[  460.158175][T12402]  rtmsg_ifinfo+0x8c/0x1a0
[  460.158209][T12402]  __dev_notify_flags+0x257/0x510
[  460.158237][T12402]  ? __pfx___dev_notify_flags+0x10/0x10
[  460.158256][T12402]  ? __dev_change_flags+0x5f1/0x820
[  460.158283][T12402]  ? __pfx___dev_change_flags+0x10/0x10
[  460.158315][T12402]  netif_change_flags+0xde/0x1b0
[  460.158340][T12402]  do_setlink+0xdd6/0x4670
[  460.158361][T12402]  ? unwind_get_return_address+0x4d/0x90
[  460.158400][T12402]  ? __pfx_do_setlink+0x10/0x10
[  460.158422][T12402]  ? __lock_acquire+0x747/0x2de0
[  460.158463][T12402]  ? kasan_save_track+0x4f/0x80
[  460.158485][T12402]  ? kasan_save_track+0x3e/0x80
[  460.158507][T12402]  ? __kasan_kmalloc+0x93/0xb0
[  460.158530][T12402]  ? __kmalloc_cache_noprof+0x321/0x600
[  460.158563][T12402]  ? __mutex_trylock_common+0x15f/0x270
[  460.158592][T12402]  ? __pfx___mutex_trylock_common+0x10/0x10
[  460.158622][T12402]  ? rcu_is_watching+0x16/0xb0
[  460.158648][T12402]  ? trace_contention_end+0x3d/0x140
[  460.158675][T12402]  ? __mutex_lock+0x30b/0x1550
[  460.158708][T12402]  ? rtnl_newlink+0xc10/0x1c30
[  460.158729][T12402]  ? __pfx___mutex_lock+0x10/0x10
[  460.158760][T12402]  ? ns_capable+0x89/0xe0
[  460.158787][T12402]  ? rtnl_nets_add+0x16c/0x300
[  460.158805][T12402]  ? refcount_inc+0x46/0x70
[  460.158835][T12402]  rtnl_newlink+0x146f/0x1c30
[  460.158866][T12402]  ? __pfx_rtnl_newlink+0x10/0x10
[  460.158884][T12402]  ? do_syscall_64+0x166/0x520
[  460.158906][T12402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.158959][T12402]  ? kasan_quarantine_put+0xbb/0x1f0
[  460.158981][T12402]  ? lockdep_hardirqs_on+0x7b/0x110
[  460.159005][T12402]  ? nlmon_xmit+0xb0/0x100
[  460.159029][T12402]  ? kmem_cache_free+0x182/0x650
[  460.159061][T12402]  ? __lock_acquire+0x747/0x2de0
[  460.159089][T12402]  ? __local_bh_enable_ip+0xd6/0x140
[  460.159113][T12402]  ? lockdep_hardirqs_on+0x7b/0x110
[  460.159132][T12402]  ? __dev_queue_xmit+0x29b/0x3920
[  460.159153][T12402]  ? __local_bh_enable_ip+0xd6/0x140
[  460.159185][T12402]  ? lock_acquire+0x115/0x350
[  460.159206][T12402]  ? __pfx_rtnl_newlink+0x10/0x10
[  460.159236][T12402]  ? __pfx_rtnl_newlink+0x10/0x10
[  460.159254][T12402]  rtnetlink_rcv_msg+0x802/0xc00
[  460.159289][T12402]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  460.159317][T12402]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  460.159344][T12402]  ? ref_tracker_free+0x689/0x830
[  460.159376][T12402]  ? __pfx_
** replaying previous printk message **
[  460.159376][T12402]  ? __pfx_ref_tracker_free+0x10/0x10
[  460.159415][T12402]  netlink_rcv_skb+0x226/0x4a0
[  460.159448][T12402]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  460.159479][T12402]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  460.159516][T12402]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.159540][T12402]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.159569][T12402]  netlink_unicast+0x7bd/0x940
[  460.159602][T12402]  netlink_sendmsg+0x813/0xb40
[  460.159636][T12402]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.159669][T12402]  ? apparmor_socket_sendmsg+0x98/0x360
[  460.159698][T12402]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.159720][T12402]  sock_sendmsg_nosec+0x13a/0x180
[  460.159747][T12402]  ____sys_sendmsg+0x54e/0x850
[  460.159773][T12402]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.159802][T12402]  ? import_iovec+0x73/0xa0
[  460.159834][T12402]  ___sys_sendmsg+0x2a5/0x360
[  460.159854][T12402]  ? __lock_acquire+0x747/0x2de0
[  460.159879][T12402]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.159940][T12402]  ? __fget_files+0x2a/0x420
[  460.159958][T12402]  ? __fget_files+0x3a2/0x420
[  460.159986][T12402]  __x64_sys_sendmsg+0x1b1/0x290
[  460.160008][T12402]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  460.160046][T12402]  do_syscall_64+0x166/0x520
[  460.160066][T12402]  ? trace_irq_disable+0x3b/0x140
[  460.160087][T12402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.160107][T12402]  ? clear_bhb_loop+0x70/0xc0
[  460.160132][T12402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.160152][T12402] RIP: 0033:0x7f9dc6d9e2d9
[  460.160170][T12402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.160187][T12402] RSP: 002b:00007f9dc7cbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  460.160209][T12402] RAX: ffffffffffffffda RBX: 00007f9dc7025fa0 RCX: 00007f9dc6d9e2d9
[  460.160223][T12402] RDX: 0000000004000804 RSI: 00002000000007c0 RDI: 0000000000000007
[  460.160237][T12402] RBP: 00007f9dc7cbc090 R08: 0000000000000000 R09: 0000000000000000
[  460.160249][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  460.160261][T12402] R13: 00007f9dc7026038 R14: 00007f9dc7025fa0 R15: 00007f9dc714fa48
[  460.160293][T12402]  </TASK>
[  460.166502][T12402] tunl0: entered promiscuous mode
[  460.379195][T12402] gre0: entered promiscuous mode
[  460.430716][T12399] SET target dimension over the limit!
[  460.434820][T12402] bridge0: port 3(gretap0) entered disabled state
[  460.478579][T12402] ip_vti0: entered promiscuous mode
[  460.505710][T12402] ip6_vti0: entered promiscuous mode
[  460.516887][  T141] ------------[ cut here ]------------
[  460.516902][  T141] time_after(jiffies, timeout)
[  460.516916][  T141] WARNING: io_uring/io_uring.c:2359 at io_ring_exit_work+0x4d0/0x9a0, CPU#1: kworker/u8:6/141
[  460.577733][T12402] sit0: entered promiscuous mode
[  460.794824][  T141] Modules linked in:
[  460.799058][  T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.810352][  T141] Tainted: [L]=SOFTLOCKUP
[  460.814686][  T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  460.825664][  T141] Workqueue: iou_exit io_ring_exit_work
[  460.831592][  T141] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0
[  460.837407][  T141] Code: c6 05 8b eb 38 10 01 48 c7 c7 40 3a 6b 8c be 25 00 00 00 48 c7 c2 20 31 6b 8c e8 2b c4 78 00 e9 70 fe ff ff e8 a1 20 9d 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00
[  460.857366][  T141] RSP: 0018:ffffc90002fdf940 EFLAGS: 00010293
[  460.863478][  T141] RAX: ffffffff812aefcf RBX: 0000000100003e0b RCX: ffff888020ff3e80
[  460.871775][  T141] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  460.879898][  T141] RBP: ffffc90002fdfad0 R08: ffffc90002fdf8c7 R09: 1ffff920005fbf18
[  460.882765][T12413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2029'.
[  460.897620][  T141] R10: dffffc0000000000 R11: fffff520005fbf19 R12: dffffc0000000000
[  460.905606][  T141] R13: 0000000100003e07 R14: 0000000000002000 R15: ffff888037bc8000
[  460.913684][  T141] FS:  0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
[  460.922947][  T141] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  460.929612][  T141] CR2: 00007fee69c602cc CR3: 0000000055934000 CR4: 00000000003526f0
[  460.937651][  T141] Call Trace:
[  460.940951][  T141]  <TASK>
[  460.943893][  T141]  ? trace_hrtimer_start+0x82/0x200
[  460.949448][  T141]  ? __pfx_io_ring_exit_work+0x10/0x10
[  460.955041][  T141]  ? rcu_is_watching+0x16/0xb0
[  460.959922][  T141]  ? process_scheduled_works+0x97a/0x1630
[  460.965685][  T141]  process_scheduled_works+0xc3d/0x1630
[  460.971436][  T141]  ? __pfx_process_scheduled_works+0x10/0x10
[  460.977684][  T141]  ? assign_work+0x3cf/0x5d0
[  460.982274][  T141]  worker_thread+0xa47/0xfb0
[  460.986955][  T141]  ? __kthread_parkme+0x71/0x1f0
[  460.991922][  T141]  kthread+0x38b/0x480
[  460.996033][  T141]  ? __pfx_worker_thread+0x10/0x10
[  461.001129][  T141]  ? __pfx_kthread+0x10/0x10
[  461.005700][  T141]  ret_from_fork+0x514/0xb70
[  461.010693][  T141]  ? __pfx_ret_from_fork+0x10/0x10
[  461.015865][  T141]  ? __switch_to+0xc89/0x1420
[  461.020553][  T141]  ? __pfx_kthread+0x10/0x10
[  461.025123][  T141]  ret_from_fork_asm+0x1a/0x30
[  461.029917][  T141]  </TASK>
[  461.032938][  T141] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  461.040202][  T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.051131][  T141] Tainted: [L]=SOFTLOCKUP
[  461.055431][  T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  461.065468][  T141] Workqueue: iou_exit io_ring_exit_work
[  461.071003][  T141] Call Trace:
[  461.074267][  T141]  <TASK>
[  461.077182][  T141]  vpanic+0x56d/0xa60
[  461.081148][  T141]  ? __pfx__printk+0x10/0x10
[  461.085716][  T141]  ? __pfx_vpanic+0x10/0x10
[  461.090202][  T141]  ? is_bpf_text_address+0x292/0x2b0
[  461.095474][  T141]  ? is_bpf_text_address+0x26/0x2b0
[  461.100674][  T141]  panic+0xc5/0xd0
[  461.104379][  T141]  ? __pfx_panic+0x10/0x10
[  461.108793][  T141]  ? ret_from_fork_asm+0x1a/0x30
[  461.113712][  T141]  __warn+0x315/0x4c0
[  461.117675][  T141]  ? io_ring_exit_work+0x4d0/0x9a0
[  461.122771][  T141]  ? io_ring_exit_work+0x4d0/0x9a0
[  461.127862][  T141]  __report_bug+0x276/0x570
[  461.132347][  T141]  ? io_ring_exit_work+0x4d0/0x9a0
[  461.137441][  T141]  ? __pfx___report_bug+0x10/0x10
[  461.142448][  T141]  ? trace_contention_end+0x3d/0x140
[  461.147727][  T141]  ? __mutex_lock+0x30b/0x1550
[  461.152475][  T141]  ? io_ring_exit_work+0x4d0/0x9a0
[  461.157587][  T141]  report_bug+0x16b/0x220
[  461.161920][  T141]  ? io_ring_exit_work+0x4d0/0x9a0
[  461.167029][  T141]  ? io_ring_exit_work+0x4d2/0x9a0
[  461.172149][  T141]  handle_bug+0x9c/0x200
[  461.176379][  T141]  exc_invalid_op+0x1a/0x50
[  461.180874][  T141]  asm_exc_invalid_op+0x1a/0x20
[  461.185728][  T141] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0
[  461.191460][  T141] Code: c6 05 8b eb 38 10 01 48 c7 c7 40 3a 6b 8c be 25 00 00 00 48 c7 c2 20 31 6b 8c e8 2b c4 78 00 e9 70 fe ff ff e8 a1 20 9d 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00
[  461.211052][  T141] RSP: 0018:ffffc90002fdf940 EFLAGS: 00010293
[  461.217279][  T141] RAX: ffffffff812aefcf RBX: 0000000100003e0b RCX: ffff888020ff3e80
[  461.225239][  T141] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  461.233192][  T141] RBP: ffffc90002fdfad0 R08: ffffc90002fdf8c7 R09: 1ffff920005fbf18
[  461.241145][  T141] R10: dffffc0000000000 R11: fffff520005fbf19 R12: dffffc0000000000
[  461.249104][  T141] R13: 0000000100003e07 R14: 0000000000002000 R15: ffff888037bc8000
[  461.257073][  T141]  ? io_ring_exit_work+0x4cf/0x9a0
[  461.262181][  T141]  ? trace_hrtimer_start+0x82/0x200
[  461.267373][  T141]  ? __pfx_io_ring_exit_work+0x10/0x10
[  461.272828][  T141]  ? rcu_is_watching+0x16/0xb0
[  461.277585][  T141]  ? process_scheduled_works+0x97a/0x1630
[  461.283295][  T141]  process_scheduled_works+0xc3d/0x1630
[  461.288848][  T141]  ? __pfx_process_scheduled_works+0x10/0x10
[  461.294818][  T141]  ? assign_work+0x3cf/0x5d0
[  461.299418][  T141]  worker_thread+0xa47/0xfb0
[  461.304000][  T141]  ? __kthread_parkme+0x71/0x1f0
[  461.308927][  T141]  kthread+0x38b/0x480
[  461.312978][  T141]  ? __pfx_worker_thread+0x10/0x10
[  461.318072][  T141]  ? __pfx_kthread+0x10/0x10
[  461.322645][  T141]  ret_from_fork+0x514/0xb70
[  461.327220][  T141]  ? __pfx_ret_from_fork+0x10/0x10
[  461.332312][  T141]  ? __switch_to+0xc89/0x1420
[  461.336987][  T141]  ? __pfx_kthread+0x10/0x10
[  461.341561][  T141]  ret_from_fork_asm+0x1a/0x30
[  461.346353][  T141]  </TASK>
[  461.349634][  T141] Kernel Offset: disabled
[  461.354039][  T141] Rebooting in 86400 seconds..