last executing test programs: 9.365452033s ago: executing program 2 (id=2544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac98", 0xa0}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12e", 0x63}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.223383507s ago: executing program 2 (id=2548): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.110324467s ago: executing program 2 (id=2560): syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c5"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="4000000000000000172700000200000028000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c40000000019e976c88833d50dc1d881ef5345575c1602db6139f5ae87a96a5fa794d48e1d820709d90cb6c2106794b19082d7b34a66428493363b56b02e9bf7ebfb3cc1fe9731962d9fc6120708d6ec341336c68d483a4dac7288c242113aca2794a1e77aafe080e79c00382891dab3166d620f420a5d23a695faa841307003701356cc879e36162fdcff41b0cb2df69ac6a3ab2c2f6f74d92e05b26899f4864a57511a18df62fa67aa31ba96644f9ffd9195da3126"], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a915", 0x97}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c573", 0x4b}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x52, 0x1, 0x0, "3ad38eff230c00000000202900000004100000410000000000000300"}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.645675214s ago: executing program 0 (id=2563): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000340)={0x0, 0xef72}, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x3c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.40809817s ago: executing program 0 (id=2565): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="18fdfd0000000000ff2f00000000000001"]) 3.322451289s ago: executing program 3 (id=2566): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x100c4) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x111400) mmap$snddsp(&(0x7f00000c3000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0xd000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) accept4(r4, &(0x7f0000000300)=@ax25={{0x3, @bcast}, [@netrom, @null, @netrom, @netrom, @bcast, @rose, @null, @netrom]}, &(0x7f0000000380)=0x80, 0x800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(r1, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r7, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xf277, @loopback, 0x1a, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002b40)="f7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="5a4eadd81bcf9b9bfb00"/32], 0x20}}], 0x2, 0x40408c1) ptrace(0x10, r6) wait4(r6, 0x0, 0x8, 0x0) ptrace$peeksig(0x1a, r6, 0x0, &(0x7f0000000040)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f00000002c0)={0xc, r9}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 3.312865389s ago: executing program 0 (id=2567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.074269133s ago: executing program 3 (id=2568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0xf, 0x0, 0x0, 0x9}, {0x6, 0xfc}]}) 2.914671334s ago: executing program 3 (id=2569): socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x820000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_secret(0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x0, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0x180, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x1, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r3, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 2.552529993s ago: executing program 0 (id=2572): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r1, r0, 0x0) 2.462806085s ago: executing program 2 (id=2573): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000340)={0x0, 0xef72}, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x3c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.274803159s ago: executing program 3 (id=2574): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) (fail_nth: 4) read(0xffffffffffffffff, 0x0, 0x0) 2.067455582s ago: executing program 3 (id=2575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.964748889s ago: executing program 3 (id=2576): prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x8, 0x1000000000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) getrlimit(0x6, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000280)=@ax25={{0x3, @netrom}, [@null, @bcast, @bcast, @netrom, @default, @netrom]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f0000000440)=""/194, 0xc2}], 0x2, &(0x7f0000000580)=""/124, 0x7c}, 0x4}, {{&(0x7f0000000640)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/100, 0x64}], 0x1, &(0x7f0000000780)=""/35, 0x23}, 0x7}], 0x2, 0x2, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000010000000000200420000000e0001006e65746465760300000000000f0002006e65d564657673696d300000008500830000000000181a87173acb9ff70d04f3a14297af761a"], 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x820) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="401035"], 0x0, 0x0, 0x0, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x0, 0x1) read$msr(r4, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setrlimit(0x4, &(0x7f00000000c0)={0x9, 0xbe6b}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000100)={@val={0x0, 0xf6}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}}, 0x36) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 1.478551636s ago: executing program 0 (id=2578): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946420, &(0x7f00000000c0)={'8255\x00', [0xfffffffc, 0x5, 0x22, 0x401, 0x1, 0x7, 0x10001, 0x1000008, 0x7, 0x3ff, 0x802, 0x3ff, 0x9, 0x2, 0x9, 0xe1cb, 0x3ff, 0x4, 0x3, 0x392, 0x80000088, 0xfffffefe, 0xa, 0xfffffff5, 0x2, 0x3, 0x0, 0x0, 0x4, 0x101, 0xdffffffa]}) 1.251864255s ago: executing program 0 (id=2581): syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c5"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="4000000000000000172700000200000028000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c40000000019e976c88833d50dc1d881ef5345575c1602db6139f5ae87a96a5fa794d48e1d820709d90cb6c2106794b19082d7b34a66428493363b56b02e9bf7ebfb3cc1fe9731962d9fc6120708d6ec341336c68d483a4dac7288c242113aca2794a1e77aafe080e79c00382891dab3166d620f420a5d23a695faa841307003701356cc879e36162fdcff41b0cb2df69ac6a3ab2c2f6f74d92e05b26899f4864a57511a18df62fa67aa31ba96644f9ffd9195da3126"], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a915", 0x97}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c573", 0x4b}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x52, 0x1, 0x0, "3ad38eff230c00000000202900000004100000410000000000000300"}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.219138158s ago: executing program 2 (id=2582): socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x820000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_secret(0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x0, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0x180, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x1, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r3, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 970.756162ms ago: executing program 1 (id=2583): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x8901, &(0x7f0000000440)={r1, 0x0, 0x6, "02591c88fe2ade7509c0a3a44a85f5533092058867"}) 917.642192ms ago: executing program 1 (id=2584): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051b7f020510452516aaa0102030209021b0001010010000904ec0201af3af30009050502"], 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7980, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x1b19, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@hyper}) (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2a, 0x20, 0x10, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xa, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xdc, 0x0, 0x8, {0x8, 0x25, 0x1, 0x1, 0x30, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x7, 0x0, {0x8, 0x25, 0x1, 0x2, 0xd, 0xf, 0x2}}}}}}}}]}}, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x303040, 0x132, 0x2a}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0xa4) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) (async) fdatasync(r5) syz_usb_control_io$uac2(r0, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x40, 0x1, 0xdc, {0xdc, 0x21, "db13169f25f7448b7bbf367ccdbb1c106d292bf1322f5eecf1dcfbbab8ce7d88f009884d4c97deff1544fcfbfda86b7e5fa2fdd56ec2e5f16ed2aeb6d8e2476a11855a781963d16af6625d338c0a642c9efd21a5145069507756917ac7975b10781b3c12c73f67e1ab665a54cc0ffd37595eecb436cdf7e1506bab8c88daa774dc96cf8868d6a5828ee6bfeabea0230b0e707adb5f27750ab1856247e57c7048c4093e217be19f175313176c0fdfa91e2cb8bf47ad22757193454a6c7018a3e82bf9703575762fcf620f1a1f412c2ec183824c664a0116f36eb5"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x0, 0x15, 0x7a, "476e2c37b94e6adeec28b19adb43d9c36e546e3db8cff32855f3d30c565ddc088e437fa7096164984d929f578513e51a76043e37ced417e01262bc929384260159e65f341904e445a83a0e46598b6c37cf3530e27704f2371549585abe833e34d6c868bc31c0361b1d1eaf2096638c0a4816570089e6a756ab2f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x81, 0x1, "e5"}, &(0x7f0000000500)={0x20, 0x82, 0x1, "cd"}, &(0x7f0000000540)={0x20, 0x83, 0x3, "275af2"}, &(0x7f0000000580)={0x20, 0x84, 0x3, "c40500"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "8493fe"}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r7, 0x1, 0xe5}, 0x14) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x321900, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, r7}) (async) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 826.082526ms ago: executing program 1 (id=2585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x804, 0x2, 0x1, 0x45, 0x3, 0x0, 0x4, 0xff, 0x0, 0x4, 0x6, 0x6f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xc, 0x5, 0x6f, 0x8, 0x9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000240)={'fscrypt:', @auto=[0x66, 0x30, 0x63, 0x33, 0x34, 0x37, 0x32, 0x32, 0x38, 0x30, 0x6f, 0x64, 0x66, 0x66, 0x36, 0x33]}, &(0x7f0000000280)={0x0, "c83ff440b30f4b99b52093d35865c2d8d2b99a17f6c5e36ac41e75ed27f7db639edfae5708eeefcb079e896d8e85eadbec7ec89d33b1ce9660eb9149ff818fff", 0x2f}, 0x48, 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 438.22546ms ago: executing program 2 (id=2586): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r1, r0, 0x0) 137.143925ms ago: executing program 1 (id=2587): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{}, 0x2}}, 0x10) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) close(r2) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000440)={r1, 0x0, 0x6, "02591c88fe2ade7509c0a3a44a85f5533092058867"}) 71.071679ms ago: executing program 1 (id=2588): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x4, 0x4, 0x20001, 0x3, 0x6, 0xff, 0x1000, 0xc, 0x3, 0x5, 0x40, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x5, 0xb, 0x40, 0xa4d, 0x8, 0x8000100, 0x1, 0x0, 0x11000, 0xf, 0x5, 0x79b, 0x3, 0x1, 0x7e, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x10001, 0x5, 0x2af, 0x40000003, 0x3, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x3, 0x0, 0x10000, 0x8001, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x40252, 0x81, 0xb, 0x4, 0x20004, 0x3, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000140)) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(\b\x0e\t\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='%(,c\xbe\xdbT:', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x80045007, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c90006"], 0xe) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000b00001100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x14014) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x9c82, 0x3, 0xdc, 0xd25c, 0xd6, 0xffffffffffffffff}) timer_create(0x5, &(0x7f0000000340)={0x0, 0x38, 0x4, @tid=r4}, &(0x7f00000003c0)) 0s ago: executing program 1 (id=2589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_PMKID={0x14, 0x55, "8ea71f6a5eab926e792c63d8f14403a8"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x2000880) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) lseek(r7, 0x7fffffffffffffff, 0x2) write$FUSE_DIRENT(r7, &(0x7f00000044c0)={0x10}, 0x10) socket$inet(0x2, 0x3, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) r10 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000aa401042a00ff0f00001324030500010206020280000007001000d8000d24090202000000007b"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r10, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x34, r2, 0x101, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x4010) kernel console output (not intermixed with test programs): 48] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 453.998402][T12248] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 453.998427][T12248] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.998457][T12248] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.998487][T12248] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.998516][T12248] ? rt_write_unlock+0x190/0x230 [ 453.998543][T12248] kvm_vcpu_ioctl+0xa65/0xfe0 [ 453.998585][T12248] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.998642][T12248] ? __fget_files+0x2a/0x420 [ 453.998670][T12248] ? __fget_files+0x2a/0x420 [ 453.998691][T12248] ? __fget_files+0x3a6/0x420 [ 453.998715][T12248] ? __fget_files+0x2a/0x420 [ 453.998742][T12248] ? bpf_lsm_file_ioctl+0x9/0x20 [ 453.998770][T12248] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.998805][T12248] __se_sys_ioctl+0xff/0x170 [ 453.998836][T12248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.998869][T12248] do_syscall_64+0x174/0x580 [ 453.998898][T12248] ? trace_irq_disable+0x3b/0x140 [ 453.998928][T12248] ? clear_bhb_loop+0x40/0x90 [ 453.998957][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.998980][T12248] RIP: 0033:0x7f49264bce59 [ 453.999003][T12248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.999024][T12248] RSP: 002b:00007f49246f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.999049][T12248] RAX: ffffffffffffffda RBX: 00007f4926736090 RCX: 00007f49264bce59 [ 453.999068][T12248] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 453.999083][T12248] RBP: 00007f49246f5090 R08: 0000000000000000 R09: 0000000000000000 [ 453.999099][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.999113][T12248] R13: 00007f4926736128 R14: 00007f4926736090 R15: 00007ffe6670e098 [ 453.999151][T12248] [ 454.818117][T11533] Bluetooth: hci2: command 0x0c1a tx timeout [ 454.873473][ T5593] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 455.020266][ T5593] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 455.020299][ T5593] usb 3-1: config 0 has no interface number 0 [ 455.020446][ T5593] usb 3-1: config 0 interface 41 has no altsetting 0 [ 455.052359][ T5593] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 455.052416][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.052437][ T5593] usb 3-1: Product: syz [ 455.052453][ T5593] usb 3-1: Manufacturer: syz [ 455.052468][ T5593] usb 3-1: SerialNumber: syz [ 455.095366][ T5593] usb 3-1: config 0 descriptor?? [ 455.232869][ T37] audit: type=1326 audit(1782170009.724:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.2299" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad105fce59 code=0x0 [ 455.928527][ T5593] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 456.130288][ T5593] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 456.130318][ T5593] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 456.130571][ T5593] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 456.178143][ T5593] usb 3-1: USB disconnect, device number 97 [ 456.572568][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 456.577865][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 456.995089][T12301] IPv6: NLM_F_CREATE should be specified when creating new route [ 457.024672][T12301] netlink: 'syz.2.2307': attribute type 25 has an invalid length. [ 457.566069][T12311] overlay: Unknown parameter '"ñûˆm' [ 458.508009][T11533] Bluetooth: hci4: command 0x0406 tx timeout [ 458.819552][ T9] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 458.980710][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 458.980751][ T9] usb 4-1: config 0 has no interface number 0 [ 458.980786][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 458.983191][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 458.983223][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.983247][ T9] usb 4-1: Product: syz [ 458.983264][ T9] usb 4-1: Manufacturer: syz [ 458.983276][ T9] usb 4-1: SerialNumber: syz [ 458.995343][ T9] usb 4-1: config 0 descriptor?? [ 459.107786][ T44] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 459.259239][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 459.262705][ T44] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.262740][ T44] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.262766][ T44] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 459.262794][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 459.262830][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 459.262855][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.360909][ T44] usb 3-1: config 0 descriptor?? [ 459.616020][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2317'. [ 460.001339][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 460.147451][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 460.155448][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 460.169117][ T44] usb 3-1: USB disconnect, device number 98 [ 460.205448][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 460.205480][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 460.205751][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 460.257794][T11533] Bluetooth: hci3: command tx timeout [ 460.265870][ T9] usb 4-1: USB disconnect, device number 87 [ 461.639837][T12366] gfs2: path_lookup on vxcan1 returned error -2 [ 461.877795][ T44] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 462.030446][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.030508][ T44] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 462.030539][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.034799][ T44] usb 2-1: config 0 descriptor?? [ 462.075082][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 462.337981][T11533] Bluetooth: hci4: command 0x0406 tx timeout [ 462.433850][T12368] FAULT_INJECTION: forcing a failure. [ 462.433850][T12368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.433880][T12368] CPU: 1 UID: 0 PID: 12368 Comm: syz.3.2328 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.433903][T12368] Tainted: [L]=SOFTLOCKUP [ 462.433909][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.433920][T12368] Call Trace: [ 462.433926][T12368] [ 462.433933][T12368] dump_stack_lvl+0xe8/0x150 [ 462.433959][T12368] should_fail_ex+0x46b/0x600 [ 462.433994][T12368] _copy_to_user+0x31/0xb0 [ 462.434014][T12368] simple_read_from_buffer+0xe1/0x170 [ 462.434035][T12368] proc_fail_nth_read+0x1be/0x230 [ 462.434054][T12368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.434074][T12368] ? rw_verify_area+0x2ac/0x4e0 [ 462.434092][T12368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.434109][T12368] vfs_read+0x212/0xa80 [ 462.434134][T12368] ? __pfx_vfs_read+0x10/0x10 [ 462.434154][T12368] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 462.434175][T12368] ? lockdep_hardirqs_on+0x7a/0x110 [ 462.434195][T12368] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 462.434215][T12368] ? mutex_lock_nested+0x152/0x1d0 [ 462.434240][T12368] ? fdget_pos+0x252/0x320 [ 462.434262][T12368] ksys_read+0x156/0x270 [ 462.434283][T12368] ? __pfx_ksys_read+0x10/0x10 [ 462.434307][T12368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.434325][T12368] do_syscall_64+0x174/0x580 [ 462.434344][T12368] ? trace_irq_disable+0x3b/0x140 [ 462.434364][T12368] ? clear_bhb_loop+0x40/0x90 [ 462.434384][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.434399][T12368] RIP: 0033:0x7fad105bd68e [ 462.434414][T12368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 462.434428][T12368] RSP: 002b:00007fad0e855fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.434445][T12368] RAX: ffffffffffffffda RBX: 00007fad0e8566c0 RCX: 00007fad105bd68e [ 462.434457][T12368] RDX: 000000000000000f RSI: 00007fad0e8560a0 RDI: 0000000000000003 [ 462.434468][T12368] RBP: 00007fad0e856090 R08: 0000000000000000 R09: 0000000000000000 [ 462.434478][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.434488][T12368] R13: 00007fad10876038 R14: 00007fad10875fa0 R15: 00007ffd5ba59aa8 [ 462.434512][T12368] [ 462.617835][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 463.075917][ T44] pwc: recv_control_msg error -71 req 04 val 1000 [ 463.079395][ T44] pwc: recv_control_msg error -71 req 04 val 1300 [ 463.092835][ T44] pwc: recv_control_msg error -71 req 04 val 1400 [ 463.094840][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 463.095262][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 463.119392][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 463.119918][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 463.120385][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 463.120841][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 463.121306][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 463.121751][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 463.124617][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 463.125121][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 463.215098][ T44] pwc: Registered as video103. [ 463.223739][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 463.240232][ T44] usb 2-1: USB disconnect, device number 81 [ 463.294603][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2330'. [ 463.308622][T12375] netlink: 'syz.2.2330': attribute type 16 has an invalid length. [ 463.308645][T12375] netlink: 'syz.2.2330': attribute type 3 has an invalid length. [ 463.308659][T12375] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2330'. [ 463.507339][T12382] FAULT_INJECTION: forcing a failure. [ 463.507339][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.507402][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.2.2333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 463.507426][T12382] Tainted: [L]=SOFTLOCKUP [ 463.507432][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.507443][T12382] Call Trace: [ 463.507450][T12382] [ 463.507458][T12382] dump_stack_lvl+0xe8/0x150 [ 463.507482][T12382] should_fail_ex+0x46b/0x600 [ 463.507510][T12382] _copy_to_user+0x31/0xb0 [ 463.507531][T12382] simple_read_from_buffer+0xe1/0x170 [ 463.507565][T12382] proc_fail_nth_read+0x1be/0x230 [ 463.507609][T12382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.507645][T12382] ? rw_verify_area+0x2ac/0x4e0 [ 463.507670][T12382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.507693][T12382] vfs_read+0x212/0xa80 [ 463.507724][T12382] ? __pfx_vfs_read+0x10/0x10 [ 463.507751][T12382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 463.507779][T12382] ? lockdep_hardirqs_on+0x7a/0x110 [ 463.507805][T12382] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 463.507830][T12382] ? mutex_lock_nested+0x152/0x1d0 [ 463.507860][T12382] ? fdget_pos+0x252/0x320 [ 463.507889][T12382] ksys_read+0x156/0x270 [ 463.507932][T12382] ? __pfx_ksys_read+0x10/0x10 [ 463.507968][T12382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.507992][T12382] do_syscall_64+0x174/0x580 [ 463.508019][T12382] ? trace_irq_disable+0x3b/0x140 [ 463.508048][T12382] ? clear_bhb_loop+0x40/0x90 [ 463.508076][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.508099][T12382] RIP: 0033:0x7f2087d7d68e [ 463.508119][T12382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.508139][T12382] RSP: 002b:00007f2086015fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.508166][T12382] RAX: ffffffffffffffda RBX: 00007f20860166c0 RCX: 00007f2087d7d68e [ 463.508178][T12382] RDX: 000000000000000f RSI: 00007f20860160a0 RDI: 0000000000000004 [ 463.508188][T12382] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 463.508199][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.508208][T12382] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 463.508233][T12382] [ 463.815571][T12384] loop5: detected capacity change from 0 to 7 [ 463.884248][T12384] Dev loop5: unable to read RDB block 7 [ 463.884314][T12384] loop5: unable to read partition table [ 463.884547][T12384] loop5: partition table beyond EOD, truncated [ 463.886499][T12384] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 464.245600][T12398] FAULT_INJECTION: forcing a failure. [ 464.245600][T12398] name failslab, interval 1, probability 0, space 0, times 0 [ 464.245640][T12398] CPU: 1 UID: 0 PID: 12398 Comm: syz.3.2338 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 464.245670][T12398] Tainted: [L]=SOFTLOCKUP [ 464.245679][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.245692][T12398] Call Trace: [ 464.245701][T12398] [ 464.245710][T12398] dump_stack_lvl+0xe8/0x150 [ 464.245741][T12398] should_fail_ex+0x46b/0x600 [ 464.245776][T12398] should_failslab+0xa8/0x100 [ 464.245801][T12398] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 464.245840][T12398] ? mas_alloc_nodes+0x291/0x350 [ 464.245864][T12398] ? mas_alloc_nodes+0x291/0x350 [ 464.245895][T12398] mas_alloc_nodes+0x291/0x350 [ 464.245923][T12398] mas_preallocate+0x2d6/0x640 [ 464.245954][T12398] ? __pfx_mas_preallocate+0x10/0x10 [ 464.245977][T12398] ? trace_kmem_cache_alloc+0x29/0xe0 [ 464.246018][T12398] ? __mas_set_range+0x12f/0x3c0 [ 464.246051][T12398] mmap_region+0x139d/0x2220 [ 464.246094][T12398] ? __pfx_mmap_region+0x10/0x10 [ 464.246121][T12398] ? __lock_acquire+0x6b5/0x2d10 [ 464.246219][T12398] ? __pfx_find_vma+0x10/0x10 [ 464.246236][T12398] ? sctp_sendmsg+0x1a6f/0x29b0 [ 464.246293][T12398] ? cap_mmap_addr+0xaf/0x100 [ 464.246322][T12398] ? bpf_lsm_mmap_addr+0x9/0x50 [ 464.246345][T12398] ? security_mmap_addr+0x71/0x240 [ 464.246387][T12398] do_mmap+0xc2f/0x10c0 [ 464.246422][T12398] ? lockdep_hardirqs_on+0x7a/0x110 [ 464.246447][T12398] ? __pfx_do_mmap+0x10/0x10 [ 464.246492][T12398] ? rwbase_write_lock+0x568/0x730 [ 464.246533][T12398] vm_mmap_pgoff+0x2cc/0x4f0 [ 464.246570][T12398] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 464.246610][T12398] ? __x64_sys_mmap+0x7f/0x140 [ 464.246639][T12398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.246662][T12398] do_syscall_64+0x174/0x580 [ 464.246687][T12398] ? trace_irq_disable+0x3b/0x140 [ 464.246713][T12398] ? clear_bhb_loop+0x40/0x90 [ 464.246738][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.246759][T12398] RIP: 0033:0x7fad105fcbc2 [ 464.246778][T12398] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 464.246797][T12398] RSP: 002b:00007fad0e833d08 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 464.246821][T12398] RAX: ffffffffffffffda RBX: 0000000004000000 RCX: 00007fad105fcbc2 [ 464.246843][T12398] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000004000000 [ 464.246857][T12398] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 464.246871][T12398] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 464.246885][T12398] R13: 0000000000001000 R14: 0000000000000022 R15: 00007fad106b01ce [ 464.246916][T12398] [ 464.867982][ T5595] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 464.907970][T11533] Bluetooth: hci2: command 0x0c1a tx timeout [ 464.991478][T12405] 8021q: VLANs not supported on lo [ 465.030240][ T5595] usb 2-1: Using ep0 maxpacket: 8 [ 465.032030][ T5595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.032057][ T5595] usb 2-1: config 0 has no interfaces? [ 465.036515][ T5595] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 465.036547][ T5595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.036569][ T5595] usb 2-1: Product: syz [ 465.036585][ T5595] usb 2-1: Manufacturer: syz [ 465.036600][ T5595] usb 2-1: SerialNumber: syz [ 465.123861][ T5595] usb 2-1: config 0 descriptor?? [ 466.220752][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 466.397850][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 466.422556][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 466.446783][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.446888][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.492213][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 466.492248][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.492272][ T9] usb 4-1: Product: syz [ 466.492289][ T9] usb 4-1: Manufacturer: syz [ 466.492306][ T9] usb 4-1: SerialNumber: syz [ 466.559424][ T44] usb 2-1: USB disconnect, device number 82 [ 466.596301][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'. [ 466.814694][T12420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.815318][T12420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.849187][T12420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.849785][T12420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.164421][T12419] FAULT_INJECTION: forcing a failure. [ 467.164421][T12419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 467.164464][T12419] CPU: 1 UID: 0 PID: 12419 Comm: syz.2.2346 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 467.164504][T12419] Tainted: [L]=SOFTLOCKUP [ 467.164512][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.164526][T12419] Call Trace: [ 467.164535][T12419] [ 467.164546][T12419] dump_stack_lvl+0xe8/0x150 [ 467.164579][T12419] should_fail_ex+0x46b/0x600 [ 467.164618][T12419] prepare_alloc_pages+0x22a/0x6b0 [ 467.164657][T12419] __alloc_frozen_pages_noprof+0x12f/0x380 [ 467.164690][T12419] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 467.164721][T12419] ? __pfx_policy_nodemask+0x10/0x10 [ 467.164749][T12419] ? mfill_get_vma+0x166/0x6d0 [ 467.164787][T12419] alloc_pages_mpol+0xd1/0x380 [ 467.164821][T12419] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 467.164863][T12419] shmem_mfill_folio_alloc+0x19c/0x370 [ 467.164888][T12419] ? __pfx_shmem_mfill_folio_alloc+0x10/0x10 [ 467.164910][T12419] __mfill_atomic_pte+0xe7/0x600 [ 467.164944][T12419] ? mfill_get_vma+0x626/0x6d0 [ 467.164972][T12419] ? mm_alloc_pmd+0x246/0x400 [ 467.165021][T12419] mfill_atomic_copy+0x49e/0x15b0 [ 467.165059][T12419] ? __might_fault+0xaf/0x130 [ 467.165082][T12419] ? __might_fault+0xaf/0x130 [ 467.165113][T12419] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 467.165152][T12419] userfaultfd_ioctl+0x257a/0x86c0 [ 467.165189][T12419] ? stack_depot_save_flags+0x33/0x810 [ 467.165226][T12419] ? kasan_save_track+0x4f/0x80 [ 467.165246][T12419] ? kasan_save_track+0x3e/0x80 [ 467.165264][T12419] ? kasan_save_free_info+0x46/0x50 [ 467.165291][T12419] ? __kasan_slab_free+0x5c/0x80 [ 467.165312][T12419] ? kfree+0x1c5/0x6c0 [ 467.165341][T12419] ? tomoyo_path_number_perm+0x501/0x630 [ 467.165370][T12419] ? security_file_ioctl+0xc3/0x2a0 [ 467.165399][T12419] ? __se_sys_ioctl+0x47/0x170 [ 467.165426][T12419] ? do_syscall_64+0x174/0x580 [ 467.165452][T12419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.165483][T12419] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 467.165545][T12419] ? kasan_quarantine_put+0xbb/0x1f0 [ 467.165588][T12419] ? tomoyo_path_number_perm+0x219/0x630 [ 467.165628][T12419] ? do_vfs_ioctl+0x117b/0x1540 [ 467.165658][T12419] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 467.165720][T12419] ? __fget_files+0x2a/0x420 [ 467.165746][T12419] ? __fget_files+0x2a/0x420 [ 467.165767][T12419] ? __fget_files+0x3a6/0x420 [ 467.165788][T12419] ? __fget_files+0x2a/0x420 [ 467.165814][T12419] ? bpf_lsm_file_ioctl+0x9/0x20 [ 467.165839][T12419] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 467.165866][T12419] __se_sys_ioctl+0xff/0x170 [ 467.165895][T12419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.165919][T12419] do_syscall_64+0x174/0x580 [ 467.165945][T12419] ? trace_irq_disable+0x3b/0x140 [ 467.165971][T12419] ? clear_bhb_loop+0x40/0x90 [ 467.165998][T12419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.166019][T12419] RIP: 0033:0x7f2087dbce59 [ 467.166040][T12419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.166059][T12419] RSP: 002b:00007f2086016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.166083][T12419] RAX: ffffffffffffffda RBX: 00007f2088035fa0 RCX: 00007f2087dbce59 [ 467.166100][T12419] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 467.166115][T12419] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 467.166128][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.166141][T12419] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 467.166174][T12419] [ 467.566691][T12425] FAULT_INJECTION: forcing a failure. [ 467.566691][T12425] name failslab, interval 1, probability 0, space 0, times 0 [ 467.566731][T12425] CPU: 1 UID: 0 PID: 12425 Comm: syz.1.2347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 467.566761][T12425] Tainted: [L]=SOFTLOCKUP [ 467.566771][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.566786][T12425] Call Trace: [ 467.566813][T12425] [ 467.566824][T12425] dump_stack_lvl+0xe8/0x150 [ 467.566860][T12425] should_fail_ex+0x46b/0x600 [ 467.566899][T12425] should_failslab+0xa8/0x100 [ 467.566929][T12425] __kmalloc_cache_noprof+0xa0/0x6d0 [ 467.566954][T12425] ? percpu_ref_init+0xc5/0x360 [ 467.566988][T12425] ? percpu_ref_init+0xc5/0x360 [ 467.567032][T12425] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 467.567067][T12425] percpu_ref_init+0xc5/0x360 [ 467.567106][T12425] io_ring_ctx_alloc+0x33d/0xd20 [ 467.567147][T12425] io_uring_create+0x50/0x9a0 [ 467.567190][T12425] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 467.567222][T12425] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 467.567247][T12425] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 467.567295][T12425] ? __pfx_ksys_write+0x10/0x10 [ 467.567334][T12425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.567361][T12425] do_syscall_64+0x174/0x580 [ 467.567394][T12425] ? clear_bhb_loop+0x40/0x90 [ 467.567423][T12425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.567448][T12425] RIP: 0033:0x7f38765bce59 [ 467.567479][T12425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.567501][T12425] RSP: 002b:00007f3874815fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 467.567527][T12425] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f38765bce59 [ 467.567544][T12425] RDX: 0000200000002180 RSI: 0000200000000400 RDI: 000000000000049a [ 467.567560][T12425] RBP: 00007f3874816090 R08: 0000000000000000 R09: 0000000000000101 [ 467.567575][T12425] R10: 00002000000014c0 R11: 0000000000000206 R12: 0000200000002180 [ 467.567592][T12425] R13: 00002000000014c0 R14: 0000200000000340 R15: 00007ffc01fd9728 [ 467.567627][T12425] [ 468.268489][T12439] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 468.268489][T12439] The task syz.2.2350 (12439) triggered the difference, watch for misbehavior. [ 469.053341][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 469.053854][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 469.407995][T12449] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2355'. [ 469.409815][ T9] usb 4-1: USB disconnect, device number 88 [ 469.640762][ T6625] udevd[6625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.363440][T12466] FAULT_INJECTION: forcing a failure. [ 470.363440][T12466] name failslab, interval 1, probability 0, space 0, times 0 [ 470.363480][T12466] CPU: 0 UID: 0 PID: 12466 Comm: syz.0.2359 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 470.363511][T12466] Tainted: [L]=SOFTLOCKUP [ 470.363520][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.363535][T12466] Call Trace: [ 470.363544][T12466] [ 470.363555][T12466] dump_stack_lvl+0xe8/0x150 [ 470.363588][T12466] should_fail_ex+0x46b/0x600 [ 470.363645][T12466] should_failslab+0xa8/0x100 [ 470.363689][T12466] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 470.363727][T12466] ? dst_alloc+0x105/0x170 [ 470.363757][T12466] ? dst_alloc+0x105/0x170 [ 470.363792][T12466] ? __pfx_ip6_dst_gc+0x10/0x10 [ 470.363829][T12466] dst_alloc+0x105/0x170 [ 470.363869][T12466] ip6_pol_route+0xb08/0x13e0 [ 470.363892][T12466] ? ip6_pol_route+0x160/0x13e0 [ 470.363919][T12466] ? __pfx_ip6_pol_route+0x10/0x10 [ 470.363942][T12466] ? __lock_acquire+0x6b5/0x2d10 [ 470.363986][T12466] ? __lock_acquire+0x6b5/0x2d10 [ 470.364027][T12466] fib6_rule_lookup+0x222/0x740 [ 470.364082][T12466] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 470.364126][T12466] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 470.364208][T12466] ? ip6_route_output_flags+0x2e/0x5e0 [ 470.364258][T12466] ? ip6_route_output_flags+0x2e/0x5e0 [ 470.364326][T12466] ip6_route_output_flags+0x364/0x5e0 [ 470.364361][T12466] ? ip6_route_output_flags+0x2e/0x5e0 [ 470.364389][T12466] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 470.364422][T12466] ? _copy_from_iter+0x21b/0x1670 [ 470.364466][T12466] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 470.364513][T12466] ? txopt_get+0x79/0x3f0 [ 470.364542][T12466] ? txopt_get+0x79/0x3f0 [ 470.364570][T12466] ? txopt_get+0x79/0x3f0 [ 470.364600][T12466] ? __pfx__copy_from_iter+0x10/0x10 [ 470.364633][T12466] ? txopt_get+0x343/0x3f0 [ 470.364662][T12466] ? aa_label_sk_perm+0x532/0x6e0 [ 470.364700][T12466] ? __pfx_txopt_get+0x10/0x10 [ 470.364736][T12466] ip6_dst_lookup_flow+0x89/0x150 [ 470.364769][T12466] rawv6_sendmsg+0xe1d/0x18e0 [ 470.364815][T12466] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 470.364884][T12466] ? __pfx_aa_sk_perm+0x10/0x10 [ 470.364918][T12466] ? sock_rps_record_flow+0x19/0x350 [ 470.364946][T12466] ? inet_sendmsg+0x2f4/0x370 [ 470.364968][T12466] ? aa_sock_msg_perm+0x122/0x200 [ 470.364994][T12466] ? __pfx_inet_sendmsg+0x10/0x10 [ 470.365015][T12466] sock_sendmsg_nosec+0x10e/0x180 [ 470.365055][T12466] ____sys_sendmsg+0x55c/0x870 [ 470.365093][T12466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.365132][T12466] ? import_iovec+0x73/0xa0 [ 470.365161][T12466] ___sys_sendmsg+0x2a5/0x360 [ 470.365198][T12466] ? __lock_acquire+0x6b5/0x2d10 [ 470.365235][T12466] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.365306][T12466] ? __fget_files+0x2a/0x420 [ 470.365330][T12466] ? __fget_files+0x3a6/0x420 [ 470.365362][T12466] __x64_sys_sendmsg+0x1b7/0x290 [ 470.365395][T12466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.365447][T12466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.365474][T12466] do_syscall_64+0x174/0x580 [ 470.365503][T12466] ? trace_irq_disable+0x3b/0x140 [ 470.365532][T12466] ? clear_bhb_loop+0x40/0x90 [ 470.365562][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.365586][T12466] RIP: 0033:0x7f49264bce59 [ 470.365610][T12466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.365630][T12466] RSP: 002b:00007f4924716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.365655][T12466] RAX: ffffffffffffffda RBX: 00007f4926735fa0 RCX: 00007f49264bce59 [ 470.365675][T12466] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 470.365690][T12466] RBP: 00007f4924716090 R08: 0000000000000000 R09: 0000000000000000 [ 470.365706][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.365732][T12466] R13: 00007f4926736038 R14: 00007f4926735fa0 R15: 00007ffe6670e098 [ 470.365770][T12466] [ 470.447841][T12469] FAULT_INJECTION: forcing a failure. [ 470.447841][T12469] name failslab, interval 1, probability 0, space 0, times 0 [ 470.447944][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.2.2360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 470.448013][T12469] Tainted: [L]=SOFTLOCKUP [ 470.448035][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.448074][T12469] Call Trace: [ 470.448096][T12469] [ 470.448126][T12469] dump_stack_lvl+0xe8/0x150 [ 470.448204][T12469] should_fail_ex+0x46b/0x600 [ 470.448300][T12469] should_failslab+0xa8/0x100 [ 470.448364][T12469] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 470.448456][T12469] ? security_file_alloc+0x34/0x310 [ 470.448523][T12469] ? security_file_alloc+0x34/0x310 [ 470.448624][T12469] security_file_alloc+0x34/0x310 [ 470.448723][T12469] init_file+0x96/0x2d0 [ 470.448788][T12469] alloc_empty_file+0x74/0x1d0 [ 470.448861][T12469] path_openat+0x92/0x37e0 [ 470.448976][T12469] ? __lock_acquire+0x6b5/0x2d10 [ 470.449057][T12469] ? __kasan_slab_alloc+0x6c/0x80 [ 470.449112][T12469] ? kmem_cache_alloc_noprof+0x354/0x6c0 [ 470.449205][T12469] ? do_getname+0x2e/0x250 [ 470.449277][T12469] ? do_sys_openat2+0xcc/0x200 [ 470.449329][T12469] ? __x64_sys_openat+0x138/0x170 [ 470.449409][T12469] ? do_raw_spin_lock+0x12b/0x2f0 [ 470.449492][T12469] do_file_open+0x23e/0x4a0 [ 470.449562][T12469] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.449648][T12469] ? __pfx_do_file_open+0x10/0x10 [ 470.449716][T12469] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 470.449838][T12469] ? alloc_fd+0x679/0x6f0 [ 470.449944][T12469] do_sys_openat2+0x115/0x200 [ 470.450019][T12469] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.450080][T12469] ? ksys_write+0x248/0x270 [ 470.450153][T12469] ? __pfx_ksys_write+0x10/0x10 [ 470.450230][T12469] __x64_sys_openat+0x138/0x170 [ 470.450288][T12469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.450356][T12469] do_syscall_64+0x174/0x580 [ 470.450420][T12469] ? trace_irq_disable+0x3b/0x140 [ 470.450492][T12469] ? clear_bhb_loop+0x40/0x90 [ 470.450563][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.450626][T12469] RIP: 0033:0x7f2087dbce59 [ 470.450677][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.450739][T12469] RSP: 002b:00007f2086016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.450801][T12469] RAX: ffffffffffffffda RBX: 00007f2088035fa0 RCX: 00007f2087dbce59 [ 470.450842][T12469] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 470.450883][T12469] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 470.450925][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.450959][T12469] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 470.451047][T12469] [ 471.700398][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 472.922202][T12530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.995694][T12533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.670250][T12551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.704647][T12551] evm: overlay not supported [ 473.937840][T11533] Bluetooth: hci3: command tx timeout [ 474.140138][T12563] FAULT_INJECTION: forcing a failure. [ 474.140138][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 474.140180][T12563] CPU: 1 UID: 0 PID: 12563 Comm: syz.3.2385 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 474.140212][T12563] Tainted: [L]=SOFTLOCKUP [ 474.140221][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.140237][T12563] Call Trace: [ 474.140246][T12563] [ 474.140256][T12563] dump_stack_lvl+0xe8/0x150 [ 474.140301][T12563] should_fail_ex+0x46b/0x600 [ 474.140339][T12563] should_failslab+0xa8/0x100 [ 474.140366][T12563] __kmalloc_cache_noprof+0xa0/0x6d0 [ 474.140391][T12563] ? vhost_task_create+0x123/0x380 [ 474.140417][T12563] ? vhost_task_create+0x123/0x380 [ 474.140451][T12563] vhost_task_create+0x123/0x380 [ 474.140479][T12563] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 474.140512][T12563] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 474.140548][T12563] ? __pfx_vhost_task_create+0x10/0x10 [ 474.140584][T12563] ? __pfx_vhost_task_fn+0x10/0x10 [ 474.140615][T12563] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 474.140646][T12563] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.140675][T12563] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 474.140703][T12563] ? mutex_lock_nested+0x152/0x1d0 [ 474.140737][T12563] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 474.140778][T12563] kvm_mmu_post_init_vm+0x147/0x2b0 [ 474.140816][T12563] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 474.140858][T12563] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 474.140899][T12563] ? do_raw_spin_lock+0x12b/0x2f0 [ 474.140938][T12563] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 474.140967][T12563] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.140994][T12563] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 474.141022][T12563] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 474.141051][T12563] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 474.141075][T12563] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 474.141103][T12563] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.141130][T12563] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 474.141158][T12563] ? rt_write_unlock+0x190/0x230 [ 474.141184][T12563] kvm_vcpu_ioctl+0xa65/0xfe0 [ 474.141225][T12563] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 474.141280][T12563] ? __fget_files+0x2a/0x420 [ 474.141307][T12563] ? __fget_files+0x2a/0x420 [ 474.141329][T12563] ? __fget_files+0x3a6/0x420 [ 474.141357][T12563] ? __fget_files+0x2a/0x420 [ 474.141384][T12563] ? bpf_lsm_file_ioctl+0x9/0x20 [ 474.141410][T12563] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 474.141444][T12563] __se_sys_ioctl+0xff/0x170 [ 474.141474][T12563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.141500][T12563] do_syscall_64+0x174/0x580 [ 474.141527][T12563] ? trace_irq_disable+0x3b/0x140 [ 474.141556][T12563] ? clear_bhb_loop+0x40/0x90 [ 474.141584][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.141607][T12563] RIP: 0033:0x7fad105fce59 [ 474.141629][T12563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.141649][T12563] RSP: 002b:00007fad0e835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.141674][T12563] RAX: ffffffffffffffda RBX: 00007fad10876090 RCX: 00007fad105fce59 [ 474.141691][T12563] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 474.141705][T12563] RBP: 00007fad0e835090 R08: 0000000000000000 R09: 0000000000000000 [ 474.141720][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.141734][T12563] R13: 00007fad10876128 R14: 00007fad10876090 R15: 00007ffd5ba59aa8 [ 474.141770][T12563] [ 474.973853][T12578] FAULT_INJECTION: forcing a failure. [ 474.973853][T12578] name failslab, interval 1, probability 0, space 0, times 0 [ 474.973881][T12578] CPU: 1 UID: 0 PID: 12578 Comm: syz.0.2392 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 474.973902][T12578] Tainted: [L]=SOFTLOCKUP [ 474.973907][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.973918][T12578] Call Trace: [ 474.973923][T12578] [ 474.973930][T12578] dump_stack_lvl+0xe8/0x150 [ 474.973952][T12578] should_fail_ex+0x46b/0x600 [ 474.973977][T12578] should_failslab+0xa8/0x100 [ 474.973995][T12578] __kmalloc_cache_noprof+0xa0/0x6d0 [ 474.974012][T12578] ? init_srcu_struct_fields+0x7f/0xaa0 [ 474.974033][T12578] ? init_srcu_struct_fields+0x7f/0xaa0 [ 474.974054][T12578] ? __pfx_snprintf+0x10/0x10 [ 474.974071][T12578] init_srcu_struct_fields+0x7f/0xaa0 [ 474.974096][T12578] kvm_dev_ioctl+0x5a7/0x1610 [ 474.974122][T12578] ? __fget_files+0x2a/0x420 [ 474.974138][T12578] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 474.974157][T12578] ? __fget_files+0x2a/0x420 [ 474.974174][T12578] ? bpf_lsm_file_ioctl+0x9/0x20 [ 474.974192][T12578] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 474.974213][T12578] __se_sys_ioctl+0xff/0x170 [ 474.974232][T12578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.974249][T12578] do_syscall_64+0x174/0x580 [ 474.974267][T12578] ? trace_irq_disable+0x3b/0x140 [ 474.974286][T12578] ? clear_bhb_loop+0x40/0x90 [ 474.974304][T12578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.974319][T12578] RIP: 0033:0x7f49264bce59 [ 474.974340][T12578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.974353][T12578] RSP: 002b:00007f4924716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.974369][T12578] RAX: ffffffffffffffda RBX: 00007f4926735fa0 RCX: 00007f49264bce59 [ 474.974380][T12578] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 474.974390][T12578] RBP: 00007f4924716090 R08: 0000000000000000 R09: 0000000000000000 [ 474.974400][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.974409][T12578] R13: 00007f4926736038 R14: 00007f4926735fa0 R15: 00007ffe6670e098 [ 474.974430][T12578] [ 475.218910][T11533] Bluetooth: hci4: command 0x0406 tx timeout [ 475.248060][ T5713] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 475.277799][ T5595] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 475.326944][T12582] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 475.397793][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 475.401266][ T5713] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 475.401302][ T5713] usb 2-1: config 0 has no interface number 0 [ 475.401409][ T5713] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 475.404649][ T5713] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 475.404680][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.404702][ T5713] usb 2-1: Product: syz [ 475.404717][ T5713] usb 2-1: Manufacturer: syz [ 475.404733][ T5713] usb 2-1: SerialNumber: syz [ 475.428790][ T5595] usb 3-1: Using ep0 maxpacket: 8 [ 475.455886][ T5595] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.455968][ T5595] usb 3-1: config 0 has no interfaces? [ 475.477833][ T5595] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 475.477944][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.477992][ T5595] usb 3-1: Product: syz [ 475.478991][ T5595] usb 3-1: Manufacturer: syz [ 475.479005][ T5595] usb 3-1: SerialNumber: syz [ 475.573208][ T5713] usb 2-1: config 0 descriptor?? [ 475.576226][T12576] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 475.597457][ T5595] usb 3-1: config 0 descriptor?? [ 475.694521][T12585] fuse: Bad value for 'fd' [ 475.783405][T12576] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 476.259921][ T5713] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 476.260373][ T5713] asix 2-1:0.188: probe with driver asix failed with error -71 [ 476.294257][ T5713] usb 2-1: USB disconnect, device number 83 [ 476.826777][T12609] FAULT_INJECTION: forcing a failure. [ 476.826777][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 476.826819][T12609] CPU: 0 UID: 0 PID: 12609 Comm: syz.1.2401 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.826851][T12609] Tainted: [L]=SOFTLOCKUP [ 476.826861][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.826876][T12609] Call Trace: [ 476.826885][T12609] [ 476.826895][T12609] dump_stack_lvl+0xe8/0x150 [ 476.826929][T12609] should_fail_ex+0x46b/0x600 [ 476.826980][T12609] should_failslab+0xa8/0x100 [ 476.827020][T12609] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 476.827058][T12609] ? __pmd_alloc+0xa4/0x5e0 [ 476.827078][T12609] ? __pmd_alloc+0xa4/0x5e0 [ 476.827106][T12609] __pmd_alloc+0xa4/0x5e0 [ 476.827132][T12609] handle_mm_fault+0xf4d/0x14d0 [ 476.827160][T12609] ? handle_mm_fault+0xed/0x14d0 [ 476.827183][T12609] ? kstrtouint+0x6e/0xe0 [ 476.827215][T12609] ? __pfx_handle_mm_fault+0x10/0x10 [ 476.827252][T12609] ? __lock_acquire+0x6b5/0x2d10 [ 476.827287][T12609] ? lock_mm_and_find_vma+0xa7/0x340 [ 476.827317][T12609] do_user_addr_fault+0x75b/0x1340 [ 476.827362][T12609] exc_page_fault+0x6a/0xc0 [ 476.827394][T12609] asm_exc_page_fault+0x26/0x30 [ 476.827416][T12609] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 476.827441][T12609] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 476.827462][T12609] RSP: 0018:ffffc9000402fdb8 EFLAGS: 00050246 [ 476.827502][T12609] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 476.827518][T12609] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000402fe40 [ 476.827535][T12609] RBP: ffffc9000402fee0 R08: ffffc9000402fe47 R09: 1ffff92000805fc8 [ 476.827553][T12609] R10: dffffc0000000000 R11: fffff52000805fc9 R12: 0000200000000040 [ 476.827571][T12609] R13: dffffc0000000000 R14: ffffc9000402fe40 R15: 0000200000000040 [ 476.827616][T12609] _copy_from_user+0x7a/0xb0 [ 476.827642][T12609] __se_sys_rt_sigprocmask+0xff/0x2a0 [ 476.827692][T12609] ? fput+0xa0/0xd0 [ 476.827711][T12609] ? __pfx___se_sys_rt_sigprocmask+0x10/0x10 [ 476.827745][T12609] ? ksys_write+0x248/0x270 [ 476.827774][T12609] ? __pfx_ksys_write+0x10/0x10 [ 476.827809][T12609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.827832][T12609] do_syscall_64+0x174/0x580 [ 476.827858][T12609] ? trace_irq_disable+0x3b/0x140 [ 476.827885][T12609] ? clear_bhb_loop+0x40/0x90 [ 476.827911][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.827932][T12609] RIP: 0033:0x7f38765bce59 [ 476.827952][T12609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.827975][T12609] RSP: 002b:00007f3874816028 EFLAGS: 00000246 ORIG_RAX: 000000000000000e [ 476.827996][T12609] RAX: ffffffffffffffda RBX: 00007f3876835fa0 RCX: 00007f38765bce59 [ 476.828012][T12609] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000002 [ 476.828026][T12609] RBP: 00007f3874816090 R08: 0000000000000000 R09: 0000000000000000 [ 476.828040][T12609] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 476.828053][T12609] R13: 00007f3876836038 R14: 00007f3876835fa0 R15: 00007ffc01fd9728 [ 476.828087][T12609] [ 476.897779][T11533] Bluetooth: hci3: command tx timeout [ 477.192579][ T5595] usb 3-1: USB disconnect, device number 99 [ 477.418058][T12619] fuse: Bad value for 'fd' [ 477.649834][ T5595] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 477.802318][ T5595] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.804210][ T5595] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.804235][ T5595] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.826041][ T5595] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 477.826126][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.826166][ T5595] usb 4-1: Product: syz [ 477.826215][ T5595] usb 4-1: Manufacturer: syz [ 477.826259][ T5595] usb 4-1: SerialNumber: syz [ 477.946228][ T5595] usb 4-1: 0:1 : does not exist [ 477.946257][ T5595] usb 4-1: 0:2 : does not exist [ 478.107183][T12638] FAULT_INJECTION: forcing a failure. [ 478.107183][T12638] name failslab, interval 1, probability 0, space 0, times 0 [ 478.107239][T12638] CPU: 1 UID: 0 PID: 12638 Comm: syz.2.2412 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.107289][T12638] Tainted: [L]=SOFTLOCKUP [ 478.107298][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.107314][T12638] Call Trace: [ 478.107323][T12638] [ 478.107334][T12638] dump_stack_lvl+0xe8/0x150 [ 478.107390][T12638] should_fail_ex+0x46b/0x600 [ 478.107437][T12638] should_failslab+0xa8/0x100 [ 478.107482][T12638] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 478.107543][T12638] ? skb_clone+0x212/0x3a0 [ 478.107586][T12638] ? skb_clone+0x212/0x3a0 [ 478.107620][T12638] skb_clone+0x212/0x3a0 [ 478.107653][T12638] __netlink_deliver_tap+0x424/0x8b0 [ 478.107703][T12638] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.107731][T12638] netlink_deliver_tap+0x19c/0x1b0 [ 478.107757][T12638] netlink_unicast+0x754/0x920 [ 478.107809][T12638] netlink_sendmsg+0x813/0xb40 [ 478.107848][T12638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.107879][T12638] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 478.107912][T12638] ? aa_sock_msg_perm+0x122/0x200 [ 478.107936][T12638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.107964][T12638] sock_sendmsg_nosec+0x13a/0x180 [ 478.108002][T12638] ____sys_sendmsg+0x55c/0x870 [ 478.108037][T12638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.108075][T12638] ? import_iovec+0x73/0xa0 [ 478.108104][T12638] ___sys_sendmsg+0x2a5/0x360 [ 478.108131][T12638] ? __lock_acquire+0x6b5/0x2d10 [ 478.108164][T12638] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.108228][T12638] ? __fget_files+0x2a/0x420 [ 478.108251][T12638] ? __fget_files+0x3a6/0x420 [ 478.108285][T12638] __x64_sys_sendmsg+0x1b7/0x290 [ 478.108318][T12638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.108366][T12638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.108399][T12638] do_syscall_64+0x174/0x580 [ 478.108427][T12638] ? trace_irq_disable+0x3b/0x140 [ 478.108455][T12638] ? clear_bhb_loop+0x40/0x90 [ 478.108484][T12638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.108508][T12638] RIP: 0033:0x7f2087dbce59 [ 478.108528][T12638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.108550][T12638] RSP: 002b:00007f2086016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.108574][T12638] RAX: ffffffffffffffda RBX: 00007f2088035fa0 RCX: 00007f2087dbce59 [ 478.108591][T12638] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 478.108606][T12638] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 478.108621][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.108635][T12638] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 478.108670][T12638] [ 478.234914][ T5769] usb 4-1: USB disconnect, device number 89 [ 478.461934][T12640] FAULT_INJECTION: forcing a failure. [ 478.461934][T12640] name failslab, interval 1, probability 0, space 0, times 0 [ 478.461969][T12640] CPU: 1 UID: 0 PID: 12640 Comm: syz.2.2413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.461994][T12640] Tainted: [L]=SOFTLOCKUP [ 478.462001][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.462031][T12640] Call Trace: [ 478.462038][T12640] [ 478.462047][T12640] dump_stack_lvl+0xe8/0x150 [ 478.462076][T12640] should_fail_ex+0x46b/0x600 [ 478.462106][T12640] should_failslab+0xa8/0x100 [ 478.462129][T12640] __kmalloc_noprof+0xfe/0x7e0 [ 478.462149][T12640] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 478.462168][T12640] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 478.462193][T12640] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 478.462217][T12640] genl_family_rcv_msg_doit+0xd9/0x330 [ 478.462251][T12640] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.462285][T12640] ? apparmor_capable+0x126/0x170 [ 478.462308][T12640] ? bpf_lsm_capable+0x9/0x20 [ 478.462333][T12640] ? security_capable+0x7e/0x2c0 [ 478.462366][T12640] genl_rcv_msg+0x61c/0x7a0 [ 478.462397][T12640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.462424][T12640] ? __pfx_netlbl_cipsov4_remove+0x10/0x10 [ 478.462463][T12640] netlink_rcv_skb+0x232/0x4b0 [ 478.462502][T12640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.462530][T12640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.462562][T12640] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.462584][T12640] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.462608][T12640] genl_rcv+0x28/0x40 [ 478.462633][T12640] netlink_unicast+0x780/0x920 [ 478.462661][T12640] netlink_sendmsg+0x813/0xb40 [ 478.462691][T12640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.462715][T12640] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 478.462740][T12640] ? aa_sock_msg_perm+0x122/0x200 [ 478.462759][T12640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.462780][T12640] sock_sendmsg_nosec+0x13a/0x180 [ 478.462811][T12640] ____sys_sendmsg+0x55c/0x870 [ 478.462846][T12640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.462877][T12640] ? import_iovec+0x73/0xa0 [ 478.462900][T12640] ___sys_sendmsg+0x2a5/0x360 [ 478.462921][T12640] ? __lock_acquire+0x6b5/0x2d10 [ 478.462948][T12640] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.462998][T12640] ? __fget_files+0x2a/0x420 [ 478.463016][T12640] ? __fget_files+0x3a6/0x420 [ 478.463042][T12640] __x64_sys_sendmsg+0x1b7/0x290 [ 478.463067][T12640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.463104][T12640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.463125][T12640] do_syscall_64+0x174/0x580 [ 478.463148][T12640] ? trace_irq_disable+0x3b/0x140 [ 478.463171][T12640] ? clear_bhb_loop+0x40/0x90 [ 478.463193][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.463212][T12640] RIP: 0033:0x7f2087dbce59 [ 478.463229][T12640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.463245][T12640] RSP: 002b:00007f2086016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.463265][T12640] RAX: ffffffffffffffda RBX: 00007f2088035fa0 RCX: 00007f2087dbce59 [ 478.463279][T12640] RDX: 0000000024040804 RSI: 0000200000000340 RDI: 0000000000000004 [ 478.463292][T12640] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 478.463304][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.463315][T12640] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 478.463344][T12640] [ 478.887513][T12642] fuse: Unknown parameter '0x0000000000000003' [ 478.898016][T11533] Bluetooth: hci2: command 0x0c1a tx timeout [ 479.149787][T12650] binder: 12649:12650 ioctl 4018620d 0 returned -22 [ 479.329019][T12653] FAULT_INJECTION: forcing a failure. [ 479.329019][T12653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.329057][T12653] CPU: 1 UID: 0 PID: 12653 Comm: syz.3.2418 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 479.329087][T12653] Tainted: [L]=SOFTLOCKUP [ 479.329095][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.329109][T12653] Call Trace: [ 479.329118][T12653] [ 479.329128][T12653] dump_stack_lvl+0xe8/0x150 [ 479.329159][T12653] should_fail_ex+0x46b/0x600 [ 479.329194][T12653] _copy_to_user+0x31/0xb0 [ 479.329221][T12653] simple_read_from_buffer+0xe1/0x170 [ 479.329257][T12653] proc_fail_nth_read+0x1be/0x230 [ 479.329283][T12653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.329308][T12653] ? rw_verify_area+0x2ac/0x4e0 [ 479.329333][T12653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.329357][T12653] vfs_read+0x212/0xa80 [ 479.329389][T12653] ? __pfx_vfs_read+0x10/0x10 [ 479.329416][T12653] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.329445][T12653] ? lockdep_hardirqs_on+0x7a/0x110 [ 479.329472][T12653] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 479.329499][T12653] ? mutex_lock_nested+0x152/0x1d0 [ 479.329531][T12653] ? fdget_pos+0x252/0x320 [ 479.329562][T12653] ksys_read+0x156/0x270 [ 479.329589][T12653] ? __pfx_ksys_read+0x10/0x10 [ 479.329623][T12653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.329647][T12653] do_syscall_64+0x174/0x580 [ 479.329679][T12653] ? trace_irq_disable+0x3b/0x140 [ 479.329706][T12653] ? clear_bhb_loop+0x40/0x90 [ 479.329732][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.329773][T12653] RIP: 0033:0x7fad105bd68e [ 479.329798][T12653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.329817][T12653] RSP: 002b:00007fad0e834fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.329843][T12653] RAX: ffffffffffffffda RBX: 00007fad0e8356c0 RCX: 00007fad105bd68e [ 479.329861][T12653] RDX: 000000000000000f RSI: 00007fad0e8350a0 RDI: 0000000000000006 [ 479.329876][T12653] RBP: 00007fad0e835090 R08: 0000000000000000 R09: 0000000000000000 [ 479.329892][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.329906][T12653] R13: 00007fad10876128 R14: 00007fad10876090 R15: 00007ffd5ba59aa8 [ 479.329943][T12653] [ 479.864306][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 479.937790][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 479.951936][T12674] fuse: Unknown parameter '0x0000000000000003' [ 480.217789][ T5769] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 480.253334][T12683] FAULT_INJECTION: forcing a failure. [ 480.253334][T12683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 480.253375][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.2.2432 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 480.253405][T12683] Tainted: [L]=SOFTLOCKUP [ 480.253413][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.253427][T12683] Call Trace: [ 480.253436][T12683] [ 480.253446][T12683] dump_stack_lvl+0xe8/0x150 [ 480.253477][T12683] should_fail_ex+0x46b/0x600 [ 480.253513][T12683] prepare_alloc_pages+0x22a/0x6b0 [ 480.253546][T12683] __alloc_frozen_pages_noprof+0x12f/0x380 [ 480.253575][T12683] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 480.253605][T12683] ? __pfx_policy_nodemask+0x10/0x10 [ 480.253640][T12683] ? __lock_acquire+0x6b5/0x2d10 [ 480.253675][T12683] alloc_pages_mpol+0xd1/0x380 [ 480.253706][T12683] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 480.253735][T12683] vma_alloc_folio_noprof+0xe1/0x1e0 [ 480.253765][T12683] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 480.253794][T12683] ? __pte_offset_map+0x29/0x200 [ 480.253834][T12683] do_pte_missing+0x822/0x2940 [ 480.253868][T12683] ? handle_mm_fault+0xed/0x14d0 [ 480.253894][T12683] handle_mm_fault+0xdc2/0x14d0 [ 480.253919][T12683] ? handle_mm_fault+0xed/0x14d0 [ 480.253945][T12683] ? __pfx_handle_mm_fault+0x10/0x10 [ 480.253980][T12683] ? __lock_acquire+0x6b5/0x2d10 [ 480.254012][T12683] ? lock_mm_and_find_vma+0xa7/0x340 [ 480.254041][T12683] do_user_addr_fault+0x75b/0x1340 [ 480.254084][T12683] exc_page_fault+0x6a/0xc0 [ 480.254112][T12683] asm_exc_page_fault+0x26/0x30 [ 480.254135][T12683] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 480.254157][T12683] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 480.254176][T12683] RSP: 0018:ffffc90003f0f898 EFLAGS: 00050202 [ 480.254197][T12683] RAX: ffffffff84b7e401 RBX: ffff888035172000 RCX: 0000000000000181 [ 480.254213][T12683] RDX: 0000000000000000 RSI: ffff888035172e49 RDI: 0000200000001000 [ 480.254228][T12683] RBP: ffffc90003f0fa10 R08: ffff888035172fc9 R09: 1ffff11006a2e5f9 [ 480.254245][T12683] R10: dffffc0000000000 R11: ffffed1006a2e5fa R12: dffffc0000000000 [ 480.254262][T12683] R13: 0000000000000037 R14: 00007ffffffff000 R15: 0000000000000fca [ 480.254285][T12683] ? _copy_to_iter+0x3c1/0x17d0 [ 480.254326][T12683] _copy_to_iter+0x493/0x17d0 [ 480.254375][T12683] ? __pfx__copy_to_iter+0x10/0x10 [ 480.254405][T12683] ? rt_mutex_slowunlock+0x1cb/0x300 [ 480.254427][T12683] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 480.254462][T12683] seq_read_iter+0xbf6/0xe20 [ 480.254512][T12683] seq_read+0x36a/0x490 [ 480.254540][T12683] ? get_pid_task+0x20/0x1f0 [ 480.254572][T12683] ? __pfx_seq_read+0x10/0x10 [ 480.254617][T12683] ? apparmor_file_permission+0x1f4/0x300 [ 480.254655][T12683] ? __pfx_seq_read+0x10/0x10 [ 480.254682][T12683] proc_reg_read+0x1f6/0x2f0 [ 480.254707][T12683] ? __pfx_proc_reg_read+0x10/0x10 [ 480.254735][T12683] vfs_read+0x212/0xa80 [ 480.254769][T12683] ? __pfx_vfs_read+0x10/0x10 [ 480.254796][T12683] ? __fget_files+0x2a/0x420 [ 480.254821][T12683] ? __fget_files+0x2a/0x420 [ 480.254842][T12683] ? __fget_files+0x3a6/0x420 [ 480.254863][T12683] ? __fget_files+0x2a/0x420 [ 480.254894][T12683] __x64_sys_pread64+0x19c/0x230 [ 480.254925][T12683] ? __pfx___x64_sys_pread64+0x10/0x10 [ 480.254962][T12683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.254987][T12683] do_syscall_64+0x174/0x580 [ 480.255013][T12683] ? trace_irq_disable+0x3b/0x140 [ 480.255040][T12683] ? clear_bhb_loop+0x40/0x90 [ 480.255067][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.255088][T12683] RIP: 0033:0x7f2087dbce59 [ 480.255108][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.255127][T12683] RSP: 002b:00007f2086016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 480.255148][T12683] RAX: ffffffffffffffda RBX: 00007f2088035fa0 RCX: 00007f2087dbce59 [ 480.255164][T12683] RDX: 000000000000fd8a RSI: 0000200000000180 RDI: 0000000000000003 [ 480.255179][T12683] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 480.255193][T12683] R10: 000000000000003c R11: 0000000000000246 R12: 0000000000000001 [ 480.255207][T12683] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 480.255241][T12683] [ 480.379082][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 480.404153][ T5769] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 480.404235][ T5769] usb 2-1: config 0 has no interface number 0 [ 480.404395][ T5769] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 480.404464][ T5769] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 480.507310][ T5769] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 480.507396][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.507460][ T5769] usb 2-1: Product: syz [ 480.507502][ T5769] usb 2-1: Manufacturer: syz [ 480.507547][ T5769] usb 2-1: SerialNumber: syz [ 480.919295][ T5769] usb 2-1: config 0 descriptor?? [ 480.920312][T12672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 480.920666][T12672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 481.211871][T12694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 481.212158][T12694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 481.417887][ T5769] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 481.418433][ T5769] asix 2-1:0.34: probe with driver asix failed with error -61 [ 481.571065][T12686] block device autoloading is deprecated and will be removed. [ 482.317248][ T9257] wlan1: Trigger new scan to find an IBSS to join [ 482.510545][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 482.567326][T12707] fuse: Unknown parameter '0x0000000000000003' [ 482.649552][T12711] FAULT_INJECTION: forcing a failure. [ 482.649552][T12711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 482.649595][T12711] CPU: 1 UID: 0 PID: 12711 Comm: syz.3.2442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 482.649626][T12711] Tainted: [L]=SOFTLOCKUP [ 482.649635][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 482.649649][T12711] Call Trace: [ 482.649658][T12711] [ 482.649668][T12711] dump_stack_lvl+0xe8/0x150 [ 482.649701][T12711] should_fail_ex+0x46b/0x600 [ 482.649739][T12711] prepare_alloc_pages+0x22a/0x6b0 [ 482.649774][T12711] __alloc_frozen_pages_noprof+0x12f/0x380 [ 482.649806][T12711] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 482.649838][T12711] ? __pfx_policy_nodemask+0x10/0x10 [ 482.649873][T12711] ? mtree_range_walk+0x6fc/0x8b0 [ 482.649944][T12711] alloc_pages_mpol+0xd1/0x380 [ 482.649975][T12711] alloc_pages_noprof+0xd2/0x2f0 [ 482.650005][T12711] __pud_alloc+0x3a/0x460 [ 482.650032][T12711] handle_mm_fault+0xef7/0x14d0 [ 482.650057][T12711] ? handle_mm_fault+0xed/0x14d0 [ 482.650084][T12711] ? __pfx_handle_mm_fault+0x10/0x10 [ 482.650109][T12711] ? __lock_acquire+0x6b5/0x2d10 [ 482.650133][T12711] ? lock_mm_and_find_vma+0xa7/0x340 [ 482.650153][T12711] do_user_addr_fault+0x75b/0x1340 [ 482.650184][T12711] exc_page_fault+0x6a/0xc0 [ 482.650205][T12711] asm_exc_page_fault+0x26/0x30 [ 482.650220][T12711] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 482.650237][T12711] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 482.650251][T12711] RSP: 0018:ffffc90007bc7cb8 EFLAGS: 00050246 [ 482.650266][T12711] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 482.650278][T12711] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90007bc7d60 [ 482.650289][T12711] RBP: ffffc90007bc7e68 R08: ffffc90007bc7d67 R09: 1ffff92000f78fac [ 482.650302][T12711] R10: dffffc0000000000 R11: fffff52000f78fad R12: 1ffff92000f78fa4 [ 482.650314][T12711] R13: 0000200000000000 R14: ffffc90007bc7d60 R15: 0000200000000000 [ 482.650338][T12711] _copy_from_user+0x7a/0xb0 [ 482.650357][T12711] vt_ioctl+0x13b5/0x20c0 [ 482.650388][T12711] ? __pfx_vt_ioctl+0x10/0x10 [ 482.650422][T12711] ? __fget_files+0x2a/0x420 [ 482.650442][T12711] ? __fget_files+0x3a6/0x420 [ 482.650457][T12711] ? __fget_files+0x2a/0x420 [ 482.650475][T12711] tty_ioctl+0x92e/0xde0 [ 482.650495][T12711] ? __pfx_tty_ioctl+0x10/0x10 [ 482.650513][T12711] __se_sys_ioctl+0xff/0x170 [ 482.650535][T12711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.650552][T12711] do_syscall_64+0x174/0x580 [ 482.650572][T12711] ? trace_irq_disable+0x3b/0x140 [ 482.650592][T12711] ? clear_bhb_loop+0x40/0x90 [ 482.650612][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.650628][T12711] RIP: 0033:0x7fad105fce59 [ 482.650642][T12711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.650656][T12711] RSP: 002b:00007fad0e856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.650670][T12711] RAX: ffffffffffffffda RBX: 00007fad10875fa0 RCX: 00007fad105fce59 [ 482.650682][T12711] RDX: 0000200000000000 RSI: 0000000000004b52 RDI: 0000000000000003 [ 482.650692][T12711] RBP: 00007fad0e856090 R08: 0000000000000000 R09: 0000000000000000 [ 482.650702][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.650712][T12711] R13: 00007fad10876038 R14: 00007fad10875fa0 R15: 00007ffd5ba59aa8 [ 482.650735][T12711] [ 483.083294][ T822] usb 2-1: USB disconnect, device number 84 [ 483.137471][T12717] netlink: 'syz.3.2443': attribute type 1 has an invalid length. [ 483.137512][T12717] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.2443'. [ 483.173946][T12717] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2443'. [ 483.437762][ T5713] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 483.590397][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 483.597830][ T5713] usb 4-1: not running at top speed; connect to a high speed hub [ 483.617507][ T5713] usb 4-1: config 61 has an invalid interface number: 37 but max is 0 [ 483.617538][ T5713] usb 4-1: config 61 has no interface number 0 [ 483.617826][ T5713] usb 4-1: config 61 interface 37 has no altsetting 0 [ 483.644698][ T5713] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 483.644730][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.644759][ T5713] usb 4-1: Product: syz [ 483.644776][ T5713] usb 4-1: Manufacturer: syz [ 483.644791][ T5713] usb 4-1: SerialNumber: syz [ 484.125461][ T5713] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 484.619529][ T44] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 484.806215][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 484.826198][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.826218][ T44] usb 2-1: config 0 has no interfaces? [ 484.858645][ T44] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 484.858672][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.859184][ T44] usb 2-1: Product: syz [ 484.859196][ T44] usb 2-1: Manufacturer: syz [ 484.859207][ T44] usb 2-1: SerialNumber: syz [ 484.922650][ T44] usb 2-1: config 0 descriptor?? [ 485.010045][T12735] snd_dummy snd_dummy.0: control 6:5:-8:syz1:32 is already present [ 485.028754][T12736] fuse: Unknown parameter '0x0000000000000003' [ 485.213169][T12741] FAULT_INJECTION: forcing a failure. [ 485.213169][T12741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.213207][T12741] CPU: 0 UID: 0 PID: 12741 Comm: syz.0.2454 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.213235][T12741] Tainted: [L]=SOFTLOCKUP [ 485.213242][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.213257][T12741] Call Trace: [ 485.213265][T12741] [ 485.213273][T12741] dump_stack_lvl+0xe8/0x150 [ 485.213305][T12741] should_fail_ex+0x46b/0x600 [ 485.213338][T12741] _copy_from_user+0x2d/0xb0 [ 485.213358][T12741] __se_sys_mount+0x18b/0x420 [ 485.213381][T12741] ? __pfx___se_sys_mount+0x10/0x10 [ 485.213403][T12741] ? __x64_sys_mount+0x20/0xc0 [ 485.213419][T12741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.213438][T12741] do_syscall_64+0x174/0x580 [ 485.213461][T12741] ? trace_irq_disable+0x3b/0x140 [ 485.213483][T12741] ? clear_bhb_loop+0x40/0x90 [ 485.213505][T12741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.213523][T12741] RIP: 0033:0x7f49264bce59 [ 485.213540][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.213556][T12741] RSP: 002b:00007f4924716028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 485.213575][T12741] RAX: ffffffffffffffda RBX: 00007f4926735fa0 RCX: 00007f49264bce59 [ 485.213591][T12741] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 485.213604][T12741] RBP: 00007f4924716090 R08: 0000200000000080 R09: 0000000000000000 [ 485.213618][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.213629][T12741] R13: 00007f4926736038 R14: 00007f4926735fa0 R15: 00007ffe6670e098 [ 485.213656][T12741] [ 485.483028][T12744] FAULT_INJECTION: forcing a failure. [ 485.483028][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 485.483070][T12744] CPU: 0 UID: 0 PID: 12744 Comm: syz.2.2455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.483102][T12744] Tainted: [L]=SOFTLOCKUP [ 485.483111][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.483135][T12744] Call Trace: [ 485.483149][T12744] [ 485.483159][T12744] dump_stack_lvl+0xe8/0x150 [ 485.483193][T12744] should_fail_ex+0x46b/0x600 [ 485.483234][T12744] should_failslab+0xa8/0x100 [ 485.483264][T12744] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 485.483302][T12744] ? skb_ext_add+0x148/0x8f0 [ 485.483328][T12744] ? skb_ext_add+0x148/0x8f0 [ 485.483363][T12744] skb_ext_add+0x148/0x8f0 [ 485.483412][T12744] j1939_sk_sendmsg+0x78e/0x1350 [ 485.483453][T12744] ? j1939_sk_sendmsg+0x51a/0x1350 [ 485.483495][T12744] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 485.483534][T12744] ? aa_sock_msg_perm+0x122/0x200 [ 485.483558][T12744] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 485.483608][T12744] sock_sendmsg_nosec+0x13a/0x180 [ 485.483647][T12744] ____sys_sendmsg+0x55c/0x870 [ 485.483683][T12744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.483723][T12744] ? import_iovec+0x73/0xa0 [ 485.483752][T12744] ___sys_sendmsg+0x2a5/0x360 [ 485.483781][T12744] ? __lock_acquire+0x6b5/0x2d10 [ 485.483816][T12744] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.483851][T12744] ? kstrtouint+0x6e/0xe0 [ 485.483919][T12744] ? __fget_files+0x2a/0x420 [ 485.483941][T12744] ? __fget_files+0x3a6/0x420 [ 485.483971][T12744] __sys_sendmmsg+0x279/0x4d0 [ 485.484004][T12744] ? __pfx___sys_sendmmsg+0x10/0x10 [ 485.484041][T12744] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 485.484077][T12744] ? ksys_write+0x248/0x270 [ 485.484106][T12744] ? __pfx_ksys_write+0x10/0x10 [ 485.484147][T12744] __x64_sys_sendmmsg+0xa0/0xc0 [ 485.484175][T12744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.484215][T12744] do_syscall_64+0x174/0x580 [ 485.484245][T12744] ? trace_irq_disable+0x3b/0x140 [ 485.484274][T12744] ? clear_bhb_loop+0x40/0x90 [ 485.484302][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.484326][T12744] RIP: 0033:0x7f2087dbce59 [ 485.484347][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.484368][T12744] RSP: 002b:00007f2086016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 485.484393][T12744] RAX: ffffffffffffffda RBX: 00007f2088035fa0 RCX: 00007f2087dbce59 [ 485.484410][T12744] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 485.484427][T12744] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 485.484442][T12744] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 485.484457][T12744] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 485.484492][T12744] [ 485.937939][ T8616] wlan1: Trigger new scan to find an IBSS to join [ 485.974428][ T5713] gp8psk: usb out operation failed. [ 485.974536][ T5713] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 485.974608][ T5713] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 486.019778][ T5713] usb 4-1: USB disconnect, device number 90 [ 486.821954][ T5593] usb 2-1: USB disconnect, device number 85 [ 486.959708][ T9248] wlan1: Creating new IBSS network, BSSID fa:47:39:ea:4e:9d [ 486.962815][T12776] FAULT_INJECTION: forcing a failure. [ 486.962815][T12776] name failslab, interval 1, probability 0, space 0, times 0 [ 486.962949][T12776] CPU: 0 UID: 0 PID: 12776 Comm: syz.0.2461 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 486.962987][T12776] Tainted: [L]=SOFTLOCKUP [ 486.962995][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 486.963009][T12776] Call Trace: [ 486.963018][T12776] [ 486.963027][T12776] dump_stack_lvl+0xe8/0x150 [ 486.963059][T12776] should_fail_ex+0x46b/0x600 [ 486.963095][T12776] should_failslab+0xa8/0x100 [ 486.963122][T12776] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 486.963157][T12776] ? vm_area_dup+0x2b/0x670 [ 486.963180][T12776] ? vm_area_dup+0x2b/0x670 [ 486.963210][T12776] vm_area_dup+0x2b/0x670 [ 486.963240][T12776] __split_vma+0x1e4/0xa40 [ 486.963274][T12776] ? mas_next_slot+0xc3e/0xd10 [ 486.963306][T12776] ? __pfx___split_vma+0x10/0x10 [ 486.963346][T12776] ? mas_find+0xb0e/0xd30 [ 486.963379][T12776] vms_gather_munmap_vmas+0x4fa/0x1380 [ 486.963425][T12776] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 486.963463][T12776] ? mas_find+0xa7d/0xd30 [ 486.963496][T12776] mmap_region+0x932/0x2220 [ 486.963527][T12776] ? try_to_take_rt_mutex+0x840/0xb00 [ 486.963563][T12776] ? __pfx_mmap_region+0x10/0x10 [ 486.963600][T12776] ? __lock_acquire+0x6b5/0x2d10 [ 486.963631][T12776] ? __lock_acquire+0x6b5/0x2d10 [ 486.963720][T12776] ? __lock_acquire+0x6b5/0x2d10 [ 486.963769][T12776] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 486.963797][T12776] ? aa_file_perm+0x51a/0x15f0 [ 486.963827][T12776] ? __lock_acquire+0x6b5/0x2d10 [ 486.963856][T12776] ? cap_mmap_addr+0xaf/0x100 [ 486.963887][T12776] ? bpf_lsm_mmap_addr+0x9/0x50 [ 486.963911][T12776] ? security_mmap_addr+0x71/0x240 [ 486.963943][T12776] ? shmem_mapping+0xd/0x50 [ 486.963996][T12776] ? memfd_check_seals_mmap+0xcb/0x210 [ 486.964024][T12776] do_mmap+0xc2f/0x10c0 [ 486.964063][T12776] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.964092][T12776] ? __pfx_do_mmap+0x10/0x10 [ 486.964136][T12776] ? rwbase_write_lock+0x568/0x730 [ 486.964179][T12776] vm_mmap_pgoff+0x2cc/0x4f0 [ 486.964217][T12776] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 486.964254][T12776] ? __fget_files+0x2a/0x420 [ 486.964275][T12776] ? __fget_files+0x3a6/0x420 [ 486.964296][T12776] ? __fget_files+0x2a/0x420 [ 486.964322][T12776] ksys_mmap_pgoff+0x4e8/0x720 [ 486.964356][T12776] ? __x64_sys_mmap+0x7f/0x140 [ 486.964383][T12776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.964407][T12776] do_syscall_64+0x174/0x580 [ 486.964434][T12776] ? trace_irq_disable+0x3b/0x140 [ 486.964460][T12776] ? clear_bhb_loop+0x40/0x90 [ 486.964487][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.964509][T12776] RIP: 0033:0x7f49264bce59 [ 486.964528][T12776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.964547][T12776] RSP: 002b:00007f4924716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 486.964569][T12776] RAX: ffffffffffffffda RBX: 00007f4926735fa0 RCX: 00007f49264bce59 [ 486.964603][T12776] RDX: 0000000000000008 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 486.964618][T12776] RBP: 00007f4924716090 R08: 0000000000000003 R09: 000000009ee81000 [ 486.964633][T12776] R10: 0000000000020013 R11: 0000000000000246 R12: 0000000000000001 [ 486.964648][T12776] R13: 00007f4926736038 R14: 00007f4926735fa0 R15: 00007ffe6670e098 [ 486.964684][T12776] [ 487.463135][T12782] netlink: 'syz.0.2462': attribute type 10 has an invalid length. [ 487.547083][T12787] FAULT_INJECTION: forcing a failure. [ 487.547083][T12787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.547115][T12787] CPU: 0 UID: 0 PID: 12787 Comm: syz.1.2465 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.547138][T12787] Tainted: [L]=SOFTLOCKUP [ 487.547145][T12787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.547156][T12787] Call Trace: [ 487.547162][T12787] [ 487.547169][T12787] dump_stack_lvl+0xe8/0x150 [ 487.547193][T12787] should_fail_ex+0x46b/0x600 [ 487.547220][T12787] _copy_from_user+0x2d/0xb0 [ 487.547239][T12787] __se_sys_mount+0x18b/0x420 [ 487.547261][T12787] ? __pfx___se_sys_mount+0x10/0x10 [ 487.547282][T12787] ? __x64_sys_mount+0x20/0xc0 [ 487.547298][T12787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.547316][T12787] do_syscall_64+0x174/0x580 [ 487.547337][T12787] ? trace_irq_disable+0x3b/0x140 [ 487.547360][T12787] ? clear_bhb_loop+0x40/0x90 [ 487.547407][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.547431][T12787] RIP: 0033:0x7f38765bce59 [ 487.547454][T12787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.547475][T12787] RSP: 002b:00007f3874816028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 487.547500][T12787] RAX: ffffffffffffffda RBX: 00007f3876835fa0 RCX: 00007f38765bce59 [ 487.547523][T12787] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 487.547533][T12787] RBP: 00007f3874816090 R08: 0000200000000480 R09: 0000000000000000 [ 487.547544][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.547554][T12787] R13: 00007f3876836038 R14: 00007f3876835fa0 R15: 00007ffc01fd9728 [ 487.547604][T12787] [ 487.896641][T12793] netlink: 'syz.1.2469': attribute type 11 has an invalid length. [ 488.356798][T12805] FAULT_INJECTION: forcing a failure. [ 488.356798][T12805] name failslab, interval 1, probability 0, space 0, times 0 [ 488.356838][T12805] CPU: 0 UID: 0 PID: 12805 Comm: syz.3.2473 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 488.356876][T12805] Tainted: [L]=SOFTLOCKUP [ 488.356885][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.356901][T12805] Call Trace: [ 488.356911][T12805] [ 488.356921][T12805] dump_stack_lvl+0xe8/0x150 [ 488.356954][T12805] should_fail_ex+0x46b/0x600 [ 488.356994][T12805] should_failslab+0xa8/0x100 [ 488.357024][T12805] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 488.357064][T12805] ? __anon_vma_prepare+0x117/0x4a0 [ 488.357086][T12805] ? __anon_vma_prepare+0x117/0x4a0 [ 488.357118][T12805] __anon_vma_prepare+0x117/0x4a0 [ 488.357148][T12805] do_pte_missing+0x1e53/0x2940 [ 488.357186][T12805] ? handle_mm_fault+0xed/0x14d0 [ 488.357213][T12805] handle_mm_fault+0xdc2/0x14d0 [ 488.357240][T12805] ? handle_mm_fault+0xed/0x14d0 [ 488.357267][T12805] ? __pfx_handle_mm_fault+0x10/0x10 [ 488.357303][T12805] ? __lock_acquire+0x6b5/0x2d10 [ 488.357338][T12805] ? lock_mm_and_find_vma+0xa7/0x340 [ 488.357367][T12805] do_user_addr_fault+0x75b/0x1340 [ 488.357412][T12805] exc_page_fault+0x6a/0xc0 [ 488.357444][T12805] asm_exc_page_fault+0x26/0x30 [ 488.357467][T12805] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 488.357491][T12805] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 488.357513][T12805] RSP: 0018:ffffc90007c378d8 EFLAGS: 00050202 [ 488.357535][T12805] RAX: ffffffff84b7e401 RBX: ffff888025ca8000 RCX: 0000000000000ed7 [ 488.357553][T12805] RDX: 0000000000000000 RSI: ffff888025ca8000 RDI: 0000200000002600 [ 488.357571][T12805] RBP: ffffc90007c37a50 R08: ffff888025ca8ed6 R09: 1ffff11004b951da [ 488.357589][T12805] R10: dffffc0000000000 R11: ffffed1004b951db R12: dffffc0000000000 [ 488.357607][T12805] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000ed7 [ 488.357632][T12805] ? _copy_to_iter+0x3c1/0x17d0 [ 488.357677][T12805] _copy_to_iter+0x493/0x17d0 [ 488.357731][T12805] ? __pfx__copy_to_iter+0x10/0x10 [ 488.357769][T12805] ? mmput+0xe/0x70 [ 488.357816][T12805] ? m_stop+0x269/0x300 [ 488.357855][T12805] seq_read_iter+0xbf6/0xe20 [ 488.357910][T12805] seq_read+0x36a/0x490 [ 488.357952][T12805] ? __pfx_seq_read+0x10/0x10 [ 488.357999][T12805] ? rw_verify_area+0x2ac/0x4e0 [ 488.358026][T12805] ? __pfx_seq_read+0x10/0x10 [ 488.358059][T12805] vfs_read+0x212/0xa80 [ 488.358097][T12805] ? __pfx_vfs_read+0x10/0x10 [ 488.358130][T12805] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 488.358161][T12805] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.358202][T12805] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 488.358231][T12805] ? mutex_lock_nested+0x152/0x1d0 [ 488.358265][T12805] ? fdget_pos+0x252/0x320 [ 488.358298][T12805] ksys_read+0x156/0x270 [ 488.358329][T12805] ? __pfx_ksys_read+0x10/0x10 [ 488.358367][T12805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.358392][T12805] do_syscall_64+0x174/0x580 [ 488.358420][T12805] ? trace_irq_disable+0x3b/0x140 [ 488.358448][T12805] ? clear_bhb_loop+0x40/0x90 [ 488.358477][T12805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.358500][T12805] RIP: 0033:0x7fad105fce59 [ 488.358520][T12805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.358540][T12805] RSP: 002b:00007fad0e856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.358563][T12805] RAX: ffffffffffffffda RBX: 00007fad10875fa0 RCX: 00007fad105fce59 [ 488.358581][T12805] RDX: 0000000000002020 RSI: 0000200000002600 RDI: 0000000000000003 [ 488.358596][T12805] RBP: 00007fad0e856090 R08: 0000000000000000 R09: 0000000000000000 [ 488.358611][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.358626][T12805] R13: 00007fad10876038 R14: 00007fad10875fa0 R15: 00007ffd5ba59aa8 [ 488.358662][T12805] [ 489.262639][T12817] FAULT_INJECTION: forcing a failure. [ 489.262639][T12817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.262681][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.3.2478 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.262713][T12817] Tainted: [L]=SOFTLOCKUP [ 489.262730][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.262744][T12817] Call Trace: [ 489.262753][T12817] [ 489.262764][T12817] dump_stack_lvl+0xe8/0x150 [ 489.262797][T12817] should_fail_ex+0x46b/0x600 [ 489.262834][T12817] set_fd_set+0x3a/0xa0 [ 489.262869][T12817] core_sys_select+0xa25/0xc30 [ 489.262920][T12817] ? __pfx_core_sys_select+0x10/0x10 [ 489.262978][T12817] ? __pfx_set_user_sigmask+0x10/0x10 [ 489.263012][T12817] ? rt_mutex_slowunlock+0x1cb/0x300 [ 489.263035][T12817] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 489.263075][T12817] __se_sys_pselect6+0x267/0x320 [ 489.263113][T12817] ? __pfx___se_sys_pselect6+0x10/0x10 [ 489.263145][T12817] ? __pfx_ksys_write+0x10/0x10 [ 489.263177][T12817] ? __x64_sys_pselect6+0x21/0xf0 [ 489.263209][T12817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.263234][T12817] do_syscall_64+0x174/0x580 [ 489.263260][T12817] ? trace_irq_disable+0x3b/0x140 [ 489.263286][T12817] ? clear_bhb_loop+0x40/0x90 [ 489.263313][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.263335][T12817] RIP: 0033:0x7fad105fce59 [ 489.263355][T12817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.263375][T12817] RSP: 002b:00007fad0e856028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 489.263397][T12817] RAX: ffffffffffffffda RBX: 00007fad10875fa0 RCX: 00007fad105fce59 [ 489.263414][T12817] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 489.263428][T12817] RBP: 00007fad0e856090 R08: 0000000000000000 R09: 0000000000000000 [ 489.263441][T12817] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 489.263455][T12817] R13: 00007fad10876038 R14: 00007fad10875fa0 R15: 00007ffd5ba59aa8 [ 489.263487][T12817] [ 490.097859][T11533] Bluetooth: hci3: command tx timeout [ 490.747863][ T5714] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 490.884211][ T5714] usb 3-1: device descriptor read/64, error -71 [ 491.117791][ T5714] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 491.253560][ T5714] usb 3-1: device descriptor read/64, error -71 [ 491.358180][ T5714] usb usb3-port1: attempt power cycle [ 491.537720][T11533] Bluetooth: hci4: command 0x0406 tx timeout [ 491.707784][ T5714] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 491.728777][ T5714] usb 3-1: device descriptor read/8, error -71 [ 491.967790][ T5714] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 491.999029][ T5714] usb 3-1: device descriptor read/8, error -71 [ 492.108348][ T5714] usb usb3-port1: unable to enumerate USB device [ 492.356778][T12849] FAULT_INJECTION: forcing a failure. [ 492.356778][T12849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.356806][T12849] CPU: 0 UID: 0 PID: 12849 Comm: syz.0.2491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.356829][T12849] Tainted: [L]=SOFTLOCKUP [ 492.356835][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.356848][T12849] Call Trace: [ 492.356854][T12849] [ 492.356861][T12849] dump_stack_lvl+0xe8/0x150 [ 492.356883][T12849] should_fail_ex+0x46b/0x600 [ 492.356909][T12849] _copy_to_user+0x31/0xb0 [ 492.356929][T12849] do_ipv6_getsockopt+0x1110/0x25d0 [ 492.356951][T12849] ? __lock_acquire+0x6b5/0x2d10 [ 492.356979][T12849] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 492.357001][T12849] ? __lock_acquire+0x6b5/0x2d10 [ 492.357027][T12849] ? aa_file_perm+0x192/0x15f0 [ 492.357048][T12849] ? aa_label_sk_perm+0x532/0x6e0 [ 492.357079][T12849] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 492.357106][T12849] ? _parse_integer_limit+0x192/0x1e0 [ 492.357133][T12849] ? __lock_acquire+0x6b5/0x2d10 [ 492.357158][T12849] ipv6_getsockopt+0xbd/0x2b0 [ 492.357183][T12849] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 492.357204][T12849] ? __lock_acquire+0x6b5/0x2d10 [ 492.357230][T12849] tls_getsockopt+0x22e/0xbb0 [ 492.357253][T12849] ? __pfx_tls_getsockopt+0x10/0x10 [ 492.357276][T12849] ? sock_common_getsockopt+0x2d/0xb0 [ 492.357301][T12849] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 492.357327][T12849] do_sock_getsockopt+0x51d/0x7e0 [ 492.357358][T12849] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 492.357388][T12849] ? __fget_files+0x3a6/0x420 [ 492.357405][T12849] ? __fget_files+0x2a/0x420 [ 492.357426][T12849] __x64_sys_getsockopt+0x1aa/0x250 [ 492.357449][T12849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.357466][T12849] do_syscall_64+0x174/0x580 [ 492.357486][T12849] ? trace_irq_disable+0x3b/0x140 [ 492.357506][T12849] ? clear_bhb_loop+0x40/0x90 [ 492.357525][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.357541][T12849] RIP: 0033:0x7f49264bce59 [ 492.357579][T12849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.357599][T12849] RSP: 002b:00007f4924716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 492.357623][T12849] RAX: ffffffffffffffda RBX: 00007f4926735fa0 RCX: 00007f49264bce59 [ 492.357640][T12849] RDX: 0000000000000003 RSI: 0000000000000029 RDI: 0000000000000003 [ 492.357654][T12849] RBP: 00007f4924716090 R08: 00002000000000c0 R09: 0000000000000000 [ 492.357681][T12849] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 492.357695][T12849] R13: 00007f4926736038 R14: 00007f4926735fa0 R15: 00007ffe6670e098 [ 492.357727][T12849] [ 493.116153][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.116795][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.247847][ T5714] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 493.367792][ T5593] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 493.408089][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 493.411519][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.411544][ T5714] usb 4-1: config 0 has no interfaces? [ 493.413702][ T5714] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 493.413728][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.413747][ T5714] usb 4-1: Product: syz [ 493.413760][ T5714] usb 4-1: Manufacturer: syz [ 493.413777][ T5714] usb 4-1: SerialNumber: syz [ 493.443235][ T5714] usb 4-1: config 0 descriptor?? [ 493.518156][ T5593] usb 2-1: Using ep0 maxpacket: 32 [ 493.534597][ T5593] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 493.534630][ T5593] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 493.534696][ T5593] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.574843][ T5593] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 493.574869][ T5593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.574888][ T5593] usb 2-1: Product: syz [ 493.574901][ T5593] usb 2-1: Manufacturer: syz [ 493.574915][ T5593] usb 2-1: SerialNumber: syz [ 493.802795][ T5593] usb 2-1: unit 128 not found! [ 493.802818][ T5593] usb 2-1: unit 2 not found! [ 493.808271][ T5593] usb 2-1: unit 1 not found! [ 493.808305][ T5593] usb 2-1: unit 4 not found! [ 493.830149][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.833962][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.900484][ T5593] usb 2-1: USB disconnect, device number 86 [ 494.049576][ T5714] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 494.197862][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 494.204797][ T5714] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 494.204831][ T5714] usb 3-1: config 0 has no interface number 0 [ 494.204862][ T5714] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.204880][ T5714] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 494.204896][ T5714] usb 3-1: config 0 interface 85 has no altsetting 0 [ 494.207397][ T5714] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 494.207427][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.207455][ T5714] usb 3-1: Product: syz [ 494.207466][ T5714] usb 3-1: Manufacturer: syz [ 494.207477][ T5714] usb 3-1: SerialNumber: syz [ 494.265007][T11533] Bluetooth: hci3: command tx timeout [ 494.296382][ T5714] usb 3-1: config 0 descriptor?? [ 494.500626][ T5714] appletouch 3-1:0.85: Failed to read mode from device. [ 494.500968][ T5714] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 494.573185][ T5714] usb 3-1: USB disconnect, device number 104 [ 494.919108][ T5714] usb 4-1: USB disconnect, device number 91 [ 495.092281][T12887] FAULT_INJECTION: forcing a failure. [ 495.092281][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.092319][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.2.2506 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.092349][T12887] Tainted: [L]=SOFTLOCKUP [ 495.092358][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.092372][T12887] Call Trace: [ 495.092381][T12887] [ 495.092390][T12887] dump_stack_lvl+0xe8/0x150 [ 495.092420][T12887] should_fail_ex+0x46b/0x600 [ 495.092455][T12887] _copy_from_iter+0x1d3/0x1670 [ 495.092491][T12887] ? rcu_is_watching+0x15/0xb0 [ 495.092538][T12887] ? __pfx__copy_from_iter+0x10/0x10 [ 495.092570][T12887] ? __alloc_skb+0x27d/0x7d0 [ 495.092592][T12887] ? __alloc_skb+0x27d/0x7d0 [ 495.092621][T12887] ? netlink_sendmsg+0x650/0xb40 [ 495.092647][T12887] ? skb_put+0x11b/0x210 [ 495.092674][T12887] netlink_sendmsg+0x6c0/0xb40 [ 495.092711][T12887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.092741][T12887] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 495.092772][T12887] ? aa_sock_msg_perm+0x122/0x200 [ 495.092796][T12887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.092827][T12887] sock_sendmsg_nosec+0x13a/0x180 [ 495.092862][T12887] __sys_sendto+0x41a/0x5a0 [ 495.092888][T12887] ? __pfx___sys_sendto+0x10/0x10 [ 495.092939][T12887] ? do_user_addr_fault+0xc6f/0x1340 [ 495.092970][T12887] __x64_sys_sendto+0xde/0x100 [ 495.092995][T12887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.093019][T12887] do_syscall_64+0x174/0x580 [ 495.093047][T12887] ? trace_irq_disable+0x3b/0x140 [ 495.093074][T12887] ? clear_bhb_loop+0x40/0x90 [ 495.093100][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.093122][T12887] RIP: 0033:0x7f2087d7d68e [ 495.093142][T12887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.093161][T12887] RSP: 002b:00007f2086014e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 495.093184][T12887] RAX: ffffffffffffffda RBX: 00007f20860166c0 RCX: 00007f2087d7d68e [ 495.093201][T12887] RDX: 0000000000000020 RSI: 00007f2086015000 RDI: 0000000000000009 [ 495.093215][T12887] RBP: 0000000000000000 R08: 00007f2086014f04 R09: 000000000000000c [ 495.093229][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 495.093260][T12887] R13: 00007f2086014f58 R14: 00007f2086015000 R15: 0000000000000000 [ 495.093293][T12887] [ 495.632921][T12894] FAULT_INJECTION: forcing a failure. [ 495.632921][T12894] name failslab, interval 1, probability 0, space 0, times 0 [ 495.632963][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.2.2509 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.632992][T12894] Tainted: [L]=SOFTLOCKUP [ 495.633000][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.633013][T12894] Call Trace: [ 495.633022][T12894] [ 495.633032][T12894] dump_stack_lvl+0xe8/0x150 [ 495.633063][T12894] should_fail_ex+0x46b/0x600 [ 495.633104][T12894] should_failslab+0xa8/0x100 [ 495.633130][T12894] kmem_cache_alloc_node_noprof+0xae/0x710 [ 495.633167][T12894] ? preload_this_cpu_lock+0x49/0xc0 [ 495.633191][T12894] ? preload_this_cpu_lock+0x49/0xc0 [ 495.633216][T12894] ? alloc_vmap_area+0x229/0x1480 [ 495.633250][T12894] preload_this_cpu_lock+0x49/0xc0 [ 495.633277][T12894] alloc_vmap_area+0x3dc/0x1480 [ 495.633322][T12894] ? __pfx_alloc_vmap_area+0x10/0x10 [ 495.633354][T12894] ? __kmalloc_cache_node_noprof+0x2b3/0x710 [ 495.633379][T12894] ? __get_vm_area_node+0x13f/0x300 [ 495.633409][T12894] ? __get_vm_area_node+0x13f/0x300 [ 495.633442][T12894] ? copy_process+0x837/0x42e0 [ 495.633474][T12894] __get_vm_area_node+0x1f8/0x300 [ 495.633520][T12894] __vmalloc_node_range_noprof+0x36a/0x1750 [ 495.633555][T12894] ? copy_process+0x837/0x42e0 [ 495.633586][T12894] ? percpu_ref_get_many+0x19/0x140 [ 495.633618][T12894] ? percpu_ref_get_many+0x19/0x140 [ 495.633644][T12894] ? percpu_ref_get_many+0x19/0x140 [ 495.633675][T12894] ? __memcg_slab_post_alloc_hook+0x4c2/0xff0 [ 495.633715][T12894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 495.633749][T12894] ? rcu_is_watching+0x15/0xb0 [ 495.633779][T12894] ? trace_kmem_cache_alloc+0x29/0xe0 [ 495.633812][T12894] ? memcpy_and_pad+0x48/0x80 [ 495.633842][T12894] __vmalloc_node_noprof+0xc2/0x100 [ 495.633862][T12894] ? copy_process+0x837/0x42e0 [ 495.633892][T12894] ? copy_process+0x837/0x42e0 [ 495.633925][T12894] dup_task_struct+0x298/0x860 [ 495.633955][T12894] ? rt_spin_unlock+0x160/0x200 [ 495.633979][T12894] copy_process+0x837/0x42e0 [ 495.634023][T12894] ? kstrtouint+0x6e/0xe0 [ 495.634053][T12894] ? get_pid_task+0x20/0x1f0 [ 495.634084][T12894] ? __pfx_copy_process+0x10/0x10 [ 495.634117][T12894] ? get_pid_task+0x20/0x1f0 [ 495.634137][T12894] ? get_pid_task+0x20/0x1f0 [ 495.634168][T12894] kernel_clone+0x2d7/0x940 [ 495.634194][T12894] ? __pfx_kernel_clone+0x10/0x10 [ 495.634213][T12894] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.634254][T12894] __x64_sys_clone+0x1b6/0x230 [ 495.634278][T12894] ? __pfx___x64_sys_clone+0x10/0x10 [ 495.634315][T12894] ? __pfx_ksys_write+0x10/0x10 [ 495.634350][T12894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.634373][T12894] do_syscall_64+0x174/0x580 [ 495.634400][T12894] ? trace_irq_disable+0x3b/0x140 [ 495.634427][T12894] ? clear_bhb_loop+0x40/0x90 [ 495.634453][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.634475][T12894] RIP: 0033:0x7f2087dbce59 [ 495.634495][T12894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.634522][T12894] RSP: 002b:00007f2086015fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 495.634546][T12894] RAX: ffffffffffffffda RBX: 00007f2088035fa0 RCX: 00007f2087dbce59 [ 495.634562][T12894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 495.634576][T12894] RBP: 00007f2086016090 R08: 0000000000000000 R09: 0000000000000000 [ 495.634590][T12894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 495.634604][T12894] R13: 00007f2088036038 R14: 00007f2088035fa0 R15: 00007ffe66beda38 [ 495.634636][T12894] [ 495.697750][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 497.033408][T12916] FAULT_INJECTION: forcing a failure. [ 497.033408][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 497.033582][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.3.2513 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 497.033616][T12916] Tainted: [L]=SOFTLOCKUP [ 497.033626][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.033642][T12916] Call Trace: [ 497.033652][T12916] [ 497.033663][T12916] dump_stack_lvl+0xe8/0x150 [ 497.033697][T12916] should_fail_ex+0x46b/0x600 [ 497.033736][T12916] should_failslab+0xa8/0x100 [ 497.033766][T12916] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 497.033803][T12916] ? rt_spin_lock+0x1e0/0x400 [ 497.033828][T12916] ? ep_ptable_queue_proc+0x5c/0x200 [ 497.033858][T12916] ? ep_ptable_queue_proc+0x5c/0x200 [ 497.033898][T12916] ep_ptable_queue_proc+0x5c/0x200 [ 497.033929][T12916] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 497.033963][T12916] userfaultfd_poll+0x8a/0x1d0 [ 497.033994][T12916] ? __pfx_userfaultfd_poll+0x10/0x10 [ 497.034022][T12916] ep_insert+0x11bc/0x1820 [ 497.034066][T12916] ? __pfx_ep_insert+0x10/0x10 [ 497.034101][T12916] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 497.034146][T12916] ? lockdep_hardirqs_on+0x7a/0x110 [ 497.034174][T12916] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.034213][T12916] ? mutex_lock_nested+0x152/0x1d0 [ 497.034244][T12916] ? do_epoll_ctl_file+0x3f4/0xee0 [ 497.034273][T12916] do_epoll_ctl_file+0x8c7/0xee0 [ 497.034307][T12916] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 497.034336][T12916] ? __fget_files+0x3a6/0x420 [ 497.034364][T12916] ? __fget_files+0x2a/0x420 [ 497.034395][T12916] __se_sys_epoll_ctl+0x14e/0x210 [ 497.034425][T12916] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 497.034461][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.034484][T12916] do_syscall_64+0x174/0x580 [ 497.034510][T12916] ? trace_irq_disable+0x3b/0x140 [ 497.034537][T12916] ? clear_bhb_loop+0x40/0x90 [ 497.034563][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.034585][T12916] RIP: 0033:0x7fad105fce59 [ 497.034605][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.034623][T12916] RSP: 002b:00007fad0e856028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 497.034645][T12916] RAX: ffffffffffffffda RBX: 00007fad10875fa0 RCX: 00007fad105fce59 [ 497.034661][T12916] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 497.034674][T12916] RBP: 00007fad0e856090 R08: 0000000000000000 R09: 0000000000000000 [ 497.034688][T12916] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 497.034702][T12916] R13: 00007fad10876038 R14: 00007fad10875fa0 R15: 00007ffd5ba59aa8 [ 497.034735][T12916] [ 497.717791][ T5713] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 498.935686][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 499.075019][ T5713] usb 2-1: Invalid ep0 maxpacket: 16 [ 499.209208][ T5713] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 499.537773][ T5713] usb 2-1: Invalid ep0 maxpacket: 16 [ 499.538231][ T5713] usb usb2-port1: attempt power cycle [ 499.887768][ T5713] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 499.908787][ T5713] usb 2-1: Invalid ep0 maxpacket: 16 [ 500.038478][ T5713] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 500.068383][ T5713] usb 2-1: Invalid ep0 maxpacket: 16 [ 500.068752][ T5713] usb usb2-port1: unable to enumerate USB device [ 501.254200][T12948] tipc: Enabling of bearer rejected, failed to enable media [ 501.377891][T11533] Bluetooth: hci3: command tx timeout [ 501.544785][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.544866][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.569487][ T5694] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 501.569596][ T5694] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 501.623499][ T5694] usb 1-1: USB disconnect, device number 45 [ 501.901652][T12957] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2527'. [ 501.947763][ T5694] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 502.107889][ T5694] usb 1-1: Using ep0 maxpacket: 8 [ 502.110810][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.110839][ T5694] usb 1-1: config 0 has no interfaces? [ 502.113718][ T5694] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 502.113747][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.113771][ T5694] usb 1-1: Product: syz [ 502.113788][ T5694] usb 1-1: Manufacturer: syz [ 502.113799][ T5694] usb 1-1: SerialNumber: syz [ 502.140543][ T5713] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 502.153249][ T5694] usb 1-1: config 0 descriptor?? [ 502.309300][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 502.312954][ T5713] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 502.312984][ T5713] usb 4-1: config 0 has no interface number 0 [ 502.313016][ T5713] usb 4-1: too many endpoints for config 0 interface 53 altsetting 130: 193, using maximum allowed: 30 [ 502.313056][ T5713] usb 4-1: config 0 interface 53 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 193 [ 502.313084][ T5713] usb 4-1: config 0 interface 53 has no altsetting 0 [ 502.313115][ T5713] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 502.313139][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.429378][ T5713] usb 4-1: config 0 descriptor?? [ 502.640466][ T5713] usb 4-1: string descriptor 0 read error: -71 [ 502.664887][ T5713] usb 4-1: USB disconnect, device number 92 [ 502.813426][T12967] FAULT_INJECTION: forcing a failure. [ 502.813426][T12967] name failslab, interval 1, probability 0, space 0, times 0 [ 502.813456][T12967] CPU: 1 UID: 0 PID: 12967 Comm: syz.1.2529 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.813479][T12967] Tainted: [L]=SOFTLOCKUP [ 502.813486][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 502.813496][T12967] Call Trace: [ 502.813503][T12967] [ 502.813510][T12967] dump_stack_lvl+0xe8/0x150 [ 502.813535][T12967] should_fail_ex+0x46b/0x600 [ 502.813563][T12967] should_failslab+0xa8/0x100 [ 502.813583][T12967] __kmalloc_cache_noprof+0xa0/0x6d0 [ 502.813602][T12967] ? vhost_task_create+0x123/0x380 [ 502.813621][T12967] ? vhost_task_create+0x123/0x380 [ 502.813645][T12967] vhost_task_create+0x123/0x380 [ 502.813665][T12967] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 502.813690][T12967] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 502.813716][T12967] ? __pfx_vhost_task_create+0x10/0x10 [ 502.813742][T12967] ? __pfx_vhost_task_fn+0x10/0x10 [ 502.813788][T12967] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 502.813829][T12967] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.813859][T12967] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.813904][T12967] ? mutex_lock_nested+0x152/0x1d0 [ 502.813928][T12967] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 502.813956][T12967] kvm_mmu_post_init_vm+0x147/0x2b0 [ 502.813984][T12967] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 502.814013][T12967] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 502.814033][T12967] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.814059][T12967] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 502.814079][T12967] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.814099][T12967] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.814118][T12967] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 502.814139][T12967] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 502.814155][T12967] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 502.814175][T12967] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.814194][T12967] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 502.814214][T12967] ? rt_write_unlock+0x190/0x230 [ 502.814232][T12967] kvm_vcpu_ioctl+0xa65/0xfe0 [ 502.814260][T12967] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.814300][T12967] ? __fget_files+0x2a/0x420 [ 502.814319][T12967] ? __fget_files+0x2a/0x420 [ 502.814334][T12967] ? __fget_files+0x3a6/0x420 [ 502.814349][T12967] ? __fget_files+0x2a/0x420 [ 502.814367][T12967] ? bpf_lsm_file_ioctl+0x9/0x20 [ 502.814407][T12967] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 502.814441][T12967] __se_sys_ioctl+0xff/0x170 [ 502.814472][T12967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.814499][T12967] do_syscall_64+0x174/0x580 [ 502.814519][T12967] ? trace_irq_disable+0x3b/0x140 [ 502.814539][T12967] ? clear_bhb_loop+0x40/0x90 [ 502.814559][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.814575][T12967] RIP: 0033:0x7f38765bce59 [ 502.814590][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.814603][T12967] RSP: 002b:00007f38747f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.814620][T12967] RAX: ffffffffffffffda RBX: 00007f3876836090 RCX: 00007f38765bce59 [ 502.814632][T12967] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 502.814642][T12967] RBP: 00007f38747f5090 R08: 0000000000000000 R09: 0000000000000000 [ 502.814652][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.814662][T12967] R13: 00007f3876836128 R14: 00007f3876836090 R15: 00007ffc01fd9728 [ 502.814686][T12967] [ 503.661478][ T5769] usb 1-1: USB disconnect, device number 46 [ 503.780682][T12977] FAULT_INJECTION: forcing a failure. [ 503.780682][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 503.780732][T12977] CPU: 0 UID: 0 PID: 12977 Comm: syz.3.2533 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 503.780763][T12977] Tainted: [L]=SOFTLOCKUP [ 503.780771][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.780785][T12977] Call Trace: [ 503.780795][T12977] [ 503.780805][T12977] dump_stack_lvl+0xe8/0x150 [ 503.780838][T12977] should_fail_ex+0x46b/0x600 [ 503.780878][T12977] should_failslab+0xa8/0x100 [ 503.780905][T12977] __kmalloc_noprof+0xfe/0x7e0 [ 503.780930][T12977] ? tomoyo_encode+0x28b/0x550 [ 503.780954][T12977] ? tomoyo_encode+0x28b/0x550 [ 503.780986][T12977] tomoyo_encode+0x28b/0x550 [ 503.781017][T12977] tomoyo_realpath_from_path+0x58d/0x5d0 [ 503.781053][T12977] ? tomoyo_path_number_perm+0x219/0x630 [ 503.781089][T12977] tomoyo_path_number_perm+0x246/0x630 [ 503.781139][T12977] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 503.781172][T12977] ? __lock_acquire+0x6b5/0x2d10 [ 503.781204][T12977] ? do_raw_spin_lock+0x12b/0x2f0 [ 503.781262][T12977] ? __fget_files+0x2a/0x420 [ 503.781288][T12977] ? __fget_files+0x2a/0x420 [ 503.781310][T12977] ? __fget_files+0x3a6/0x420 [ 503.781331][T12977] ? __fget_files+0x2a/0x420 [ 503.781359][T12977] security_file_ioctl+0xc3/0x2a0 [ 503.781393][T12977] __se_sys_ioctl+0x47/0x170 [ 503.781423][T12977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.781449][T12977] do_syscall_64+0x174/0x580 [ 503.781477][T12977] ? trace_irq_disable+0x3b/0x140 [ 503.781504][T12977] ? clear_bhb_loop+0x40/0x90 [ 503.781531][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.781553][T12977] RIP: 0033:0x7fad105fce59 [ 503.781574][T12977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.781594][T12977] RSP: 002b:00007fad0e856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.781617][T12977] RAX: ffffffffffffffda RBX: 00007fad10875fa0 RCX: 00007fad105fce59 [ 503.781634][T12977] RDX: 0000200000000000 RSI: 000000000000541c RDI: 000000000000000c [ 503.781650][T12977] RBP: 00007fad0e856090 R08: 0000000000000000 R09: 0000000000000000 [ 503.781676][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.781688][T12977] R13: 00007fad10876038 R14: 00007fad10875fa0 R15: 00007ffd5ba59aa8 [ 503.781720][T12977] [ 503.781740][T12977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.665491][T12997] FAULT_INJECTION: forcing a failure. [ 504.665491][T12997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.665521][T12997] CPU: 1 UID: 0 PID: 12997 Comm: syz.1.2539 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.665544][T12997] Tainted: [L]=SOFTLOCKUP [ 504.665551][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 504.665562][T12997] Call Trace: [ 504.665568][T12997] [ 504.665576][T12997] dump_stack_lvl+0xe8/0x150 [ 504.665599][T12997] should_fail_ex+0x46b/0x600 [ 504.665629][T12997] _copy_from_iter+0x1d3/0x1670 [ 504.665657][T12997] ? rcu_is_watching+0x15/0xb0 [ 504.665688][T12997] ? __pfx__copy_from_iter+0x10/0x10 [ 504.665713][T12997] ? __alloc_skb+0x27d/0x7d0 [ 504.665730][T12997] ? __alloc_skb+0x27d/0x7d0 [ 504.665752][T12997] ? netlink_sendmsg+0x650/0xb40 [ 504.665772][T12997] ? skb_put+0x11b/0x210 [ 504.665793][T12997] netlink_sendmsg+0x6c0/0xb40 [ 504.665821][T12997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.665844][T12997] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 504.665881][T12997] ? aa_sock_msg_perm+0x122/0x200 [ 504.665898][T12997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.665918][T12997] sock_sendmsg_nosec+0x13a/0x180 [ 504.665954][T12997] ____sys_sendmsg+0x55c/0x870 [ 504.665979][T12997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.666005][T12997] ? import_iovec+0x73/0xa0 [ 504.666078][T12997] ___sys_sendmsg+0x2a5/0x360 [ 504.666108][T12997] ? __lock_acquire+0x6b5/0x2d10 [ 504.666152][T12997] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.666210][T12997] ? __fget_files+0x2a/0x420 [ 504.666227][T12997] ? __fget_files+0x3a6/0x420 [ 504.666251][T12997] __x64_sys_sendmsg+0x1b7/0x290 [ 504.666279][T12997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.666319][T12997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.666337][T12997] do_syscall_64+0x174/0x580 [ 504.666358][T12997] ? trace_irq_disable+0x3b/0x140 [ 504.666379][T12997] ? clear_bhb_loop+0x40/0x90 [ 504.666417][T12997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.666442][T12997] RIP: 0033:0x7f38765bce59 [ 504.666463][T12997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.666485][T12997] RSP: 002b:00007f3874816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.666515][T12997] RAX: ffffffffffffffda RBX: 00007f3876835fa0 RCX: 00007f38765bce59 [ 504.666528][T12997] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 504.666539][T12997] RBP: 00007f3874816090 R08: 0000000000000000 R09: 0000000000000000 [ 504.666550][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.666560][T12997] R13: 00007f3876836038 R14: 00007f3876835fa0 R15: 00007ffc01fd9728 [ 504.666584][T12997] [ 505.550417][ T5694] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 505.707712][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 505.710311][ T5694] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 505.710343][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.714353][ T5694] usb 4-1: config 0 descriptor?? [ 505.734401][ T5694] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 505.777773][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.809506][ T5769] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 505.957753][ T5769] usb 1-1: Using ep0 maxpacket: 8 [ 505.960373][ T5769] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.960404][ T5769] usb 1-1: config 0 has no interfaces? [ 505.963649][ T5769] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 505.963683][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.963707][ T5769] usb 1-1: Product: syz [ 505.963723][ T5769] usb 1-1: Manufacturer: syz [ 505.963739][ T5769] usb 1-1: SerialNumber: syz [ 506.022588][ T5769] usb 1-1: config 0 descriptor?? [ 506.737787][ T822] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 506.907879][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 506.910709][ T822] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 506.910739][ T822] usb 3-1: config 0 has no interface number 0 [ 506.910875][ T822] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 506.910906][ T822] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 506.914846][ T822] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 506.914882][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.914935][ T822] usb 3-1: Product: syz [ 506.914946][ T822] usb 3-1: Manufacturer: syz [ 506.914956][ T822] usb 3-1: SerialNumber: syz [ 506.950320][ T822] usb 3-1: config 0 descriptor?? [ 506.998289][T13022] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 506.998399][T13022] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 507.210730][T13022] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 507.210866][T13022] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 507.387186][ T44] usb 1-1: USB disconnect, device number 47 [ 507.418664][ T822] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 507.418955][ T822] asix 3-1:0.34: probe with driver asix failed with error -61 [ 507.424671][ T5694] gspca_vc032x: reg_w err -71 [ 507.424762][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424775][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424783][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424791][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424818][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424826][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424834][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424842][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424850][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424859][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424866][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424874][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424882][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424890][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424899][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424906][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424915][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424923][ T5694] gspca_vc032x: I2c Bus Busy Wait 00 [ 507.424959][ T5694] gspca_vc032x: Unknown sensor... [ 507.425066][ T5694] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 507.490117][ T5694] usb 4-1: USB disconnect, device number 93 [ 507.857747][T11533] Bluetooth: hci1: command 0x0c1a tx timeout [ 508.147010][T13036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2553'. [ 509.485843][ T5694] usb 3-1: USB disconnect, device number 105 [ 509.858542][ T5694] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 509.977877][ T5769] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 510.007836][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 510.010873][ T5694] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.010900][ T5694] usb 3-1: config 0 has no interfaces? [ 510.013401][ T5694] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 510.013431][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.013453][ T5694] usb 3-1: Product: syz [ 510.013469][ T5694] usb 3-1: Manufacturer: syz [ 510.013484][ T5694] usb 3-1: SerialNumber: syz [ 510.045020][ T5694] usb 3-1: config 0 descriptor?? [ 510.099171][T11533] Bluetooth: hci2: command 0x0c1a tx timeout [ 510.170155][ T5769] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.172718][ T5769] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 510.172747][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.172768][ T5769] usb 4-1: Product: syz [ 510.172783][ T5769] usb 4-1: Manufacturer: syz [ 510.172797][ T5769] usb 4-1: SerialNumber: syz [ 510.220524][ T5769] usb 4-1: config 0 descriptor?? [ 510.264735][ T5769] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 510.542314][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.542699][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.678134][ T5694] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 510.827760][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 510.829887][ T5694] usb 2-1: too many endpoints for config 1 interface 0 altsetting 237: 255, using maximum allowed: 30 [ 510.829933][ T5694] usb 2-1: config 1 interface 0 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 510.829972][ T5694] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16448, setting to 1024 [ 510.829991][ T5694] usb 2-1: config 1 interface 0 has no altsetting 0 [ 510.832516][ T5694] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 510.832543][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.832562][ T5694] usb 2-1: Product: syz [ 510.832576][ T5694] usb 2-1: Manufacturer: syz [ 510.832590][ T5694] usb 2-1: SerialNumber: syz [ 511.113122][ T822] usb 4-1: USB disconnect, device number 94 [ 511.138301][T13075] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2564'. [ 511.200932][T13075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.204731][T13075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.283592][ T5694] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 511.286272][ T5694] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 511.440966][T13083] binder: 13082:13083 ioctl c0306201 2000000001c0 returned -14 [ 511.630552][ T5694] usb 2-1: USB disconnect, device number 91 [ 511.654415][ T5769] usb 3-1: USB disconnect, device number 106 [ 511.935172][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.177844][T11533] Bluetooth: hci2: command 0x0c1a tx timeout [ 512.389859][T13109] FAULT_INJECTION: forcing a failure. [ 512.389859][T13109] name failslab, interval 1, probability 0, space 0, times 0 [ 512.389889][T13109] CPU: 1 UID: 0 PID: 13109 Comm: syz.3.2574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.389910][T13109] Tainted: [L]=SOFTLOCKUP [ 512.389916][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.389926][T13109] Call Trace: [ 512.389932][T13109] [ 512.389939][T13109] dump_stack_lvl+0xe8/0x150 [ 512.389961][T13109] should_fail_ex+0x46b/0x600 [ 512.389987][T13109] should_failslab+0xa8/0x100 [ 512.390005][T13109] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 512.390029][T13109] ? security_inode_alloc+0x39/0x310 [ 512.390046][T13109] ? security_inode_alloc+0x39/0x310 [ 512.390066][T13109] security_inode_alloc+0x39/0x310 [ 512.390083][T13109] inode_init_always_gfp+0x99a/0xd50 [ 512.390111][T13109] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 512.390133][T13109] alloc_inode+0x82/0x1b0 [ 512.390157][T13109] new_inode+0x22/0x170 [ 512.390171][T13109] ? resv_map_alloc+0x200/0x2e0 [ 512.390195][T13109] hugetlbfs_get_inode+0x78/0x650 [ 512.390220][T13109] hugetlb_file_setup+0x21d/0x630 [ 512.390242][T13109] ksys_mmap_pgoff+0x22e/0x720 [ 512.390267][T13109] ? __x64_sys_mmap+0x7f/0x140 [ 512.390286][T13109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.390302][T13109] do_syscall_64+0x174/0x580 [ 512.390321][T13109] ? trace_irq_disable+0x3b/0x140 [ 512.390340][T13109] ? clear_bhb_loop+0x40/0x90 [ 512.390358][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.390373][T13109] RIP: 0033:0x7fad105fce59 [ 512.390387][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.390400][T13109] RSP: 002b:00007fad0e856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 512.390416][T13109] RAX: ffffffffffffffda RBX: 00007fad10875fa0 RCX: 00007fad105fce59 [ 512.390427][T13109] RDX: 0000000000000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 512.390437][T13109] RBP: 00007fad0e856090 R08: ffffffffffffffff R09: 0000000001000000 [ 512.390448][T13109] R10: 0000000000040033 R11: 0000000000000246 R12: 0000000000000001 [ 512.390458][T13109] R13: 00007fad10876038 R14: 00007fad10875fa0 R15: 00007ffd5ba59aa8 [ 512.390480][T13109] [ 512.738825][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'. [ 512.857635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.877621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.887624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.897630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.907642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.917629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.927609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.937605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.947617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 512.957608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 513.289762][ T5694] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 513.329275][T13124] loop5: detected capacity change from 0 to 524287936 [ 513.425497][T13124] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.425734][T13124] Buffer I/O error on dev loop5, logical block 1, async page read [ 513.425813][T13124] Dev loop5: unable to read RDB block 8 [ 513.425991][T13124] I/O error, dev loop5, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.426078][T13124] Buffer I/O error on dev loop5, logical block 3, async page read [ 513.426114][T13124] loop5: unable to read partition table [ 513.441325][T13124] loop_reread_partitions: partition scan of loop5 (3Ÿ ¾‚³˜) failed (rc=-5) [ 513.458790][ T5694] usb 4-1: Using ep0 maxpacket: 8 [ 513.487001][ T5694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 513.503571][ T5694] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 513.503601][ T5694] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 513.503626][ T5694] usb 4-1: Product: syz [ 513.503654][ T5694] usb 4-1: Manufacturer: syz [ 513.503670][ T5694] usb 4-1: SerialNumber: syz [ 513.779186][ T5694] usb 4-1: Handspring Visor / Palm OS: port 16, is for Generic use [ 513.779211][ T5694] usb 4-1: Handspring Visor / Palm OS: Number of ports: 1 [ 513.802952][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 513.938264][T11533] Bluetooth: hci4: command 0x0406 tx timeout [ 513.948207][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 513.960908][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.960936][ T9] usb 1-1: config 0 has no interfaces? [ 513.975156][ T9] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 513.975189][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.975210][ T9] usb 1-1: Product: syz [ 513.975227][ T9] usb 1-1: Manufacturer: syz [ 513.975243][ T9] usb 1-1: SerialNumber: syz [ 514.056492][ T9] usb 1-1: config 0 descriptor?? [ 514.091555][ T5694] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 514.091716][ T5694] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 514.130040][ T5694] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 514.736118][T13114] ------------[ cut here ]------------ [ 514.736131][T13114] task_rq(p) != rq [ 514.736142][T13114] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: syz.3.2576/13114 [ 514.736182][T13114] Modules linked in: [ 514.736200][T13114] CPU: 0 UID: 0 PID: 13114 Comm: syz.3.2576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.736223][T13114] Tainted: [L]=SOFTLOCKUP [ 514.736230][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.736241][T13114] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 514.736264][T13114] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 514.736279][T13114] RSP: 0018:ffffc900080ef900 EFLAGS: 00010087 [ 514.736293][T13114] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 514.736306][T13114] RDX: 0000000000000000 RSI: ffff888031003e00 RDI: ffff8880b863ba40 [ 514.736318][T13114] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 514.736331][T13114] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 514.736343][T13114] R13: 1ffff110170c78d6 R14: ffff888031003e00 R15: ffffffff8dc257d8 [ 514.736356][T13114] FS: 000055555f2e9500(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 514.736371][T13114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.736382][T13114] CR2: 0000200000000200 CR3: 000000003f10a000 CR4: 00000000003526f0 [ 514.736397][T13114] DR0: 0000000000000000 DR1: 0000000000000007 DR2: 0000000000000000 [ 514.736411][T13114] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 514.736422][T13114] Call Trace: [ 514.736429][T13114] [ 514.736439][T13114] set_next_task_fair+0xa68/0xce0 [ 514.736483][T13114] __schedule+0x3e03/0x5550 [ 514.736523][T13114] ? __pfx___schedule+0x10/0x10 [ 514.736551][T13114] ? schedule+0x90/0x360 [ 514.736572][T13114] schedule+0x164/0x360 [ 514.736595][T13114] do_nanosleep+0x287/0x730 [ 514.736618][T13114] ? do_nanosleep+0x8a/0x730 [ 514.736640][T13114] ? __pfx_do_nanosleep+0x10/0x10 [ 514.736659][T13114] ? __asan_memset+0x22/0x50 [ 514.736686][T13114] ? __hrtimer_setup+0x1c2/0x260 [ 514.736702][T13114] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 514.736724][T13114] hrtimer_nanosleep+0x217/0x450 [ 514.736745][T13114] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 514.736768][T13114] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 514.736814][T13114] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 514.736837][T13114] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 514.736864][T13114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.736884][T13114] do_syscall_64+0x174/0x580 [ 514.736909][T13114] ? clear_bhb_loop+0x40/0x90 [ 514.736931][T13114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.736949][T13114] RIP: 0033:0x7fad105bd68e [ 514.736965][T13114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.736980][T13114] RSP: 002b:00007ffd5ba59b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 514.736999][T13114] RAX: ffffffffffffffda RBX: 000055555f2e9500 RCX: 00007fad105bd68e [ 514.737015][T13114] RDX: 00007ffd5ba59be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.737026][T13114] RBP: 00007fad10877da0 R08: 0000000000000000 R09: 0000000000000000 [ 514.737038][T13114] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000007e209 [ 514.737049][T13114] R13: 00007fad1087609c R14: 000000000007d683 R15: 00007fad10876090 [ 514.737076][T13114] [ 514.737095][T13114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 514.737110][T13114] CPU: 0 UID: 0 PID: 13114 Comm: syz.3.2576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.737135][T13114] Tainted: [L]=SOFTLOCKUP [ 514.737142][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.737152][T13114] Call Trace: [ 514.737160][T13114] [ 514.737167][T13114] vpanic+0x56c/0xa60 [ 514.737195][T13114] ? __pfx__printk+0x10/0x10 [ 514.737213][T13114] ? __pfx_vpanic+0x10/0x10 [ 514.737238][T13114] ? is_bpf_text_address+0x292/0x2b0 [ 514.737265][T13114] ? is_bpf_text_address+0x26/0x2b0 [ 514.737297][T13114] panic+0xc5/0xd0 [ 514.737323][T13114] ? __pfx_panic+0x10/0x10 [ 514.737362][T13114] __warn+0x315/0x4c0 [ 514.737387][T13114] ? hrtick_start_fair+0x196/0x1f0 [ 514.737413][T13114] ? hrtick_start_fair+0x196/0x1f0 [ 514.737438][T13114] __report_bug+0x339/0x540 [ 514.737468][T13114] ? hrtick_start_fair+0x196/0x1f0 [ 514.737492][T13114] ? __pfx___report_bug+0x10/0x10 [ 514.737516][T13114] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.737544][T13114] ? __css_rstat_updated+0x23a/0x530 [ 514.737570][T13114] ? hrtick_start_fair+0x196/0x1f0 [ 514.737596][T13114] report_bug+0x16a/0x220 [ 514.737620][T13114] ? hrtick_start_fair+0x196/0x1f0 [ 514.737644][T13114] ? hrtick_start_fair+0x198/0x1f0 [ 514.737667][T13114] handle_bug+0x9c/0x200 [ 514.737706][T13114] exc_invalid_op+0x1a/0x50 [ 514.737732][T13114] asm_exc_invalid_op+0x1a/0x20 [ 514.737749][T13114] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 514.737773][T13114] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 514.737788][T13114] RSP: 0018:ffffc900080ef900 EFLAGS: 00010087 [ 514.737803][T13114] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 514.737816][T13114] RDX: 0000000000000000 RSI: ffff888031003e00 RDI: ffff8880b863ba40 [ 514.737829][T13114] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 514.737842][T13114] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 514.737855][T13114] R13: 1ffff110170c78d6 R14: ffff888031003e00 R15: ffffffff8dc257d8 [ 514.737875][T13114] ? set_next_task_fair+0xa4e/0xce0 [ 514.737901][T13114] set_next_task_fair+0xa68/0xce0 [ 514.737925][T13114] __schedule+0x3e03/0x5550 [ 514.737968][T13114] ? __pfx___schedule+0x10/0x10 [ 514.738001][T13114] ? schedule+0x90/0x360 [ 514.738030][T13114] schedule+0x164/0x360 [ 514.738049][T13114] do_nanosleep+0x287/0x730 [ 514.738069][T13114] ? do_nanosleep+0x8a/0x730 [ 514.738094][T13114] ? __pfx_do_nanosleep+0x10/0x10 [ 514.738112][T13114] ? __asan_memset+0x22/0x50 [ 514.738134][T13114] ? __hrtimer_setup+0x1c2/0x260 [ 514.738149][T13114] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 514.738169][T13114] hrtimer_nanosleep+0x217/0x450 [ 514.738188][T13114] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 514.738208][T13114] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 514.738246][T13114] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 514.738266][T13114] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 514.738290][T13114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.738307][T13114] do_syscall_64+0x174/0x580 [ 514.738328][T13114] ? clear_bhb_loop+0x40/0x90 [ 514.738348][T13114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.738364][T13114] RIP: 0033:0x7fad105bd68e [ 514.738377][T13114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.738391][T13114] RSP: 002b:00007ffd5ba59b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 514.738406][T13114] RAX: ffffffffffffffda RBX: 000055555f2e9500 RCX: 00007fad105bd68e [ 514.738437][T13114] RDX: 00007ffd5ba59be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.738448][T13114] RBP: 00007fad10877da0 R08: 0000000000000000 R09: 0000000000000000 [ 514.738459][T13114] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000007e209 [ 514.738469][T13114] R13: 00007fad1087609c R14: 000000000007d683 R15: 00007fad10876090 [ 514.738494][T13114] [ 515.886866][T13114] Shutting down cpus with NMI [ 515.887571][T13114] Kernel Offset: disabled