last executing test programs: 23.869821859s ago: executing program 4 (id=1855): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4001040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x80}, 0x0, &(0x7f00000007c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "012d"}, 0x0, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) fchown(0xffffffffffffffff, 0xee01, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pread64(r2, &(0x7f0000000400)=""/151, 0x97, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) writev(r5, &(0x7f0000003840)=[{&(0x7f0000003700)="2918059da7c8a2f35bd394f568bc947e707a662f360bf8702d0d7134569256493f9d3f9acc6a7fcab89fdca93aa8faf1c72dbcdb", 0x34}], 0x1) sendmsg$SMC_PNETID_ADD(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500050007ffffffbd2001000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20fc487622dfe2a4ff3b57a5e63decd2b3f6d71a889fc0eb56935eda9bd8b5e882bd42e9b2089cccd448da9bbe7e20b130fbb9fa80bdfa8af57b7529a0a944eb3e24a2e94f43133a00"/83, @ANYBLOB="030300000000fcffffff0c00", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) 20.253606755s ago: executing program 4 (id=1867): connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000002000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x1, 0xffffff14, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1012, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) io_uring_setup(0x13f6, &(0x7f0000000400)={0x0, 0xd735, 0x2000, 0x10000000, 0x18c}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r2], 0x7) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='cifs\x00', 0x1200010, &(0x7f0000000000)='\xe5\x9eY\xc0[\xcf\x13\xff\xb3,\x13\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa1\x97D*\x92\x17&oO\xbd_!\x89H\">Q\xfde\x10}\xd2\x87') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000010005000000000800040001000000", 0x24) 19.382401208s ago: executing program 4 (id=1875): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="454d3a7a06ba5e96b5cccb1efb9ba2ed67", 0x11}], 0x1, 0x7, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r1, 0x6, &(0x7f00000000c0)={0xf1ed, 0x7}, &(0x7f0000000100)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 18.664092081s ago: executing program 4 (id=1877): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4001040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x80}, 0x0, &(0x7f00000007c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "012d"}, 0x0, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x7}}) fchown(0xffffffffffffffff, 0xee01, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pread64(r2, &(0x7f0000000400)=""/151, 0x97, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) writev(r5, &(0x7f0000003840)=[{&(0x7f0000003700)="2918059da7c8a2f35bd394f568bc947e707a662f360bf8702d0d7134569256493f9d3f9acc6a7fcab89fdca93aa8faf1c72dbcdb", 0x34}], 0x1) sendmsg$SMC_PNETID_ADD(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500050007ffffffbd2001000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20fc487622dfe2a4ff3b57a5e63decd2b3f6d71a889fc0eb56935eda9bd8b5e882bd42e9b2089cccd448da9bbe7e20b130fbb9fa80bdfa8af57b7529a0a944eb3e24a2e94f43133a00"/83, @ANYBLOB="030300000000fcffffff0c00", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) 16.475221191s ago: executing program 2 (id=1883): openat$nvram(0xffffffffffffff9c, 0x0, 0x120183, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (fail_nth: 2) 16.093921121s ago: executing program 2 (id=1887): futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) read(0xffffffffffffffff, &(0x7f0000000580)=""/63, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x6, 0xb2, &(0x7f0000000140)=""/178, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) getrlimit(0x1, &(0x7f0000000040)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r3, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 14.544925023s ago: executing program 4 (id=1891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0xc2e7, 0x4) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x800) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x3f, 0x2, 0x4, 0x9, 0x8, 0x81}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000100)='pim6reg1\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f00000021c0)='net/sctp\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x28, r5, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r6 = syz_io_uring_complete(0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000002340), 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x100010, r4, 0x80000000) recvmmsg(r0, &(0x7f00000039c0)=[{{&(0x7f0000002380)=@can, 0x80, &(0x7f00000038c0)=[{&(0x7f0000002400)=""/23, 0x17}, {&(0x7f0000002440)=""/139, 0x8b}, {&(0x7f0000002500)=""/223, 0xdf}, {&(0x7f0000002600)=""/77, 0x4d}, {&(0x7f0000002680)=""/132, 0x84}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)}, {&(0x7f0000003780)=""/60, 0x3c}, {&(0x7f00000037c0)=""/27, 0x1b}, {&(0x7f0000003800)=""/139, 0x8b}], 0xa, &(0x7f0000003980)=""/34, 0x22}, 0x4}], 0x1, 0x2120, &(0x7f0000003a00)={0x0, 0x989680}) socket$rxrpc(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000004ec0), r6) r7 = syz_usb_connect$midi(0x1, 0xe4, &(0x7f0000005040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x1, 0x1, 0x97, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0xf, 0x24, 0x3, 0x3, 0x6, 0x4, [{0x4, 0x5}, {0x1, 0xd8}, {0x6, 0xba}, {0x0, 0xa4}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xd, 0x2}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0xb, 0x5, 0x3, {0xd, 0x25, 0x1, 0x9, "9afca328fae62dec58"}}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x4, 0x7, 0x1, {0x5, 0x25, 0x1, 0x1, "f9"}}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0xf1, 0x7, 0xf7, {0xb, 0x25, 0x1, 0x7, "20d7cf64872819"}}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xf0, 0x6, 0x5, {0x9, 0x25, 0x1, 0x5, "b503ec2dd2"}}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x5, 0xf, 0xde, {0x10, 0x25, 0x1, 0xc, "3b7be7a5cda9b591494c0874"}}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x5, 0x4, {0xc, 0x25, 0x1, 0x8, "5acbe78d9c9e2b06"}}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x2, 0x5f, 0x5, {0x6, 0x25, 0x1, 0x2, "7acf"}}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x6, 0x6, 0xff, {0x14, 0x25, 0x1, 0x10, "0ce7049446f26d5cbd111fd7fc15067a"}}}]}}}}}]}}, &(0x7f0000005600)={0xa, &(0x7f0000005140)={0xa, 0x6, 0x250, 0x5, 0xc, 0xb, 0xf7, 0x81}, 0xd9, &(0x7f0000005180)={0x5, 0xf, 0xd9, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0xa9, 0x5, 0x1, 0x88}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3fe4937af41a650d1a62442070401fc9"}, @generic={0x93, 0x10, 0x0, "e3f626edb493ee40265c6560c6ddc1a0466868b478a9cf02eba85869cbe45fedc99d8ace5fe0cf711879546cdee42f053ce45200d79a9949a8c66c80fec0aab9b563bb286c4749795fd28694bcfe9b3b35f3a2f3d4a0f67f9433cc70e5dfd542405905a03a3e599b8b3da01d36ad8ab478107cad2cdeba46a6617ce906686c4be245208f191da0b6f3ab5cbe9f99439d"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0x0, 0xeb3, [0xff30, 0xffc00f, 0x180ff]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xf, 0x1}]}, 0x7, [{0x4, &(0x7f0000005280)=@lang_id={0x4, 0x3, 0x446}}, {0x56, &(0x7f00000052c0)=@string={0x56, 0x3, "340b2c0866d3e2383b4d9039cf350574c227b77b0ebe02a7f2f4f7776d9a56ed056cbd5b699622901431358e67e6f5fd4e99a9d2116223b05719d61131d1e5d3e12932fa7cd8991a9b711f8e48cd9fab5302ae2a"}}, {0x4, &(0x7f0000005340)=@lang_id={0x4, 0x3, 0x3007}}, {0x4, &(0x7f0000005380)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000053c0)=@lang_id={0x4, 0x3, 0x407}}, {0xdb, &(0x7f0000005400)=@string={0xdb, 0x3, "20b2ba020742ffca26cdf1799c28a8a69029ebe73f6506c456a74309dfcda96af9955c2b2c16c5e65cdd0ec06ca9663990edcda30c60cacad275e7aaf6891f821c83848e548b4302022a307279718f821818aed765eb86fe2a6e6e32585e7a76abb34c19b55b92f886bbae3583fec44f6e2ce1d5512105d193318da2ab4628296a9c8d37a34e01e720d9a14906e81c63f34d08e6d517c2d026e05913640a196277e981f4209ebbcf7ef3b577def1b785893a160abaf3527c9c0c5a0591d0df765e458c87121fe466eff6152bb4549b89eb8ec0053772290172"}}, {0xe3, &(0x7f0000005500)=@string={0xe3, 0x3, "e5498ea3e314da53e6a37e79883bbd18162d7f7ac41b287f135f506c687b6a97aa176211e384a1986b8dd49bf2779bee984d060399128d889bfffe656102e51b90fc499d0fbe1eb3b04be69a99e79c0f7f08e7c4952199cc494c727010561f3c19d644f4d6932f20f66732361d572cca86a33c23d27730eb132bdd46a0359c3d277aad23962f8f7d5c7903b7911f4d60f29f8500a4bf8d4d36e30e7760ef6fc081ff8c9d9146d993b4a6b19b71bdcfb5475e17670584bcbd9531541b7d4c98b1c32031a6981f725340ca3827b77a59de73bbfb3fdcd6dd98e1d7048480057650dd"}}]}) syz_usb_control_io(r7, &(0x7f0000005800)={0x2c, &(0x7f0000005680)={0x40, 0x7, 0x5e, {0x5e, 0x30, "dcbfb5a55598f91e4e26f0260695b0b12508232139dff3c7ae981fcfc29f387d9acfec7aad351fdfcb0ac10af31e8aefa6313f29e681bb514463dfe904ee971dcfcf3fee37bbfba206d080de82e4959ca0ad6b24f0ab4c57173c7333"}}, &(0x7f0000005700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000005740)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xa, 0x1, 0xe4}]}}, &(0x7f0000005780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0xff, 0xe, "19d1c5e6", "0e7e6ff5"}}, &(0x7f00000057c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x0, 0x3, 0x7a, 0x3}}}, &(0x7f0000005cc0)={0x84, &(0x7f0000005840)={0x40, 0x7, 0x7c, "f0c5094045394a5570845dd93ef4a696e9d3b758e966af8cf68c382bda5dbf33b58975152d6735b65af49f8257cdbc7d96072513dd33686af759f356801af8ef6ff60e23f9a4fe2eeef939fcaf19a708ac84dadb01b0671bc30c1968059dd28181a0fcaaa4132abd3cfa1c38fd575e9e6971bae364f5625c56510e1c"}, &(0x7f0000005900)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000005940)={0x0, 0x8, 0x1, 0xa9}, &(0x7f0000005980)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000059c0)={0x20, 0x0, 0x4, {0x4, 0x60}}, &(0x7f0000005a00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000005a40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000005a80)={0x40, 0xb, 0x2, 'E]'}, &(0x7f0000005ac0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000005b00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000005b40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000005b80)={0x40, 0x19, 0x2, "311f"}, &(0x7f0000005bc0)={0x40, 0x1a, 0x2}, &(0x7f0000005c00)={0x40, 0x1c, 0x1, 0x5e}, &(0x7f0000005c40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000005c80)={0x40, 0x21, 0x1, 0x9}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000005dc0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000005f00)={0x3, &(0x7f0000005ec0)=[{0x7, 0x5, 0xc, 0xf63}, {0xfff7, 0x7, 0x5, 0x664c}, {0x9, 0x2, 0x6, 0x6f}]}) 12.037086427s ago: executing program 2 (id=1893): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.674666401s ago: executing program 2 (id=1897): syz_clone(0x40803111, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xfffffff8) 11.656988208s ago: executing program 4 (id=1898): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (fail_nth: 2) 9.020214577s ago: executing program 3 (id=1906): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (fail_nth: 2) 8.407303657s ago: executing program 3 (id=1909): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x48}}, 0x20000000) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = socket$kcm(0x21, 0x2, 0xa) close(r5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0xb0, 0x0, &(0x7f0000000840)=[@decrefs, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/43, 0x2b, 0x2, 0x13}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000780)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/166, 0xa6, 0x2, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/234, 0xea, 0xffffffffffffffff, 0x10}}, &(0x7f0000000800)={0x0, 0x18, 0x40}}}, @decrefs, @decrefs], 0x0, 0x0, 0x0}) 8.250979219s ago: executing program 3 (id=1911): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)}, 0x4048841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xfc0, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0xf, 0x6, "531ed4", 0xf8a, 0x3a, 0x1, @empty, @mcast2, {[@hopopts={0xc, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf8}]}, @dstopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x73, 0x1ae, '\x00', [@generic={0xc, 0xd6f, "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"}]}], @dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x8, 0x6, "2fe83e", 0x82, 0xdbc5d97040ff4832, 0x1, @local, @loopback, [@dstopts={0x0, 0x12, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x10, 0x84, "dcb7789f996052b7040780c17d33eb3107f3772d3fd8fb9b280e58fea7ce87855c5f67a696ec308a7223007022c33535076cc655b5127744bcc2e3af6252c44d02c03011b7021b6b843b5d9ad9005a1212a88e92f806be849c6b8639bbc2f5d295b85fb190aeca399aa2430cefc482ddbc51ff86ba6fc16034f1bae20378c68811664a2b"}]}, @dstopts={0xeb, 0x1f, '\x00', [@pad1, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x6, [0x3bb5]}}, @generic={0x0, 0xc9, "60947f49c2bba9a9cb4d8e7a0d20acbd542a2ea1751bbbbaea619c6ca64ae2246fb8f7a2c6299c6b3bc3086dfb94e1fa6852fc3169a380b0c4ec33620dec16627998579c812d0943bb1551b755421e46fde1d70bf2908a12db1de87a16854feaa99ed5f97ee1660cf7b96371c6a484fd329ecf10bab106bdaec01d57e6ee028ee3c41c400b3b1a41e500902d459eb62e0cf87feac743ccd6375e93e8e8af29859b1fcdac4d41a4b61f11ac466fd91ed1a3f7519cb6a8ac75089ee7cd37e3af430b9979387a18e43b32"}, @enc_lim, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], "3f88301fe6ad3870b170c481798693203162"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) ioprio_set$pid(0x1, r3, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) io_setup(0x3, &(0x7f0000000980)=0x0) io_submit(r5, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.623217269s ago: executing program 3 (id=1914): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x80}, 0x0, &(0x7f00000007c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "012d"}, 0x0, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, 0x0, 0x0}) fchown(0xffffffffffffffff, 0xee01, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc800) futex(&(0x7f0000000540), 0x8c, 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pread64(r2, &(0x7f0000000400)=""/151, 0x97, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) sendmsg$SMC_PNETID_ADD(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500050007ffffffbd2001000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20fc487622dfe2a4ff3b57a5e63decd2b3f6d71a889fc0eb56935eda9bd8b5e882bd42e9b2089cccd448da9bbe7e20b130fbb9fa80bdfa8af57b7529a0a944eb3e24a2e94f43133a00"/83, @ANYBLOB="030300000000fcffffff0c00", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 6.515519186s ago: executing program 0 (id=1915): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x200e1a2, 0x80, 0x0, 0x2df}, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYBLOB="0000000000003fd11340e92c4bb88b4ed04ea527ad8c588ebd4efda12d667ec6e3f8fe4e7dd74e686617bc57cd97a4c935d7f88878cbb2e504ffc8d444b18423c21c65035606a9b5048a312d65ce736b60ca002dcd7ebc9ecd0862f5b974b0b3cd49c9dc17cf712ef5e60b05896fd555aff8149e7b9d69"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}, 0x300}, 0x20000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(0x0, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) 6.357561475s ago: executing program 0 (id=1917): delete_module(&(0x7f0000000540)='!\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0xffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000180)={{0x44001, 0x58000, 0x3, 0x0, 0x4, 0x3, 0x4, 0xab, 0x0, 0x27, 0x9, 0x4}, {0x1, 0xfec00000, 0xc, 0x0, 0xf9, 0x0, 0x7, 0x1, 0x3, 0x2, 0x5c}, {0x8000000, 0x5000, 0xf, 0xa7, 0x5, 0xb9, 0x0, 0x8b, 0x7, 0x8, 0xb, 0xc}, {0x2000, 0xf000, 0x3, 0xfe, 0x1, 0x4, 0x1, 0x40, 0x3f, 0x4b, 0x82, 0xa}, {0xeeef0000, 0xeeee3000, 0x4, 0x5, 0x53, 0x40, 0x88, 0x0, 0x78, 0xd, 0x94, 0x9}, {0x50000, 0x70000, 0x0, 0x7, 0x2, 0xb, 0x8, 0x9, 0x3, 0xff, 0x9, 0x7}, {0x4000, 0x2000, 0xb, 0xa0, 0x7f, 0x7d, 0xc, 0x2, 0x4, 0x9, 0x8e, 0x6a}, {0x58000, 0x5000, 0xa, 0x3, 0xa, 0x8, 0x9, 0x4, 0x0, 0x1, 0x7, 0x85}, {0x6000, 0x2}, {0xdddd0000, 0xd}, 0xe0010001, 0x0, 0x6000, 0x142875, 0x2, 0x0, 0x8286000, 0x0, [0xcbf, 0x7, 0x0, 0x5]}) 5.049321569s ago: executing program 2 (id=1919): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x5, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x122, &(0x7f0000000d00)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "8f4182", 0xec, 0x2f, 0xff, @private2, @loopback, {[@dstopts={0x3b, 0x12, '\x00', [@ra={0x5, 0x2, 0x2}, @ra, @generic={0x6, 0x87, "14298db31ca94747347e4cdef27668b2dd7d84eb7083713bd9d994fcd7c8c97edfbe4cfa911c5a2e0fbd38b0ebced2b11955abe05b96197a3047c1a6113dda96066760fd70f34c35ed9974aeac573a97a5171e522340927434e8a5b04c4cd7432c799e0ee90bd9e0de01f0fbae50f259929521c6b03e99e0df3f15c3509d66d196ba8ed98737a0"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "2ed4ff470df1b480"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x4}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x2, 0x1, 0x1, 0x1, 0x1, 0x81}, 0x2, {0x1, 0xbe9, 0x3, 0x0, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) userfaultfd(0x80001) epoll_create1(0x80000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.048176476s ago: executing program 0 (id=1920): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0xffff) lseek(r0, 0x26, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000010000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbb3af0000000000002d800c0006000100000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a00000000000061117800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x90000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c"], 0xfc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a01"], 0x188}}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x301100, 0x0) write$dsp(r10, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r10, 0x80105014, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x10, 0xc}, {0x0}, &(0x7f0000001b00)=[{&(0x7f0000000400)=""/19, 0x13}, {0x0, 0x1a000}], 0x2, 0xa, 0xfff}}], 0x48}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="03e233781ed0d5a1b359c1d55ddda4161f87470b033d977803ceacc4aff9fcad564f25ef12ae2eff9f5d27d5ae8604c665d281894019b9867d9ca9", @ANYBLOB="210f000000040000002000000008bd417260", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 3.906875203s ago: executing program 1 (id=1924): futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) read(0xffffffffffffffff, &(0x7f0000000580)=""/63, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x6, 0xb2, &(0x7f0000000140)=""/178, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) getrlimit(0x1, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 3.901217632s ago: executing program 0 (id=1925): socket$kcm(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x40, 0x4) memfd_secret(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x20, 0x80, 0xd, 0x10, 0x1000, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d46c000000fe8000000000000000000000000000bb000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000040000feffffffffffff"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c00000071101d00000200009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.536281335s ago: executing program 0 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) bpf$MAP_CREATE(0x0, 0x0, 0x0) 906.494385ms ago: executing program 0 (id=1927): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x80, 0x80, 0x1000, 0x6, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast2, @local}}}}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000c"], 0x48) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "00fd0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "4ac7977386afe0374831c1f9", "cf00"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0xfffffffffffffffe, 0x1, 0x7fffffff, 0xfffffff7, 0x6, "0f6d00", 0x0, 0x1, 0x0, 0x4, 0x9f, 0x4, 0xff}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0x560c89bb) r7 = socket(0x2a, 0x2, 0x0) splice(r5, 0x0, r7, 0x0, 0x8020, 0x1) r8 = io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) r9 = timerfd_create(0x0, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0]) close_range(r8, 0xffffffffffffffff, 0x0) 904.395985ms ago: executing program 1 (id=1928): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@deltfilter={0x2118, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xa, 0xa}, {0x6, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x20e0, 0x2, [@TCA_CGROUP_POLICE={0x4b8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x4, 0x7ff, 0x2, 0x7, {0xdf, 0x2, 0x6, 0x6, 0x1, 0x1000}, {0x4, 0x2, 0x81, 0x4, 0x7, 0x10}, 0xee, 0x7ff, 0x7f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x69}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x1, 0x0, 0x5, 0x7, 0xffff, 0xa, 0x2, 0x2, 0x1, 0x10, 0x7fff, 0xff, 0x80, 0x0, 0x6, 0x2, 0x7ff, 0x0, 0x1, 0xfffffffe, 0x9bd, 0x7f, 0xcff1, 0x200, 0xf7, 0xfffffff8, 0x100, 0x3, 0xff, 0xfffffff7, 0x0, 0x4, 0x3, 0x1, 0x7, 0x8, 0x72e, 0x3, 0x6, 0x7, 0x7, 0x73, 0xfffffffc, 0x5, 0x10001, 0x2, 0xfffffffc, 0x24, 0x0, 0x3ff, 0x7, 0x80, 0x1000, 0x5, 0x38a, 0xfffff177, 0xba9, 0xb9, 0x2c, 0x5, 0x5, 0x4, 0xda, 0x4, 0x5, 0x7, 0x8, 0x200, 0x10001, 0x2, 0xfffffffa, 0x6, 0x7, 0x6, 0xffff7e8d, 0x0, 0x4, 0x3, 0x1, 0x8, 0xffff, 0x3, 0xcb, 0x8, 0x1, 0x5, 0x9b, 0x7, 0xfffffffd, 0x401, 0x8, 0x2, 0x7fffffff, 0x1, 0x400, 0x5, 0x4, 0x5, 0x80, 0x6, 0x0, 0x8, 0x5, 0x1, 0x0, 0x7f, 0x1, 0x3, 0x0, 0xfc, 0x80, 0x703800, 0x5, 0x2000, 0x45, 0xc6b, 0x9, 0x9, 0x3, 0x0, 0x200, 0x7, 0x0, 0x0, 0x4, 0x7, 0x3, 0x1, 0xd, 0x1, 0x4, 0x1c98, 0x1, 0x403870e5, 0x9, 0xfffff645, 0x200, 0x6, 0x8, 0x4, 0x4, 0x8, 0x3de5221d, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0xa2b4, 0x8, 0x2, 0x5, 0x6, 0x6, 0xb9bc, 0x200, 0x4a9d926, 0xf3c, 0x7, 0x2, 0x7, 0xff, 0x5, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0xf58, 0xdb50, 0x88c0, 0x8, 0xdde, 0xfffffff7, 0x7, 0x8, 0x8, 0x8, 0x6, 0x1000, 0x4, 0xb6, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x8, 0xf46, 0x4, 0x4, 0x1, 0x3, 0x81, 0x9, 0x101, 0x5, 0x5, 0x1000, 0x3ff, 0x4, 0x5, 0x2, 0x9f5, 0xfffffff8, 0x8, 0x2, 0x3, 0x9, 0xb, 0x10001, 0x7, 0x8, 0x3, 0x8, 0xc, 0x2, 0xf4, 0x7, 0x2764, 0x8, 0xffff5267, 0x3c9, 0x39, 0xc, 0x2, 0x4, 0x7, 0x1, 0x0, 0x9, 0x3, 0x5, 0x2, 0x3c, 0x8, 0x6, 0x7, 0x2, 0xf, 0xfffffffa, 0x4, 0x2, 0x6, 0x1, 0x4, 0x6, 0x5, 0xa4, 0x7, 0x81, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4000, 0x8, 0x0, 0x5, 0x9, {0xd, 0x1, 0x7fbb, 0x2, 0x8, 0x8}, {0x4, 0x1, 0x4, 0x9, 0xb, 0xfffffffb}, 0x0, 0x101, 0x7c7c}}]}, @TCA_CGROUP_ACT={0x1408, 0x1, [@m_simple={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xf9, 0x6, "609d0e00380c393d9ad3d25c548b877d632962e922b030c5002db658c25085e5702a6119d0ff23686a8585f5205b15c51c435125f5865625855093da11e487b061fc0c1b6e98474919831e108d9bee41bbed5c46fa89708f0180662b4a416c5219e887c58737bddd6ea16f4e227e5f66d6c98a967255ac733ba4195ef6bc4a73141167c08fb8c8e11589a01aeca316b88b078d50e893b05206fb04d4fe58928769691ac8017d327207939a05ffda35265b38076af2ecaf28bdc63b770143d9b6c3bbf66c97d73345da21d5f04a3d9d19916c6269122920a1038052407f35a9f404cd59f19975acf766ad1a950992f6b473bdc50928"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xa8, 0x1b, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xc, 0x7, 0x1, 0x471, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffc, 0x6, 0x10000000, 0xfffffffc, 0xff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}]}, {0x29, 0x6, "faa2c087eb38c91baac7331434c654e3d0f3ce91202bc6c57709213c704f08bb66a38373e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xe8, 0xf, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xf7, 0x8, 0x2, 0xb2}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7b0b45c2fbdc"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff8}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x6a, 0x6, "335977ec9f7ca1a1764dd7c1e6444ec756948fe50a69c0a8ba64e0134af33aa47212e775ca5ec0eff0a55649736225ebb046f6e4f3488bc9927622372445e5df233935c39fc4108159d0e4bc2d306ead4c54391ad50bc16b678b6d9f066bd5d54df1290dc0e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x154, 0x17, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xaa}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x60b76857}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x7, 0x0, 0x3ff, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x66}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0xce, 0x6, "1f466f4015fcfd2e01ac3f69eef28ca22a62fe6cc118f9320e5582cd0894c9605340445187757031814cc878074306901aa4c75620b4c38f84c1d3d87f420ee70733e33a2a68f1ed348a1f211c3eaa6a4686437dbf6b5fb6c2a20a2ea0aeef98f792a034806f9ac59b7618484e908ca7263e5d792c931f39e7e56d83b97adebadc5716be62fd807ddfecd00c6cdbb630597e9f0b3eca00ec18ddf4c472cef2f75b350a7ff36b5845272170eeb52fbbddfe8e1b37b265094a87669bfb81ec08ee2dfccc77ef55a10ea7aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x60, 0x10, 0x0, 0x0, {{0x7}, {0x4}, {0x35, 0x6, "5643834d06016d383f0c7cb11493b87dd8fe564c16bbc99a0d45473c51ed3c8e625299847203e13226bf1e60e2ac8d8489"}, {0xc}, {0xc, 0x8, {0x6, 0x3}}}}, @m_pedit={0xeac, 0xe, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6, 0xfffffffc, 0x6, 0x5, 0xfffffff0}, 0xe, 0xc, [{0x7b5456d2, 0x3, 0xfbc6, 0xd0, 0x8, 0x5d6f}]}, [{0x1, 0x7, 0x80, 0x2}, {0x5, 0x101, 0x3, 0x7, 0x2, 0x58972da9}, {0x3, 0x9, 0x6, 0x7, 0x81, 0x1}, {0x10, 0x8, 0x7ff, 0x7ff, 0xffffffcb, 0xffffff00}, {0x8, 0x1, 0x2fb, 0x901b, 0x0, 0x6}, {0xad, 0x2, 0xffffffff, 0x7, 0x4, 0x1}, {0xf, 0x6, 0x0, 0x4, 0xc, 0x7}, {0x3, 0xfff, 0xf3c, 0x10001, 0x2, 0x1000}, {0x2, 0x1, 0x5, 0x1, 0x4, 0x6}, {0x2, 0x8000, 0x7, 0x1, 0x8, 0xab}, {0x100, 0x1ff, 0x1000, 0x0, 0x0, 0x90000}, {0x0, 0x73b2, 0xbc6, 0x5, 0xd0, 0xc}, {0x2, 0x8, 0x0, 0xb55, 0x1, 0x4}, {0x8, 0x0, 0x0, 0x4, 0xfffffff4, 0x401}, {0x2, 0x10, 0x1ffc000, 0x4, 0x8, 0xfb6d}, {0x3ff, 0x3, 0xff, 0x800, 0x8eb, 0x8}, {0x2, 0x8, 0xec00, 0xa, 0x800, 0x4}, {0x81, 0x7, 0x9, 0x2, 0x3, 0x9}, {0x11c, 0x800, 0x80000001, 0x1ff, 0x81, 0x1}, {0x8000, 0x3, 0xc7, 0x10, 0x8, 0x4}, {0x4, 0x4, 0x6, 0xf, 0x20, 0x5}, {0x101, 0x9, 0x6, 0x0, 0x9, 0x8}, {0x1, 0x6, 0x0, 0xc000, 0x8, 0x9}, {0x3924, 0x100, 0xfffffff9, 0x2, 0x1, 0xe6}, {0xc4, 0x7, 0x7, 0xddd2, 0x2, 0xffffffff}, {0x6, 0xfffffe00, 0x5c7, 0x1, 0x400, 0x893}, {0xf32, 0x8, 0x0, 0x8d1, 0x2, 0x7}, {0x0, 0x8, 0x5, 0x3e, 0x7f}, {0x2961, 0x2, 0x8, 0xa, 0x1}, {0x8, 0x7fffffff, 0x7fff, 0xfffffffb, 0x10000, 0x3800}, {0x1608, 0x21c1980e, 0x4, 0x2, 0xcc3, 0x8}, {0x4, 0x0, 0x1dad, 0x7f, 0x9, 0x5dc}, {0x5, 0x1, 0x80000001, 0xe, 0x7, 0x7}, {0x8, 0x9, 0xc1, 0x49, 0xfffffffe, 0x10}, {0x2d05, 0x4, 0x7, 0x7dffe07a, 0xffffff1f, 0x8e}, {0x3, 0x2, 0x80, 0xf6, 0xa, 0x83}, {0x100, 0xa, 0xfffffffe, 0xc3f3, 0x8, 0x1}, {0x2, 0x6, 0x5, 0x2, 0x10000}, {0x5, 0x229d, 0xa, 0x5, 0xf88, 0xf8}, {0x7, 0x6, 0x47c, 0x1, 0x10001, 0x2e}, {0xfffffffe, 0xcc, 0x4, 0x4, 0x400, 0xe3}, {0x4b88, 0x0, 0x4, 0x4, 0xc, 0x7}, {0x4, 0x9, 0x3, 0x5, 0x1, 0x7}, {0x1, 0x82, 0x1, 0x1, 0xde4, 0x6ba3}, {0x25f, 0x2, 0x7, 0x7, 0x3, 0x272}, {0x3, 0x8, 0x7f, 0xfffffe00, 0x81, 0x7}, {0x6, 0xad0, 0xfffffffb, 0x7, 0x8, 0x4db}, {0x80, 0x0, 0xffffffff, 0x101, 0x8, 0x4}, {0xff, 0x76a, 0x85c0, 0x6, 0x4, 0x9}, {0x2f, 0x8000, 0xd94, 0x80000000, 0x400, 0xfd0d069}, {0x6, 0x2, 0x6, 0x2, 0x16, 0x6}, {0x10001, 0x81, 0x800, 0x3, 0x2, 0x2}, {0x3, 0x10000, 0x80000000, 0x7fff, 0x4, 0x1}, {0x80000001, 0x8, 0x100, 0x5, 0x3, 0x10000}, {0x773, 0x101, 0x57, 0x4698, 0x0, 0x5}, {0x8, 0x0, 0x4, 0xfffffff9, 0x9, 0x5d87}, {0xfffffffd, 0x8000, 0x7, 0x4, 0xb52, 0xb}, {0x7, 0xa4a, 0xcc33, 0xafa, 0x5, 0x8}, {0x40, 0x7, 0x8, 0x4, 0x3fffc, 0x3}, {0x3, 0x6, 0x7a3, 0x5, 0x2, 0x80000001}, {0x10000, 0x7f, 0xd72, 0x4, 0x1ad1e919, 0x859f}, {0x10001, 0xd, 0x6, 0x8, 0x3, 0x4}, {0x8, 0x80000001, 0x3, 0x9, 0x10001, 0x200}, {0xb, 0x5, 0x5, 0xffff, 0x9, 0x40000000}, {0x7, 0xaa9, 0x9, 0x0, 0xd, 0x4}, {0x10, 0x8, 0x0, 0xe6, 0x4, 0x15}, {0x200, 0x6, 0x2, 0x3ff, 0x6, 0x1000}, {0x1, 0x6, 0x0, 0x1000, 0x304e, 0xd696}, {0x1, 0x10, 0xd0, 0x8, 0x2, 0x100}, {0x0, 0x5, 0x8, 0x121a305c, 0x101, 0xe}, {0x8, 0x9, 0xffffffff, 0x4, 0x0, 0x9}, {0x9, 0xb8, 0x0, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x121a, 0xffff, 0xb7b, 0x1}, {0xfff, 0x7, 0x800, 0x8, 0x9, 0x2}, {0x7, 0x3, 0x0, 0x9, 0xf, 0xffffffff}, {0x7, 0x7f34, 0x2, 0x4, 0x3, 0xfffffff7}, {0x3, 0x1, 0x6, 0x6, 0x8, 0x8}, {0x0, 0xd3, 0x7, 0x0, 0x80000001, 0x6}, {0x0, 0x4, 0x40, 0x8, 0x9, 0x1}, {0x2, 0x9, 0xfffffffc, 0xbbf, 0x800, 0x8}, {0xa, 0x0, 0xabf, 0x4, 0xfffffffb, 0x8}, {0x0, 0x6, 0x0, 0x9, 0x80000000, 0x1}, {0x9, 0x2, 0x6, 0x53b5800, 0x7, 0xffffff5d}, {0x0, 0xc98, 0x3, 0x6, 0x5, 0x7ff}, {0x401, 0x3, 0x3, 0x4, 0x8, 0x7fffffff}, {0x6, 0x7, 0x3, 0x10, 0x8, 0x7c33}, {0x3, 0x1, 0x0, 0xa75, 0xe, 0xe3ce}, {0x9, 0x8, 0x9, 0x4, 0x40, 0x89a2}, {0x4, 0x2, 0x1ff, 0x8, 0x5, 0xc6}, {0x8000, 0x3, 0x4, 0x7f, 0x5, 0x3}, {0xfffffffa, 0xd, 0x3c, 0xffff, 0xffffffff, 0x800}, {0x1, 0xfc5, 0x5, 0x1800000, 0x2, 0x8}, {0x6, 0x8a, 0x7fffffff, 0x5, 0x8001, 0x2}, {0xf5eb, 0x10001, 0x4, 0x2, 0x9, 0x9}, {0x5, 0x0, 0x8aea, 0x4, 0x4, 0x2e}, {0x7, 0x401, 0x3, 0x7, 0x1, 0xb3}, {0x8, 0xc, 0x10, 0x4, 0x6, 0xfffffffa}, {0xc, 0x4, 0x3, 0x4, 0x7f, 0x2}, {0x101, 0x8, 0xcdc0, 0x100, 0x3, 0x3}, {0x8, 0x5, 0x9, 0x6, 0x7f, 0x80000000}, {0x80, 0x8, 0xa6ef, 0xeb, 0x1}, {0x5, 0x200, 0x63c3fcb2, 0x5, 0x4}, {0xf, 0xfa5, 0x7f, 0x7fffffff, 0xd81, 0xff}, {0xb, 0x2, 0xc7f9, 0x7, 0x8, 0x4}, {0x1, 0x6, 0xe, 0x2e0c, 0xff, 0x6}, {0x8, 0x9, 0x9, 0x2, 0x7fff, 0x4}, {0xaef, 0x5, 0x1, 0x5, 0xffff, 0x4}, {0x9f, 0xffff, 0x1, 0x80000000, 0x8000, 0xfffffff9}, {0x3, 0x2, 0xfffffff8, 0x8, 0x7, 0x1}, {0x3, 0x9, 0x7, 0x2, 0xa, 0x7ff}, {0x0, 0x9, 0x7, 0x31c2, 0x9, 0x3}, {0x10, 0x3, 0x7fffffff, 0x8, 0xc, 0x40}, {0x4, 0x0, 0x400, 0x3, 0x7, 0x8}, {0x3, 0x3, 0xa24, 0x9, 0x1, 0x4}, {0xa, 0x6, 0x96, 0xa, 0x80000000, 0x7f}, {0x5, 0xf44, 0x3, 0xdade, 0xe9, 0x68e0}, {0x800, 0x3, 0x100, 0x3, 0x10000, 0xd}, {0x0, 0x6, 0x9, 0x8, 0x9, 0x3}, {0x81, 0x6, 0x9, 0x5, 0x1, 0x5}, {0x8, 0x6370, 0x6, 0xf, 0xe, 0x5}, {0x2, 0x7, 0x8, 0x40, 0x1, 0x4}, {0xa, 0x1, 0x3, 0x5, 0x4, 0x4}, {0x6, 0xfffffff6, 0x9, 0x86, 0x101, 0x9}, {0x4389, 0x10001, 0x2, 0x10001, 0xffffffff, 0x1}, {0x8, 0x1, 0x5, 0x8fd, 0x2, 0x2}, {0xffffffff, 0x2, 0x2, 0x0, 0xdd1, 0x200}, {0x4, 0x3, 0x3, 0x0, 0x400, 0x3}, {0x8, 0x1, 0x6, 0xfffffffa, 0x0, 0x7fffffff}], [{0x2}, {}, {0x5, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1c8886a528606cd8}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {}, {0x3}, {0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2}, {0xd0a4e14dc53ab780, 0x1}, {0x4, 0x97a3c7d3975ecfdd}, {0x2}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x0, 0x1}, {0x7}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x0, 0x83b0295df8ee5a19}, {0x6}, {0x3}, {0x0, 0x1}]}}]}, {0x45, 0x6, "28ace1833db255a2a818317af963af247292f7dd1c0f71ee5fa46230b5a53d5c2cd6ec6ba28245be684dd6daf02ac3390b2681b201cf3354d54e9470c8f628b8ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xec, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0xbd, 0x6, "ac285f78ae1248ad7d55e853e1ba935dcc5e4e45253d77e7c5dde615c47d5ece7a541c738a3115687175e142d263866c3b082373bffbe56bbda1b7868b7da3b362a633daefdc847cab8aec3a823d93304152bec0bc29d4b05d181667aa0af7cb852ceaa133aadbd91cdf69f90d4a1264e3eab895c884749c710b0c1a4443435706b4653cbb45a5ca36a3cb3e0a7a2121a1a904abc9840e1adc8448b5bdd71334ec71d77564f89845af28c292e4f8d05dda166ff6832e9a2392"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xffff, 0x5, 0x0, 0x7, 0xf0, 0xe, 0xdc, 0x8, 0xa1b, 0x16, 0x8, 0x1000, 0x6, 0x9, 0x9, 0xb42, 0x1000, 0xfffffffe, 0x8000, 0x4, 0x10001, 0x3a1, 0xfb, 0x5, 0x101, 0x4, 0x5, 0x1, 0x6, 0xf, 0xa0, 0x7, 0x0, 0x8, 0x1000, 0x3ff, 0x5, 0x2500, 0x96, 0x9, 0x569f, 0x6, 0x5, 0x0, 0x8, 0x2, 0xd673, 0xa0, 0xe9, 0x10, 0xa, 0x6, 0x5, 0x4, 0xfff, 0x0, 0x9, 0x4, 0x0, 0x3, 0x7, 0x8, 0xcd81, 0xd, 0x458e, 0x3, 0x1, 0x2a, 0xfff, 0x5, 0x80000001, 0x80000000, 0xfb, 0x4, 0x4, 0x9, 0xcaa4, 0x652, 0xa474, 0x5, 0xfffffffc, 0x3, 0x3, 0xffff, 0x1c7, 0x2, 0xe, 0x7, 0x699, 0x8, 0x590f, 0x1ff, 0x3, 0x5, 0x0, 0x3ff, 0x800, 0x1, 0x0, 0x10, 0x0, 0x5, 0x1ff, 0xc1, 0x5, 0x3, 0xa9, 0x800000, 0x5, 0x7, 0x8, 0x10, 0x7, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1, 0x6, 0x10, 0x0, 0x8, 0x4, 0x4, 0x8, 0x46f995fa, 0x10, 0x8, 0x401, 0x7ff, 0x5b1d, 0x3, 0x1, 0x2, 0xae, 0xfffffffa, 0x8, 0x0, 0x8, 0x10, 0x66, 0xfffffffc, 0x0, 0x4, 0x400, 0x5b0b4a3b, 0x2, 0x8, 0x0, 0x5, 0x7fff, 0x3, 0x9, 0x4, 0x4, 0x7ff, 0x8, 0xe674, 0x4, 0x3, 0x1, 0xfffffffc, 0x327b, 0x2, 0xc65, 0x3, 0x94bd, 0x3, 0x0, 0x5, 0x5, 0x3000, 0x7, 0xc, 0x100, 0x8, 0x7fffffff, 0xe, 0x3, 0x9, 0x7f, 0x8, 0x9, 0x6, 0x0, 0x80000000, 0x0, 0xad1, 0xfffffffa, 0x1, 0x200, 0x2, 0x0, 0x6, 0x3, 0xb8, 0x0, 0x7, 0xd34, 0x2, 0x7, 0x1, 0x5aa, 0x1000, 0x2, 0xffffffff, 0x8, 0xff, 0x8, 0x28211d76, 0x80, 0x3, 0x4d5, 0x2, 0x6, 0x6, 0xb2, 0x8, 0x4, 0x4, 0x3, 0xd0c3, 0x6, 0x8, 0x4811, 0x2, 0x0, 0x5, 0x1, 0x9, 0x40, 0x4, 0x7, 0x5, 0x9, 0x6cb, 0x4, 0x11caf9c9, 0x5, 0x9, 0x81, 0xe, 0xf03a, 0x1, 0x8, 0x1, 0x101, 0x6, 0x1, 0x8, 0x800, 0x9, 0x6, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x2, 0x4, 0x9, 0x10001, 0x4453, 0x4, 0x1, 0x400, 0x9, 0x7, 0x5, 0x5, 0xfffff001, 0x401, 0x81, 0x3, 0x66, 0x6, 0x800, 0xffffffff, 0x0, 0xfff, 0x5, 0x9, 0x1, 0xffff, 0x6b10, 0x7, 0x2, 0x8, 0xd8, 0x0, 0x8, 0x6, 0x9, 0xffffffff, 0x40, 0x7, 0xcf6, 0x14, 0xb11, 0xc40, 0x1e3, 0xe, 0x10, 0x9, 0x2, 0x5, 0x5, 0x5, 0x2, 0x1, 0xfffffffa, 0x4fc7, 0x9, 0x3, 0x2, 0xb, 0x2, 0x2, 0x76, 0x4, 0xa, 0x2, 0xfffffff4, 0x8, 0x9, 0x1ff, 0xf, 0x5, 0x1, 0x1, 0xfffffffe, 0x97c7, 0x9, 0x89, 0x9, 0x3, 0x3, 0x4, 0x7, 0xb, 0x9, 0x5, 0x2, 0x2, 0x8, 0x3, 0x0, 0x3, 0x5, 0xae33, 0xfb, 0x5, 0x1, 0x400, 0xfffffff9, 0x22bc1354, 0x1, 0x1, 0x101, 0xfffffff8, 0x0, 0x8, 0x5, 0x1ff, 0x2, 0x80000000, 0x7, 0x7, 0xffff8001, 0xe, 0x800, 0x1, 0x2, 0x4c5, 0xc, 0x3ff, 0x9, 0x2, 0x96f8, 0x4, 0x863, 0xb, 0x80000001, 0x1, 0x1, 0x7fffffff, 0x193, 0x6, 0xfffffffc, 0x6, 0x34f, 0x2, 0x6, 0x4, 0x0, 0xb2, 0x6, 0xfffffff8, 0x7, 0x9, 0x4, 0x10, 0x2, 0x5568, 0xffffffff, 0x0, 0x10000, 0xe0000000, 0x8a, 0x1, 0x80, 0x6, 0x8, 0x0, 0x2, 0x9, 0x7, 0x2, 0x4, 0x0, 0x5, 0x2, 0xfa, 0x40, 0x9, 0xfffff801, 0x3, 0x7fffffff, 0xfffffffd, 0x10001, 0x0, 0x401, 0x10000, 0x1, 0x5, 0x1, 0xc, 0xac, 0x1, 0xff, 0xfffc0000, 0x400, 0x10001, 0x8, 0xf, 0x6, 0x14f3, 0xc03, 0x9, 0x1, 0x4, 0xcd, 0x5, 0x0, 0x0, 0xf6d, 0x42, 0x2, 0x7, 0x1f, 0x8, 0x678, 0x0, 0x63, 0x97, 0x3, 0xc, 0x7fff, 0x401, 0x2, 0x8, 0x40, 0x15, 0x1, 0x5, 0xda, 0x5, 0x1, 0xe, 0x0, 0x6, 0x80000000, 0xc, 0x0, 0xfffffffd, 0x1, 0x7, 0x5, 0xffff2443, 0x5, 0xa, 0x1, 0xf, 0x3, 0x3, 0x0, 0xffffffff, 0x7, 0x8000000, 0x3, 0x3, 0x598e, 0x5, 0xd0a1, 0x7, 0x100, 0x3, 0x8, 0x1, 0x3, 0x2, 0xe, 0x5]}]}]}}]}, 0x2118}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 899.503903ms ago: executing program 2 (id=1929): mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = syz_usb_connect(0x0, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xdc, 0xe3, 0x6d, 0x40, 0x7b8, 0x200c, 0x81c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x7f, 0x0, 0x80, 0x2f, "", [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0x35, 0xc8, 0xe6, 0x2c, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "1bfb03e05e"}, {0x5, 0x24, 0x0, 0x9f58}, {0xd, 0x24, 0xf, 0x1, 0x33c, 0x0, 0x4, 0x7f}, {0x6, 0x24, 0x1a, 0xfff8, 0x1}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'lA'}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x82f, 0x18fc, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0x3b}, [@acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xffb2, 0x3, 0x40, 0x9, 0x8, 0x1}]}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x10000, 0xffffffffffffffff, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "1df96a3f830d0b39", "5b3371c98a4ee51ff1cf9eb4c91d085a", "654484d4", "33c03cffc47a0bbe"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x1) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x40, 0x1, 0x91, {0x91, 0x4, "f99c2dc29d6ede162c9a2baced6eba207a0e5514cd5829807331bf6e41a783e552b1ea506f4eae290dc496168adda77ccf8193ab152064e1377d06957d02beac21d57d4e3df87a1830a7810ca761bb1ced1cee3da51b676b32f61ebec97c6ff2f6195e78a57d982b032dcd4ffb1ea7c24880607a39b0fdc32ead22505bffa29815a63ff5be58e919eff040e71b3766"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00030400008004620001"]}, &(0x7f00000008c0)={0x1c, &(0x7f0000000280)={0x0, 0xb, 0x30, "83d817e9ed14b4a227de8eff0a9b4c96436cbc28a2afb5b76282f4eec32a2583765090707e9c1aea9c616d7d72d81957"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000880)}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 898.26253ms ago: executing program 3 (id=1930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 619.424427ms ago: executing program 1 (id=1931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000080)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 429.906881ms ago: executing program 3 (id=1932): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r0, &(0x7f0000000ac0)="a9", 0x1) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = fsopen(&(0x7f0000000b80)='squashfs\x00', 0x1) fcntl$addseals(r5, 0x409, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 388.54094ms ago: executing program 1 (id=1933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) openat$ppp(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) socket(0x10, 0x3, 0x0) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 123.870068ms ago: executing program 1 (id=1934): openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x88240, 0x20}, 0x18) mount$9p_unix(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=unix,', {[{@loose}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x66, 0x65, 0x35, 0x31, 0x39, 0x36], 0x2d, [0x65, 0x32, 0x37, 0x32], 0x2d, [0x36, 0x30, 0x32, 0x37], 0x2d, [0x39, 0x38, 0x30, 0x66], 0x2d, [0x30, 0x30, 0x30, 0x35, 0x34, 0x61, 0x62, 0x34]}}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, ',(!!'}}, {@flag='rw'}, {@obj_user={'obj_user', 0x3d, '(%'}}, {@subj_role={'subj_role', 0x3d, '/dev/video2\x00'}}, {@fowner_gt}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@hash}]}}) 0s ago: executing program 1 (id=1935): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0xc800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006"], 0x0) sendto$packet(r3, &(0x7f0000000280)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x8, 0x6381}]}, 0x10) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0x6521e8ab6ec2a836) syz_usb_control_io(r2, 0x0, 0x0) r6 = socket(0x9, 0x3, 0x2) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f00000001c0)={@empty, @broadcast, @broadcast}, &(0x7f0000000240)=0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r6, &(0x7f0000000ac0)="a9", 0x1) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) kernel console output (not intermixed with test programs): T157] IPVS: stop unused estimator thread 0... [ 453.677693][T10508] cifs: Unknown parameter 'Y[' [ 454.386871][T10539] FAULT_INJECTION: forcing a failure. [ 454.386871][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 454.386905][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.4.1619 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 454.386931][T10539] Tainted: [L]=SOFTLOCKUP [ 454.386938][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.386949][T10539] Call Trace: [ 454.386966][T10539] [ 454.386974][T10539] dump_stack_lvl+0xe8/0x150 [ 454.387003][T10539] should_fail_ex+0x46b/0x600 [ 454.387039][T10539] should_failslab+0xa8/0x100 [ 454.387065][T10539] __kmalloc_noprof+0xdf/0x7b0 [ 454.387087][T10539] ? tomoyo_encode+0x28b/0x550 [ 454.387122][T10539] tomoyo_encode+0x28b/0x550 [ 454.387157][T10539] tomoyo_realpath_from_path+0x58d/0x5d0 [ 454.387198][T10539] ? tomoyo_path_number_perm+0x219/0x630 [ 454.387229][T10539] tomoyo_path_number_perm+0x246/0x630 [ 454.387255][T10539] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.387280][T10539] ? __lock_acquire+0x6b5/0x2cf0 [ 454.387308][T10539] ? do_raw_spin_lock+0x12b/0x2f0 [ 454.387357][T10539] ? __fget_files+0x2a/0x420 [ 454.387378][T10539] ? __fget_files+0x2a/0x420 [ 454.387394][T10539] ? __fget_files+0x3a6/0x420 [ 454.387410][T10539] ? __fget_files+0x2a/0x420 [ 454.387431][T10539] security_file_ioctl+0xc3/0x2a0 [ 454.387458][T10539] __se_sys_ioctl+0x47/0x170 [ 454.387481][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.387502][T10539] do_syscall_64+0x15f/0xf80 [ 454.387522][T10539] ? trace_irq_disable+0x3b/0x140 [ 454.387545][T10539] ? clear_bhb_loop+0x40/0x90 [ 454.387569][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.387589][T10539] RIP: 0033:0x7f01da78cdd9 [ 454.387607][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.387628][T10539] RSP: 002b:00007f01d89de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.387647][T10539] RAX: ffffffffffffffda RBX: 00007f01daa05fa0 RCX: 00007f01da78cdd9 [ 454.387662][T10539] RDX: 0000000000000000 RSI: 000000008008551d RDI: 0000000000000003 [ 454.387674][T10539] RBP: 00007f01d89de090 R08: 0000000000000000 R09: 0000000000000000 [ 454.387686][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.387697][T10539] R13: 00007f01daa06038 R14: 00007f01daa05fa0 R15: 00007fff39391358 [ 454.387727][T10539] [ 454.419876][T10539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.682623][T10543] 9pnet_fd: p9_fd_create_unix (10543): problem connecting socket: ./file0: -111 [ 456.188416][ T5944] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 456.262106][T10568] FAULT_INJECTION: forcing a failure. [ 456.262106][T10568] name failslab, interval 1, probability 0, space 0, times 0 [ 456.262143][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.4.1625 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.262169][T10568] Tainted: [L]=SOFTLOCKUP [ 456.262177][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.262189][T10568] Call Trace: [ 456.262197][T10568] [ 456.262206][T10568] dump_stack_lvl+0xe8/0x150 [ 456.262233][T10568] should_fail_ex+0x46b/0x600 [ 456.262268][T10568] should_failslab+0xa8/0x100 [ 456.262293][T10568] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 456.262315][T10568] ? __alloc_skb+0x1d0/0x7d0 [ 456.262335][T10568] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.262361][T10568] __alloc_skb+0x1d0/0x7d0 [ 456.262388][T10568] alloc_skb_with_frags+0xc8/0x760 [ 456.262416][T10568] ? __lock_acquire+0x6b5/0x2cf0 [ 456.262448][T10568] sock_alloc_send_pskb+0x884/0x9a0 [ 456.262482][T10568] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 456.262511][T10568] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 456.262542][T10568] ? dev_get_by_index+0x22/0x2e0 [ 456.262569][T10568] ? dev_get_by_index+0x22/0x2e0 [ 456.262603][T10568] packet_sendmsg+0x315a/0x4fb0 [ 456.262629][T10568] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.262660][T10568] ? __lock_acquire+0x6b5/0x2cf0 [ 456.262691][T10568] ? __lock_acquire+0x6b5/0x2cf0 [ 456.262727][T10568] ? smack_socket_sendmsg+0x1f8/0x590 [ 456.262758][T10568] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 456.262787][T10568] ? __pfx_packet_sendmsg+0x10/0x10 [ 456.262808][T10568] ? __might_fault+0xaf/0x130 [ 456.262834][T10568] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 456.262874][T10568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.262894][T10568] ? __pfx_packet_sendmsg+0x10/0x10 [ 456.262913][T10568] __sys_sendto+0x67f/0x710 [ 456.262940][T10568] ? __pfx___sys_sendto+0x10/0x10 [ 456.262979][T10568] ? ksys_write+0x248/0x270 [ 456.263002][T10568] ? __pfx_ksys_write+0x10/0x10 [ 456.263029][T10568] __x64_sys_sendto+0xde/0x100 [ 456.263059][T10568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.263080][T10568] do_syscall_64+0x15f/0xf80 [ 456.263100][T10568] ? trace_irq_disable+0x3b/0x140 [ 456.263123][T10568] ? clear_bhb_loop+0x40/0x90 [ 456.263148][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.263167][T10568] RIP: 0033:0x7f01da78cdd9 [ 456.263186][T10568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.263202][T10568] RSP: 002b:00007f01d89de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 456.263223][T10568] RAX: ffffffffffffffda RBX: 00007f01daa05fa0 RCX: 00007f01da78cdd9 [ 456.263238][T10568] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 456.263248][T10568] RBP: 00007f01d89de090 R08: 0000200000000200 R09: 0000000000000014 [ 456.263261][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.263273][T10568] R13: 00007f01daa06038 R14: 00007f01daa05fa0 R15: 00007fff39391358 [ 456.263303][T10568] [ 456.328127][ T5944] usb 3-1: device descriptor read/64, error -71 [ 457.259974][ T5944] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 457.345133][T10576] 9pnet_fd: p9_fd_create_unix (10576): problem connecting socket: ./file0: -111 [ 457.398375][ T5944] usb 3-1: device descriptor read/64, error -71 [ 457.508852][ T5944] usb usb3-port1: attempt power cycle [ 457.808438][ T4924] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 457.848384][ T5944] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 457.875152][ T5944] usb 3-1: device descriptor read/8, error -71 [ 457.974408][ T4924] usb 5-1: Using ep0 maxpacket: 16 [ 457.984099][ T4924] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 457.984125][ T4924] usb 5-1: config 1 has no interface number 0 [ 457.984167][ T4924] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 457.984189][ T4924] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 457.984213][ T4924] usb 5-1: config 1 interface 105 has no altsetting 0 [ 457.991756][ T4924] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 457.991783][ T4924] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 457.991802][ T4924] usb 5-1: Product: syz [ 457.991815][ T4924] usb 5-1: Manufacturer: syz [ 457.991828][ T4924] usb 5-1: SerialNumber: syz [ 458.090555][T10606] 9pnet_fd: p9_fd_create_unix (10606): problem connecting socket: ./file0: -111 [ 458.118511][ T5944] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 458.139014][ T5944] usb 3-1: device descriptor read/8, error -71 [ 458.151618][T10582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 458.151789][T10582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 458.252670][ T5944] usb usb3-port1: unable to enumerate USB device [ 458.397384][ T4924] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 458.793054][ T4924] usb 5-1: USB disconnect, device number 61 [ 460.261726][ T10] hid-generic 0005:0005:0003.0007: hidraw0: BLUETOOTH HID v0.0d Device [syz1] on aa:aa:aa:aa:aa:aa [ 460.973091][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 461.159151][ T4924] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 461.164896][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 461.164925][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.164944][ T10] usb 4-1: Product: syz [ 461.164958][ T10] usb 4-1: Manufacturer: syz [ 461.164972][ T10] usb 4-1: SerialNumber: syz [ 461.310060][ T4924] usb 3-1: Using ep0 maxpacket: 32 [ 461.318680][ T4924] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 461.318712][ T4924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 461.318737][ T4924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 461.318759][ T4924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 461.323475][ T4924] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 461.323503][ T4924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.323522][ T4924] usb 3-1: Product: syz [ 461.323536][ T4924] usb 3-1: Manufacturer: syz [ 461.323550][ T4924] usb 3-1: SerialNumber: syz [ 461.361468][ T4924] usb 3-1: config 0 descriptor?? [ 461.428692][T10196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.476931][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 461.476987][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 461.477007][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 461.553967][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 461.564929][ T4924] usb 3-1: USB disconnect, device number 64 [ 461.597276][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.606467][T10196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.641657][ T10] usb 4-1: USB disconnect, device number 52 [ 461.655188][T10679] FAULT_INJECTION: forcing a failure. [ 461.655188][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 461.655230][T10679] CPU: 1 UID: 0 PID: 10679 Comm: syz.1.1651 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.655255][T10679] Tainted: [L]=SOFTLOCKUP [ 461.655262][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.655274][T10679] Call Trace: [ 461.655281][T10679] [ 461.655289][T10679] dump_stack_lvl+0xe8/0x150 [ 461.655318][T10679] should_fail_ex+0x46b/0x600 [ 461.655353][T10679] should_failslab+0xa8/0x100 [ 461.655378][T10679] __kmalloc_noprof+0xdf/0x7b0 [ 461.655401][T10679] ? io_cache_alloc_new+0x40/0x100 [ 461.655423][T10679] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 461.655450][T10679] io_cache_alloc_new+0x40/0x100 [ 461.655474][T10679] io_msg_alloc_async+0x212/0x380 [ 461.655508][T10679] io_bind_prep+0x152/0x250 [ 461.655539][T10679] io_submit_sqes+0xb8d/0x2240 [ 461.655593][T10679] __se_sys_io_uring_enter+0x34a/0x1c40 [ 461.655625][T10679] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 461.655661][T10679] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 461.655687][T10679] ? fput+0xa0/0xd0 [ 461.655716][T10679] ? ksys_write+0x248/0x270 [ 461.655741][T10679] ? __pfx_ksys_write+0x10/0x10 [ 461.655767][T10679] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 461.655790][T10679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.655811][T10679] do_syscall_64+0x15f/0xf80 [ 461.655829][T10679] ? trace_irq_disable+0x3b/0x140 [ 461.655848][T10679] ? clear_bhb_loop+0x40/0x90 [ 461.655866][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.655880][T10679] RIP: 0033:0x7f9aeecdcdd9 [ 461.655895][T10679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.655907][T10679] RSP: 002b:00007f9aecf2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 461.655924][T10679] RAX: ffffffffffffffda RBX: 00007f9aeef55fa0 RCX: 00007f9aeecdcdd9 [ 461.655934][T10679] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 461.655943][T10679] RBP: 00007f9aecf2e090 R08: 0000000000000000 R09: 0000000000000000 [ 461.655952][T10679] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 461.655961][T10679] R13: 00007f9aeef56038 R14: 00007f9aeef55fa0 R15: 00007ffd4ee6fb08 [ 461.655984][T10679] [ 461.698385][ T5728] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 461.858512][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 461.860756][ T5728] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 461.860779][ T5728] usb 5-1: config 0 has no interface number 0 [ 461.863101][ T5728] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 461.863126][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.863144][ T5728] usb 5-1: Product: syz [ 461.863158][ T5728] usb 5-1: Manufacturer: syz [ 461.863179][ T5728] usb 5-1: SerialNumber: syz [ 461.880906][ T5728] usb 5-1: config 0 descriptor?? [ 461.967979][ T5728] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 461.979749][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.002187][T10196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.047076][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.074462][T10196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.153503][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.543378][ T5728] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 462.694291][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 462.744342][ T5728] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 462.776955][ T5728] usb 5-1: USB disconnect, device number 62 [ 462.822893][ T5728] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 462.898428][ T5728] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 462.903100][ T5728] quatech2 5-1:0.51: device disconnected [ 462.944441][T10196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.002145][T10714] openvswitch: netlink: IP tunnel dst address not specified [ 463.043487][T10196] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.076904][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.076977][ T5887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.112296][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.123076][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.418441][ T5728] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 463.568420][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 463.570666][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.570688][ T5728] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 463.596704][ T5728] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 463.596733][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 463.596752][ T5728] usb 4-1: Product: syz [ 463.596765][ T5728] usb 4-1: Manufacturer: syz [ 463.596778][ T5728] usb 4-1: SerialNumber: syz [ 463.658641][ T5728] usb 4-1: config 0 descriptor?? [ 463.778363][ T5750] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 463.802825][T10735] FAULT_INJECTION: forcing a failure. [ 463.802825][T10735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.802860][T10735] CPU: 1 UID: 0 PID: 10735 Comm: syz.1.1666 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 463.802886][T10735] Tainted: [L]=SOFTLOCKUP [ 463.802894][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.802906][T10735] Call Trace: [ 463.802913][T10735] [ 463.802922][T10735] dump_stack_lvl+0xe8/0x150 [ 463.802951][T10735] should_fail_ex+0x46b/0x600 [ 463.802995][T10735] _copy_from_user+0x2d/0xb0 [ 463.803018][T10735] sk_getsockopt+0x1d4/0x2790 [ 463.803050][T10735] ? __pfx_sk_getsockopt+0x10/0x10 [ 463.803084][T10735] ? __lock_acquire+0x6b5/0x2cf0 [ 463.803117][T10735] ? __might_fault+0xaf/0x130 [ 463.803140][T10735] ? __might_fault+0xaf/0x130 [ 463.803182][T10735] do_sock_getsockopt+0x2bd/0x7e0 [ 463.803213][T10735] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 463.803249][T10735] ? __fget_files+0x3a6/0x420 [ 463.803266][T10735] ? __fget_files+0x2a/0x420 [ 463.803289][T10735] __x64_sys_getsockopt+0x1aa/0x250 [ 463.803318][T10735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.803340][T10735] do_syscall_64+0x15f/0xf80 [ 463.803360][T10735] ? trace_irq_disable+0x3b/0x140 [ 463.803383][T10735] ? clear_bhb_loop+0x40/0x90 [ 463.803406][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.803426][T10735] RIP: 0033:0x7f9aeecdcdd9 [ 463.803443][T10735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.803460][T10735] RSP: 002b:00007f9aecf2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 463.803480][T10735] RAX: ffffffffffffffda RBX: 00007f9aeef55fa0 RCX: 00007f9aeecdcdd9 [ 463.803494][T10735] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 463.803506][T10735] RBP: 00007f9aecf2e090 R08: 0000200000000240 R09: 0000000000000000 [ 463.803519][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.803531][T10735] R13: 00007f9aeef56038 R14: 00007f9aeef55fa0 R15: 00007ffd4ee6fb08 [ 463.803561][T10735] [ 464.022173][ T5750] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.022208][ T5750] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.054659][ T5750] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 464.054687][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.054706][ T5750] usb 3-1: Product: syz [ 464.054720][ T5750] usb 3-1: Manufacturer: syz [ 464.054734][ T5750] usb 3-1: SerialNumber: syz [ 464.089039][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 464.108609][ T5750] usb 3-1: config 0 descriptor?? [ 464.206971][T10196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.248474][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 464.248505][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 464.248529][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 464.252350][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 464.252374][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.252390][ T10] usb 5-1: Product: syz [ 464.252401][ T10] usb 5-1: Manufacturer: syz [ 464.252413][ T10] usb 5-1: SerialNumber: syz [ 464.329900][ T10] usb 5-1: config 0 descriptor?? [ 464.330784][T10734] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 464.330896][T10734] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 464.354231][ T10] usb 5-1: ucan: probing device on interface #0 [ 464.461739][T10196] veth0_vlan: entered promiscuous mode [ 464.503481][T10196] veth1_vlan: entered promiscuous mode [ 464.542993][ T10] usb 5-1: ucan: device protocol version 0 is not supported [ 464.543017][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 464.587865][T10196] veth0_macvtap: entered promiscuous mode [ 464.622826][T10196] veth1_macvtap: entered promiscuous mode [ 464.679097][T10196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.696096][T10196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.751312][ T1293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.753790][ T1293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.754738][ T1293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.755412][ T1293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.118550][T10758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.629396][ T6064] usb 4-1: USB disconnect, device number 53 [ 467.239490][ T5879] usb 5-1: USB disconnect, device number 63 [ 467.744973][T10774] FAULT_INJECTION: forcing a failure. [ 467.744973][T10774] name failslab, interval 1, probability 0, space 0, times 0 [ 467.745031][T10774] CPU: 1 UID: 0 PID: 10774 Comm: syz.4.1673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 467.745060][T10774] Tainted: [L]=SOFTLOCKUP [ 467.745067][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.745079][T10774] Call Trace: [ 467.745087][T10774] [ 467.745096][T10774] dump_stack_lvl+0xe8/0x150 [ 467.745126][T10774] should_fail_ex+0x46b/0x600 [ 467.745164][T10774] should_failslab+0xa8/0x100 [ 467.745190][T10774] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 467.745213][T10774] ? __alloc_skb+0x1d0/0x7d0 [ 467.745234][T10774] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 467.745261][T10774] __alloc_skb+0x1d0/0x7d0 [ 467.745288][T10774] netlink_sendmsg+0x5d4/0xb40 [ 467.745322][T10774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.745354][T10774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.745379][T10774] ____sys_sendmsg+0x94c/0x9c0 [ 467.745411][T10774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.745446][T10774] ? import_iovec+0x73/0xa0 [ 467.745472][T10774] ___sys_sendmsg+0x2a5/0x360 [ 467.745496][T10774] ? __lock_acquire+0x6b5/0x2cf0 [ 467.745528][T10774] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.745587][T10774] ? __fget_files+0x2a/0x420 [ 467.745606][T10774] ? __fget_files+0x3a6/0x420 [ 467.745633][T10774] __x64_sys_sendmsg+0x1c3/0x2a0 [ 467.745662][T10774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.745698][T10774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.745727][T10774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.745749][T10774] do_syscall_64+0x15f/0xf80 [ 467.745773][T10774] ? clear_bhb_loop+0x40/0x90 [ 467.745798][T10774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.745818][T10774] RIP: 0033:0x7f01da78cdd9 [ 467.745836][T10774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.745853][T10774] RSP: 002b:00007f01d899c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.745880][T10774] RAX: ffffffffffffffda RBX: 00007f01daa06180 RCX: 00007f01da78cdd9 [ 467.745895][T10774] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 467.745908][T10774] RBP: 00007f01d899c090 R08: 0000000000000000 R09: 0000000000000000 [ 467.745921][T10774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.745933][T10774] R13: 00007f01daa06218 R14: 00007f01daa06180 R15: 00007fff39391358 [ 467.745965][T10774] [ 468.671345][ T5887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.671367][ T5887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.912647][ T5750] usb 3-1: USB disconnect, device number 65 [ 469.186320][ T8508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.186341][ T8508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.477218][T10791] FAULT_INJECTION: forcing a failure. [ 469.477218][T10791] name failslab, interval 1, probability 0, space 0, times 0 [ 469.477253][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.1.1680 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 469.477281][T10791] Tainted: [L]=SOFTLOCKUP [ 469.477289][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.477301][T10791] Call Trace: [ 469.477309][T10791] [ 469.477317][T10791] dump_stack_lvl+0xe8/0x150 [ 469.477347][T10791] should_fail_ex+0x46b/0x600 [ 469.477384][T10791] should_failslab+0xa8/0x100 [ 469.477410][T10791] __kmalloc_noprof+0xdf/0x7b0 [ 469.477431][T10791] ? tomoyo_encode+0x28b/0x550 [ 469.477467][T10791] tomoyo_encode+0x28b/0x550 [ 469.477501][T10791] tomoyo_realpath_from_path+0x58d/0x5d0 [ 469.477541][T10791] ? tomoyo_path_number_perm+0x219/0x630 [ 469.477568][T10791] tomoyo_path_number_perm+0x246/0x630 [ 469.477596][T10791] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 469.477621][T10791] ? __lock_acquire+0x6b5/0x2cf0 [ 469.477650][T10791] ? do_raw_spin_lock+0x12b/0x2f0 [ 469.477707][T10791] ? __fget_files+0x2a/0x420 [ 469.477728][T10791] ? __fget_files+0x2a/0x420 [ 469.477745][T10791] ? __fget_files+0x3a6/0x420 [ 469.477761][T10791] ? __fget_files+0x2a/0x420 [ 469.477781][T10791] security_file_ioctl+0xc3/0x2a0 [ 469.477809][T10791] __se_sys_ioctl+0x47/0x170 [ 469.477832][T10791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.477854][T10791] do_syscall_64+0x15f/0xf80 [ 469.477878][T10791] ? clear_bhb_loop+0x40/0x90 [ 469.477903][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.477923][T10791] RIP: 0033:0x7f9aeecdcdd9 [ 469.477940][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.477956][T10791] RSP: 002b:00007f9aecf0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.477976][T10791] RAX: ffffffffffffffda RBX: 00007f9aeef56090 RCX: 00007f9aeecdcdd9 [ 469.477990][T10791] RDX: 0000200000000280 RSI: 00000000c04064a0 RDI: 0000000000000003 [ 469.478002][T10791] RBP: 00007f9aecf0d090 R08: 0000000000000000 R09: 0000000000000000 [ 469.478014][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.478027][T10791] R13: 00007f9aeef56128 R14: 00007f9aeef56090 R15: 00007ffd4ee6fb08 [ 469.478058][T10791] [ 469.478077][T10791] ERROR: Out of memory at tomoyo_realpath_from_path. [ 469.519716][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1679'. [ 469.622874][T10795] FAULT_INJECTION: forcing a failure. [ 469.622874][T10795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.622910][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.1.1682 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 469.622936][T10795] Tainted: [L]=SOFTLOCKUP [ 469.622943][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.622955][T10795] Call Trace: [ 469.622963][T10795] [ 469.622970][T10795] dump_stack_lvl+0xe8/0x150 [ 469.622999][T10795] should_fail_ex+0x46b/0x600 [ 469.623033][T10795] _copy_from_user+0x2d/0xb0 [ 469.623056][T10795] core_sys_select+0x57a/0xc30 [ 469.623099][T10795] ? __pfx_core_sys_select+0x10/0x10 [ 469.623146][T10795] ? __pfx_set_user_sigmask+0x10/0x10 [ 469.623166][T10795] ? rt_mutex_slowunlock+0x1cb/0x300 [ 469.623194][T10795] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 469.623228][T10795] __se_sys_pselect6+0x267/0x320 [ 469.623259][T10795] ? __pfx___se_sys_pselect6+0x10/0x10 [ 469.623285][T10795] ? __pfx_ksys_write+0x10/0x10 [ 469.623313][T10795] ? __x64_sys_pselect6+0x21/0xf0 [ 469.623338][T10795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.623359][T10795] do_syscall_64+0x15f/0xf80 [ 469.623380][T10795] ? clear_bhb_loop+0x40/0x90 [ 469.623404][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.623423][T10795] RIP: 0033:0x7f9aeecdcdd9 [ 469.623440][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.623456][T10795] RSP: 002b:00007f9aecf2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 469.623476][T10795] RAX: ffffffffffffffda RBX: 00007f9aeef55fa0 RCX: 00007f9aeecdcdd9 [ 469.623491][T10795] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 469.623504][T10795] RBP: 00007f9aecf2e090 R08: 0000200000000280 R09: 0000000000000000 [ 469.623517][T10795] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 469.623529][T10795] R13: 00007f9aeef56038 R14: 00007f9aeef55fa0 R15: 00007ffd4ee6fb08 [ 469.623558][T10795] [ 471.194381][ T5879] hid-generic 0005:0005:0003.0008: hidraw0: BLUETOOTH HID v0.0d Device [syz1] on aa:aa:aa:aa:aa:aa [ 471.368394][ T5882] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 471.540382][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.540409][ T5882] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.591874][ T5882] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 471.591904][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.591923][ T5882] usb 2-1: Product: syz [ 471.591935][ T5882] usb 2-1: Manufacturer: syz [ 471.591948][ T5882] usb 2-1: SerialNumber: syz [ 471.607947][ T5882] usb 2-1: config 0 descriptor?? [ 471.756593][T10827] FAULT_INJECTION: forcing a failure. [ 471.756593][T10827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.756615][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz.2.1692 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.756630][T10827] Tainted: [L]=SOFTLOCKUP [ 471.756634][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.756641][T10827] Call Trace: [ 471.756645][T10827] [ 471.756650][T10827] dump_stack_lvl+0xe8/0x150 [ 471.756668][T10827] should_fail_ex+0x46b/0x600 [ 471.756688][T10827] _copy_from_user+0x2d/0xb0 [ 471.756701][T10827] kstrtouint_from_user+0xd6/0x180 [ 471.756717][T10827] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 471.756741][T10827] proc_fail_nth_write+0x8e/0x210 [ 471.756758][T10827] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 471.756777][T10827] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 471.756794][T10827] vfs_write+0x2a3/0xba0 [ 471.756810][T10827] ? __pfx_vfs_write+0x10/0x10 [ 471.756823][T10827] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 471.756835][T10827] ? lockdep_hardirqs_on+0x7a/0x110 [ 471.756851][T10827] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 471.756862][T10827] ? mutex_lock_nested+0x152/0x1d0 [ 471.756875][T10827] ? fdget_pos+0x252/0x320 [ 471.756889][T10827] ksys_write+0x156/0x270 [ 471.756902][T10827] ? __pfx_ksys_write+0x10/0x10 [ 471.756918][T10827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.756929][T10827] do_syscall_64+0x15f/0xf80 [ 471.756940][T10827] ? trace_irq_disable+0x3b/0x140 [ 471.756953][T10827] ? clear_bhb_loop+0x40/0x90 [ 471.756966][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.756976][T10827] RIP: 0033:0x7f3fcad9d60e [ 471.756986][T10827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 471.756995][T10827] RSP: 002b:00007f3fc900cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.757007][T10827] RAX: ffffffffffffffda RBX: 00007f3fc900d6c0 RCX: 00007f3fcad9d60e [ 471.757015][T10827] RDX: 0000000000000001 RSI: 00007f3fc900d0a0 RDI: 0000000000000005 [ 471.757021][T10827] RBP: 00007f3fc900d090 R08: 0000000000000000 R09: 0000000000000000 [ 471.757027][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.757033][T10827] R13: 00007f3fcb056128 R14: 00007f3fcb056090 R15: 00007ffe5f842ca8 [ 471.757050][T10827] [ 474.228550][ T5606] Bluetooth: hci0: command 0x0405 tx timeout [ 475.662161][T10852] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1697'. [ 475.705426][ T5879] usb 2-1: USB disconnect, device number 11 [ 476.039639][T10862] tipc: Enabling of bearer rejected, failed to enable media [ 476.948424][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 476.948462][ T36] audit: type=1326 audit(1777747242.248:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.2.1707" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fcaddcdd9 code=0x80000000 [ 476.948985][T10879] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 478.252678][T10894] netlink: zone id is out of range [ 478.252694][T10894] netlink: zone id is out of range [ 478.252702][T10894] netlink: zone id is out of range [ 478.261369][T10894] netlink: zone id is out of range [ 478.261460][T10894] netlink: zone id is out of range [ 478.389512][ T5944] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 478.560571][ T5944] usb 5-1: No LPM exit latency info found, disabling LPM. [ 478.561936][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 8 [ 478.561967][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 478.561989][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.562012][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16, setting to 0 [ 478.562038][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 478.562063][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 478.562086][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 478.564587][ T5944] usb 5-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 478.564613][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.564631][ T5944] usb 5-1: Product: 〇 [ 478.564646][ T5944] usb 5-1: Manufacturer: ଴ࠬ퍦㣢䴻㦐㗏琅⟂箷븎꜂矷驭氅宽险逢ㄔ踵ﷵ饎튩我뀣ᥗᇖ턱폥⧡免᪙熛踟쵈ꮟɓ⪮ [ 478.564667][ T5944] usb 5-1: SerialNumber: ᰊ [ 478.585051][T10894] netlink: zone id is out of range [ 478.609993][T10894] netlink: set zone limit has 4 unknown bytes [ 478.737193][T10891] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 478.921996][T10897] capability: warning: `syz.0.1714' uses deprecated v2 capabilities in a way that may be insecure [ 479.372062][ T5944] usb 5-1: USB disconnect, device number 64 [ 480.553706][T10918] FAULT_INJECTION: forcing a failure. [ 480.553706][T10918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.553742][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.4.1721 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 480.553773][T10918] Tainted: [L]=SOFTLOCKUP [ 480.553780][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.553793][T10918] Call Trace: [ 480.553801][T10918] [ 480.553810][T10918] dump_stack_lvl+0xe8/0x150 [ 480.553839][T10918] should_fail_ex+0x46b/0x600 [ 480.553878][T10918] _copy_to_iter+0x404/0x17d0 [ 480.553923][T10918] ? rt_mutex_slowunlock+0x1cb/0x300 [ 480.553954][T10918] ? __pfx__copy_to_iter+0x10/0x10 [ 480.553991][T10918] ? state_show+0x17/0x20 [ 480.554029][T10918] seq_read_iter+0xbf6/0xe20 [ 480.554075][T10918] seq_read+0x36a/0x490 [ 480.554110][T10918] ? __pfx_seq_read+0x10/0x10 [ 480.554135][T10918] ? __debugfs_file_get+0x5d5/0x710 [ 480.554167][T10918] ? __pfx___debugfs_file_get+0x10/0x10 [ 480.554204][T10918] full_proxy_read+0x127/0x1f0 [ 480.554234][T10918] ? __pfx_full_proxy_read+0x10/0x10 [ 480.554263][T10918] vfs_read+0x212/0xa80 [ 480.554296][T10918] ? __pfx_vfs_read+0x10/0x10 [ 480.554320][T10918] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 480.554343][T10918] ? lockdep_hardirqs_on+0x7a/0x110 [ 480.554365][T10918] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 480.554388][T10918] ? mutex_lock_nested+0x152/0x1d0 [ 480.554415][T10918] ? fdget_pos+0x252/0x320 [ 480.554448][T10918] ksys_read+0x156/0x270 [ 480.554473][T10918] ? __pfx_ksys_read+0x10/0x10 [ 480.554504][T10918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.554527][T10918] do_syscall_64+0x15f/0xf80 [ 480.554549][T10918] ? trace_irq_disable+0x3b/0x140 [ 480.554573][T10918] ? clear_bhb_loop+0x40/0x90 [ 480.554599][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.554619][T10918] RIP: 0033:0x7f01da78cdd9 [ 480.554638][T10918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.554655][T10918] RSP: 002b:00007f01d89de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.554676][T10918] RAX: ffffffffffffffda RBX: 00007f01daa05fa0 RCX: 00007f01da78cdd9 [ 480.554692][T10918] RDX: 0000000000002020 RSI: 0000200000005180 RDI: 0000000000000003 [ 480.554705][T10918] RBP: 00007f01d89de090 R08: 0000000000000000 R09: 0000000000000000 [ 480.554717][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.554729][T10918] R13: 00007f01daa06038 R14: 00007f01daa05fa0 R15: 00007fff39391358 [ 480.554761][T10918] [ 480.826028][T10924] FAULT_INJECTION: forcing a failure. [ 480.826028][T10924] name failslab, interval 1, probability 0, space 0, times 0 [ 480.826068][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.4.1723 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 480.826095][T10924] Tainted: [L]=SOFTLOCKUP [ 480.826102][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.826115][T10924] Call Trace: [ 480.826122][T10924] [ 480.826130][T10924] dump_stack_lvl+0xe8/0x150 [ 480.826158][T10924] should_fail_ex+0x46b/0x600 [ 480.826193][T10924] should_failslab+0xa8/0x100 [ 480.826218][T10924] __kmalloc_noprof+0xdf/0x7b0 [ 480.826240][T10924] ? tomoyo_encode+0x28b/0x550 [ 480.826274][T10924] tomoyo_encode+0x28b/0x550 [ 480.826307][T10924] tomoyo_realpath_from_path+0x58d/0x5d0 [ 480.826345][T10924] ? tomoyo_path_number_perm+0x219/0x630 [ 480.826370][T10924] tomoyo_path_number_perm+0x246/0x630 [ 480.826398][T10924] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 480.826429][T10924] ? __lock_acquire+0x6b5/0x2cf0 [ 480.826458][T10924] ? do_raw_spin_lock+0x12b/0x2f0 [ 480.826509][T10924] ? __fget_files+0x2a/0x420 [ 480.826529][T10924] ? __fget_files+0x2a/0x420 [ 480.826545][T10924] ? __fget_files+0x3a6/0x420 [ 480.826561][T10924] ? __fget_files+0x2a/0x420 [ 480.826585][T10924] security_file_ioctl+0xc3/0x2a0 [ 480.826612][T10924] __se_sys_ioctl+0x47/0x170 [ 480.826635][T10924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.826656][T10924] do_syscall_64+0x15f/0xf80 [ 480.826676][T10924] ? trace_irq_disable+0x3b/0x140 [ 480.826698][T10924] ? clear_bhb_loop+0x40/0x90 [ 480.826722][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.826740][T10924] RIP: 0033:0x7f01da78cdd9 [ 480.826758][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.826774][T10924] RSP: 002b:00007f01d89de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.826794][T10924] RAX: ffffffffffffffda RBX: 00007f01daa05fa0 RCX: 00007f01da78cdd9 [ 480.826808][T10924] RDX: 0000200000000040 RSI: 00000000c0045006 RDI: 0000000000000003 [ 480.826820][T10924] RBP: 00007f01d89de090 R08: 0000000000000000 R09: 0000000000000000 [ 480.826831][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.826843][T10924] R13: 00007f01daa06038 R14: 00007f01daa05fa0 R15: 00007fff39391358 [ 480.826873][T10924] [ 480.826960][T10924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.088362][ T5882] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 481.129010][ T5750] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 481.135664][T10929] FAULT_INJECTION: forcing a failure. [ 481.135664][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 481.135686][T10929] CPU: 0 UID: 0 PID: 10929 Comm: syz.4.1725 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.135701][T10929] Tainted: [L]=SOFTLOCKUP [ 481.135705][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.135711][T10929] Call Trace: [ 481.135715][T10929] [ 481.135720][T10929] dump_stack_lvl+0xe8/0x150 [ 481.135737][T10929] should_fail_ex+0x46b/0x600 [ 481.135757][T10929] should_failslab+0xa8/0x100 [ 481.135771][T10929] __kmalloc_noprof+0xdf/0x7b0 [ 481.135783][T10929] ? tomoyo_encode+0x28b/0x550 [ 481.135802][T10929] tomoyo_encode+0x28b/0x550 [ 481.135820][T10929] tomoyo_realpath_from_path+0x58d/0x5d0 [ 481.135836][T10929] ? tomoyo_domain+0xd8/0x130 [ 481.135848][T10929] ? tomoyo_path_number_perm+0x219/0x630 [ 481.135862][T10929] tomoyo_path_number_perm+0x246/0x630 [ 481.135876][T10929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.135889][T10929] ? __lock_acquire+0x6b5/0x2cf0 [ 481.135904][T10929] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.135932][T10929] ? __fget_files+0x2a/0x420 [ 481.135942][T10929] ? __fget_files+0x2a/0x420 [ 481.135951][T10929] ? __fget_files+0x3a6/0x420 [ 481.135959][T10929] ? __fget_files+0x2a/0x420 [ 481.135970][T10929] security_file_ioctl+0xc3/0x2a0 [ 481.135986][T10929] __se_sys_ioctl+0x47/0x170 [ 481.135998][T10929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.136009][T10929] do_syscall_64+0x15f/0xf80 [ 481.136020][T10929] ? trace_irq_disable+0x3b/0x140 [ 481.136033][T10929] ? clear_bhb_loop+0x40/0x90 [ 481.136046][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.136056][T10929] RIP: 0033:0x7f01da78cdd9 [ 481.136067][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.136076][T10929] RSP: 002b:00007f01d89de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.136087][T10929] RAX: ffffffffffffffda RBX: 00007f01daa05fa0 RCX: 00007f01da78cdd9 [ 481.136095][T10929] RDX: 0000200000000040 RSI: 0000000000008b22 RDI: 0000000000000003 [ 481.136102][T10929] RBP: 00007f01d89de090 R08: 0000000000000000 R09: 0000000000000000 [ 481.136108][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.136114][T10929] R13: 00007f01daa06038 R14: 00007f01daa05fa0 R15: 00007fff39391358 [ 481.136130][T10929] [ 481.136140][T10929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.234110][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'. [ 481.239951][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 481.248162][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.248192][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.248474][ T5882] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 481.248497][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.263903][ T5882] usb 1-1: config 0 descriptor?? [ 481.278348][ T5750] usb 3-1: Using ep0 maxpacket: 16 [ 481.282098][ T5750] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 481.282122][ T5750] usb 3-1: config 0 has no interface number 0 [ 481.282163][ T5750] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 481.282188][ T5750] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 481.316823][ T5750] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 481.316852][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.316871][ T5750] usb 3-1: Product: syz [ 481.316885][ T5750] usb 3-1: Manufacturer: syz [ 481.316898][ T5750] usb 3-1: SerialNumber: syz [ 481.370616][ T5750] usb 3-1: config 0 descriptor?? [ 481.375221][T10925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.375738][T10925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.566354][ T5882] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 481.623616][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 481.649096][T10925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.650216][T10925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.663498][ T5882] usb 1-1: USB disconnect, device number 42 [ 481.868484][ T5879] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 482.018924][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 482.023354][ T5879] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.023447][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 482.033994][ T5879] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 482.034023][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.034311][ T5879] usb 2-1: Product: syz [ 482.034327][ T5879] usb 2-1: Manufacturer: syz [ 482.034341][ T5879] usb 2-1: SerialNumber: syz [ 482.161952][ T5879] usb 2-1: config 0 descriptor?? [ 482.429385][T10951] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 482.431705][T10947] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1731'. [ 482.580887][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 483.581163][ T5879] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 483.739341][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 483.739438][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 483.739463][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 483.805393][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 483.805412][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.805422][ T10] usb 4-1: Product: syz [ 483.805430][ T10] usb 4-1: Manufacturer: syz [ 483.805437][ T10] usb 4-1: SerialNumber: syz [ 483.844545][ T10] usb 4-1: config 0 descriptor?? [ 483.845387][T10949] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 483.845507][T10949] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 483.881428][ T10] usb 4-1: ucan: probing device on interface #0 [ 484.108172][ T5750] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 484.108343][ T5750] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 484.108820][ T5750] asix 3-1:0.34: probe with driver asix failed with error -71 [ 484.177506][ T5750] usb 3-1: USB disconnect, device number 66 [ 484.269127][ T10] usb 4-1: ucan: device protocol version 0 is not supported [ 484.269152][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 484.342409][T10966] gfs2: error -5 reading superblock [ 484.841899][T10949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.039577][ T5879] rc_core: IR keymap rc-imon-pad not found [ 485.039597][ T5879] Registered IR keymap rc-empty [ 485.039861][ T5879] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 485.039880][ T5879] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 485.239981][ T819] IPVS: starting estimator thread 0... [ 485.352359][T10983] IPVS: using max 8 ests per chain, 19200 per kthread [ 485.521262][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 485.564299][ T5879] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 485.597954][ T5879] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 485.667630][ T5879] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:12> initialized [ 485.711847][ T5879] usb 2-1: USB disconnect, device number 12 [ 485.807797][T10987] FAULT_INJECTION: forcing a failure. [ 485.807797][T10987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.807821][T10987] CPU: 0 UID: 0 PID: 10987 Comm: syz.2.1741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.807837][T10987] Tainted: [L]=SOFTLOCKUP [ 485.807841][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.807848][T10987] Call Trace: [ 485.807852][T10987] [ 485.807857][T10987] dump_stack_lvl+0xe8/0x150 [ 485.807875][T10987] should_fail_ex+0x46b/0x600 [ 485.807895][T10987] _copy_from_user+0x2d/0xb0 [ 485.807907][T10987] ____sys_sendmsg+0x2e2/0x9c0 [ 485.807924][T10987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.807942][T10987] ? import_iovec+0x73/0xa0 [ 485.807958][T10987] ___sys_sendmsg+0x2a5/0x360 [ 485.807970][T10987] ? __lock_acquire+0x6b5/0x2cf0 [ 485.807986][T10987] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.808002][T10987] ? kstrtouint+0x6e/0xe0 [ 485.808031][T10987] ? __fget_files+0x2a/0x420 [ 485.808040][T10987] ? __fget_files+0x3a6/0x420 [ 485.808054][T10987] __sys_sendmmsg+0x282/0x4e0 [ 485.808069][T10987] ? __pfx___sys_sendmmsg+0x10/0x10 [ 485.808086][T10987] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 485.808108][T10987] ? ksys_write+0x248/0x270 [ 485.808121][T10987] ? __pfx_ksys_write+0x10/0x10 [ 485.808136][T10987] __x64_sys_sendmmsg+0xa0/0xc0 [ 485.808149][T10987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.808159][T10987] do_syscall_64+0x15f/0xf80 [ 485.808170][T10987] ? trace_irq_disable+0x3b/0x140 [ 485.808182][T10987] ? clear_bhb_loop+0x40/0x90 [ 485.808195][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.808205][T10987] RIP: 0033:0x7f3fcaddcdd9 [ 485.808215][T10987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.808230][T10987] RSP: 002b:00007f3fc902e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 485.808248][T10987] RAX: ffffffffffffffda RBX: 00007f3fcb055fa0 RCX: 00007f3fcaddcdd9 [ 485.808261][T10987] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000004 [ 485.808272][T10987] RBP: 00007f3fc902e090 R08: 0000000000000000 R09: 0000000000000000 [ 485.808284][T10987] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 485.808296][T10987] R13: 00007f3fcb056038 R14: 00007f3fcb055fa0 R15: 00007ffe5f842ca8 [ 485.808324][T10987] [ 486.074074][T10989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1742'. [ 486.074144][T10989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1742'. [ 486.159536][T10992] FAULT_INJECTION: forcing a failure. [ 486.159536][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 486.159559][T10992] CPU: 0 UID: 0 PID: 10992 Comm: syz.4.1743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 486.159574][T10992] Tainted: [L]=SOFTLOCKUP [ 486.159578][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.159584][T10992] Call Trace: [ 486.159589][T10992] [ 486.159594][T10992] dump_stack_lvl+0xe8/0x150 [ 486.159611][T10992] should_fail_ex+0x46b/0x600 [ 486.159631][T10992] should_failslab+0xa8/0x100 [ 486.159645][T10992] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 486.159656][T10992] ? __alloc_skb+0x1d0/0x7d0 [ 486.159668][T10992] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.159682][T10992] __alloc_skb+0x1d0/0x7d0 [ 486.159695][T10992] netlink_sendmsg+0x5d4/0xb40 [ 486.159712][T10992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.159725][T10992] ? unwind_get_return_address+0x4d/0x90 [ 486.159741][T10992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.159754][T10992] ____sys_sendmsg+0x94c/0x9c0 [ 486.159770][T10992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.159787][T10992] ? import_iovec+0x73/0xa0 [ 486.159801][T10992] ___sys_sendmsg+0x2a5/0x360 [ 486.159813][T10992] ? __lock_acquire+0x6b5/0x2cf0 [ 486.159829][T10992] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.159864][T10992] ? __fget_files+0x2a/0x420 [ 486.159873][T10992] ? __fget_files+0x3a6/0x420 [ 486.159887][T10992] __x64_sys_sendmsg+0x1c3/0x2a0 [ 486.159901][T10992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.159919][T10992] ? __pfx_ksys_write+0x10/0x10 [ 486.159934][T10992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.159946][T10992] do_syscall_64+0x15f/0xf80 [ 486.159957][T10992] ? trace_irq_disable+0x3b/0x140 [ 486.159969][T10992] ? clear_bhb_loop+0x40/0x90 [ 486.159982][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.159992][T10992] RIP: 0033:0x7f01da78cdd9 [ 486.160002][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.160014][T10992] RSP: 002b:00007f01d89de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.160026][T10992] RAX: ffffffffffffffda RBX: 00007f01daa05fa0 RCX: 00007f01da78cdd9 [ 486.160034][T10992] RDX: 000000000000c050 RSI: 0000200000009dc0 RDI: 0000000000000004 [ 486.160040][T10992] RBP: 00007f01d89de090 R08: 0000000000000000 R09: 0000000000000000 [ 486.160047][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.160053][T10992] R13: 00007f01daa06038 R14: 00007f01daa05fa0 R15: 00007fff39391358 [ 486.160068][T10992] [ 486.245986][ T5750] usb 4-1: USB disconnect, device number 54 [ 486.399792][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 486.538687][ T10] usb 3-1: device descriptor read/64, error -71 [ 486.779528][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 486.888651][ T5750] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 486.908408][ T10] usb 3-1: device descriptor read/64, error -71 [ 487.019103][ T10] usb usb3-port1: attempt power cycle [ 487.039823][ T5750] usb 4-1: Using ep0 maxpacket: 8 [ 487.040714][ T5750] usb 4-1: no configurations [ 487.040729][ T5750] usb 4-1: can't read configurations, error -22 [ 487.298448][ T5750] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 487.306637][T10994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.359284][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 487.385289][ T10] usb 3-1: device descriptor read/8, error -71 [ 487.448493][ T5750] usb 4-1: Using ep0 maxpacket: 8 [ 487.449565][ T5750] usb 4-1: no configurations [ 487.449582][ T5750] usb 4-1: can't read configurations, error -22 [ 487.552093][ T5750] usb usb4-port1: attempt power cycle [ 487.710149][T11013] futex_wake_op: syz.4.1750 tries to shift op by -1; fix this program [ 487.907738][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 488.412272][ T10] usb 3-1: device descriptor read/8, error -71 [ 488.519706][ T10] usb usb3-port1: unable to enumerate USB device [ 488.674041][ T5750] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 488.693474][ T5750] usb 4-1: Using ep0 maxpacket: 8 [ 488.698061][ T5750] usb 4-1: no configurations [ 488.698078][ T5750] usb 4-1: can't read configurations, error -22 [ 488.838458][ T5750] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 488.859608][ T5750] usb 4-1: Using ep0 maxpacket: 8 [ 488.862616][ T5750] usb 4-1: no configurations [ 488.862632][ T5750] usb 4-1: can't read configurations, error -22 [ 488.863018][ T5750] usb usb4-port1: unable to enumerate USB device [ 490.352959][T11039] FAULT_INJECTION: forcing a failure. [ 490.352959][T11039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.352995][T11039] CPU: 1 UID: 0 PID: 11039 Comm: syz.3.1759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.353023][T11039] Tainted: [L]=SOFTLOCKUP [ 490.353030][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.353042][T11039] Call Trace: [ 490.353050][T11039] [ 490.353059][T11039] dump_stack_lvl+0xe8/0x150 [ 490.353089][T11039] should_fail_ex+0x46b/0x600 [ 490.353126][T11039] _copy_to_user+0x31/0xb0 [ 490.353159][T11039] simple_read_from_buffer+0xe1/0x170 [ 490.353195][T11039] proc_fail_nth_read+0x1be/0x230 [ 490.353231][T11039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.353266][T11039] ? rw_verify_area+0x2ac/0x4e0 [ 490.353287][T11039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.353320][T11039] vfs_read+0x212/0xa80 [ 490.353351][T11039] ? __pfx_vfs_read+0x10/0x10 [ 490.353375][T11039] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 490.353399][T11039] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.353421][T11039] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 490.353447][T11039] ? mutex_lock_nested+0x152/0x1d0 [ 490.353474][T11039] ? fdget_pos+0x252/0x320 [ 490.353501][T11039] ksys_read+0x156/0x270 [ 490.353521][T11039] ? __fget_files+0x2a/0x420 [ 490.353541][T11039] ? __pfx_ksys_read+0x10/0x10 [ 490.353564][T11039] ? fput+0xa0/0xd0 [ 490.353597][T11039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.353619][T11039] do_syscall_64+0x15f/0xf80 [ 490.353641][T11039] ? trace_irq_disable+0x3b/0x140 [ 490.353664][T11039] ? clear_bhb_loop+0x40/0x90 [ 490.353689][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.353708][T11039] RIP: 0033:0x7fa20353d60e [ 490.353727][T11039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.353744][T11039] RSP: 002b:00007fa2017acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.353765][T11039] RAX: ffffffffffffffda RBX: 00007fa2017ad6c0 RCX: 00007fa20353d60e [ 490.353780][T11039] RDX: 000000000000000f RSI: 00007fa2017ad0a0 RDI: 0000000000000005 [ 490.353793][T11039] RBP: 00007fa2017ad090 R08: 0000000000000000 R09: 0000000000000000 [ 490.353805][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.353818][T11039] R13: 00007fa2037f6128 R14: 00007fa2037f6090 R15: 00007ffea63645b8 [ 490.353850][T11039] [ 490.448001][T11042] FAULT_INJECTION: forcing a failure. [ 490.448001][T11042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.448039][T11042] CPU: 1 UID: 0 PID: 11042 Comm: syz.3.1761 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.448065][T11042] Tainted: [L]=SOFTLOCKUP [ 490.448072][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.448084][T11042] Call Trace: [ 490.448092][T11042] [ 490.448100][T11042] dump_stack_lvl+0xe8/0x150 [ 490.448129][T11042] should_fail_ex+0x46b/0x600 [ 490.448171][T11042] _copy_to_user+0x31/0xb0 [ 490.448196][T11042] simple_read_from_buffer+0xe1/0x170 [ 490.448229][T11042] proc_fail_nth_read+0x1be/0x230 [ 490.448261][T11042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.448291][T11042] ? rw_verify_area+0x2ac/0x4e0 [ 490.448311][T11042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.448339][T11042] vfs_read+0x212/0xa80 [ 490.448367][T11042] ? __pfx_vfs_read+0x10/0x10 [ 490.448389][T11042] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 490.448411][T11042] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.448432][T11042] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 490.448453][T11042] ? mutex_lock_nested+0x152/0x1d0 [ 490.448478][T11042] ? fdget_pos+0x252/0x320 [ 490.448504][T11042] ksys_read+0x156/0x270 [ 490.448527][T11042] ? __pfx_ksys_read+0x10/0x10 [ 490.448556][T11042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.448577][T11042] do_syscall_64+0x15f/0xf80 [ 490.448597][T11042] ? trace_irq_disable+0x3b/0x140 [ 490.448620][T11042] ? clear_bhb_loop+0x40/0x90 [ 490.448642][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.448661][T11042] RIP: 0033:0x7fa20353d60e [ 490.448679][T11042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.448696][T11042] RSP: 002b:00007fa2017cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.448716][T11042] RAX: ffffffffffffffda RBX: 00007fa2017ce6c0 RCX: 00007fa20353d60e [ 490.448730][T11042] RDX: 000000000000000f RSI: 00007fa2017ce0a0 RDI: 0000000000000004 [ 490.448742][T11042] RBP: 00007fa2017ce090 R08: 0000000000000000 R09: 0000000000000000 [ 490.448754][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.448765][T11042] R13: 00007fa2037f6038 R14: 00007fa2037f5fa0 R15: 00007ffea63645b8 [ 490.448796][T11042] [ 491.356229][ T5750] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 492.119112][ T5750] usb 1-1: Using ep0 maxpacket: 8 [ 492.150412][ T5750] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 492.150441][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 492.150459][ T5750] usb 1-1: Product: syz [ 492.150472][ T5750] usb 1-1: Manufacturer: syz [ 492.150486][ T5750] usb 1-1: SerialNumber: syz [ 492.193458][ T5750] usb 1-1: config 0 descriptor?? [ 492.205800][ T5750] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 492.229216][T11059] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1767'. [ 492.404737][ T5750] gspca_sn9c2028: read1 error -32 [ 492.867812][ T5728] usb 1-1: USB disconnect, device number 43 [ 492.997147][T11076] FAULT_INJECTION: forcing a failure. [ 492.997147][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 492.997207][T11076] CPU: 1 UID: 0 PID: 11076 Comm: syz.2.1771 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.997235][T11076] Tainted: [L]=SOFTLOCKUP [ 492.997242][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.997255][T11076] Call Trace: [ 492.997263][T11076] [ 492.997272][T11076] dump_stack_lvl+0xe8/0x150 [ 492.997302][T11076] should_fail_ex+0x46b/0x600 [ 492.997339][T11076] should_failslab+0xa8/0x100 [ 492.997366][T11076] __kvmalloc_node_noprof+0x170/0x8e0 [ 492.997392][T11076] ? io_sqe_buffers_register+0x12d/0x7e0 [ 492.997421][T11076] io_sqe_buffers_register+0x12d/0x7e0 [ 492.997443][T11076] ? __might_fault+0xaf/0x130 [ 492.997475][T11076] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 492.997510][T11076] io_register_rsrc+0x24d/0x280 [ 492.997541][T11076] ? __pfx_io_register_rsrc+0x10/0x10 [ 492.997571][T11076] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 492.997595][T11076] ? mutex_lock_nested+0x152/0x1d0 [ 492.997621][T11076] ? __se_sys_io_uring_register+0x221/0x1a20 [ 492.997647][T11076] __se_sys_io_uring_register+0xc00/0x1a20 [ 492.997676][T11076] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 492.997699][T11076] ? ksys_write+0x248/0x270 [ 492.997725][T11076] ? rcu_is_watching+0x15/0xb0 [ 492.997764][T11076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.997786][T11076] do_syscall_64+0x15f/0xf80 [ 492.997809][T11076] ? clear_bhb_loop+0x40/0x90 [ 492.997834][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.997854][T11076] RIP: 0033:0x7f3fcaddcdd9 [ 492.997873][T11076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.997889][T11076] RSP: 002b:00007f3fc8fec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 492.997910][T11076] RAX: ffffffffffffffda RBX: 00007f3fcb056180 RCX: 00007f3fcaddcdd9 [ 492.997925][T11076] RDX: 0000200000001580 RSI: 000000000000000f RDI: 0000000000000007 [ 492.997938][T11076] RBP: 00007f3fc8fec090 R08: 0000000000000000 R09: 0000000000000000 [ 492.997950][T11076] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 492.997963][T11076] R13: 00007f3fcb056218 R14: 00007f3fcb056180 R15: 00007ffe5f842ca8 [ 492.997994][T11076] [ 493.287114][ T5598] Bluetooth: hci5: command 0x0405 tx timeout [ 493.845071][ T819] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 493.845328][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 494.080388][ T819] usb 5-1: device descriptor read/64, error -32 [ 494.265061][T11082] 9p: Bad value for 'rfdno' [ 494.338852][ T819] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 494.498626][ T819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 494.500481][ T819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.500506][ T819] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 494.500553][ T819] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 494.500590][ T819] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 494.500628][ T819] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 494.500654][ T819] usb 5-1: config 1 interface 1 has no altsetting 0 [ 494.507770][ T819] usb 5-1: string descriptor 0 read error: -22 [ 494.508092][ T819] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 494.508117][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.953540][T11094] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1777'. [ 495.171559][ T36] audit: type=1326 audit(1777747260.748:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.171616][ T36] audit: type=1326 audit(1777747260.748:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.171708][ T36] audit: type=1326 audit(1777747260.748:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.171752][ T36] audit: type=1326 audit(1777747260.748:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.171794][ T36] audit: type=1326 audit(1777747260.748:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.171885][ T36] audit: type=1326 audit(1777747260.748:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.171936][ T36] audit: type=1326 audit(1777747260.748:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.172026][ T36] audit: type=1326 audit(1777747260.748:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.172065][ T36] audit: type=1326 audit(1777747260.748:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.172102][ T36] audit: type=1326 audit(1777747260.748:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bd1ecdd9 code=0x7ffc0000 [ 495.245160][T11102] FAULT_INJECTION: forcing a failure. [ 495.245160][T11102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.245201][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.2.1780 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.245228][T11102] Tainted: [L]=SOFTLOCKUP [ 495.245235][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.245247][T11102] Call Trace: [ 495.245254][T11102] [ 495.245262][T11102] dump_stack_lvl+0xe8/0x150 [ 495.245290][T11102] should_fail_ex+0x46b/0x600 [ 495.245325][T11102] _copy_to_user+0x31/0xb0 [ 495.245349][T11102] simple_read_from_buffer+0xe1/0x170 [ 495.245382][T11102] proc_fail_nth_read+0x1be/0x230 [ 495.245415][T11102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.245453][T11102] ? rw_verify_area+0x2ac/0x4e0 [ 495.245475][T11102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.245507][T11102] vfs_read+0x212/0xa80 [ 495.245537][T11102] ? __pfx_vfs_read+0x10/0x10 [ 495.245560][T11102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 495.245582][T11102] ? lockdep_hardirqs_on+0x7a/0x110 [ 495.245603][T11102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 495.245624][T11102] ? mutex_lock_nested+0x152/0x1d0 [ 495.245648][T11102] ? fdget_pos+0x252/0x320 [ 495.245680][T11102] ksys_read+0x156/0x270 [ 495.245703][T11102] ? __pfx_ksys_read+0x10/0x10 [ 495.245732][T11102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.245753][T11102] do_syscall_64+0x15f/0xf80 [ 495.245773][T11102] ? trace_irq_disable+0x3b/0x140 [ 495.245795][T11102] ? clear_bhb_loop+0x40/0x90 [ 495.245818][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.245837][T11102] RIP: 0033:0x7f3fcad9d60e [ 495.245855][T11102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.245872][T11102] RSP: 002b:00007f3fc902dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 495.245890][T11102] RAX: ffffffffffffffda RBX: 00007f3fc902e6c0 RCX: 00007f3fcad9d60e [ 495.245904][T11102] RDX: 000000000000000f RSI: 00007f3fc902e0a0 RDI: 0000000000000004 [ 495.245917][T11102] RBP: 00007f3fc902e090 R08: 0000000000000000 R09: 0000000000000000 [ 495.245929][T11102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.245940][T11102] R13: 00007f3fcb056038 R14: 00007f3fcb055fa0 R15: 00007ffe5f842ca8 [ 495.245971][T11102] [ 495.363813][ T819] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 495.418615][ T5879] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 495.570083][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 495.573458][ T5879] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 495.573483][ T5879] usb 2-1: config 0 has no interface number 0 [ 495.573523][ T5879] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.573546][ T5879] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 495.573570][ T5879] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 495.573590][ T5879] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.573627][ T5879] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 495.573649][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.671728][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 495.838808][ T5879] usb 2-1: config 0 descriptor?? [ 495.869704][ T5879] ldusb 2-1:0.55: Interrupt in endpoint not found [ 496.220121][ T5697] usb 2-1: USB disconnect, device number 13 [ 496.355126][ T5750] usb 5-1: USB disconnect, device number 66 [ 496.385929][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 496.494739][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 496.494870][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 496.494976][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 496.495085][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 496.495195][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 496.548577][ T819] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 496.569627][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 496.639570][T11116] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 496.720648][ T819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 496.720679][ T819] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 496.720704][ T819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 496.726012][ T819] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 496.726039][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.726057][ T819] usb 1-1: Product: syz [ 496.726071][ T819] usb 1-1: Manufacturer: syz [ 496.726085][ T819] usb 1-1: SerialNumber: syz [ 496.744374][T11116] bond1 (unregistering): Released all slaves [ 496.815359][ T819] usb 1-1: config 0 descriptor?? [ 496.817206][T11119] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 496.817323][T11119] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 496.840321][ T819] usb 1-1: ucan: probing device on interface #0 [ 497.064206][ T819] usb 1-1: ucan: device protocol version 0 is not supported [ 497.064231][ T819] usb 1-1: ucan: probe failed; try to update the device firmware [ 497.405384][T11141] FAULT_INJECTION: forcing a failure. [ 497.405384][T11141] name failslab, interval 1, probability 0, space 0, times 0 [ 497.405421][T11141] CPU: 0 UID: 0 PID: 11141 Comm: syz.1.1792 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 497.405448][T11141] Tainted: [L]=SOFTLOCKUP [ 497.405456][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.405468][T11141] Call Trace: [ 497.405476][T11141] [ 497.405485][T11141] dump_stack_lvl+0xe8/0x150 [ 497.405515][T11141] should_fail_ex+0x46b/0x600 [ 497.405552][T11141] should_failslab+0xa8/0x100 [ 497.405578][T11141] kmem_cache_alloc_noprof+0x87/0x680 [ 497.405599][T11141] ? percpu_counter_add_batch+0xea/0x1d0 [ 497.405626][T11141] ? ep_insert+0x285/0x1820 [ 497.405656][T11141] ep_insert+0x285/0x1820 [ 497.405690][T11141] ? __pfx_ep_insert+0x10/0x10 [ 497.405718][T11141] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.405742][T11141] ? lockdep_hardirqs_on+0x7a/0x110 [ 497.405764][T11141] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.405787][T11141] ? mutex_lock_nested+0x152/0x1d0 [ 497.405814][T11141] ? do_epoll_ctl+0x3d2/0xe90 [ 497.405838][T11141] do_epoll_ctl+0x7fd/0xe90 [ 497.405868][T11141] __x64_sys_epoll_ctl+0x165/0x1b0 [ 497.405893][T11141] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 497.405923][T11141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.405945][T11141] do_syscall_64+0x15f/0xf80 [ 497.405966][T11141] ? trace_irq_disable+0x3b/0x140 [ 497.405992][T11141] ? clear_bhb_loop+0x40/0x90 [ 497.406017][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.406037][T11141] RIP: 0033:0x7f9aeecdcdd9 [ 497.406055][T11141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.406072][T11141] RSP: 002b:00007f9aecf2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 497.406093][T11141] RAX: ffffffffffffffda RBX: 00007f9aeef55fa0 RCX: 00007f9aeecdcdd9 [ 497.406108][T11141] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 497.406119][T11141] RBP: 00007f9aecf2e090 R08: 0000000000000000 R09: 0000000000000000 [ 497.406131][T11141] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.406144][T11141] R13: 00007f9aeef56038 R14: 00007f9aeef55fa0 R15: 00007ffd4ee6fb08 [ 497.406176][T11141] [ 497.518991][ T5750] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 497.651462][T11146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.688866][ T5750] usb 4-1: Using ep0 maxpacket: 32 [ 497.691071][ T5750] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.691125][ T5750] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 497.691148][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.698162][ T5750] usb 4-1: config 0 descriptor?? [ 497.706181][ T5750] hub 4-1:0.0: bad descriptor, ignoring hub [ 497.706216][ T5750] hub 4-1:0.0: probe with driver hub failed with error -5 [ 498.049388][T11153] FAULT_INJECTION: forcing a failure. [ 498.049388][T11153] name failslab, interval 1, probability 0, space 0, times 0 [ 498.049424][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.2.1795 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 498.049452][T11153] Tainted: [L]=SOFTLOCKUP [ 498.049459][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.049471][T11153] Call Trace: [ 498.049479][T11153] [ 498.049488][T11153] dump_stack_lvl+0xe8/0x150 [ 498.049515][T11153] should_fail_ex+0x46b/0x600 [ 498.049550][T11153] should_failslab+0xa8/0x100 [ 498.049574][T11153] __kmalloc_noprof+0xdf/0x7b0 [ 498.049595][T11153] ? tomoyo_encode+0x28b/0x550 [ 498.049627][T11153] tomoyo_encode+0x28b/0x550 [ 498.049658][T11153] tomoyo_realpath_from_path+0x58d/0x5d0 [ 498.049698][T11153] ? tomoyo_path_number_perm+0x219/0x630 [ 498.049723][T11153] tomoyo_path_number_perm+0x246/0x630 [ 498.049756][T11153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.049778][T11153] ? __lock_acquire+0x6b5/0x2cf0 [ 498.049809][T11153] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.049865][T11153] ? __fget_files+0x2a/0x420 [ 498.049887][T11153] ? __fget_files+0x2a/0x420 [ 498.049903][T11153] ? __fget_files+0x3a6/0x420 [ 498.049921][T11153] ? __fget_files+0x2a/0x420 [ 498.049942][T11153] security_file_ioctl+0xc3/0x2a0 [ 498.049972][T11153] __se_sys_ioctl+0x47/0x170 [ 498.049996][T11153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.050019][T11153] do_syscall_64+0x15f/0xf80 [ 498.050040][T11153] ? trace_irq_disable+0x3b/0x140 [ 498.050064][T11153] ? clear_bhb_loop+0x40/0x90 [ 498.050089][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.050109][T11153] RIP: 0033:0x7f3fcaddcdd9 [ 498.050127][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.050144][T11153] RSP: 002b:00007f3fc902e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.050165][T11153] RAX: ffffffffffffffda RBX: 00007f3fcb055fa0 RCX: 00007f3fcaddcdd9 [ 498.050180][T11153] RDX: 0000200000000140 RSI: 00000000000007a6 RDI: 0000000000000003 [ 498.050194][T11153] RBP: 00007f3fc902e090 R08: 0000000000000000 R09: 0000000000000000 [ 498.050205][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.050217][T11153] R13: 00007f3fcb056038 R14: 00007f3fcb055fa0 R15: 00007ffe5f842ca8 [ 498.050246][T11153] [ 498.055168][T11153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 498.148703][ T5750] usb 4-1: USB disconnect, device number 59 [ 498.844209][T11165] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 498.863987][T11165] overlayfs: overlapping lowerdir path [ 499.226430][ T5750] IPVS: starting estimator thread 0... [ 499.288349][ T819] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 499.318842][ T5879] usb 1-1: USB disconnect, device number 44 [ 499.320337][T11184] IPVS: using max 16 ests per chain, 38400 per kthread [ 499.446804][ T819] usb 3-1: device descriptor read/64, error -71 [ 499.678392][ T819] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 499.808473][ T819] usb 3-1: device descriptor read/64, error -71 [ 499.918712][ T819] usb usb3-port1: attempt power cycle [ 500.135404][T11212] FAULT_INJECTION: forcing a failure. [ 500.135404][T11212] name failslab, interval 1, probability 0, space 0, times 0 [ 500.135439][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.3.1811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.135466][T11212] Tainted: [L]=SOFTLOCKUP [ 500.135474][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 500.135486][T11212] Call Trace: [ 500.135493][T11212] [ 500.135502][T11212] dump_stack_lvl+0xe8/0x150 [ 500.135528][T11212] should_fail_ex+0x46b/0x600 [ 500.135562][T11212] should_failslab+0xa8/0x100 [ 500.135587][T11212] kmem_cache_alloc_noprof+0x87/0x680 [ 500.135608][T11212] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.135628][T11212] ? do_getname+0x2e/0x250 [ 500.135659][T11212] do_getname+0x2e/0x250 [ 500.135683][T11212] ? getname_flags+0x11/0x20 [ 500.135710][T11212] do_sys_openat2+0xca/0x200 [ 500.135742][T11212] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.135771][T11212] ? ksys_write+0x248/0x270 [ 500.135795][T11212] ? __pfx_ksys_write+0x10/0x10 [ 500.135819][T11212] __x64_sys_openat+0x138/0x170 [ 500.135850][T11212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.135871][T11212] do_syscall_64+0x15f/0xf80 [ 500.135892][T11212] ? trace_irq_disable+0x3b/0x140 [ 500.135915][T11212] ? clear_bhb_loop+0x40/0x90 [ 500.135938][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.135958][T11212] RIP: 0033:0x7fa20357cdd9 [ 500.135976][T11212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.135993][T11212] RSP: 002b:00007fa2017ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.136014][T11212] RAX: ffffffffffffffda RBX: 00007fa2037f6090 RCX: 00007fa20357cdd9 [ 500.136028][T11212] RDX: 0000000000002028 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 500.136042][T11212] RBP: 00007fa2017ad090 R08: 0000000000000000 R09: 0000000000000000 [ 500.136055][T11212] R10: 0000000000000110 R11: 0000000000000246 R12: 0000000000000001 [ 500.136067][T11212] R13: 00007fa2037f6128 R14: 00007fa2037f6090 R15: 00007ffea63645b8 [ 500.136097][T11212] [ 500.305626][ T5697] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 500.358260][ T819] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 500.832089][ T819] usb 3-1: device descriptor read/8, error -71 [ 500.908354][ T5697] usb 5-1: Using ep0 maxpacket: 16 [ 500.917990][ T5697] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 500.918021][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.918040][ T5697] usb 5-1: Product: syz [ 500.918054][ T5697] usb 5-1: Manufacturer: syz [ 500.918067][ T5697] usb 5-1: SerialNumber: syz [ 500.971879][ T5697] usb 5-1: config 0 descriptor?? [ 501.068509][ T819] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 501.089084][ T819] usb 3-1: device descriptor read/8, error -71 [ 501.199050][ T819] usb usb3-port1: unable to enumerate USB device [ 501.430382][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.430451][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.459802][ T819] usb 5-1: USB disconnect, device number 67 [ 501.719512][ T5882] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 501.892650][ T5882] usb 2-1: No LPM exit latency info found, disabling LPM. [ 501.896603][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 8 [ 501.896636][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 501.896658][ T5882] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 501.896679][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16, setting to 0 [ 501.896704][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 501.896728][ T5882] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 501.896749][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 501.900424][ T5882] usb 2-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 501.900463][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.900481][ T5882] usb 2-1: Product: 〇 [ 501.900495][ T5882] usb 2-1: Manufacturer: ଴ࠬ퍦㣢䴻㦐㗏琅⟂箷븎꜂矷驭氅宽险逢ㄔ踵ﷵ饎튩我뀣ᥗᇖ턱폥⧡免᪙熛踟쵈ꮟɓ⪮ [ 501.900515][ T5882] usb 2-1: SerialNumber: ᰊ [ 501.919975][T11231] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 502.778560][ T5882] usb 2-1: USB disconnect, device number 14 [ 502.876264][ T5857] udevd[5857]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 502.988394][ T819] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 503.153090][ T819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 503.153119][ T819] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 503.153141][ T819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 503.195527][ T819] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 503.195558][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.195579][ T819] usb 1-1: Product: syz [ 503.195593][ T819] usb 1-1: Manufacturer: syz [ 503.195608][ T819] usb 1-1: SerialNumber: syz [ 503.466597][ T819] usb 1-1: config 0 descriptor?? [ 503.473840][T11260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.474016][T11260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.565619][ T819] usb 1-1: ucan: probing device on interface #0 [ 503.724601][ T819] usb 1-1: ucan: device protocol version 0 is not supported [ 503.724627][ T819] usb 1-1: ucan: probe failed; try to update the device firmware [ 505.014746][T11303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.338707][T11317] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 505.338728][T11317] __nla_validate_parse: 26 callbacks suppressed [ 505.338741][T11317] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1840'. [ 505.440715][ T5879] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 505.589695][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 505.593832][ T5879] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 505.593867][ T5879] usb 3-1: config 0 has no interface number 0 [ 505.593913][ T5879] usb 3-1: config 0 interface 12 has no altsetting 0 [ 505.626017][ T5879] usb 3-1: New USB device found, idVendor=2c42, idProduct=1254, bcdDevice=85.40 [ 505.626044][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.626064][ T5879] usb 3-1: Product: syz [ 505.626077][ T5879] usb 3-1: Manufacturer: syz [ 505.626091][ T5879] usb 3-1: SerialNumber: syz [ 505.629400][ T5715] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 505.693973][ T5879] usb 3-1: config 0 descriptor?? [ 505.850897][ T5715] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 505.850924][ T5715] usb 2-1: config 0 has no interface number 0 [ 505.850967][ T5715] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 505.850991][ T5715] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.861157][ T5715] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 505.861186][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.861205][ T5715] usb 2-1: Product: syz [ 505.861217][ T5715] usb 2-1: Manufacturer: syz [ 505.861231][ T5715] usb 2-1: SerialNumber: syz [ 505.881712][ T5715] usb 2-1: config 0 descriptor?? [ 505.894531][T11318] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 505.942689][ T5715] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 506.091416][ T5715] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 506.237560][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 506.431099][ T5879] usb 1-1: USB disconnect, device number 45 [ 506.506874][T11329] FAULT_INJECTION: forcing a failure. [ 506.506874][T11329] name failslab, interval 1, probability 0, space 0, times 0 [ 506.506910][T11329] CPU: 1 UID: 0 PID: 11329 Comm: syz.3.1844 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 506.506937][T11329] Tainted: [L]=SOFTLOCKUP [ 506.506944][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.506955][T11329] Call Trace: [ 506.506963][T11329] [ 506.506971][T11329] dump_stack_lvl+0xe8/0x150 [ 506.507003][T11329] should_fail_ex+0x46b/0x600 [ 506.507040][T11329] should_failslab+0xa8/0x100 [ 506.507067][T11329] __kvmalloc_node_noprof+0x170/0x8e0 [ 506.507092][T11329] ? traverse+0xde/0x580 [ 506.507124][T11329] traverse+0xde/0x580 [ 506.507146][T11329] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 506.507170][T11329] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 506.507191][T11329] ? seq_read_iter+0xb8/0xe20 [ 506.507218][T11329] seq_read_iter+0xd09/0xe20 [ 506.507242][T11329] ? __lock_acquire+0x6b5/0x2cf0 [ 506.507275][T11329] ? __asan_memset+0x22/0x50 [ 506.507311][T11329] seq_read+0x36a/0x490 [ 506.507333][T11329] ? kstrtouint+0x6e/0xe0 [ 506.507364][T11329] ? __pfx_seq_read+0x10/0x10 [ 506.507387][T11329] ? __lock_acquire+0x6b5/0x2cf0 [ 506.507419][T11329] ? proc_reg_read+0x168/0x2f0 [ 506.507444][T11329] vfs_readv+0x597/0x850 [ 506.507474][T11329] ? __pfx_proc_reg_read+0x10/0x10 [ 506.507498][T11329] ? __pfx_vfs_readv+0x10/0x10 [ 506.507540][T11329] ? __fget_files+0x2a/0x420 [ 506.507562][T11329] ? __fget_files+0x3a6/0x420 [ 506.507579][T11329] ? __fget_files+0x2a/0x420 [ 506.507606][T11329] __x64_sys_preadv+0x1a2/0x2b0 [ 506.507633][T11329] ? __pfx___x64_sys_preadv+0x10/0x10 [ 506.507664][T11329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.507685][T11329] do_syscall_64+0x15f/0xf80 [ 506.507711][T11329] ? trace_irq_disable+0x3b/0x140 [ 506.507732][T11329] ? clear_bhb_loop+0x40/0x90 [ 506.507756][T11329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.507776][T11329] RIP: 0033:0x7fa20357cdd9 [ 506.507795][T11329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.507813][T11329] RSP: 002b:00007fa2017ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 506.507834][T11329] RAX: ffffffffffffffda RBX: 00007fa2037f5fa0 RCX: 00007fa20357cdd9 [ 506.507849][T11329] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000003 [ 506.507863][T11329] RBP: 00007fa2017ce090 R08: 000000000000000c R09: 0000000000000000 [ 506.507876][T11329] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 506.507888][T11329] R13: 00007fa2037f6038 R14: 00007fa2037f5fa0 R15: 00007ffea63645b8 [ 506.507920][T11329] [ 507.401771][ T5697] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 507.548388][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 507.551484][ T5697] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.551512][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.551918][ T5697] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.551944][ T5697] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.551987][ T5697] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.552009][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.706030][T11352] binder: 11351:11352 ioctl 4018620d 0 returned -22 [ 507.847637][ T5697] usb 4-1: GET_CAPABILITIES returned 0 [ 507.847742][ T5697] usbtmc 4-1:16.0: can't read capabilities [ 508.173863][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 508.195776][ T5879] usb 3-1: USB disconnect, device number 75 [ 508.446857][ T5715] usb 4-1: USB disconnect, device number 60 [ 508.473158][ T819] usb 2-1: USB disconnect, device number 15 [ 508.588424][ T5882] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 508.621539][ T819] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 508.626009][ T819] cyberjack 2-1:0.69: device disconnected [ 508.740738][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.740794][ T5882] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 508.740819][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.793717][ T5882] usb 1-1: config 0 descriptor?? [ 508.800906][ T5882] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 508.801195][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 508.801285][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 508.895947][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 508.896029][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 508.896106][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 508.896182][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 508.896283][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 508.896379][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 508.928414][ T5697] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 509.751817][ T5882] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 509.775419][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 509.775469][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 509.775513][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 509.775557][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 509.775602][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 509.775644][ T5882] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 509.832186][ T5882] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 509.835869][ T5697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 509.835897][ T5697] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 509.835920][ T5697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 509.840822][ T5697] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 509.840848][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.840867][ T5697] usb 5-1: Product: syz [ 509.840880][ T5697] usb 5-1: Manufacturer: syz [ 509.840894][ T5697] usb 5-1: SerialNumber: syz [ 509.910243][ T5697] usb 5-1: config 0 descriptor?? [ 509.911450][T11366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 509.911620][T11366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 509.914942][ T5697] usb 5-1: ucan: probing device on interface #0 [ 509.918493][ T819] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 509.954605][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 509.957719][ T5882] usb 1-1: USB disconnect, device number 46 [ 509.993235][ T5882] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 510.014918][ T5882] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 510.015741][ T5882] keyspan 1-1:0.0: device disconnected [ 510.088380][ T819] usb 2-1: Using ep0 maxpacket: 8 [ 510.095603][ T819] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 510.095620][ T819] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 510.095630][ T819] usb 2-1: Product: syz [ 510.095638][ T819] usb 2-1: Manufacturer: syz [ 510.095645][ T819] usb 2-1: SerialNumber: syz [ 510.105582][ T819] usb 2-1: config 0 descriptor?? [ 510.108376][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 510.110092][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 510.110116][ T10] usb 3-1: config 0 has no interface number 0 [ 510.112465][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 510.112491][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.112510][ T10] usb 3-1: Product: syz [ 510.112523][ T10] usb 3-1: Manufacturer: syz [ 510.112537][ T10] usb 3-1: SerialNumber: syz [ 510.126186][ T5697] usb 5-1: ucan: device protocol version 0 is not supported [ 510.126207][ T5697] usb 5-1: ucan: probe failed; try to update the device firmware [ 510.229335][ T10] usb 3-1: config 0 descriptor?? [ 510.229679][ T819] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 510.288482][ T4924] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 510.448411][ T4924] usb 4-1: Using ep0 maxpacket: 8 [ 510.453523][ T4924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.453549][ T4924] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.461484][ T4924] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 510.461513][ T4924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 510.461914][ T4924] usb 4-1: Product: syz [ 510.461930][ T4924] usb 4-1: Manufacturer: syz [ 510.461944][ T4924] usb 4-1: SerialNumber: syz [ 510.496972][ T4924] usb 4-1: config 0 descriptor?? [ 510.708191][T11377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.750303][ T4924] usb 4-1: USB disconnect, device number 61 [ 510.763712][ T819] gspca_zc3xx: reg_w_i err -71 [ 510.763798][ T819] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 510.811666][ T819] usb 2-1: USB disconnect, device number 16 [ 511.052822][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 511.198552][T11383] binder: 11382:11383 ioctl 4018620d 0 returned -22 [ 511.797279][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 511.797310][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 511.812046][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 511.812241][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 511.871338][ T10] usb 3-1: USB disconnect, device number 76 [ 512.056348][ T4924] usb 5-1: USB disconnect, device number 68 [ 512.234420][T11397] cifs: Unknown parameter 'Y[' [ 512.238031][T11396] cifs: Unknown parameter 'Y[' [ 512.749286][T11413] binder: 11412:11413 ioctl 4018620d 0 returned -22 [ 513.676995][T11426] overlayfs: missing 'lowerdir' [ 513.808386][ T4924] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 513.968523][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 513.988577][ T4924] usb 1-1: Using ep0 maxpacket: 8 [ 513.992529][ T4924] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.996334][ T4924] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 513.996360][ T4924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 513.996380][ T4924] usb 1-1: Product: syz [ 513.996393][ T4924] usb 1-1: Manufacturer: syz [ 513.996407][ T4924] usb 1-1: SerialNumber: syz [ 514.051473][ T4924] usb 1-1: config 0 descriptor?? [ 514.144112][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 514.144144][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 514.144169][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 514.181939][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 514.181968][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.181986][ T10] usb 5-1: Product: syz [ 514.182001][ T10] usb 5-1: Manufacturer: syz [ 514.182015][ T10] usb 5-1: SerialNumber: syz [ 514.221828][ T10] usb 5-1: config 0 descriptor?? [ 514.242677][T11430] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 514.242795][T11430] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 514.245614][ T10] usb 5-1: ucan: probing device on interface #0 [ 514.399816][ T4924] usb 1-1: USB disconnect, device number 47 [ 514.559431][ T10] usb 5-1: ucan: device protocol version 0 is not supported [ 514.559448][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 515.577041][T11443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.062712][T11459] FAULT_INJECTION: forcing a failure. [ 516.062712][T11459] name failslab, interval 1, probability 0, space 0, times 0 [ 516.062749][T11459] CPU: 1 UID: 0 PID: 11459 Comm: syz.2.1883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.062777][T11459] Tainted: [L]=SOFTLOCKUP [ 516.062783][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.062795][T11459] Call Trace: [ 516.062803][T11459] [ 516.062811][T11459] dump_stack_lvl+0xe8/0x150 [ 516.062841][T11459] should_fail_ex+0x46b/0x600 [ 516.062882][T11459] should_failslab+0xa8/0x100 [ 516.062907][T11459] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 516.062928][T11459] ? __alloc_skb+0x1d0/0x7d0 [ 516.062956][T11459] __alloc_skb+0x1d0/0x7d0 [ 516.062981][T11459] tipc_msg_build+0x162/0xf00 [ 516.063002][T11459] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.063034][T11459] ? __pfx_tipc_msg_build+0x10/0x10 [ 516.063058][T11459] ? __rcu_read_unlock+0x83/0xe0 [ 516.063079][T11459] ? net_generic+0x1e/0x240 [ 516.063109][T11459] ? tipc_group_bc_cong+0x16c/0x220 [ 516.063137][T11459] tipc_send_group_bcast+0x80c/0xb00 [ 516.063176][T11459] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 516.063213][T11459] ? reweight_entity+0x9ec/0xc30 [ 516.063243][T11459] ? __pfx_woken_wake_function+0x10/0x10 [ 516.063283][T11459] __tipc_sendmsg+0x34f/0x2c00 [ 516.063301][T11459] ? update_load_avg+0x1b0/0x1eb0 [ 516.063335][T11459] ? set_next_entity+0x32d/0x6b0 [ 516.063360][T11459] ? __pfx___tipc_sendmsg+0x10/0x10 [ 516.063385][T11459] ? do_raw_spin_unlock+0xf5/0x210 [ 516.063409][T11459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.063430][T11459] ? __set_cpus_allowed_ptr_locked+0x9c2/0x19c0 [ 516.063462][T11459] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 516.063504][T11459] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 516.063561][T11459] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 516.063601][T11459] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 516.063631][T11459] tipc_sendmsg+0x55/0x70 [ 516.063653][T11459] ____sys_sendmsg+0x94c/0x9c0 [ 516.063684][T11459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.063725][T11459] ? import_iovec+0x73/0xa0 [ 516.063752][T11459] ___sys_sendmsg+0x2a5/0x360 [ 516.063774][T11459] ? __lock_acquire+0x6b5/0x2cf0 [ 516.063806][T11459] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.063865][T11459] ? __fget_files+0x2a/0x420 [ 516.063883][T11459] ? __fget_files+0x3a6/0x420 [ 516.063911][T11459] __x64_sys_sendmsg+0x1c3/0x2a0 [ 516.063940][T11459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.063975][T11459] ? __pfx_ksys_write+0x10/0x10 [ 516.064007][T11459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.064029][T11459] do_syscall_64+0x15f/0xf80 [ 516.064050][T11459] ? trace_irq_disable+0x3b/0x140 [ 516.064073][T11459] ? clear_bhb_loop+0x40/0x90 [ 516.064098][T11459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.064118][T11459] RIP: 0033:0x7f3fcaddcdd9 [ 516.064136][T11459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.064154][T11459] RSP: 002b:00007f3fc900d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.064175][T11459] RAX: ffffffffffffffda RBX: 00007f3fcb056090 RCX: 00007f3fcaddcdd9 [ 516.064189][T11459] RDX: 0000000000008820 RSI: 00002000000003c0 RDI: 0000000000000004 [ 516.064202][T11459] RBP: 00007f3fc900d090 R08: 0000000000000000 R09: 0000000000000000 [ 516.064214][T11459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.064226][T11459] R13: 00007f3fcb056128 R14: 00007f3fcb056090 R15: 00007ffe5f842ca8 [ 516.064256][T11459] [ 517.696252][ T10] usb 5-1: USB disconnect, device number 69 [ 518.876901][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 518.876920][ T36] audit: type=1804 audit(1777747284.448:943): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1888" name="/newroot/313/file0" dev="tmpfs" ino=1647 res=1 errno=0 [ 518.968387][ T4924] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 519.047586][T11482] Bluetooth: MGMT ver 1.23 [ 519.448448][ T10] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 519.615024][ T10] usb 5-1: No LPM exit latency info found, disabling LPM. [ 519.617691][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 8 [ 519.617724][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 519.617747][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.617768][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16, setting to 0 [ 519.617793][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 519.617818][ T10] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 519.617841][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 519.708113][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 519.708143][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.708164][ T10] usb 5-1: Product: 〇 [ 519.708177][ T10] usb 5-1: Manufacturer: ଴ࠬ퍦㣢䴻㦐㗏琅⟂箷븎꜂矷驭氅宽险逢ㄔ踵ﷵ饎튩我뀣ᥗᇖ턱폥⧡免᪙熛踟쵈ꮟɓ⪮ [ 519.708198][ T10] usb 5-1: SerialNumber: ᰊ [ 519.763887][T11484] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 519.972228][ T36] audit: type=1326 audit(1777747285.548:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 519.972283][ T36] audit: type=1326 audit(1777747285.558:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 519.972354][ T36] audit: type=1326 audit(1777747285.558:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 519.972808][ T36] audit: type=1326 audit(1777747285.558:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 519.973147][ T36] audit: type=1326 audit(1777747285.558:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 519.973480][ T36] audit: type=1326 audit(1777747285.558:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 519.974606][ T36] audit: type=1326 audit(1777747285.558:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 519.974955][ T36] audit: type=1326 audit(1777747285.558:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa20353d60e code=0x7ffc0000 [ 519.977156][ T36] audit: type=1326 audit(1777747285.558:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11481 comm="syz.3.1892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20357cdd9 code=0x7ffc0000 [ 520.251087][ T4924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.251115][ T4924] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.310613][ T4924] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 520.310644][ T4924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.310663][ T4924] usb 2-1: Product: syz [ 520.310676][ T4924] usb 2-1: Manufacturer: syz [ 520.310691][ T4924] usb 2-1: SerialNumber: syz [ 520.338181][ T4924] usb 2-1: config 0 descriptor?? [ 520.833735][ T10] usb 5-1: USB disconnect, device number 70 [ 521.141850][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.642168][ T3218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.785006][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 521.838559][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 521.859785][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 521.881535][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 521.883604][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.464388][ T3218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.538396][ T4924] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 522.717070][ T4924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 522.717101][ T4924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 522.717125][ T4924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 522.754050][ T4924] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 522.754080][ T4924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.754100][ T4924] usb 1-1: Product: syz [ 522.754115][ T4924] usb 1-1: Manufacturer: syz [ 522.754129][ T4924] usb 1-1: SerialNumber: syz [ 522.810219][ T5882] usb 2-1: USB disconnect, device number 17 [ 522.856891][ T4924] usb 1-1: config 0 descriptor?? [ 522.876029][T11524] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 522.876300][T11524] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 522.895007][ T4924] usb 1-1: ucan: probing device on interface #0 [ 522.980130][T11531] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1904'. [ 523.092035][ T4924] usb 1-1: ucan: device protocol version 0 is not supported [ 523.092058][ T4924] usb 1-1: ucan: probe failed; try to update the device firmware [ 523.255260][T11538] FAULT_INJECTION: forcing a failure. [ 523.255260][T11538] name failslab, interval 1, probability 0, space 0, times 0 [ 523.255294][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.3.1906 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.255320][T11538] Tainted: [L]=SOFTLOCKUP [ 523.255327][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.255338][T11538] Call Trace: [ 523.255346][T11538] [ 523.255354][T11538] dump_stack_lvl+0xe8/0x150 [ 523.255382][T11538] should_fail_ex+0x46b/0x600 [ 523.255420][T11538] should_failslab+0xa8/0x100 [ 523.255446][T11538] __kmalloc_noprof+0xdf/0x7b0 [ 523.255467][T11538] ? sock_kmalloc+0xd6/0x160 [ 523.255490][T11538] ? __local_bh_enable+0x1e1/0x2f0 [ 523.255515][T11538] sock_kmalloc+0xd6/0x160 [ 523.255540][T11538] af_alg_alloc_areq+0x99/0x200 [ 523.255565][T11538] skcipher_recvmsg+0x321/0x1140 [ 523.255594][T11538] ? __lock_acquire+0x6b5/0x2cf0 [ 523.255629][T11538] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 523.255651][T11538] ? __lock_acquire+0x6b5/0x2cf0 [ 523.255675][T11538] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 523.255697][T11538] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 523.255719][T11538] ? security_socket_recvmsg+0x7e/0x2c0 [ 523.255741][T11538] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 523.255768][T11538] sock_recvmsg+0x172/0x1b0 [ 523.255803][T11538] ____sys_recvmsg+0x1f2/0x4b0 [ 523.255836][T11538] ? __pfx_____sys_recvmsg+0x10/0x10 [ 523.255873][T11538] ? import_iovec+0x73/0xa0 [ 523.255898][T11538] ___sys_recvmsg+0x215/0x590 [ 523.255928][T11538] ? get_pid_task+0x20/0x1f0 [ 523.255959][T11538] ? __pfx____sys_recvmsg+0x10/0x10 [ 523.255986][T11538] ? __fget_files+0x2a/0x420 [ 523.256019][T11538] ? __fget_files+0x3a6/0x420 [ 523.256046][T11538] __x64_sys_recvmsg+0x1c0/0x2a0 [ 523.256076][T11538] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 523.256111][T11538] ? __pfx_ksys_write+0x10/0x10 [ 523.256143][T11538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.256164][T11538] do_syscall_64+0x15f/0xf80 [ 523.256186][T11538] ? trace_irq_disable+0x3b/0x140 [ 523.256209][T11538] ? clear_bhb_loop+0x40/0x90 [ 523.256234][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.256252][T11538] RIP: 0033:0x7fa20357cdd9 [ 523.256271][T11538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.256286][T11538] RSP: 002b:00007fa2017ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 523.256305][T11538] RAX: ffffffffffffffda RBX: 00007fa2037f5fa0 RCX: 00007fa20357cdd9 [ 523.256318][T11538] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 523.256330][T11538] RBP: 00007fa2017ce090 R08: 0000000000000000 R09: 0000000000000000 [ 523.256341][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.256351][T11538] R13: 00007fa2037f6038 R14: 00007fa2037f5fa0 R15: 00007ffea63645b8 [ 523.256381][T11538] [ 523.305756][T11540] FAULT_INJECTION: forcing a failure. [ 523.305756][T11540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.305791][T11540] CPU: 0 UID: 0 PID: 11540 Comm: syz.1.1907 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.305817][T11540] Tainted: [L]=SOFTLOCKUP [ 523.305825][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.305836][T11540] Call Trace: [ 523.305843][T11540] [ 523.305851][T11540] dump_stack_lvl+0xe8/0x150 [ 523.305878][T11540] should_fail_ex+0x46b/0x600 [ 523.305912][T11540] _copy_from_user+0x2d/0xb0 [ 523.305934][T11540] __copy_msghdr+0x3c5/0x5b0 [ 523.305962][T11540] ___sys_sendmsg+0x213/0x360 [ 523.305985][T11540] ? __lock_acquire+0x6b5/0x2cf0 [ 523.306015][T11540] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.306068][T11540] ? __fget_files+0x2a/0x420 [ 523.306085][T11540] ? __fget_files+0x3a6/0x420 [ 523.306111][T11540] __x64_sys_sendmsg+0x1c3/0x2a0 [ 523.306137][T11540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.306169][T11540] ? __pfx_ksys_write+0x10/0x10 [ 523.306198][T11540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.306218][T11540] do_syscall_64+0x15f/0xf80 [ 523.306243][T11540] ? trace_irq_disable+0x3b/0x140 [ 523.306265][T11540] ? clear_bhb_loop+0x40/0x90 [ 523.306287][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.306306][T11540] RIP: 0033:0x7f9aeecdcdd9 [ 523.306323][T11540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.306339][T11540] RSP: 002b:00007f9aecf2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.306360][T11540] RAX: ffffffffffffffda RBX: 00007f9aeef55fa0 RCX: 00007f9aeecdcdd9 [ 523.306374][T11540] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005 [ 523.306386][T11540] RBP: 00007f9aecf2e090 R08: 0000000000000000 R09: 0000000000000000 [ 523.306398][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.306409][T11540] R13: 00007f9aeef56038 R14: 00007f9aeef55fa0 R15: 00007ffd4ee6fb08 [ 523.306437][T11540] [ 523.650641][T11544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.814763][ T3218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.908368][ T5598] Bluetooth: hci3: command tx timeout [ 523.986040][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 524.007840][ T36] audit: type=1326 audit(1777747289.568:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.007916][ T36] audit: type=1326 audit(1777747289.568:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.007962][ T36] audit: type=1326 audit(1777747289.568:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.008003][ T36] audit: type=1326 audit(1777747289.568:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.008043][ T36] audit: type=1326 audit(1777747289.568:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.008082][ T36] audit: type=1326 audit(1777747289.568:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.008122][ T36] audit: type=1326 audit(1777747289.568:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.008163][ T36] audit: type=1326 audit(1777747289.568:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.008408][ T36] audit: type=1326 audit(1777747289.568:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 524.008455][ T36] audit: type=1326 audit(1777747289.588:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11549 comm="syz.1.1910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 525.410369][ T5750] usb 1-1: USB disconnect, device number 48 [ 525.857458][ T3218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.928482][ T5728] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 525.998362][ T5598] Bluetooth: hci3: command tx timeout [ 526.090203][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.090228][ T5728] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 526.093052][ T5728] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 526.093078][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.093097][ T5728] usb 4-1: Product: syz [ 526.093111][ T5728] usb 4-1: Manufacturer: syz [ 526.093125][ T5728] usb 4-1: SerialNumber: syz [ 526.172849][ T5728] usb 4-1: config 0 descriptor?? [ 527.485965][T11588] binder: 11587:11588 ioctl c0306201 0 returned -14 [ 527.614713][T11590] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1920'. [ 528.070368][ T5598] Bluetooth: hci3: command tx timeout [ 528.093672][T11596] Invalid ELF header magic: != ELF [ 531.187102][ T5598] Bluetooth: hci3: command tx timeout [ 531.418456][ T5728] usb 4-1: USB disconnect, device number 62 [ 531.673696][T11627] kvm: emulating exchange as write [ 531.789385][ T3218] bridge_slave_1: left allmulticast mode [ 531.789418][ T3218] bridge_slave_1: left promiscuous mode [ 531.789651][ T3218] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.816792][ T4924] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 531.879871][ T3218] bridge_slave_0: left allmulticast mode [ 531.879904][ T3218] bridge_slave_0: left promiscuous mode [ 531.880547][ T3218] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.908449][ T5697] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 531.939168][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 531.939185][ T36] audit: type=1326 audit(1777747297.518:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939228][ T36] audit: type=1326 audit(1777747297.518:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939269][ T36] audit: type=1326 audit(1777747297.528:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939309][ T36] audit: type=1326 audit(1777747297.528:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939351][ T36] audit: type=1326 audit(1777747297.528:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939394][ T36] audit: type=1326 audit(1777747297.528:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939439][ T36] audit: type=1326 audit(1777747297.528:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939562][ T36] audit: type=1326 audit(1777747297.528:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.939701][ T36] audit: type=1326 audit(1777747297.528:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 531.940995][ T36] audit: type=1326 audit(1777747297.528:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11640 comm="syz.1.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeecdcdd9 code=0x7ffc0000 [ 532.099220][ T5697] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 532.211373][ T4924] usb 3-1: config 127 has an invalid interface number: 189 but max is 0 [ 532.211402][ T4924] usb 3-1: config 127 has no interface number 0 [ 532.232467][ T4924] usb 3-1: New USB device found, idVendor=07b8, idProduct=200c, bcdDevice=81.c7 [ 532.232495][ T4924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.232613][ T4924] usb 3-1: Product: syz [ 532.232628][ T4924] usb 3-1: Manufacturer: syz [ 532.232642][ T4924] usb 3-1: SerialNumber: syz [ 532.234004][ T5697] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 532.234028][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.234046][ T5697] usb 1-1: Product: syz [ 532.234059][ T5697] usb 1-1: Manufacturer: syz [ 532.234072][ T5697] usb 1-1: SerialNumber: syz [ 532.559344][ T5728] ================================================================== [ 532.559358][ T5728] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 532.559391][ T5728] Read of size 8 at addr ffffc9000ebe1008 by task kworker/1:6/5728 [ 532.559405][ T5728] [ 532.559417][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.559440][ T5728] Tainted: [L]=SOFTLOCKUP [ 532.559447][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.559462][ T5728] Workqueue: usb_hub_wq hub_event [ 532.559481][ T5728] Call Trace: [ 532.559488][ T5728] [ 532.559495][ T5728] dump_stack_lvl+0xe8/0x150 [ 532.559513][ T5728] print_address_description+0x55/0x1e0 [ 532.559532][ T5728] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 532.559556][ T5728] print_report+0x58/0x70 [ 532.559572][ T5728] kasan_report+0x117/0x150 [ 532.559593][ T5728] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 532.559616][ T5728] __list_del_entry_valid_or_report+0xb5/0x190 [ 532.559637][ T5728] kcov_remote_start+0x2af/0x710 [ 532.559653][ T5728] hub_event+0x150/0x4f60 [ 532.559672][ T5728] ? __lock_acquire+0x6b5/0x2cf0 [ 532.559690][ T5728] ? look_up_lock_class+0x57/0x110 [ 532.559709][ T5728] ? __lock_acquire+0x6b5/0x2cf0 [ 532.559730][ T5728] ? lock_acquire+0x106/0x350 [ 532.559748][ T5728] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 532.559775][ T5728] ? __pfx_hub_event+0x10/0x10 [ 532.559789][ T5728] ? process_scheduled_works+0xa70/0x1860 [ 532.559808][ T5728] ? process_scheduled_works+0xa70/0x1860 [ 532.559823][ T5728] ? process_scheduled_works+0xa70/0x1860 [ 532.559838][ T5728] process_scheduled_works+0xb5d/0x1860 [ 532.559864][ T5728] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.559883][ T5728] ? assign_work+0x3d5/0x5e0 [ 532.559902][ T5728] worker_thread+0xa53/0xfc0 [ 532.559930][ T5728] kthread+0x388/0x470 [ 532.559954][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 532.559971][ T5728] ? __pfx_kthread+0x10/0x10 [ 532.559995][ T5728] ret_from_fork+0x514/0xb70 [ 532.560013][ T5728] ? __pfx_ret_from_fork+0x10/0x10 [ 532.560028][ T5728] ? __switch_to+0xc79/0x1410 [ 532.560048][ T5728] ? __pfx_kthread+0x10/0x10 [ 532.560065][ T5728] ret_from_fork_asm+0x1a/0x30 [ 532.560088][ T5728] [ 532.560093][ T5728] [ 532.560097][ T5728] The buggy address belongs to a vmalloc virtual mapping [ 532.560111][ T5728] Memory state around the buggy address: [ 532.560119][ T5728] ffffc9000ebe0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 532.560129][ T5728] ffffc9000ebe0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 532.560139][ T5728] >ffffc9000ebe1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 532.560146][ T5728] ^ [ 532.560154][ T5728] ffffc9000ebe1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 532.560163][ T5728] ffffc9000ebe1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 532.560170][ T5728] ================================================================== [ 532.560237][ T5728] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 532.560253][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.560276][ T5728] Tainted: [L]=SOFTLOCKUP [ 532.560282][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.560293][ T5728] Workqueue: usb_hub_wq hub_event [ 532.560313][ T5728] Call Trace: [ 532.560321][ T5728] [ 532.560328][ T5728] vpanic+0x56c/0xa60 [ 532.560352][ T5728] ? __pfx_vpanic+0x10/0x10 [ 532.560371][ T5728] panic+0xc5/0xd0 [ 532.560386][ T5728] ? __pfx_panic+0x10/0x10 [ 532.560402][ T5728] ? preempt_schedule_thunk+0x16/0x30 [ 532.560425][ T5728] ? preempt_schedule_thunk+0x16/0x30 [ 532.560445][ T5728] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 532.560466][ T5728] check_panic_on_warn+0x89/0xb0 [ 532.560487][ T5728] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 532.560508][ T5728] end_report+0x73/0x170 [ 532.560524][ T5728] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 532.560543][ T5728] kasan_report+0x128/0x150 [ 532.560560][ T5728] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 532.560583][ T5728] __list_del_entry_valid_or_report+0xb5/0x190 [ 532.560604][ T5728] kcov_remote_start+0x2af/0x710 [ 532.560621][ T5728] hub_event+0x150/0x4f60 [ 532.560639][ T5728] ? __lock_acquire+0x6b5/0x2cf0 [ 532.560658][ T5728] ? look_up_lock_class+0x57/0x110 [ 532.560677][ T5728] ? __lock_acquire+0x6b5/0x2cf0 [ 532.560701][ T5728] ? lock_acquire+0x106/0x350 [ 532.560722][ T5728] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 532.560739][ T5728] ? __pfx_hub_event+0x10/0x10 [ 532.560761][ T5728] ? process_scheduled_works+0xa70/0x1860 [ 532.560781][ T5728] ? process_scheduled_works+0xa70/0x1860 [ 532.560796][ T5728] ? process_scheduled_works+0xa70/0x1860 [ 532.560811][ T5728] process_scheduled_works+0xb5d/0x1860 [ 532.560835][ T5728] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.560851][ T5728] ? assign_work+0x3d5/0x5e0 [ 532.560868][ T5728] worker_thread+0xa53/0xfc0 [ 532.560898][ T5728] kthread+0x388/0x470 [ 532.560922][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 532.560940][ T5728] ? __pfx_kthread+0x10/0x10 [ 532.560962][ T5728] ret_from_fork+0x514/0xb70 [ 532.560982][ T5728] ? __pfx_ret_from_fork+0x10/0x10 [ 532.561001][ T5728] ? __switch_to+0xc79/0x1410 [ 532.561030][ T5728] ? __pfx_kthread+0x10/0x10 [ 532.561052][ T5728] ret_from_fork_asm+0x1a/0x30 [ 532.561081][ T5728] [ 532.561684][ T5728] Kernel Offset: disabled