last executing test programs: 14.318008252s ago: executing program 3 (id=483): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x2, {0x0, 0x1, 0x1}, 0xff}, 0x18) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x8) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8a000, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000180)=0x7fffffff, 0x86) 10.744246967s ago: executing program 2 (id=494): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8002000000000001, 0xe0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x0, {0x0, 0xf0}, {0x0, 0x2}}], 0x4000) (fail_nth: 2) 9.548669763s ago: executing program 3 (id=498): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a08538b3c83e25038a39942bb09ea54983"], 0x0}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x39) 9.403910205s ago: executing program 2 (id=502): socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfcf3, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80180004801400048008"], 0x3c}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x183000) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x9, 0xa0363159, 0x1, @stepwise={0x4, 0x3, 0x7fffffff, 0x3, 0x3, 0x5}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0b0000cf8a9b33b78886b42f1ac965468768596ee4307e87263640ca57990984e39e77bbf8c174df0c7b7397559e1560d705d7c1da8afed2abfeaf456236ecd36c0160622c7e74872953850f1ef118c9", @ANYRES16=r5, @ANYBLOB="00022bbd7000fddbdf2514000000080007002a020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000019}, 0x0) 9.326414246s ago: executing program 1 (id=503): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept4(r0, &(0x7f0000000180)=@isdn, &(0x7f0000000300)=0x80, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) dup(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000180)=0x1, 0x4) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f00000000c0), 0x5, &(0x7f0000ffe000/0x1000)=nil, 0x3) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/147, 0x93}], 0x1, 0xfc43, 0x1) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.106899912s ago: executing program 4 (id=505): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r7, 0xffffffffffffffff, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r10, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 8.880157522s ago: executing program 2 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000440)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb6b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "3916f8d66cffe8ef8d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 7.468140588s ago: executing program 2 (id=509): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2807}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f00000002c0)='(') sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00*\x00'], 0x40}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) 7.416045303s ago: executing program 1 (id=510): mount(&(0x7f0000000600)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x40000, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x10010) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 7.24784097s ago: executing program 4 (id=511): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x40, 0x5, 0xd0, {0xd0, 0xedb93a364f510e22, "aa9ce193cc6483e39698b83564aa607a6c4fed29f5026975ec015b0b95386684f529f7154c49ab93876d49cc9fc8c316696633f632e02be98b8009206aeee7a712d9328427bda8ed319ae3170f0d620cd3a94b989f9d2f75a72a94160f6186e5d8a0f31691b4d68f3da3eacbec4eab8263e95c73ac27cf6ab1797629fcee14fa8799b23e20cbcf518ede0b6baa47b1e6fc7e4b7611464b15e347246ee7f777954d698247c6e4ea1bc2314ddc81f550bb844634eecd0022e170e0bd30899da8b2bfa7e9090dd8e020b23ecbfee11a"}}, &(0x7f0000000480)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "b5bbaaf254526e452f4be1c6f927f8a6eb496f65e963dba9f8"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x40, 0x7, 0x1d, "0d9e8c0c8c84e7dd3c35567021652866ce554f4c70134466aa2c3e596b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "9d592f"}, &(0x7f0000000600)={0x20, 0x82, 0x2, "26d8"}, &(0x7f0000000640)={0x20, 0x83, 0x1, '0'}, &(0x7f0000000680)={0x20, 0x84, 0x2, "b348"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "2761e7"}}) 6.944547224s ago: executing program 0 (id=515): socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x236401, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) clock_nanosleep(0x1, 0x1, &(0x7f0000000240), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0xeda40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000017000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x201, 0x541441) ioctl$FE_READ_SIGNAL_STRENGTH(r5, 0x80026f47, &(0x7f0000000040)) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)=@tcp, 0x3}, 0x20) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYBLOB="08002dbd7000fbdbdf257a0000006600fa006f650d2a2b88ce3cf2f085169cef8ee85c80a9947e028b656f956fa860c118ad192a9b63eea263237557ce2dc219d2f17398f2899ac1bebe09cca9c9c0a457486786e7c99611e88a8a849a0d73c6686e8f87060d6fb700000000000000007a57254347d222780c7bb914f3acd300002a00fc001bcc809f9a219bfa0651851ed3e045c9f3d464a80c5b60e053403da1569fe537563991f3c51900001f00fa0077cabffc6e9a1eb7c682fea5ab34ae9b19"], 0xc8}, 0x1, 0x0, 0x0, 0x4004}, 0x1) r6 = syz_usb_connect(0x4, 0x36, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') 6.899027601s ago: executing program 0 (id=516): socket$igmp6(0xa, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) (fail_nth: 2) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x20) poll(0x0, 0x0, 0x8000007) 5.593064517s ago: executing program 3 (id=517): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115c00000000008510000002000000850000005600000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) r1 = syz_open_dev$evdev(&(0x7f0000002000), 0x2, 0x20441) syz_usb_disconnect(r1) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000086e051c010000000000010902"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000002000000ff0f00000708ae4ab9f5918426aa78fd4457ef93b7fd081295e0b5f207ba84f42c1426810400000000000000454432dc90c57d0e82bcbca4004a297d66"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1f00000004000000e709000026bf000008100400", @ANYRES32, @ANYBLOB="3c14f85d01110000000000006bdd000000000000763eb27fee12ad6ca20c865f230a1fb7fa39c0ff47728a8b124ad5b04d011c24a5022fc449a9079a86ea785476f426c07e748a9f4afc3d0601970e7a73066aed8c64e7d583fb201b3b43168f4ae8ceab2b9b8de54bda62712e897a059cfda48c33f67277806e1c9ffdc8f9b65c8ffec4ca2f3ccb9762e0dabed8f3631ea7bc958a08a053c384291a732af3c3a4e9d0fb79b3eca843148451fa24ec709c671dfeef839d59de52fae4f2df9f4299727d4c1bfa12cb04adc00915", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000014}) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f0000000180)={0x300000000000000, 0x0, 0x4, 0x2, 0x8}) r11 = getpid() kcmp$KCMP_EPOLL_TFD(r11, r11, 0x7, r7, &(0x7f0000000040)={r6, r5, 0x3}) 4.888630639s ago: executing program 1 (id=518): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) 4.887007132s ago: executing program 0 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000202050000000000000000000a0000064400028001000000000000002800000008000340000100002c000180140003002001000000000000000000000000000014000400ff010000000000000000000000000001a1aa8838447d9cdd06eaa893aa928bd20004"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r1, &(0x7f0000003e40)=@random={'security.', 'syztnl1\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000001440)='map_files\x00') lseek(r2, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) clock_settime(0x0, &(0x7f00000000c0)={0x7, 0xffffffff000}) r4 = dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000000000000010000"], 0x18}, 0x40c0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000004c0)={0x0, {{0xa, 0x4e23, 0x4, @mcast2, 0x53d}}, 0x1}, 0x90) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd4, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) getdents(r2, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000)="fdf9c3e2cdc9a3d13012426ecf487bdbc6d74b5d7dd16dbcf5e5e8930b43dc1c3d23bc82153bee5abfb9eb3371f5dd15a43909e7e2b22f38ba6552c14f65af9f4cb43d38deff", &(0x7f0000000080)=@udp=r2}, 0x20) 4.822522243s ago: executing program 0 (id=520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000140)={0x1c, r3, 0x8808916c5f45b02d, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}}, 0x4068010) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x481, 0x0, 0xf}]}) 4.774525776s ago: executing program 0 (id=521): socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r1) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0x12, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.74001168s ago: executing program 1 (id=522): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) (fail_nth: 2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) 3.616346218s ago: executing program 1 (id=523): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) (fail_nth: 2) 3.596109946s ago: executing program 4 (id=524): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x10302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, 0x0, 0x4800) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048880}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x20048091}, 0xc000) 3.591185601s ago: executing program 2 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000f0000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe032000", @ANYRES8, @ANYRES32=r3], 0x58) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.364123816s ago: executing program 1 (id=526): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000980)='z', 0x1}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200240, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x7, 0x1, 0x8, 0x7, 0xb, 0x4}, 0x1c) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100000000000000000000008500000017000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x10009, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.442399971s ago: executing program 4 (id=527): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) (fail_nth: 2) read$FUSE(r3, &(0x7f0000002f80)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, 0x0) 2.267230847s ago: executing program 4 (id=528): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x7, 0x2, @SEQ_NOTEON=@note=0x33, 0x0, 0x5, 0x8a}) 2.095317618s ago: executing program 4 (id=529): mount(&(0x7f0000000600)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x40000, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x10010) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 1.892656376s ago: executing program 3 (id=530): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x600280) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000060000000800000000", @ANYRES32, @ANYRES32=0x0], 0x50) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000000c0)={0x12, &(0x7f0000000100)=[{0xa, '\x00', @st={0x4, [{0x1, @uvalue=0x41}, {0x2, @svalue=0x2}, {0x3, @svalue=0x2}, {0x3, @uvalue=0x5}]}, 0xb}, {0x0, '\x00', @buffer={"4d800123b76282ce3a6c71f9212fc14cb4c89428c0067f9ac12098ee22880816", 0x20}, 0x7}, {0x4, '\x00', @data=0x4}]}) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) read$FUSE(r3, &(0x7f0000002f80)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, 0x0) 1.660281928s ago: executing program 2 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xb1, &(0x7f0000000440)) (async) io_setup(0xb1, &(0x7f0000000440)=0x0) eventfd(0x5) (async) r2 = eventfd(0x5) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x6a, r0, &(0x7f0000000480)="bdfd8c", 0x3, 0x7fffffffffffffff, 0x0, 0x1, r2}]) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2011040000000458fff78195848df9e7"], 0x0, 0x0, 0x0, 0x0}, 0x0) 775.324464ms ago: executing program 0 (id=532): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r0, 0x51a5b2d5}, &(0x7f00000000c0)=0x8) (async) r2 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x7, 0x2000) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0xf) (async) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000140)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x200182, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000001c0)=0x3) (async) r4 = socket$inet(0x2, 0x800, 0x9) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) (async) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000240)={'security\x00', 0x0, [0x8c, 0x2, 0x3000000, 0x5ca9, 0x9]}, &(0x7f00000002c0)=0x54) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x8001, 0x6c}}, './file0\x00'}) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f0000000340), 0x4) (async) sendmmsg$inet_sctp(r5, &(0x7f0000004680)=[{&(0x7f0000000380)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000003c0)="14a6ca90fca50fa0b32a14a61724ad82d0e836cdc993e94b36ce", 0x1a}, {&(0x7f0000000400)="df9642970ff52ded7af68e64edbb618b560a98c94cd4bd153470dcacebe8befc60c2637613ae255411379f70ba477e6ad9d19ffe542a9935c5cad21aed7cdf7519d04cacaca8f6d0cb366b83484ba58d60a2660125a59c0b27661c98ea1631ddb60ce123e0bf2aeaca7d1767f7c9110b088caf86b59575cd8e80db1e5798a705c3769335cf85611e8820c7258c1466cf6db42ae2f0d8ae1c7e7874ea3b71a0a462b6536184f1551f3ffc81f7bae8c0aaea64fb3decdf93e413b1fe4a205476d2338300155cd0ab4d20bd2528252d8a7a1487f5d05e47", 0xd6}, {&(0x7f0000000500)}, {&(0x7f0000000540)="e7879ff3a0e1e1be180d1098dd4b2547611cd9c0c045237038af77e6a43e2840b1", 0x21}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="aa78fe52749763b29acadb8a8654a5332fb0f888e2c113475853eb11ca04176bbd3552ee1630cbd4e9a30281546f36496fd40f44b0a1f03d32610d0e3da09458923fd2f814d9fd63c49a86a814291eb9b828f4ab44558ee883b29921557cd114412ae9f0e24f09ebda662ad1a5cad6abaec34492cce8b6c5035ead79b30acf977ad6aab2952a85f2e89830e30348ab1a07132d25f3d191d24659b639cf09dab37ebcb5dfa03a", 0xa6}, {&(0x7f0000001640)="0f23efeaa282753b8beb159bfc689c261fb1069dfc72560183bcc35f47a63eaff18898d594bef9cc0a33e6873ed5808b64483d2d751263fd5e1a9ed4d9b4ed56413dc6d9c20812842b574525beadda5cc485c5c5f6d395221a5df0383aea7aa8e43772beacb2ff8d51147fa8666c918bb0d83b", 0x73}, {&(0x7f00000016c0)="06262a3bc9f97cf48579a98bc308768da713f2408f60097574a2f01116baf0b851a18195b5e24b622fd16fa1729e886bbec8c62b2380a87680e9189bb9ffe66f3b97d443a16ff4c341c1f4f6d56ef70a8cacbed54f101fbec12470400e99c0ec4d7f70dcdf1c50c3cd8162516368c2a992448132de5fd9624491e577625c86a2606d670bc1353b793528a7f357bf4f1a2c02fa122f5e1ec0c50676e6b32b3893eee0895ecc854fec2b0794a29ae598e25c725a6f5eda771effaf1de7b97481392313995124ab02d481f78d885651d0310c9a1ffa4b35", 0xd6}], 0x8, &(0x7f0000001840)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x8200, 0xffffffff, 0x1, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @authinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x7fff, 0x8005, 0xa, 0x1, r0}}, @sndrcv={0x30, 0x84, 0x1, {0xa, 0x9ba0, 0x8004, 0x1, 0x19f4, 0xe, 0xef, 0x3, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0xf8, 0x980}, {&(0x7f0000001940)=@in6={0xa, 0x4e20, 0x4, @private0, 0x6}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000001980)="7d02e341b1241b2bb43c15ef89b50d55a5b52f5c331d0d058860690797e001ea011f9b403641bf45f53cd51adaadc757602b83afc84ffe9b85c611459a52f7a75e8edfe1b4be2bf578706adf50c8a4f7aeb4e63b2cbb185550ae76274ff13faadfde12be529277339bc9993ea4f32cb8c2616839d975628d68aeae41f4b1d5bc1389d4af6ceba33852eba92b", 0x8c}, {&(0x7f0000001a40)="f0b91e861f83f47e7501d33e10212572779b6dbfbd664b46c0062876e7c1230079ece4ab40c9275956a25708b5c51f6f0f37682e75ba028e0cf5f4509698763eac843621aaddb74497d7e33c5f64d00110176fbce301fd3afaef2edd263f7ad18d72fbb6d72fcd048244da04e5f2dd983740de1e0f1a2c3bfc133d2a2e0b6b3fe14c6a5063b28e04387c78099652db1976174e4773de66fb6cdeeba5faec0e435d71a48009a74203f4806f72fec1ce0487a77a5886aada7f5db9458c18bb800523dff27dbf6b128ab145649b7274f3638a8f901159969c19f2cd6fae264537abb32b19022657a3b722366f4a90cb2d4a7e89f36e0358d3c097f83a38dd49b16de127b9b1a7c4c566ac070c1cc1ca7cdccf7ff3c885747afd87ad7932a8b8f67093908db41e4d12a83ad9b86821d64c70507e275e060382b653188d0a7cc4a870f0d161a8c2d3cd95ccdbc452f55fc239899c81a0b9381a7d2e5b401f2a601dbfbcd04684f3ab1a9df6df4a3e28ebe29cde328c9aa1678cf4680680f69991f89e72bda2a6e00ec618bbd807e48f55fc00bdb156c672f2681b85450a6e3925c46a1d743289198a58adb3ca1b1384117a9acfd7b0fe0a6bba921bb8a46d59c08a18d8180ad6b07395cefec5c4e0b849030d8326c3332fe4863e3fed5a5425288148083fbfed4476a3a1a253367646064622acd3c759386816e8ad5f0b8a253d9384aaaa0ca33652576e465e0a7fd22f4158cc70069b6565efbbdf1c71ec6d8a6f738a84652ef4408cd04e3623a18299f7a04f72a34b07b1c545440372f60c15030432b2e760377c65101f02c7cffe2e99658379a51014ad7606e8b885f0741fedb2f2a822a023aeb7907f029a51404fd2955a2a9003ea3ef2dba31e5531004ceb5c88c2decd63c9c0e397bf0e35bcb90007d5daec1860e29cd30eb0289e7c0693a884f4d201a42936fff3688269d30926d4818d30168b16c5529ce1a74152ffe3070dcb8d872ed86f3dd6f6bd895f3759c159b73619f1dcaf92e23bf0f3ec2388e459ed7626e6bde8bfbab7f6f1a60141f860578732cbab710f808ef83162544aa4935054d0017b6b0a691cd1094cf4421a2b2503934d11d2b4288bea233a53356538beedc60678efa00043b8e46060eef9031b95bec4915a7f9dbee449e7b944abcc6974caa3ab68e77cb44e03c2395f818d2620eab90a3cfd09593ba419b09c7b8c3d2b4dd5da14220df4d547bbf0fcbd31e571a8149eab3e3ef834420936c06625e7dfaf51fde72cb45c8677084cbd3cdab021e4d0e68014fb24c98bfa6529f1d83783aeeb2d7769afd3021dfd3f401d4506948b39bea7645b3388adc9f1c9e2a5c81224c1a6b3bb32e720d02c359bc1399a652fefbaccd74357ec561a57d5cb7ffb5d1628b8f56a6aea207f48e8244696b0b4e9184fd96e05c4262f166a6b5f6c93e0a0bd235824d99ca17c43ddef1a7b434f5e3cbc0d86c30e892bcad60c1b3236fcb306e3e0d07aec6ca26c3e60b88bfbf21daa8db62e8d5b97de0ce2a9f739c209da346732fcd2d3342a502ddbf17e94c2ad32b9941547883e744155be0a2b9ac9573c1079825c14d80ed45a0968eb93d991b2c495f33f7fe042d22a638641971466e8a16efa75629ab6dc01d710d8c933e66016432b302752938c0b51f0eec211586036f69f16c2f3c8b994caac6b7e47975b6234602135c4763deaf132c668a6b839f04f2667f584c8fd9c86230c35cbfc62b38157da8819201d189124841767c8f9b09d6497528da90f1b5eaba66b14bdf8c48b031a92889c86dc91a83a68b158124f4eccd6872efa393c3feded9da96cb68376f40581ddf47b26e4fce509cb7d37acfae47c8097e863239865d2694fed8fb675c30c6adf58c6f523baa60222d9da934c71e6844d3edf4eda094ec0f5d586a577b38bca04977f9bd26e42d265c4289dc4fd3219928b688470ea2f2e2e17680fc4a10e4737136109c04126d95adf09a2659637f86440a2c02466a2d756d9f742200bb85aac816f21aca4794d93d691c9febfe07f2b15cdec8ddf160eacca639d3400f851660d78550f57ea96cb1d726f854255f67c7f6739a823183710bb56e52f8d1f9b388dffbd02ac0bebe41df94ae036b361ff216ddb546cd5a6fc38ae79c4988861dd870e380d37e22a1900eb702d3bd61db085dbc6fad6aecff4ea17b9b4aaff5f35f8ec021fe4b5ffc16b126a3ea9dc25520a2917e81e974a39ba3804843d3b69d6b24039ef1761308078a58420e0ad2cea2841ea3bb96b5aeb3a28b30251360db464a94bae479c2f61b2f9deca514f2c4747746fb54db29231a1803624870bbc455c62759fa3202be235fb49df3e8d7beaa352c2c24b3d19f6056dc0d0f3f2ced670224cb85e29acb28a40293ff2dfed84fcaf4b122a383cfac58f25df46471ef46c6b8bf6b97ae065e9dadc1f9014d15f3b6781befbebc3287de10863c4c136394ea9cbc0e9ba2d9df95dc5e0a4f0b952148ed7cddb753ed145343d76115d06f48c2dbecb422ee6fe5d6ea519db5b7c29971bd9e578b52ac175621fd14f709a94ee70cdf9c13f55882edb67e01ba08427329472262b1981fb241f94c11931f5456f23bb3c6c35fe13326ad5681b90c812e6ce9ee4968376ed783c31873b7235c97005d39376221cb3fe89777fd9d96507eea0e8389be5469c183570d3cfd32c21c36e596c9a577e0f694d7a1aa108a3a5a880fada720c701972eb710ceca86dd4b198757d684e5ff2d198b932b7773f0db6bffd55061e1e813830b8dccbbde385049781b955fd9d0023635422125fd9a95cf0dc7625e7a8f8cef89f7d2ed74be5c14427c2e4d445a3321f479f9abd2577dc0fcd3263c11006953c7dd099fe9c3bc1353b7b47290914620f33fc5690881cc278ba9ee251dbb162faa2a5122dc289a1ed2b30cf0f804734e5e7612645ed19fb2818f011f94f11df140af5ffb6d81127ef971f3117fe9ef56e00ca757a3017b34a782811123236c1ac2f6ef17d6e50211edbd6c7c09d76d9e96a6c5e5823baa53600aa42461707cbb73d217f380e5df3f1c0cced9aa6b2ae827419aff425374adb567703e49038486dd1b8560bde56e5e170123ca28de8bff60c51ba199295159bd42ee8c33a991a849b0b68c42ca3b6026d45f23580d17a17fa0a2bf8052bfa744ccf6ce72f3e805988dc2ecea4360bd2907f9651cadef318d8dd0ba9c2ef3784077300fdcb4a10f2f03a916994969a28c72b5b0f749b47be7c70af868398eb0d4866b38323cea487ef79447584f5874d6e7318c2b6c48b3e1933bae48dfdf123ab261c9337fe293c48ac235d7f3cc2c6e802ab3f97486ea4f4afe5b908eda0febd739570e944d332e511277b6fbc457116ba57f7118fa567c50bca6ea6066bfa04548bf18212d8f9bab9ddf8ed122b7230c1e997ce45e2329858c1036041f16617ece66e96cbd242448e4ba53a955a0617c2ad02f7c2a31ed6ed491f1ec42484c60695b2900525f07e48c4efe2039be92f4a5104773823910474e5cecc1a449e3a092a39d19807eaeac9dd5819c89a53e0e726eaf7988cfb7329e4d1744db706ad028c076b3cc96425c486787d7388ac016fc25fef9ce3c925a7b2d1764b55977dcd4a7990acccff9b472d930c88306cc79d6351834732f9aa01d81d1fe1e563c3945bc0bb85bc2abc480b06c94f4219e690fb6236691e70dce26a48d45b4b90f84cc3bc452c84ec758eae81f5ca22dc7a059c9e854b53062f3ba2b0983135000ff80c32a87389480dd8388cf848f3962ad4630b39b6f8c05ae1ffca11e83a436341ba38a9ae5aed27970f9a15873189864903e40d8b3ad20cb9097bbdeee0d32f28d5df38b96fd38cc76bb76f3fe3005a8dc7322869ef905ddda1e7aa873a9b937191680b42f061b284acf42bc00b056b27a3d1ec801a7c049abe039064a3f0cae3ccb7233f065eb4ca35c327592f2718e9a519f02a33d6b5dfdd190e930f5cdbe933fcf90a217fd58e6cde752d4dc3dd7003ca4a0bc3c609c73f33bf06fc7d3c3385939004a0bad5d9d07d542bb375e35ae6259eae9d9508c7f1cdf600d3498de68ec6ad465c0eab6d4cfedf6e8313bc535b37578ceb005c2515311ae0d86b422d88c06d2ad3427f73b127a61f7fa47327bbc3f634b2a37bc7bcc689e96c9fbd47679a0a63f3416d7e3e7e07d4af23450e80518118524f9d0c511887b686eefc1bb9ec28e0be1fe434357938025ff68e8620e76edd2135de563512bdda39e854e57f49450162a9493bd58efad5fa6a5c7c095faeee7488ba74880c351c2722f15196399cbec35f0a4f40f998eb6abbb377e6c47ac75ddc4cfde953884cdef52ead9c351f151ab11e79cec01ca97c3ea72deeaa351c9b26f3ba5c38f8bacc87cc07a9d56352f5ae90e72058fb5959dc64631e7c2c1cff14e4b9ab44cb0b316078706251616813c35a8e406e407eadd4b94f457e63901081b65e3fc349350601e107cdece4238c86488ab821ba4a4d9f09a67f0c079f237e435891d0088b834338cfe87648b35f6eeb87cd8515cc035230b8a99e0428d4cf24d7c712da5265a86f09cac67d0604c8dd4b8d46e3aa9200f498ba3f387ce6ee5b86e5cdab6e026fef9ab8c95af8262e0d17e32d5bb17164bdb8f1b9003ec2bd8b4906e77634195dac16b5b30d09dc9c20ca0f9e9466a6ad6cf536a3c5d691d01913cbfde779be9ae388571e7de99aeaa4b7b558926b4c3883f5e0c49f0ea5788fbf61794856440fb03895faed257e4eaba0ae87f803bf37af70d996567dcefa484feab0bc9f4924c0301a41bb327bb4de197cd39dfa33494a1d89527b943ec8a238a84e0250db89beec4c3f888510e510223cb5f096f9e372e4d118f7a8ea964d87bd7827b6c889d38e390f10a75af95714d6e6fbbc01679e1ff58725e6496735dd55c386e9159038be7f56e460377f3d70d5a6815d6521fccb412252680760edf27da727bb16d52e7c5827690cbf66620cad8bed2a127697ab5daffd0d9ca2f5cade6d17c7512eab2553fb1cf47f2f3bc9c80dbb26575e6c2d6836cb605879a872e296541b55a2c926e25f8484f675054e8d0400476f4c200370c6fc9f1e7941d9ca7233cb54a11e033f26c601b8efb3644d5b4e43c0a18bb99844e961ae38c233ace4a42026b18846a975541addd8498949839b275afc9ca6f59409190fc7b1c76c041f7cf061f7e652a96896465d4271f8c4f77e8e83b6ad97825c24ac03a06c5b3570bc1ec5eb1cba356aed577b7d6ee0b9d181932decf10a652b10bc3fb30358a1f12c1d7ad7007057f038a9a3f6754c964234bdcfe07d3ce2e7f4e2eedd7d331fdb875f4628c9b72546dfef4feba51437f2745b1f7bad885fc78d8a03bef4dcb617716e4b468022a6635c7b8829c350f3391a1981e755c35724f0c4a30602dca26020cec76837f3e63dcf2836c536b8c641e71b493a83651adb6a7251fcea1c387203b75fe6d9cdcabe22cd2c9024072524a42f115910bd406488bf4338b94bc48f68a16db8406ca64dc5fece02d1d1414a4acd92a6beea6f4ce6eaf6ec148631fc59c13e85f3c5737da303b37f661ffe706cb57357d8abf1b80d0ed51ca3ea411b3c8d3ebc4ca884a8da7258a34ff4543830f3cd36c4b211b239e79fca681e9c581ba5535d0733c698a6c49a582fd6f69b247667976152ecec2f014cdb9ec44ee61dbd7cbb2dbcc568f7daf2101a3223b6d46bd12bfae2afce31753dd7a81e3beebafe2eadb5bc99072186e21795dad77219d80c6a3b08", 0x1000}], 0x2, &(0x7f0000002a80)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x7ff, 0x800a, 0x4, 0x7, 0x7, 0x6, 0x5, r0}}, @authinfo={0x18, 0x84, 0x6, {0xffff}}], 0x48, 0x4008000}, {&(0x7f0000002b00)=@in6={0xa, 0x4e21, 0x1, @remote, 0x5}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000002b40)="ed97b8891d6ef3425bef45791987796ca6e241f5b9c2129c1d458d49d953cac50ed37796ff71f370fdc23a6aff3984dcde19f8549091e65612358b503398745fe17c14e03a072b9012312814ebb9c4b31841fa539b3cdfa76e7562c534f5728c866e4eea0aba82338c44bdd463bccc74a1742a53af18e915fb7a5e6c4fa2e0d49a56ede62f4c9d25acf2abb761f0bd81e7eb20b71be8a9c46139e66f36cc0490", 0xa0}, {&(0x7f0000002c00)="db92f8803750bb27b114c90b", 0xc}], 0x2, 0x0, 0x0, 0x20000000}, {&(0x7f0000002c80)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000004100)=[{&(0x7f0000002cc0)="cea0253e941cbb3d7ad154de7639f84ff3725cb19d90c93b608e7bd1d0c0ce2ceaec2753e2ee864662ca3906f6ba2ffa0330caf887befee9a32627b9af2e458d06b4082fdc04ddf9acaa", 0x4a}, {&(0x7f0000002d40)="271b1ea3f9d9669457da61b28b8b30cb8cbb0fc078e4dfc9ae69946efdf8f9d767e434d663fab3b4367b852f8fa12549965a65fade57e42515075d927ee342f2883afe4f87ed1686fe46af46e71386f19e35bfc619e0e35aeddc82c4a5622700dd46f9dbc2c89108a9e8a7157ff85ab35dc0d2d757f35b6d9ec952c088d2d3a2d11ba0f8e28585c5775ac953ba0b62d545f2537db48f6d5eb969bc66d2f07bf72a115fc77f2782832c5aebfffae7c917d9b88c41b18b778c5a68b16bb2595031386576fa9dd29a7b6bc4d978688c530c23eeb5e8fa94e294b525a313d3a854dd3afcd674789aec04486d", 0xea}, {&(0x7f0000002e40)="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", 0x1000}, {&(0x7f0000003e40)="bf279a5edf69e3a3c178ec193522083cb1be3c2d2863191a6a0b3407edd3c2fc569f32822316ce71e2a421404a8450ecb8b7bf21bac2945f03febc9885092009bd8b7c6733af748195a518fd87667a42ff0a1f751cad3312495429e29c751381ac9e128199f5199719c4fd2d75d8215001ad5be6dc521c70ab24e69f3b37aed8c6e467d696e0e75b4bec37c022ef6f38502aec40658a4e6f77a3030baea7b24db53151b6cc7c23c3b8b5d4e0c2f80b3f6d4c1a739a", 0xb5}, {&(0x7f0000003f00)="6e50fa67eb9dfe123068d11dee1f03725187c7d27a2fec7197ba7880b8a1625c866492ae4758aa494c96e84a3f6788127e37f7996862f05ced9180a87ba53a14111c73445fc42948e704ceacd240864136f99f9ddc1e35c93e01933b6f5950d11c57c9c1ad79ac2641acef2d8906533e95e00b028b8c592e18adab4d73cb1ea761e56623c9d43e25bdf83cc8f15d4a65cb6b9e23b4b5920f4a135e9d9a7a4766e6137c21226efa6b84ee7bc476b7448f89", 0xb1}, {&(0x7f0000003fc0)="e67fa768aa11db8071b0328f8e7f65296ad37b29dbc7de1db44f06613a5f5a3b24204604", 0x24}, {&(0x7f0000004000)="716fa36cb22eea4735bcadb1710c4d7b3457d1ca9ac1448dd7976a1e65b5dad98067d5f2a577876d9b2a5f275f62a590f2958794cdf226ffa81aa8e6c34cb8970a35e6fefa1191c88e4856af4bc4266fa67654dd3ef823c7ef1dbaa7ea47d6d5f366a7d425707156b5efb349071424ad571700597b6e0f2c678ed1ec43ccb9b4ce8fe34279f7e35d0aba493ca1b3679c438e193953f663fdbc09afda8bc0a4c9d1bd1b28f9cc6b90451e1e1296e5940639095d3d500b8a72d4b8aad7caa0f91bdfdb97aca3b8ae8f20", 0xc9}], 0x7, &(0x7f0000004180)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0x100, 0xfff8, 0x2, 0x7fff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x80}}, @init={0x18, 0x84, 0x0, {0x1, 0x7, 0x8, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x79c2, 0x2c, 0x8002, 0x1, 0x40, 0x7a, 0x7, 0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1c}}, @sndinfo={0x20, 0x84, 0x2, {0x8694, 0x8202, 0x3, 0xa6}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0xf8, 0x4004840}, {&(0x7f0000004280)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004400)=[{&(0x7f00000042c0)="e854e4f075bfb888114514b3f82622a9ee0939452ea730c305f8a70f7b0028663c81de44724f6c7fced198e2", 0x2c}, {&(0x7f0000004300)="6ea6ee1f61d8e39d574b6c3e68b7a952ca20e19757503960a894da2bf051ec5819eea5a97acd678fa6c1f7a551d694abb42a07cab4e783fa9bd38884ece07d2b1e62dbf62aae7b75fe1bac95d6547517eef55b7769490b15d4670a3e96a2749ef7f03850271a6d781a100da8f41397dcdf48cd23a811fb8bd09f1fb7ef768bf0ebdb40bd4c13329f4c14ea5c25cd5b057125fdd157cf70342e7e0d982e299c4df1e5bea6fc5f85996ed3c6e0b535bd37f619f577632fe21448e07d78d55a555de5202ed0342fa4eecb1091c0eb512f", 0xcf}], 0x2, &(0x7f0000004440)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @init={0x18, 0x84, 0x0, {0x535, 0x100, 0x8, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8df}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x0, 0x2, 0x8, r0}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0xfff7, 0x0, 0xc3ae, 0x1, 0xac, 0x0, 0x8001, r1}}], 0xd8, 0x4081}, {&(0x7f0000004540)=@in6={0xa, 0x4e20, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000045c0)=[{&(0x7f0000004580)="c822d7b52ce53308b624f21c7471dddf0d46bc46ac4b804d", 0x18}], 0x1, &(0x7f0000004600)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x3, 0x0, 0xffff, r0}}, @authinfo={0x18, 0x84, 0x6, {0xb91b}}, @init={0x18, 0x84, 0x0, {0x6c2, 0x5, 0x4, 0x6}}], 0x50, 0x840}], 0x6, 0x4000) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x10) socket$key(0xf, 0x3, 0x2) (async) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000004800)={0xb, {0x8, 0x4, 0x9, 0x3, 0x6, 0xffff2bf4}}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000004840)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000004880), 0x7fffffff, 0x2) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f00000048c0)=0x2037) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmmsg$inet(r3, &(0x7f0000004c40)=[{{&(0x7f0000004900)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000049c0)=[{&(0x7f0000004940)="43c13084fc414ca821e5b12a016efb1e263db1e6fc7d9db949d9ef64f8896981cd401585655d19cd608d3788e0fc69f6e8e34240b3ef52ef290fb1f3fa136d929d631627", 0x44}], 0x1, &(0x7f0000004a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}], 0x30}}, {{&(0x7f0000004a40)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004b80)=[{&(0x7f0000004a80)="33c450b2f08011700ffdaf8dc3e918fd49f30651dfebee92e5d9ee56596770d83bb57515075bb017548d1da8dd7c02849fed48326b57ecb5ccde74e447dda336efc12a9657d5da325c8d932ad7ccc4850721dde6dfb8b50438b9b50a5938e08c95e794092c5207807c1c4e651f7a26d7c1bcb96a64276696ff706a323410a7b6189867bcd0d0221706305d8647cdf2914249e150bed2dfaf99e7d723500c0761f13c6c9674c7281db39c10d09193ddc1581055cb79a4fa792451e0b181ca5a26f4b2323838", 0xc5}], 0x1, &(0x7f0000004bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x60}}], 0x2, 0x20000800) (async) r8 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000004cc0)={'veth0_vlan\x00'}) r9 = semget$private(0x0, 0x0, 0x2) semctl$GETZCNT(r9, 0x4, 0xf, &(0x7f0000004d00)=""/7) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000004d40), 0x200000) close_range(r10, r6, 0x0) 308.18783ms ago: executing program 3 (id=533): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000603050000000000000002000000003402000000"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r1 = semget(0x1, 0x1, 0x39c) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x1}, 0x20) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x1e, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000200)={{r4, r5+10000000}, {0x77359400}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') lseek(r6, 0x1000000, 0x0) 0s ago: executing program 3 (id=534): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x40, 0x5, 0xd0, {0xd0, 0xedb93a364f510e22, "aa9ce193cc6483e39698b83564aa607a6c4fed29f5026975ec015b0b95386684f529f7154c49ab93876d49cc9fc8c316696633f632e02be98b8009206aeee7a712d9328427bda8ed319ae3170f0d620cd3a94b989f9d2f75a72a94160f6186e5d8a0f31691b4d68f3da3eacbec4eab8263e95c73ac27cf6ab1797629fcee14fa8799b23e20cbcf518ede0b6baa47b1e6fc7e4b7611464b15e347246ee7f777954d698247c6e4ea1bc2314ddc81f550bb844634eecd0022e170e0bd30899da8b2bfa7e9090dd8e020b23ecbfee11a"}}, &(0x7f0000000480)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "b5bbaaf254526e452f4be1c6f927f8a6eb496f65e963dba9f8"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x40, 0x7, 0x1d, "0d9e8c0c8c84e7dd3c35567021652866ce554f4c70134466aa2c3e596b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "9d592f"}, &(0x7f0000000600)={0x20, 0x82, 0x2, "26d8"}, &(0x7f0000000640)={0x20, 0x83, 0x1, '0'}, &(0x7f0000000680)={0x20, 0x84, 0x2, "b348"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "2761e7"}}) kernel console output (not intermixed with test programs): r on dev loop5, logical block 0, async page read [ 170.761162][ T6424] Dev loop5: unable to read RDB block 0 [ 170.800098][ T6424] loop5: unable to read partition table [ 170.800312][ T6424] loop5: partition table beyond EOD, truncated [ 170.800956][ T6424] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 170.899240][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 170.906463][ T821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 170.923174][ T821] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 170.923199][ T821] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 170.923215][ T821] usb 1-1: Product: syz [ 170.923226][ T821] usb 1-1: Manufacturer: syz [ 170.923237][ T821] usb 1-1: SerialNumber: syz [ 171.181253][ T821] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 171.181275][ T821] usb 1-1: Handspring Visor / Palm OS: port 12, is for unknown use [ 171.181292][ T821] usb 1-1: Handspring Visor / Palm OS: port 132, is for unknown use [ 171.181307][ T821] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 171.374763][ T821] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 171.374836][ T821] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 171.717684][ T6463] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 171.717710][ T6463] netlink: 96 bytes leftover after parsing attributes in process `syz.1.193'. [ 171.717724][ T6463] netlink: 1 bytes leftover after parsing attributes in process `syz.1.193'. [ 171.717779][ T6463] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 172.518869][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 172.519055][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 172.521194][ T5607] Bluetooth: hci2: hardware error 0x00 [ 172.531083][ T821] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 172.609164][ T821] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 172.735704][ T821] usb 1-1: USB disconnect, device number 9 [ 172.770993][ T6466] tmpfs: Bad value for 'mpol' [ 172.868004][ T821] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 172.908353][ T821] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 172.908655][ T37] audit: type=1326 audit(1778395706.121:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6468 comm="syz.3.196" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cf669cdd9 code=0x0 [ 172.910907][ T821] visor 1-1:1.0: device disconnected [ 175.424829][ T6490] FAULT_INJECTION: forcing a failure. [ 175.424829][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.424855][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.424872][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.424880][ T6490] Call Trace: [ 175.424887][ T6490] [ 175.424897][ T6490] dump_stack_lvl+0xe8/0x150 [ 175.424923][ T6490] should_fail_ex+0x46b/0x600 [ 175.424955][ T6490] _copy_from_user+0x2d/0xb0 [ 175.424974][ T6490] kstrtouint_from_user+0xd6/0x180 [ 175.424995][ T6490] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 175.425030][ T6490] proc_fail_nth_write+0x8e/0x210 [ 175.425054][ T6490] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.425081][ T6490] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.425106][ T6490] vfs_write+0x2a3/0xba0 [ 175.425132][ T6490] ? __pfx_vfs_write+0x10/0x10 [ 175.425152][ T6490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.425173][ T6490] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.425193][ T6490] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 175.425212][ T6490] ? mutex_lock_nested+0x152/0x1d0 [ 175.425235][ T6490] ? fdget_pos+0x252/0x320 [ 175.425257][ T6490] ksys_write+0x156/0x270 [ 175.425277][ T6490] ? __pfx_ksys_write+0x10/0x10 [ 175.425301][ T6490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.425318][ T6490] do_syscall_64+0x15f/0xf80 [ 175.425336][ T6490] ? trace_irq_disable+0x3b/0x140 [ 175.425353][ T6490] ? clear_bhb_loop+0x40/0x90 [ 175.425374][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.425390][ T6490] RIP: 0033:0x7f363507d60e [ 175.425407][ T6490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.425421][ T6490] RSP: 002b:00007f36332cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.425439][ T6490] RAX: ffffffffffffffda RBX: 00007f36332cc6c0 RCX: 00007f363507d60e [ 175.425452][ T6490] RDX: 0000000000000001 RSI: 00007f36332cc0a0 RDI: 0000000000000006 [ 175.425461][ T6490] RBP: 00007f36332cc090 R08: 0000000000000000 R09: 0000000000000000 [ 175.425471][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.425481][ T6490] R13: 00007f3635336218 R14: 00007f3635336180 R15: 00007ffdf0b33d98 [ 175.425516][ T6490] [ 175.862205][ T6495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.597819][ T6509] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 176.597881][ T6509] netlink: 96 bytes leftover after parsing attributes in process `syz.1.206'. [ 176.597925][ T6509] netlink: 1 bytes leftover after parsing attributes in process `syz.1.206'. [ 176.597958][ T6509] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 177.583723][ T6513] tmpfs: Bad value for 'mpol' [ 177.794336][ T5614] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.230263][ T37] audit: type=1326 audit(1778395711.441:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.4.209" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed9f4fcdd9 code=0x0 [ 178.249064][ T5607] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 178.254319][ T5614] usb 1-1: Using ep0 maxpacket: 8 [ 178.257198][ T5614] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 178.259573][ T5614] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 178.259597][ T5614] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 178.259613][ T5614] usb 1-1: Product: syz [ 178.259626][ T5614] usb 1-1: Manufacturer: syz [ 178.259638][ T5614] usb 1-1: SerialNumber: syz [ 178.549404][ T5614] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 178.549425][ T5614] usb 1-1: Handspring Visor / Palm OS: port 12, is for unknown use [ 178.549441][ T5614] usb 1-1: Handspring Visor / Palm OS: port 132, is for unknown use [ 178.549456][ T5614] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 178.756757][ T5614] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 178.756837][ T5614] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 178.862968][ T5614] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 178.916040][ T5614] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 178.961729][ T5614] usb 1-1: USB disconnect, device number 10 [ 178.992691][ T5614] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 179.054466][ T5614] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 179.055350][ T5614] visor 1-1:1.0: device disconnected [ 179.387388][ T6531] netlink: 'syz.1.213': attribute type 4 has an invalid length. [ 179.744278][ T5614] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.908922][ T5614] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.908939][ T5614] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.908950][ T5614] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.911686][ T5614] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 179.911701][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 179.911710][ T5614] usb 5-1: Product: syz [ 179.911717][ T5614] usb 5-1: Manufacturer: syz [ 179.911724][ T5614] usb 5-1: SerialNumber: syz [ 180.406603][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.559603][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 180.564631][ T9] usb 2-1: no configurations [ 180.564649][ T9] usb 2-1: can't read configurations, error -22 [ 180.631202][ T5614] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 180.694308][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.784306][ T5614] usb 5-1: USB disconnect, device number 7 [ 180.848048][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 180.848882][ T9] usb 2-1: no configurations [ 180.848896][ T9] usb 2-1: can't read configurations, error -22 [ 180.859367][ T9] usb usb2-port1: attempt power cycle [ 180.875180][ T5614] usblp0: removed [ 181.266297][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 181.289428][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 181.289909][ T9] usb 2-1: no configurations [ 181.289918][ T9] usb 2-1: can't read configurations, error -22 [ 181.417029][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.434844][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 181.435497][ T9] usb 2-1: no configurations [ 181.435507][ T9] usb 2-1: can't read configurations, error -22 [ 181.435888][ T9] usb usb2-port1: unable to enumerate USB device [ 181.717047][ T5614] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 181.726989][ T6551] process 'syz.4.219' launched '/dev/fd/7' with NULL argv: empty string added [ 181.865911][ T5614] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 181.865943][ T5614] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.880984][ T5614] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 181.881011][ T5614] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 181.881029][ T5614] usb 4-1: Manufacturer: syz [ 181.881041][ T5614] usb 4-1: SerialNumber: syz [ 182.198171][ T5614] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 182.221202][ T5614] usb 4-1: USB disconnect, device number 5 [ 182.618048][ T6558] FAULT_INJECTION: forcing a failure. [ 182.618048][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 182.618077][ T6558] CPU: 0 UID: 0 PID: 6558 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.618097][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.618107][ T6558] Call Trace: [ 182.618114][ T6558] [ 182.618124][ T6558] dump_stack_lvl+0xe8/0x150 [ 182.618150][ T6558] should_fail_ex+0x46b/0x600 [ 182.618182][ T6558] should_failslab+0xa8/0x100 [ 182.618204][ T6558] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 182.618225][ T6558] ? __get_vm_area_node+0x171/0x350 [ 182.618246][ T6558] __get_vm_area_node+0x171/0x350 [ 182.618268][ T6558] __vmalloc_node_range_noprof+0x36a/0x1750 [ 182.618288][ T6558] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 182.618313][ T6558] ? __lock_acquire+0x6b5/0x2cf0 [ 182.618352][ T6558] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 182.618376][ T6558] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.618395][ T6558] ? __lock_acquire+0x6b5/0x2cf0 [ 182.618418][ T6558] ? _parse_integer_limit+0x1ae/0x1f0 [ 182.618446][ T6558] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 182.618466][ T6558] __vmalloc_noprof+0xd2/0x120 [ 182.618484][ T6558] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 182.618507][ T6558] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 182.618533][ T6558] bpf_prog_alloc+0x3c/0x1a0 [ 182.618556][ T6558] bpf_prog_load+0x779/0x1a10 [ 182.618588][ T6558] ? __pfx_bpf_prog_load+0x10/0x10 [ 182.618609][ T6558] ? __might_fault+0xaf/0x130 [ 182.618641][ T6558] ? bpf_lsm_bpf+0x9/0x20 [ 182.618660][ T6558] ? security_bpf+0x7e/0x2d0 [ 182.618686][ T6558] __sys_bpf+0x618/0x950 [ 182.618709][ T6558] ? __pfx___sys_bpf+0x10/0x10 [ 182.618725][ T6558] ? rt_mutex_slowunlock+0x1cb/0x300 [ 182.618753][ T6558] ? ksys_write+0x248/0x270 [ 182.618775][ T6558] ? __pfx_ksys_write+0x10/0x10 [ 182.618799][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.618816][ T6558] __x64_sys_bpf+0x7c/0x90 [ 182.618835][ T6558] do_syscall_64+0x15f/0xf80 [ 182.618856][ T6558] ? clear_bhb_loop+0x40/0x90 [ 182.618876][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.618899][ T6558] RIP: 0033:0x7f1e96ddcdd9 [ 182.618912][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.618922][ T6558] RSP: 002b:00007f1e95036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.618936][ T6558] RAX: ffffffffffffffda RBX: 00007f1e97055fa0 RCX: 00007f1e96ddcdd9 [ 182.618944][ T6558] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 182.618952][ T6558] RBP: 00007f1e95036090 R08: 0000000000000000 R09: 0000000000000000 [ 182.618959][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.618967][ T6558] R13: 00007f1e97056038 R14: 00007f1e97055fa0 R15: 00007fff849bb098 [ 182.618987][ T6558] [ 182.623595][ T6558] syz.0.222: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.623878][ T6558] CPU: 0 UID: 0 PID: 6558 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.623905][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.623915][ T6558] Call Trace: [ 182.623922][ T6558] [ 182.623929][ T6558] dump_stack_lvl+0xe8/0x150 [ 182.623954][ T6558] warn_alloc+0x263/0x3e0 [ 182.623974][ T6558] ? srcu_read_unlock+0x20/0x50 [ 182.623997][ T6558] ? qlist_free_all+0x8e/0x100 [ 182.624013][ T6558] ? __pfx_warn_alloc+0x10/0x10 [ 182.624032][ T6558] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 182.624053][ T6558] ? __get_vm_area_node+0x171/0x350 [ 182.624074][ T6558] ? __get_vm_area_node+0x2e1/0x350 [ 182.624099][ T6558] __vmalloc_node_range_noprof+0x38f/0x1750 [ 182.624122][ T6558] ? __lock_acquire+0x6b5/0x2cf0 [ 182.624161][ T6558] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 182.624185][ T6558] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.624202][ T6558] ? __lock_acquire+0x6b5/0x2cf0 [ 182.624225][ T6558] ? _parse_integer_limit+0x1ae/0x1f0 [ 182.624252][ T6558] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 182.624272][ T6558] __vmalloc_noprof+0xd2/0x120 [ 182.624290][ T6558] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 182.624312][ T6558] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 182.624337][ T6558] bpf_prog_alloc+0x3c/0x1a0 [ 182.624365][ T6558] bpf_prog_load+0x779/0x1a10 [ 182.624397][ T6558] ? __pfx_bpf_prog_load+0x10/0x10 [ 182.624418][ T6558] ? __might_fault+0xaf/0x130 [ 182.624451][ T6558] ? bpf_lsm_bpf+0x9/0x20 [ 182.624470][ T6558] ? security_bpf+0x7e/0x2d0 [ 182.624496][ T6558] __sys_bpf+0x618/0x950 [ 182.624517][ T6558] ? __pfx___sys_bpf+0x10/0x10 [ 182.624534][ T6558] ? rt_mutex_slowunlock+0x1cb/0x300 [ 182.624566][ T6558] ? ksys_write+0x248/0x270 [ 182.624587][ T6558] ? __pfx_ksys_write+0x10/0x10 [ 182.624610][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.624628][ T6558] __x64_sys_bpf+0x7c/0x90 [ 182.624646][ T6558] do_syscall_64+0x15f/0xf80 [ 182.624668][ T6558] ? clear_bhb_loop+0x40/0x90 [ 182.624689][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.624706][ T6558] RIP: 0033:0x7f1e96ddcdd9 [ 182.624723][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.624735][ T6558] RSP: 002b:00007f1e95036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.624751][ T6558] RAX: ffffffffffffffda RBX: 00007f1e97055fa0 RCX: 00007f1e96ddcdd9 [ 182.624763][ T6558] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 182.624774][ T6558] RBP: 00007f1e95036090 R08: 0000000000000000 R09: 0000000000000000 [ 182.624784][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.624794][ T6558] R13: 00007f1e97056038 R14: 00007f1e97055fa0 R15: 00007fff849bb098 [ 182.624823][ T6558] [ 182.628113][ T6558] Mem-Info: [ 182.628124][ T6558] active_anon:188 inactive_anon:6119 isolated_anon:0 [ 182.628124][ T6558] active_file:13539 inactive_file:41877 isolated_file:0 [ 182.628124][ T6558] unevictable:768 dirty:160 writeback:0 [ 182.628124][ T6558] slab_reclaimable:11476 slab_unreclaimable:102465 [ 182.628124][ T6558] mapped:30725 shmem:1289 pagetables:1235 [ 182.628124][ T6558] sec_pagetables:0 bounce:0 [ 182.628124][ T6558] kernel_misc_reclaimable:0 [ 182.628124][ T6558] free:1311101 free_pcp:9622 free_cma:0 [ 182.628176][ T6558] Node 0 active_anon:752kB inactive_anon:24476kB active_file:53908kB inactive_file:167508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122864kB dirty:632kB writeback:0kB shmem:3620kB kernel_stack:13120kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.628220][ T6558] Node 1 active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:8kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.628265][ T6558] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.628316][ T6558] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 182.628346][ T6558] Node 0 DMA32 free:1300952kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:752kB inactive_anon:24476kB active_file:53908kB inactive_file:167508kB unevictable:1536kB writepending:632kB zspages:0kB present:3129332kB managed:2566556kB mlocked:0kB bounce:0kB free_pcp:38488kB local_pcp:26324kB free_cma:0kB [ 182.628398][ T6558] lowmem_reserve[]: 0 0 0 0 0 [ 182.628431][ T6558] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.628479][ T6558] lowmem_reserve[]: 0 0 0 0 0 [ 182.628506][ T6558] Node 1 Normal free:3928092kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:0kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.628557][ T6558] lowmem_reserve[]: 0 0 0 0 0 [ 182.628589][ T6558] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.628690][ T6558] Node 0 DMA32: 1991*4kB (UM) 1602*8kB (UM) 643*16kB (UME) 218*32kB (UM) 106*64kB (UM) 85*128kB (UM) 48*256kB (UM) 20*512kB (UM) 8*1024kB (UM) 3*2048kB (ME) 295*4096kB (UM) = 1300892kB [ 182.628821][ T6558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 182.628911][ T6558] Node 1 Normal: 3*4kB (UM) 6*8kB (U) 14*16kB (UM) 8*32kB (U) 6*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3928092kB [ 182.629045][ T6558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.629060][ T6558] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.629073][ T6558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.629087][ T6558] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.629101][ T6558] 56701 total pagecache pages [ 182.629111][ T6558] 0 pages in swap cache [ 182.629117][ T6558] Free swap = 124996kB [ 182.629123][ T6558] Total swap = 124996kB [ 182.629130][ T6558] 2097051 pages RAM [ 182.629135][ T6558] 0 pages HighMem/MovableOnly [ 182.629141][ T6558] 423744 pages reserved [ 182.629146][ T6558] 0 pages cma reserved [ 182.847064][ T6562] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 182.847124][ T6562] netlink: 96 bytes leftover after parsing attributes in process `syz.0.224'. [ 182.847157][ T6562] netlink: 1 bytes leftover after parsing attributes in process `syz.0.224'. [ 182.847189][ T6562] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 184.184417][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.184562][ T821] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.336287][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 184.336429][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 184.339365][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 184.340803][ T821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 184.352045][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 184.352069][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 184.352198][ T9] usb 5-1: Product: syz [ 184.352211][ T9] usb 5-1: Manufacturer: syz [ 184.352223][ T9] usb 5-1: SerialNumber: syz [ 184.355446][ T5614] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.377987][ T821] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 184.378011][ T821] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 184.378028][ T821] usb 1-1: Product: syz [ 184.378040][ T821] usb 1-1: Manufacturer: syz [ 184.378052][ T821] usb 1-1: SerialNumber: syz [ 184.514665][ T5614] usb 4-1: Using ep0 maxpacket: 32 [ 184.518399][ T5614] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1120, setting to 1024 [ 184.518822][ T5614] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 184.526426][ T5614] usb 4-1: New USB device found, idVendor=0763, idProduct=200d, bcdDevice= 0.40 [ 184.526450][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.527098][ T5614] usb 4-1: Product: syz [ 184.527171][ T5614] usb 4-1: Manufacturer: syz [ 184.527184][ T5614] usb 4-1: SerialNumber: syz [ 184.598917][ T9] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 184.598939][ T9] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 184.598955][ T9] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 184.598970][ T9] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 184.656916][ T821] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 184.656930][ T821] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 184.656938][ T821] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 184.656946][ T821] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 184.741624][ T6584] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 184.741645][ T6584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.232'. [ 184.741659][ T6584] netlink: 1 bytes leftover after parsing attributes in process `syz.2.232'. [ 184.741671][ T6584] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 184.800839][ T9] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 184.836601][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 184.869622][ T821] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 184.919778][ T6585] kAFS: No cell specified [ 184.946053][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 184.977001][ T821] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 185.038337][ T9] usb 5-1: USB disconnect, device number 8 [ 185.255627][ T821] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB3 [ 185.275413][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 185.377675][ T6589] FAULT_INJECTION: forcing a failure. [ 185.377675][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 185.377732][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: syz.1.233 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.377763][ T6589] Tainted: [L]=SOFTLOCKUP [ 185.377770][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.377780][ T6589] Call Trace: [ 185.377787][ T6589] [ 185.377795][ T6589] dump_stack_lvl+0xe8/0x150 [ 185.377822][ T6589] should_fail_ex+0x46b/0x600 [ 185.377854][ T6589] should_failslab+0xa8/0x100 [ 185.377877][ T6589] __kvmalloc_node_noprof+0x170/0x8e0 [ 185.377900][ T6589] ? io_clone_buffers+0x4c5/0xd30 [ 185.377927][ T6589] io_clone_buffers+0x4c5/0xd30 [ 185.377953][ T6589] ? __fget_files+0x2a/0x420 [ 185.377979][ T6589] io_register_clone_buffers+0x24a/0x310 [ 185.378002][ T6589] ? __pfx_io_register_clone_buffers+0x10/0x10 [ 185.378026][ T6589] ? __se_sys_io_uring_register+0xf16/0x1a20 [ 185.378054][ T6589] __se_sys_io_uring_register+0xf26/0x1a20 [ 185.378080][ T6589] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 185.378101][ T6589] ? ksys_write+0x248/0x270 [ 185.378123][ T6589] ? __pfx_ksys_write+0x10/0x10 [ 185.378151][ T6589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.378171][ T6589] do_syscall_64+0x15f/0xf80 [ 185.378194][ T6589] ? clear_bhb_loop+0x40/0x90 [ 185.378216][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.378234][ T6589] RIP: 0033:0x7f350e2dcdd9 [ 185.378250][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.378264][ T6589] RSP: 002b:00007f350c4f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 185.378283][ T6589] RAX: ffffffffffffffda RBX: 00007f350e556180 RCX: 00007f350e2dcdd9 [ 185.378297][ T6589] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000005 [ 185.378313][ T6589] RBP: 00007f350c4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.378325][ T6589] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 185.378336][ T6589] R13: 00007f350e556218 R14: 00007f350e556180 R15: 00007ffed9fa2bf8 [ 185.378366][ T6589] [ 186.264321][ T821] usb 1-1: USB disconnect, device number 11 [ 186.379402][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 186.380191][ T9] visor 5-1:1.0: device disconnected [ 186.496904][ T5614] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 186.496928][ T5614] usb 4-1: 1:1 : sample bitwidth 3 in over sample bytes 0 [ 186.496947][ T5614] usb 4-1: 1:1 : unsupported sample bitwidth 3 in 0 bytes [ 186.510107][ T821] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 186.550977][ T5614] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 186.551630][ T821] visor ttyUSB3: Handspring Visor / Palm OS converter now disconnected from ttyUSB3 [ 186.552112][ T821] visor 1-1:1.0: device disconnected [ 186.588700][ T5614] usb 4-1: unit 1 not found! [ 186.588724][ T5614] usb 4-1: unit 130 not found! [ 186.609319][ T6600] netlink: 'syz.3.237': attribute type 3 has an invalid length. [ 186.612459][ T37] audit: type=1326 audit(1778395719.821:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.2.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36350bcdd9 code=0x0 [ 186.771043][ T5614] usb 4-1: USB disconnect, device number 6 [ 186.949038][ T5600] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.104431][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 187.110870][ T5600] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.110902][ T5600] usb 2-1: can't read configurations, error -61 [ 187.244273][ T5600] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.388364][ T5715] udevd[5715]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.404242][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 187.460332][ T5600] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.460366][ T5600] usb 2-1: can't read configurations, error -61 [ 187.467185][ T5600] usb usb2-port1: attempt power cycle [ 187.994309][ T5600] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 188.015116][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 188.019013][ T5600] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.019044][ T5600] usb 2-1: can't read configurations, error -61 [ 188.127774][ T6619] loop5: detected capacity change from 0 to 7 [ 188.168769][ T5600] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.198326][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 188.240542][ T5600] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.240656][ T5600] usb 2-1: can't read configurations, error -61 [ 188.265427][ T5600] usb usb2-port1: unable to enumerate USB device [ 188.337777][ T6610] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 188.374943][ C0] blk_print_req_error: 10 callbacks suppressed [ 188.374962][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.375008][ C0] buffer_io_error: 10 callbacks suppressed [ 188.375019][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.402919][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.402948][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.451846][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.451882][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.454234][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.454274][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.457056][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.457084][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.459273][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.459302][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.464556][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.464587][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.470796][ T6619] ldm_validate_partition_table(): Disk read failed. [ 188.474366][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.474390][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.479485][ T5700] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.483876][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.483907][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.485018][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.485047][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 188.501635][ T6619] Dev loop5: unable to read RDB block 0 [ 188.525543][ T6619] loop5: unable to read partition table [ 188.525746][ T6619] loop5: partition table beyond EOD, truncated [ 188.525780][ T6619] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 188.684272][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 188.686315][ T5700] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 188.691381][ T5700] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 188.691406][ T5700] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 188.691423][ T5700] usb 1-1: Product: syz [ 188.691434][ T5700] usb 1-1: Manufacturer: syz [ 188.691446][ T5700] usb 1-1: SerialNumber: syz [ 188.943761][ T5700] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 188.943858][ T5700] visor 1-1:1.0: probe with driver visor failed with error -71 [ 188.975503][ T5700] usb 1-1: USB disconnect, device number 12 [ 189.418898][ T6628] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 189.418945][ T6628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.244'. [ 189.419002][ T6628] netlink: 1 bytes leftover after parsing attributes in process `syz.2.244'. [ 189.419035][ T6628] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 191.060232][ T37] audit: type=1326 audit(1778395724.271:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6645 comm="syz.1.250" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f350e2dcdd9 code=0x0 [ 191.325203][ T5614] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 191.694327][ T5614] usb 1-1: Using ep0 maxpacket: 16 [ 191.696843][ T5614] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 191.696892][ T5614] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.696916][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.696939][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.696958][ T5614] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.696995][ T5614] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 191.697015][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.736978][ T5614] usb 1-1: config 0 descriptor?? [ 191.885324][ T5614] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 192.086740][ T6668] bridge0: port 3(netdevsim0) entered blocking state [ 192.090613][ T6668] bridge0: port 3(netdevsim0) entered disabled state [ 192.099221][ T6668] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 192.152553][ T6668] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 192.201502][ T6668] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 192.201572][ T6668] netlink: 96 bytes leftover after parsing attributes in process `syz.3.256'. [ 192.201631][ T6668] netlink: 1 bytes leftover after parsing attributes in process `syz.3.256'. [ 192.201671][ T6668] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 193.107538][ T4951] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 193.491218][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.579883][ T821] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 193.925655][ T4951] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 193.955268][ T5715] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 193.957869][ T5614] usb 1-1: USB disconnect, device number 13 [ 194.018333][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 194.023155][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 194.023189][ T9] usb 3-1: can't read configurations, error -61 [ 194.024325][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 194.026935][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.028206][ T821] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.028228][ T821] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 0 [ 194.028249][ T821] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 8 [ 194.028270][ T821] usb 5-1: config 1 interface 0 has no altsetting 0 [ 194.031200][ T821] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.031224][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.031242][ T821] usb 5-1: Product: syz [ 194.031253][ T821] usb 5-1: Manufacturer: syz [ 194.031265][ T821] usb 5-1: SerialNumber: syz [ 194.101077][ T6670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.204809][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.295385][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315298][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.356570][ T6679] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 194.356590][ T6679] netlink: 96 bytes leftover after parsing attributes in process `syz.3.260'. [ 194.356605][ T6679] netlink: 1 bytes leftover after parsing attributes in process `syz.3.260'. [ 194.356617][ T6679] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 194.404938][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 194.409613][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 194.409646][ T9] usb 3-1: can't read configurations, error -61 [ 194.412749][ T9] usb usb3-port1: attempt power cycle [ 194.631186][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.631747][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.868918][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.906195][ T9] usb 3-1: device descriptor read/8, error -71 [ 195.047294][ T821] usb 5-1: No union descriptors [ 195.134301][ T821] usb 5-1: USB disconnect, device number 9 [ 195.394306][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 195.444350][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 195.465101][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 195.466689][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 195.466711][ T9] usb 3-1: config 0 has no interface number 0 [ 195.466755][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.466778][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 195.468853][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 195.468877][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.468887][ T9] usb 3-1: Product: syz [ 195.468894][ T9] usb 3-1: Manufacturer: syz [ 195.468901][ T9] usb 3-1: SerialNumber: syz [ 195.481596][ T9] usb 3-1: config 0 descriptor?? [ 195.544280][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 195.559127][ T31] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 195.559179][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.559202][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.559223][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 195.559243][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.559281][ T31] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 195.559301][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.636249][ T31] usb 2-1: config 0 descriptor?? [ 195.660311][ T31] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 195.688478][ T4951] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 195.767523][ T4951] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 195.840795][ T6688] FAULT_INJECTION: forcing a failure. [ 195.840795][ T6688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.840828][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz.1.264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.840853][ T6688] Tainted: [L]=SOFTLOCKUP [ 195.840859][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.840869][ T6688] Call Trace: [ 195.840876][ T6688] [ 195.840884][ T6688] dump_stack_lvl+0xe8/0x150 [ 195.840910][ T6688] should_fail_ex+0x46b/0x600 [ 195.840942][ T6688] strncpy_from_user+0x36/0x2b0 [ 195.840970][ T6688] do_getname+0x77/0x250 [ 195.840997][ T6688] do_sys_openat2+0xca/0x200 [ 195.841023][ T6688] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.841047][ T6688] ? ksys_write+0x248/0x270 [ 195.841067][ T6688] ? __pfx_ksys_write+0x10/0x10 [ 195.841090][ T6688] __x64_sys_openat+0x138/0x170 [ 195.841116][ T6688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.841134][ T6688] do_syscall_64+0x15f/0xf80 [ 195.841155][ T6688] ? trace_irq_disable+0x3b/0x140 [ 195.841176][ T6688] ? clear_bhb_loop+0x40/0x90 [ 195.841195][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.841212][ T6688] RIP: 0033:0x7f350e29d60e [ 195.841228][ T6688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.841243][ T6688] RSP: 002b:00007f350c535b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.841262][ T6688] RAX: ffffffffffffffda RBX: 00007f350c5366c0 RCX: 00007f350e29d60e [ 195.841276][ T6688] RDX: 0000000000000000 RSI: 00007f350c535c00 RDI: ffffffffffffff9c [ 195.841287][ T6688] RBP: 00007f350c535c00 R08: 0000000000000000 R09: 0000000000000000 [ 195.841297][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 195.841308][ T6688] R13: 00007f350e556038 R14: 00007f350e555fa0 R15: 00007ffed9fa2bf8 [ 195.841336][ T6688] [ 195.857651][ T4951] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 195.892757][ T821] usb 2-1: USB disconnect, device number 16 [ 195.956338][ T5699] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 196.292385][ T9] appletouch 3-1:0.85: Geyser mode initialized. [ 197.093698][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input8 [ 198.394191][ T5700] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.405370][ T37] audit: type=1326 audit(1778395731.621:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.3.267" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cf669cdd9 code=0x0 [ 198.594311][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 198.598731][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 198.626874][ T5700] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 198.626901][ T5700] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 198.626919][ T5700] usb 5-1: Product: syz [ 198.626932][ T5700] usb 5-1: Manufacturer: syz [ 198.626945][ T5700] usb 5-1: SerialNumber: syz [ 199.033500][ T9] usb 3-1: USB disconnect, device number 11 [ 199.229845][ T9] appletouch 3-1:0.85: input: appletouch disconnected [ 199.282202][ T5700] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 199.282224][ T5700] usb 5-1: Handspring Visor / Palm OS: port 12, is for unknown use [ 199.282241][ T5700] usb 5-1: Handspring Visor / Palm OS: port 132, is for unknown use [ 199.282255][ T5700] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 199.290818][ T5715] udevd[5715]: setting mode of /dev/bus/usb/003/011 to 020664 failed: No such file or directory [ 199.290986][ T5715] udevd[5715]: setting owner of /dev/bus/usb/003/011 to uid=0, gid=0 failed: No such file or directory [ 199.586460][ T5700] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 199.586536][ T5700] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 199.622433][ T5700] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 199.733795][ T6726] FAULT_INJECTION: forcing a failure. [ 199.733795][ T6726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.733889][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.2.275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.733915][ T6726] Tainted: [L]=SOFTLOCKUP [ 199.733921][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.733932][ T6726] Call Trace: [ 199.733938][ T6726] [ 199.733946][ T6726] dump_stack_lvl+0xe8/0x150 [ 199.733973][ T6726] should_fail_ex+0x46b/0x600 [ 199.734005][ T6726] strncpy_from_user+0x36/0x2b0 [ 199.734034][ T6726] do_getname+0x77/0x250 [ 199.734058][ T6726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.734078][ T6726] __x64_sys_execve+0x7a/0xc0 [ 199.734099][ T6726] do_syscall_64+0x15f/0xf80 [ 199.734125][ T6726] ? clear_bhb_loop+0x40/0x90 [ 199.734144][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.734160][ T6726] RIP: 0033:0x7f36350bcdd9 [ 199.734177][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.734200][ T6726] RSP: 002b:00007f36332cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 199.734220][ T6726] RAX: ffffffffffffffda RBX: 00007f3635336180 RCX: 00007f36350bcdd9 [ 199.734233][ T6726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 199.734245][ T6726] RBP: 00007f36332cc090 R08: 0000000000000000 R09: 0000000000000000 [ 199.734256][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.734268][ T6726] R13: 00007f3635336218 R14: 00007f3635336180 R15: 00007ffdf0b33d98 [ 199.734297][ T6726] [ 200.596662][ T5700] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 200.650020][ T5700] usb 5-1: USB disconnect, device number 10 [ 200.667603][ T5700] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 200.772787][ T5700] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 200.773627][ T5700] visor 5-1:1.0: device disconnected [ 201.080745][ T6738] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 201.080767][ T6738] netlink: 96 bytes leftover after parsing attributes in process `syz.0.276'. [ 201.080782][ T6738] netlink: 1 bytes leftover after parsing attributes in process `syz.0.276'. [ 201.080794][ T6738] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 202.004442][ T37] audit: type=1326 audit(1778395735.221:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.1.283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f350e2dcdd9 code=0x0 [ 202.869350][ T37] audit: type=1326 audit(1778395736.041:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 202.869846][ T37] audit: type=1326 audit(1778395736.041:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 202.870230][ T37] audit: type=1326 audit(1778395736.041:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 202.870586][ T37] audit: type=1326 audit(1778395736.041:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 202.870834][ T37] audit: type=1326 audit(1778395736.041:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 202.871188][ T37] audit: type=1326 audit(1778395736.041:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 202.871620][ T37] audit: type=1326 audit(1778395736.041:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 202.871976][ T37] audit: type=1326 audit(1778395736.041:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504326][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 203.504346][ T37] audit: type=1326 audit(1778395736.041:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504391][ T37] audit: type=1326 audit(1778395736.041:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504430][ T37] audit: type=1326 audit(1778395736.041:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504469][ T37] audit: type=1326 audit(1778395736.041:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504508][ T37] audit: type=1326 audit(1778395736.041:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504548][ T37] audit: type=1326 audit(1778395736.041:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504588][ T37] audit: type=1326 audit(1778395736.051:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504626][ T37] audit: type=1326 audit(1778395736.051:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504664][ T37] audit: type=1326 audit(1778395736.051:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 203.504701][ T37] audit: type=1326 audit(1778395736.051:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36350bcdd9 code=0x7ffc0000 [ 205.869223][ T6774] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 206.474309][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 206.604318][ T9] usb 2-1: device descriptor read/64, error -71 [ 206.664279][ T821] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 206.814289][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 206.819135][ T821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 206.823361][ T821] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 206.823390][ T821] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 206.823408][ T821] usb 5-1: Product: syz [ 206.823421][ T821] usb 5-1: Manufacturer: syz [ 206.823433][ T821] usb 5-1: SerialNumber: syz [ 206.864332][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.994313][ T9] usb 2-1: device descriptor read/64, error -71 [ 207.332625][ T821] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 207.343161][ T821] visor 5-1:1.0: probe with driver visor failed with error -110 [ 207.527976][ T9] usb usb2-port1: attempt power cycle [ 207.805234][ T10] usb 5-1: USB disconnect, device number 11 [ 208.026020][ T6794] loop5: detected capacity change from 0 to 7 [ 208.034074][ C0] blk_print_req_error: 10 callbacks suppressed [ 208.034095][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.034557][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 208.036320][ C0] buffer_io_error: 10 callbacks suppressed [ 208.036335][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.038735][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.038766][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.042943][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.042974][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.047997][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.048029][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.052089][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.052220][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.059669][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.059702][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.060789][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.060816][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.061290][ T6794] ldm_validate_partition_table(): Disk read failed. [ 208.062128][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.062155][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.062844][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.062869][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.063996][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.064022][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 208.641375][ T6797] FAULT_INJECTION: forcing a failure. [ 208.641375][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.641438][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.3.298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 208.641464][ T6797] Tainted: [L]=SOFTLOCKUP [ 208.641470][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.641481][ T6797] Call Trace: [ 208.641488][ T6797] [ 208.641496][ T6797] dump_stack_lvl+0xe8/0x150 [ 208.641516][ T6797] should_fail_ex+0x46b/0x600 [ 208.641536][ T6797] _copy_from_iter+0x1d3/0x1670 [ 208.641553][ T6797] ? __pfx__copy_from_iter+0x10/0x10 [ 208.641563][ T6797] ? trace_kmalloc+0x2a/0xf0 [ 208.641576][ T6797] ? __kmalloc_noprof+0x408/0x7b0 [ 208.641586][ T6797] ? kernfs_fop_write_iter+0x159/0x540 [ 208.641602][ T6797] kernfs_fop_write_iter+0x19c/0x540 [ 208.641617][ T6797] vfs_write+0x629/0xba0 [ 208.641634][ T6797] ? __pfx_vfs_write+0x10/0x10 [ 208.641650][ T6797] ? mutex_lock_nested+0x152/0x1d0 [ 208.641665][ T6797] ? fdget_pos+0x252/0x320 [ 208.641679][ T6797] ksys_write+0x156/0x270 [ 208.641691][ T6797] ? __pfx_ksys_write+0x10/0x10 [ 208.641701][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.641716][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.641726][ T6797] do_syscall_64+0x15f/0xf80 [ 208.641739][ T6797] ? clear_bhb_loop+0x40/0x90 [ 208.641752][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.641761][ T6797] RIP: 0033:0x7f3cf669cdd9 [ 208.641773][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.641781][ T6797] RSP: 002b:00007f3cf48cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.641792][ T6797] RAX: ffffffffffffffda RBX: 00007f3cf6916090 RCX: 00007f3cf669cdd9 [ 208.641799][ T6797] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000005 [ 208.641805][ T6797] RBP: 00007f3cf48cd090 R08: 0000000000000000 R09: 0000000000000000 [ 208.641811][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.641817][ T6797] R13: 00007f3cf6916128 R14: 00007f3cf6916090 R15: 00007ffd52460408 [ 208.641833][ T6797] [ 209.404811][ T6794] Dev loop5: unable to read RDB block 0 [ 209.450707][ T9] usb 2-1: device descriptor read/8, error -71 [ 209.714638][ T6794] loop5: unable to read partition table [ 209.714855][ T6794] loop5: partition table beyond EOD, truncated [ 209.714886][ T6794] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 210.794502][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 210.954785][ T6815] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 210.954803][ T6815] netlink: 96 bytes leftover after parsing attributes in process `syz.0.305'. [ 210.954817][ T6815] netlink: 1 bytes leftover after parsing attributes in process `syz.0.305'. [ 210.954830][ T6815] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 211.974246][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 211.980689][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 211.980715][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.980733][ T10] usb 5-1: Product: syz [ 211.980746][ T10] usb 5-1: Manufacturer: syz [ 211.980760][ T10] usb 5-1: SerialNumber: syz [ 212.006485][ T10] usb 5-1: config 0 descriptor?? [ 212.096162][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 212.096215][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 212.096215][ T10] [ 212.096261][ T10] usb 5-1: selecting invalid altsetting 3 [ 212.096274][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 212.096274][ T10] [ 212.096607][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 212.139382][ T6819] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 212.139402][ T6819] netlink: 96 bytes leftover after parsing attributes in process `syz.1.306'. [ 212.139417][ T6819] netlink: 1 bytes leftover after parsing attributes in process `syz.1.306'. [ 212.139430][ T6819] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 212.610786][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.627109][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.302'. [ 212.628904][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 212.629011][ T10] usb 5-1: media controller created [ 212.684976][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 212.685005][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 212.685085][ T10] dvb-usb: MAC address reading failed. [ 212.737242][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.825964][ T10] DVB: Unable to find symbol stb0899_attach() [ 212.825998][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 212.934592][ T10] rc_core: IR keymap rc-tt-1500 not found [ 212.934611][ T10] Registered IR keymap rc-empty [ 212.957632][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 212.980164][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 213.013146][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 213.013167][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 213.013167][ T10] [ 213.013179][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 213.055582][ T10] usb 5-1: USB disconnect, device number 12 [ 213.155052][ T5722] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.248829][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 213.249454][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 213.249468][ T37] audit: type=1326 audit(1778395746.461:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz.1.310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f350e2dcdd9 code=0x0 [ 213.284279][ T5722] usb 3-1: device descriptor read/64, error -71 [ 213.524253][ T5722] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 213.654291][ T5722] usb 3-1: device descriptor read/64, error -71 [ 213.916609][ T5722] usb usb3-port1: attempt power cycle [ 214.654268][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.704294][ T5722] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 214.725032][ T5722] usb 3-1: device descriptor read/8, error -71 [ 215.064654][ T5722] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 215.107186][ T5722] usb 3-1: device descriptor read/8, error -71 [ 215.110921][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.110948][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 215.110969][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.404602][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 215.404630][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 215.404649][ T31] usb 4-1: Product: syz [ 215.404661][ T31] usb 4-1: Manufacturer: syz [ 215.404674][ T31] usb 4-1: SerialNumber: syz [ 215.405509][ T5722] usb usb3-port1: unable to enumerate USB device [ 215.721667][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 215.983843][ T6860] FAULT_INJECTION: forcing a failure. [ 215.983843][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 215.983877][ T6860] CPU: 1 UID: 0 PID: 6860 Comm: syz.4.319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 215.983901][ T6860] Tainted: [L]=SOFTLOCKUP [ 215.983907][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.983918][ T6860] Call Trace: [ 215.983924][ T6860] [ 215.983932][ T6860] dump_stack_lvl+0xe8/0x150 [ 215.983956][ T6860] should_fail_ex+0x46b/0x600 [ 215.983988][ T6860] should_failslab+0xa8/0x100 [ 215.984011][ T6860] __kmalloc_noprof+0xdf/0x7b0 [ 215.984030][ T6860] ? bpf_test_init+0x9f/0x150 [ 215.984050][ T6860] ? __lock_acquire+0x6b5/0x2cf0 [ 215.984075][ T6860] bpf_test_init+0x9f/0x150 [ 215.984098][ T6860] bpf_prog_test_run_skb+0x392/0x2260 [ 215.984120][ T6860] ? bpf_prog_test_run_skb+0x1c1/0x2260 [ 215.984152][ T6860] ? __fget_files+0x3a6/0x420 [ 215.984168][ T6860] ? __fget_files+0x2a/0x420 [ 215.984187][ T6860] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 215.984206][ T6860] bpf_prog_test_run+0x2cd/0x340 [ 215.984230][ T6860] __sys_bpf+0x643/0x950 [ 215.984251][ T6860] ? __pfx___sys_bpf+0x10/0x10 [ 215.984267][ T6860] ? rt_mutex_slowunlock+0x1cb/0x300 [ 215.984300][ T6860] ? ksys_write+0x248/0x270 [ 215.984321][ T6860] ? __pfx_ksys_write+0x10/0x10 [ 215.984343][ T6860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.984361][ T6860] __x64_sys_bpf+0x7c/0x90 [ 215.984380][ T6860] do_syscall_64+0x15f/0xf80 [ 215.984408][ T6860] ? trace_irq_disable+0x3b/0x140 [ 215.984424][ T6860] ? clear_bhb_loop+0x40/0x90 [ 215.984441][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.984456][ T6860] RIP: 0033:0x7fed9f4fcdd9 [ 215.984476][ T6860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.984532][ T6860] RSP: 002b:00007fed9d756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.984552][ T6860] RAX: ffffffffffffffda RBX: 00007fed9f775fa0 RCX: 00007fed9f4fcdd9 [ 215.984570][ T6860] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 215.984579][ T6860] RBP: 00007fed9d756090 R08: 0000000000000000 R09: 0000000000000000 [ 215.984588][ T6860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.984597][ T6860] R13: 00007fed9f776038 R14: 00007fed9f775fa0 R15: 00007ffcde00adb8 [ 215.984624][ T6860] [ 217.344582][ T5737] usb 4-1: USB disconnect, device number 7 [ 217.410871][ T6867] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 217.410884][ T6867] netlink: 96 bytes leftover after parsing attributes in process `syz.0.318'. [ 217.410892][ T6867] netlink: 1 bytes leftover after parsing attributes in process `syz.0.318'. [ 217.410899][ T6867] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 217.499922][ T6870] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 217.499942][ T6870] netlink: 96 bytes leftover after parsing attributes in process `syz.2.320'. [ 217.499956][ T6870] netlink: 1 bytes leftover after parsing attributes in process `syz.2.320'. [ 217.499969][ T6870] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 217.598221][ T5737] usblp0: removed [ 218.144559][ T5722] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 218.288012][ T5722] usb 5-1: device descriptor read/64, error -71 [ 218.350764][ T6878] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 218.350833][ T6878] netlink: 96 bytes leftover after parsing attributes in process `syz.2.323'. [ 218.350891][ T6878] netlink: 1 bytes leftover after parsing attributes in process `syz.2.323'. [ 218.350926][ T6878] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 219.394297][ T5722] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 219.525669][ T5722] usb 5-1: device descriptor read/64, error -71 [ 219.634603][ T5722] usb usb5-port1: attempt power cycle [ 219.695514][ T37] audit: type=1326 audit(1778395752.911:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36350bcdd9 code=0x0 [ 220.092397][ T5722] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 220.125023][ T5722] usb 5-1: device descriptor read/8, error -71 [ 220.464309][ T36] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 220.544378][ T5722] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 220.851048][ T6904] 9pnet_virtio: no channels available for device syz [ 221.772557][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.772583][ T36] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.772604][ T36] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.378494][ T5722] usb 5-1: device not accepting address 16, error -71 [ 222.381947][ T5722] usb usb5-port1: unable to enumerate USB device [ 222.385188][ T5700] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 222.451975][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 222.452005][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 222.452023][ T36] usb 2-1: Product: syz [ 222.452035][ T36] usb 2-1: Manufacturer: syz [ 222.452048][ T36] usb 2-1: SerialNumber: syz [ 222.514381][ T5700] usb 3-1: device descriptor read/64, error -71 [ 223.135967][ T37] audit: type=1326 audit(1778395756.351:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.0.332" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e96ddcdd9 code=0x0 [ 223.144504][ T5700] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 223.232345][ T36] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 223.253230][ T36] usb 2-1: USB disconnect, device number 21 [ 223.264808][ T37] audit: type=1326 audit(1778395756.481:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6912 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cf669cdd9 code=0x0 [ 223.280315][ T5700] usb 3-1: device descriptor read/64, error -71 [ 223.335915][ T36] usblp0: removed [ 223.384543][ T5700] usb usb3-port1: attempt power cycle [ 223.669744][ T6929] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 223.669815][ T6929] netlink: 96 bytes leftover after parsing attributes in process `syz.3.338'. [ 223.669870][ T6929] netlink: 1 bytes leftover after parsing attributes in process `syz.3.338'. [ 223.669903][ T6929] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 224.794497][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 224.952405][ T6933] Can't find a SQUASHFS superblock on nullb0 [ 225.160542][ T36] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 225.438019][ T37] audit: type=1326 audit(1778395758.611:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6931 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36350bcdd9 code=0x0 [ 226.149404][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.149433][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.182972][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.351029][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.351055][ T36] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.357690][ T36] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.116047][ T36] usb 2-1: string descriptor 0 read error: -71 [ 227.116219][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 227.116232][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 227.268464][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 227.268482][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 227.275238][ T36] usb 2-1: can't set config #1, error -71 [ 227.292354][ T36] usb 2-1: USB disconnect, device number 22 [ 227.348004][ T31] usb 5-1: can't set config #1, error -71 [ 227.352947][ T31] usb 5-1: USB disconnect, device number 17 [ 227.939606][ T6955] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 227.939675][ T6955] netlink: 96 bytes leftover after parsing attributes in process `syz.2.344'. [ 227.939734][ T6955] netlink: 1 bytes leftover after parsing attributes in process `syz.2.344'. [ 227.939768][ T6955] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 229.769717][ T37] audit: type=1326 audit(1778395762.961:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.347" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cf669cdd9 code=0x0 [ 231.324859][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 231.335183][ T36] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 231.393321][ T6988] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 231.393348][ T6988] netlink: 96 bytes leftover after parsing attributes in process `syz.2.354'. [ 231.393363][ T6988] netlink: 1 bytes leftover after parsing attributes in process `syz.2.354'. [ 231.393398][ T6988] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 231.538488][ T31] usb 2-1: device descriptor read/64, error -71 [ 232.231610][ T36] usb 4-1: not running at top speed; connect to a high speed hub [ 232.234487][ T36] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.237137][ T36] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 232.237161][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.237178][ T36] usb 4-1: Product: syz [ 232.237190][ T36] usb 4-1: Manufacturer: syz [ 232.237202][ T36] usb 4-1: SerialNumber: syz [ 232.424258][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 232.564577][ T31] usb 2-1: device descriptor read/64, error -71 [ 232.662493][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 232.675058][ T31] usb usb2-port1: attempt power cycle [ 232.707152][ T36] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 232.738220][ T6997] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 232.785328][ T36] usb 4-1: USB disconnect, device number 8 [ 232.808697][ T4951] bcm5974 4-1:1.0: could not read from device [ 232.903302][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 233.054492][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 233.075056][ T31] usb 2-1: device descriptor read/8, error -71 [ 233.324255][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 233.355169][ T31] usb 2-1: device descriptor read/8, error -71 [ 233.474980][ T31] usb usb2-port1: unable to enumerate USB device [ 233.585971][ T7004] FAULT_INJECTION: forcing a failure. [ 233.585971][ T7004] name failslab, interval 1, probability 0, space 0, times 0 [ 233.585993][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.3.357 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 233.586007][ T7004] Tainted: [L]=SOFTLOCKUP [ 233.586010][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.586017][ T7004] Call Trace: [ 233.586020][ T7004] [ 233.586025][ T7004] dump_stack_lvl+0xe8/0x150 [ 233.586041][ T7004] should_fail_ex+0x46b/0x600 [ 233.586061][ T7004] should_failslab+0xa8/0x100 [ 233.586081][ T7004] __kmalloc_noprof+0xdf/0x7b0 [ 233.586093][ T7004] ? tomoyo_encode+0x28b/0x550 [ 233.586110][ T7004] tomoyo_encode+0x28b/0x550 [ 233.586127][ T7004] tomoyo_realpath_from_path+0x58d/0x5d0 [ 233.586147][ T7004] ? tomoyo_path_number_perm+0x219/0x630 [ 233.586160][ T7004] tomoyo_path_number_perm+0x246/0x630 [ 233.586173][ T7004] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.586185][ T7004] ? __lock_acquire+0x6b5/0x2cf0 [ 233.586200][ T7004] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.586227][ T7004] ? __fget_files+0x2a/0x420 [ 233.586238][ T7004] ? __fget_files+0x2a/0x420 [ 233.586246][ T7004] ? __fget_files+0x3a6/0x420 [ 233.586254][ T7004] ? __fget_files+0x2a/0x420 [ 233.586264][ T7004] security_file_ioctl+0xc3/0x2a0 [ 233.586279][ T7004] __se_sys_ioctl+0x47/0x170 [ 233.586291][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.586301][ T7004] do_syscall_64+0x15f/0xf80 [ 233.586313][ T7004] ? trace_irq_disable+0x3b/0x140 [ 233.586325][ T7004] ? clear_bhb_loop+0x40/0x90 [ 233.586337][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.586347][ T7004] RIP: 0033:0x7f3cf669cdd9 [ 233.586357][ T7004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.586365][ T7004] RSP: 002b:00007f3cf48cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.586377][ T7004] RAX: ffffffffffffffda RBX: 00007f3cf6916090 RCX: 00007f3cf669cdd9 [ 233.586383][ T7004] RDX: 00002000000000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 233.586390][ T7004] RBP: 00007f3cf48cd090 R08: 0000000000000000 R09: 0000000000000000 [ 233.586395][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.586401][ T7004] R13: 00007f3cf6916128 R14: 00007f3cf6916090 R15: 00007ffd52460408 [ 233.586416][ T7004] [ 233.586437][ T7004] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.924689][ T7006] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 233.924709][ T7006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 234.143976][ T7008] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 234.312484][ T7010] netlink: 'syz.1.359': attribute type 3 has an invalid length. [ 235.644307][ T7023] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 235.970242][ T7030] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 235.970305][ T7030] netlink: 96 bytes leftover after parsing attributes in process `syz.0.365'. [ 235.970340][ T7030] netlink: 1 bytes leftover after parsing attributes in process `syz.0.365'. [ 235.970397][ T7030] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 237.289699][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 237.597353][ T7040] FAULT_INJECTION: forcing a failure. [ 237.597353][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.597409][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.2.367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 237.597435][ T7040] Tainted: [L]=SOFTLOCKUP [ 237.597442][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.597453][ T7040] Call Trace: [ 237.597460][ T7040] [ 237.597468][ T7040] dump_stack_lvl+0xe8/0x150 [ 237.597489][ T7040] should_fail_ex+0x46b/0x600 [ 237.597508][ T7040] _copy_from_user+0x2d/0xb0 [ 237.597520][ T7040] input_event_from_user+0xb1/0x290 [ 237.597531][ T7040] ? __pfx_input_event_from_user+0x10/0x10 [ 237.597544][ T7040] ? rt_spin_unlock+0x160/0x200 [ 237.597555][ T7040] evdev_write+0x2ca/0x4c0 [ 237.597569][ T7040] ? __lock_acquire+0x6b5/0x2cf0 [ 237.597590][ T7040] ? __pfx_evdev_write+0x10/0x10 [ 237.597607][ T7040] ? rw_verify_area+0x25b/0x4e0 [ 237.597618][ T7040] ? __pfx_evdev_write+0x10/0x10 [ 237.597633][ T7040] vfs_write+0x2a3/0xba0 [ 237.597648][ T7040] ? __pfx_vfs_write+0x10/0x10 [ 237.597660][ T7040] ? __fget_files+0x2a/0x420 [ 237.597670][ T7040] ? __fget_files+0x2a/0x420 [ 237.597678][ T7040] ? __fget_files+0x3a6/0x420 [ 237.597686][ T7040] ? __fget_files+0x2a/0x420 [ 237.597699][ T7040] ksys_write+0x156/0x270 [ 237.597711][ T7040] ? __pfx_ksys_write+0x10/0x10 [ 237.597720][ T7040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.597735][ T7040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.597745][ T7040] do_syscall_64+0x15f/0xf80 [ 237.597758][ T7040] ? clear_bhb_loop+0x40/0x90 [ 237.597770][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.597780][ T7040] RIP: 0033:0x7f36350bcdd9 [ 237.597790][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.597798][ T7040] RSP: 002b:00007f36332cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.597809][ T7040] RAX: ffffffffffffffda RBX: 00007f3635336180 RCX: 00007f36350bcdd9 [ 237.597816][ T7040] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 237.597823][ T7040] RBP: 00007f36332cc090 R08: 0000000000000000 R09: 0000000000000000 [ 237.597829][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.597834][ T7040] R13: 00007f3635336218 R14: 00007f3635336180 R15: 00007ffdf0b33d98 [ 237.597850][ T7040] [ 237.989184][ T7042] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 237.989251][ T7042] netlink: 96 bytes leftover after parsing attributes in process `syz.0.368'. [ 237.989320][ T7042] netlink: 1 bytes leftover after parsing attributes in process `syz.0.368'. [ 237.989355][ T7042] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 240.344521][ T7051] netlink: 'syz.2.372': attribute type 3 has an invalid length. [ 240.471254][ T7057] FAULT_INJECTION: forcing a failure. [ 240.471254][ T7057] name failslab, interval 1, probability 0, space 0, times 0 [ 240.471286][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.0.373 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 240.471310][ T7057] Tainted: [L]=SOFTLOCKUP [ 240.471317][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.471326][ T7057] Call Trace: [ 240.471333][ T7057] [ 240.471340][ T7057] dump_stack_lvl+0xe8/0x150 [ 240.471366][ T7057] should_fail_ex+0x46b/0x600 [ 240.471397][ T7057] should_failslab+0xa8/0x100 [ 240.471419][ T7057] __kmalloc_noprof+0xdf/0x7b0 [ 240.471438][ T7057] ? tomoyo_encode+0x28b/0x550 [ 240.471468][ T7057] tomoyo_encode+0x28b/0x550 [ 240.471498][ T7057] tomoyo_realpath_from_path+0x58d/0x5d0 [ 240.471530][ T7057] ? tomoyo_path_number_perm+0x219/0x630 [ 240.471552][ T7057] tomoyo_path_number_perm+0x246/0x630 [ 240.471576][ T7057] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 240.471595][ T7057] ? __lock_acquire+0x6b5/0x2cf0 [ 240.471620][ T7057] ? do_raw_spin_lock+0x12b/0x2f0 [ 240.471671][ T7057] ? __fget_files+0x2a/0x420 [ 240.471688][ T7057] ? __fget_files+0x2a/0x420 [ 240.471702][ T7057] ? __fget_files+0x3a6/0x420 [ 240.471717][ T7057] ? __fget_files+0x2a/0x420 [ 240.471737][ T7057] security_file_ioctl+0xc3/0x2a0 [ 240.471798][ T7057] __se_sys_ioctl+0x47/0x170 [ 240.471821][ T7057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.471840][ T7057] do_syscall_64+0x15f/0xf80 [ 240.471861][ T7057] ? trace_irq_disable+0x3b/0x140 [ 240.471882][ T7057] ? clear_bhb_loop+0x40/0x90 [ 240.471903][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.471923][ T7057] RIP: 0033:0x7f1e96ddcdd9 [ 240.471938][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.471953][ T7057] RSP: 002b:00007f1e95036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.471971][ T7057] RAX: ffffffffffffffda RBX: 00007f1e97055fa0 RCX: 00007f1e96ddcdd9 [ 240.471983][ T7057] RDX: 0000000000000002 RSI: 0000000000005606 RDI: 0000000000000004 [ 240.471994][ T7057] RBP: 00007f1e95036090 R08: 0000000000000000 R09: 0000000000000000 [ 240.472005][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.472015][ T7057] R13: 00007f1e97056038 R14: 00007f1e97055fa0 R15: 00007fff849bb098 [ 240.472045][ T7057] [ 240.485027][ T7057] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.635974][ T7078] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 241.636049][ T7078] netlink: 96 bytes leftover after parsing attributes in process `syz.0.379'. [ 241.636107][ T7078] netlink: 1 bytes leftover after parsing attributes in process `syz.0.379'. [ 241.636141][ T7078] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 242.759820][ T7091] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 242.792612][ T7092] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 242.800612][ T7092] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 242.947568][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 242.952820][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 243.252532][ T7106] IPVS: length: 155 != 24 [ 243.279418][ T7106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.383'. [ 243.279443][ T7106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.383'. [ 243.283124][ T7106] netlink: 'syz.1.383': attribute type 32 has an invalid length. [ 243.283141][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 243.662061][ T7106] bond1: option coupled_control: invalid value (6) [ 243.927514][ T7106] bond1 (unregistering): Released all slaves [ 244.368379][ T7121] netlink: 68 bytes leftover after parsing attributes in process `syz.3.385'. [ 244.368406][ T7121] netlink: 68 bytes leftover after parsing attributes in process `syz.3.385'. [ 244.374282][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 244.544440][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 244.551625][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 244.551650][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.551667][ T10] usb 3-1: Product: ␁ [ 244.551679][ T10] usb 3-1: Manufacturer: к [ 244.551692][ T10] usb 3-1: SerialNumber: 쥯햰鮒轇궐䱨숭邏﨤叔凛⑾傾낾샍㻙译矔뉫ᶪ풧愭紓漖넠䗯挷瞥騭뒮鍷맼䗥값ዞឪᖶ祯뺸䵖ᨦ駛河㚈뱦ꓻ뤌룻雘끾딉⚽꩘㎖尣乫눩綖岋Ҏ략꟥멿릂⯀桽裹㫛簚⢍대쨷唦攲퀝㢞ߤꃙ綽颹ﻹㆈە싶弦繩㦷㮼漠踾葶쮓⊅銼짉䰦迪৛ꪜ冋鳺䇸ᵟ集쵾ﵮ [ 244.699874][ T37] audit: type=1326 audit(1778395777.911:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.4.388" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed9f4fcdd9 code=0x0 [ 244.811589][ T10] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 244.819519][ T10] usb 3-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 244.819543][ T10] usb 3-1: found format II with max.bitrate = 23241, frame size=256 [ 244.819570][ T10] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 245.078917][ T7152] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 245.078959][ T7152] netlink: 96 bytes leftover after parsing attributes in process `syz.3.391'. [ 245.078974][ T7152] netlink: 1 bytes leftover after parsing attributes in process `syz.3.391'. [ 245.078993][ T7152] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 245.978816][ T7155] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 246.069377][ T7156] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 246.257197][ T10] usb 3-1: USB disconnect, device number 19 [ 246.474237][ T36] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.654301][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 246.655267][ T36] usb 5-1: no configurations [ 246.655281][ T36] usb 5-1: can't read configurations, error -22 [ 246.659742][ T7174] tmpfs: Bad value for 'mpol' [ 246.719832][ T5715] udevd[5715]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.794231][ T36] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 246.944668][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 247.044338][ T36] usb 5-1: no configurations [ 247.044357][ T36] usb 5-1: can't read configurations, error -22 [ 247.049941][ T36] usb usb5-port1: attempt power cycle [ 247.654411][ T36] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 247.675827][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 247.678757][ T36] usb 5-1: no configurations [ 247.678773][ T36] usb 5-1: can't read configurations, error -22 [ 247.810856][ T36] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 247.917612][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 247.994623][ T36] usb 5-1: no configurations [ 247.995694][ T36] usb 5-1: can't read configurations, error -22 [ 248.084320][ T36] usb usb5-port1: unable to enumerate USB device [ 248.235196][ T37] audit: type=1326 audit(1778395780.951:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7178 comm="syz.0.400" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e96ddcdd9 code=0x0 [ 248.475398][ T7197] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 248.475440][ T7197] netlink: 96 bytes leftover after parsing attributes in process `syz.2.404'. [ 248.475460][ T7197] netlink: 1 bytes leftover after parsing attributes in process `syz.2.404'. [ 248.475472][ T7197] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 249.651216][ T37] audit: type=1326 audit(1778395782.861:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7199 comm="syz.0.405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e96ddcdd9 code=0x0 [ 251.614261][ T5614] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 251.634291][ T5737] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 251.766893][ T5614] usb 3-1: Using ep0 maxpacket: 32 [ 251.774717][ T5614] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 251.774742][ T5614] usb 3-1: config 0 has no interface number 0 [ 251.774785][ T5614] usb 3-1: config 0 interface 89 has no altsetting 0 [ 251.792766][ T5614] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 251.792792][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.792809][ T5614] usb 3-1: Product: syz [ 251.792873][ T5614] usb 3-1: Manufacturer: syz [ 251.792886][ T5614] usb 3-1: SerialNumber: syz [ 251.807214][ T5737] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.807240][ T5737] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.807260][ T5737] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.811735][ T5737] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 251.811759][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 251.811776][ T5737] usb 5-1: Product: syz [ 251.811789][ T5737] usb 5-1: Manufacturer: syz [ 251.811801][ T5737] usb 5-1: SerialNumber: syz [ 252.337161][ T5614] usb 3-1: config 0 descriptor?? [ 252.359335][ T5614] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 252.359368][ T5614] em28xx 3-1:0.89: Video interface 89 found: [ 252.588256][ T5737] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 252.634308][ T821] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 252.635290][ T5614] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 252.708667][ T36] usb 5-1: USB disconnect, device number 22 [ 252.740378][ T36] usblp0: removed [ 252.785885][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 252.788507][ T821] usb 4-1: config 0 has no interfaces? [ 252.788539][ T821] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 252.788560][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.797352][ T821] usb 4-1: config 0 descriptor?? [ 252.816335][ T5850] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 252.827347][ T5614] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 252.827374][ T5614] em28xx 3-1:0.89: board has no eeprom [ 252.884330][ T5614] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 252.884368][ T5614] em28xx 3-1:0.89: analog set to bulk mode. [ 252.885431][ T821] em28xx 3-1:0.89: Registering V4L2 extension [ 252.921222][ T5614] usb 3-1: USB disconnect, device number 20 [ 252.924345][ T5614] em28xx 3-1:0.89: Disconnecting em28xx [ 253.002415][ T5850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.002443][ T5850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.002463][ T5850] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.018806][ T821] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 253.018826][ T821] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 253.018837][ T821] em28xx 3-1:0.89: No AC97 audio processor [ 253.073572][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 253.073599][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 253.073617][ T5850] usb 2-1: Product: syz [ 253.073630][ T5850] usb 2-1: Manufacturer: syz [ 253.073643][ T5850] usb 2-1: SerialNumber: syz [ 253.272921][ T5737] usb 4-1: USB disconnect, device number 9 [ 253.391448][ T5850] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.410489][ T821] usb 3-1: Decoder not found [ 253.410508][ T821] em28xx 3-1:0.89: failed to create media graph [ 253.410566][ T821] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 253.763727][ T821] em28xx 3-1:0.89: Registering snapshot button... [ 253.878246][ T10] usb 2-1: USB disconnect, device number 27 [ 253.911106][ T7243] loop5: detected capacity change from 0 to 7 [ 253.994493][ C0] blk_print_req_error: 10 callbacks suppressed [ 253.994527][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.002290][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.002317][ C1] buffer_io_error: 10 callbacks suppressed [ 254.002326][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.015391][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.015421][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.015706][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.015731][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.016576][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.016603][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.017836][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.017862][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.019772][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.019798][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.020135][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.020160][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.020246][ T7243] ldm_validate_partition_table(): Disk read failed. [ 254.020745][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.020770][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.029115][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.029143][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.030046][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.033090][ T7243] Dev loop5: unable to read RDB block 0 [ 254.037997][ T7243] loop5: unable to read partition table [ 254.038286][ T7243] loop5: partition table beyond EOD, truncated [ 254.038304][ T7243] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 254.068918][ T10] usblp0: removed [ 254.454311][ T7249] 9pnet_virtio: no channels available for device syz [ 255.301576][ T821] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input12 [ 255.570161][ T37] audit: type=1326 audit(1778395788.781:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7250 comm="syz.3.420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cf669cdd9 code=0x0 [ 255.714888][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714955][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.445088][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 256.614246][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 256.617540][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.617570][ T9] usb 1-1: config 0 has no interfaces? [ 256.621482][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 256.621505][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 256.621524][ T9] usb 1-1: Product: syz [ 256.621537][ T9] usb 1-1: Manufacturer: syz [ 256.621557][ T9] usb 1-1: SerialNumber: syz [ 256.777541][ T821] em28xx 3-1:0.89: Remote control support is not available for this card. [ 256.777799][ T5614] em28xx 3-1:0.89: Closing input extension [ 256.778663][ T5614] em28xx 3-1:0.89: Deregistering snapshot button [ 256.810493][ T9] usb 1-1: config 0 descriptor?? [ 257.505255][ T9] usb 1-1: USB disconnect, device number 14 [ 258.604236][ T821] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 258.757302][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 258.758174][ T821] usb 5-1: no configurations [ 258.758189][ T821] usb 5-1: can't read configurations, error -22 [ 258.886742][ T821] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 258.940766][ T7280] kAFS: unable to lookup cell '' [ 258.941121][ T7282] kAFS: unable to lookup cell ' |(' [ 259.035137][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 259.039506][ T821] usb 5-1: no configurations [ 259.039521][ T821] usb 5-1: can't read configurations, error -22 [ 259.040385][ T821] usb usb5-port1: attempt power cycle [ 259.090402][ T5614] em28xx 3-1:0.89: Freeing device [ 259.377006][ T821] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 259.405520][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 259.406317][ T821] usb 5-1: no configurations [ 259.406331][ T821] usb 5-1: can't read configurations, error -22 [ 259.534304][ T821] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 259.554824][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 259.557404][ T821] usb 5-1: no configurations [ 259.557419][ T821] usb 5-1: can't read configurations, error -22 [ 259.557771][ T821] usb usb5-port1: unable to enumerate USB device [ 259.690389][ T7297] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 259.690455][ T7297] netlink: 96 bytes leftover after parsing attributes in process `syz.2.434'. [ 259.690512][ T7297] netlink: 1 bytes leftover after parsing attributes in process `syz.2.434'. [ 259.690546][ T7297] netlink: 658 bytes leftover after parsing attributes in process `syz.2.434'. [ 260.908244][ T5850] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 261.057412][ T5850] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 261.057440][ T5850] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 261.057459][ T5850] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 261.057477][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.057494][ T5850] usb 3-1: config 0 has no interfaces? [ 261.057522][ T5850] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 261.057543][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.136081][ T5850] usb 3-1: config 0 descriptor?? [ 261.357966][ T5850] usb 3-1: USB disconnect, device number 21 [ 261.847647][ T7326] tipc: Resetting bearer [ 262.626989][ T7337] FAULT_INJECTION: forcing a failure. [ 262.626989][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 262.627020][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.0.451 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.627038][ T7337] Tainted: [L]=SOFTLOCKUP [ 262.627043][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.627051][ T7337] Call Trace: [ 262.627057][ T7337] [ 262.627062][ T7337] dump_stack_lvl+0xe8/0x150 [ 262.627084][ T7337] should_fail_ex+0x46b/0x600 [ 262.627109][ T7337] should_failslab+0xa8/0x100 [ 262.627126][ T7337] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 262.627140][ T7337] ? __alloc_skb+0x1d0/0x7d0 [ 262.627153][ T7337] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.627173][ T7337] __alloc_skb+0x1d0/0x7d0 [ 262.627189][ T7337] netlink_sendmsg+0x5d4/0xb40 [ 262.627212][ T7337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.627232][ T7337] ? unwind_get_return_address+0x4d/0x90 [ 262.627252][ T7337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.627276][ T7337] ____sys_sendmsg+0x94c/0x9c0 [ 262.627296][ T7337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.627317][ T7337] ? import_iovec+0x73/0xa0 [ 262.627334][ T7337] ___sys_sendmsg+0x2a5/0x360 [ 262.627349][ T7337] ? __lock_acquire+0x6b5/0x2cf0 [ 262.627368][ T7337] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.627407][ T7337] ? __fget_files+0x2a/0x420 [ 262.627418][ T7337] ? __fget_files+0x3a6/0x420 [ 262.627436][ T7337] __x64_sys_sendmsg+0x1c3/0x2a0 [ 262.627453][ T7337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.627476][ T7337] ? __pfx_ksys_write+0x10/0x10 [ 262.627497][ T7337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.627512][ T7337] do_syscall_64+0x15f/0xf80 [ 262.627527][ T7337] ? trace_irq_disable+0x3b/0x140 [ 262.627542][ T7337] ? clear_bhb_loop+0x40/0x90 [ 262.627558][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.627572][ T7337] RIP: 0033:0x7f1e96ddcdd9 [ 262.627586][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.627598][ T7337] RSP: 002b:00007f1e95036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.627614][ T7337] RAX: ffffffffffffffda RBX: 00007f1e97055fa0 RCX: 00007f1e96ddcdd9 [ 262.627625][ T7337] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000003 [ 262.627634][ T7337] RBP: 00007f1e95036090 R08: 0000000000000000 R09: 0000000000000000 [ 262.627643][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.627651][ T7337] R13: 00007f1e97056038 R14: 00007f1e97055fa0 R15: 00007fff849bb098 [ 262.627673][ T7337] [ 262.694229][ T821] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 262.847211][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 262.852096][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.852119][ T821] usb 5-1: config 0 has no interfaces? [ 262.858009][ T821] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 262.858034][ T821] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 262.858052][ T821] usb 5-1: Product: syz [ 262.858065][ T821] usb 5-1: Manufacturer: syz [ 262.858077][ T821] usb 5-1: SerialNumber: syz [ 262.877669][ T821] usb 5-1: config 0 descriptor?? [ 263.309533][ T7350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.456'. [ 263.315709][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.456'. [ 263.724283][ T821] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 263.884253][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 263.885737][ T821] usb 4-1: no configurations [ 263.885753][ T821] usb 4-1: can't read configurations, error -22 [ 264.015782][ T821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.064255][ T5735] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 264.184211][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 264.184865][ T821] usb 4-1: no configurations [ 264.184876][ T821] usb 4-1: can't read configurations, error -22 [ 264.185172][ T821] usb usb4-port1: attempt power cycle [ 264.215641][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 264.218351][ T5735] usb 2-1: config 0 has no interfaces? [ 264.218384][ T5735] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 264.218405][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.256493][ T5735] usb 2-1: config 0 descriptor?? [ 264.524238][ T821] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 264.544768][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 264.545525][ T821] usb 4-1: no configurations [ 264.545535][ T821] usb 4-1: can't read configurations, error -22 [ 265.509124][ T5850] usb 5-1: USB disconnect, device number 27 [ 265.524512][ T821] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 265.556937][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 265.558231][ T821] usb 4-1: no configurations [ 265.558245][ T821] usb 4-1: can't read configurations, error -22 [ 265.560217][ T31] usb 2-1: USB disconnect, device number 28 [ 265.565382][ T821] usb usb4-port1: unable to enumerate USB device [ 265.657172][ T7392] netlink: 176 bytes leftover after parsing attributes in process `syz.4.475'. [ 265.873740][ T7400] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 265.889495][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.890078][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.924346][ T821] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 267.052347][ T7417] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 267.074345][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 267.076473][ T821] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 267.076488][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.113750][ T821] usb 1-1: config 0 descriptor?? [ 267.205955][ T821] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 267.324178][ T821] gspca_vc032x: reg_r err -32 [ 267.324669][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324682][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324690][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324698][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324706][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324714][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324721][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324725][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324729][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324733][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324738][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324742][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324746][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324750][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324754][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324758][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324762][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324766][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.324770][ T821] gspca_vc032x: Unknown sensor... [ 267.325302][ T821] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 268.779345][ T36] usb 1-1: USB disconnect, device number 15 [ 268.835991][ T7423] overlayfs: missing 'lowerdir' [ 268.945998][ T5850] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 269.223730][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 269.287966][ T5850] usb 5-1: no configurations [ 269.287985][ T5850] usb 5-1: can't read configurations, error -22 [ 269.638391][ T7441] FAULT_INJECTION: forcing a failure. [ 269.638391][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 269.638476][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.2.490 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 269.638502][ T7441] Tainted: [L]=SOFTLOCKUP [ 269.638508][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.638520][ T7441] Call Trace: [ 269.638527][ T7441] [ 269.638535][ T7441] dump_stack_lvl+0xe8/0x150 [ 269.638561][ T7441] should_fail_ex+0x46b/0x600 [ 269.638592][ T7441] should_failslab+0xa8/0x100 [ 269.638615][ T7441] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 269.638635][ T7441] ? __alloc_skb+0x1d0/0x7d0 [ 269.638654][ T7441] ? lockdep_hardirqs_on+0x7a/0x110 [ 269.638680][ T7441] __alloc_skb+0x1d0/0x7d0 [ 269.638704][ T7441] netlink_sendmsg+0x5d4/0xb40 [ 269.638724][ T7441] ? irqentry_exit+0x218/0x760 [ 269.638742][ T7441] ? rcu_is_watching+0x15/0xb0 [ 269.638774][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.638802][ T7441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.638823][ T7441] ____sys_sendmsg+0x94c/0x9c0 [ 269.638851][ T7441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.638881][ T7441] ? import_iovec+0x73/0xa0 [ 269.638904][ T7441] ___sys_sendmsg+0x2a5/0x360 [ 269.638928][ T7441] ? __lock_acquire+0x6b5/0x2cf0 [ 269.638955][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.638980][ T7441] ? finish_task_switch+0x41f/0xbe0 [ 269.639029][ T7441] ? __fget_files+0x2a/0x420 [ 269.639046][ T7441] ? __fget_files+0x3a6/0x420 [ 269.639071][ T7441] __x64_sys_sendmsg+0x1c3/0x2a0 [ 269.639096][ T7441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.639126][ T7441] ? rcu_is_watching+0x15/0xb0 [ 269.639157][ T7441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.639176][ T7441] do_syscall_64+0x15f/0xf80 [ 269.639198][ T7441] ? clear_bhb_loop+0x40/0x90 [ 269.639218][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.639236][ T7441] RIP: 0033:0x7f36350bcdd9 [ 269.639253][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.639268][ T7441] RSP: 002b:00007f36332ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.639287][ T7441] RAX: ffffffffffffffda RBX: 00007f3635336090 RCX: 00007f36350bcdd9 [ 269.639300][ T7441] RDX: 000000000000c050 RSI: 0000200000009dc0 RDI: 0000000000000009 [ 269.639312][ T7441] RBP: 00007f36332ed090 R08: 0000000000000000 R09: 0000000000000000 [ 269.639323][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.639340][ T7441] R13: 00007f3635336128 R14: 00007f3635336090 R15: 00007ffdf0b33d98 [ 269.639369][ T7441] [ 269.995587][ T5850] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 270.374412][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 270.375782][ T5850] usb 5-1: no configurations [ 270.375797][ T5850] usb 5-1: can't read configurations, error -22 [ 270.376134][ T5850] usb usb5-port1: attempt power cycle [ 270.954663][ T5850] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 270.992750][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 271.675022][ T5850] usb 5-1: device descriptor read/all, error -71 [ 271.920535][ T7468] netlink: 176 bytes leftover after parsing attributes in process `syz.4.501'. [ 272.044335][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.210723][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 272.213306][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.213335][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.213355][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.213393][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 272.213413][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.290518][ T31] usb 4-1: config 0 descriptor?? [ 273.781015][ T31] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 273.782755][ T31] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 274.301672][ T31] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 274.301703][ T31] microsoft 0003:045E:07DA.0001: no inputs found [ 274.301716][ T31] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 274.356855][ T5600] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 274.415270][ T7508] 9pnet_virtio: no channels available for device syz [ 274.783267][ T31] usb 4-1: USB disconnect, device number 14 [ 274.973750][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.973796][ T5600] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.973817][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.982425][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 275.071558][ T5600] usb 3-1: config 0 descriptor?? [ 275.155788][ T7510] FAULT_INJECTION: forcing a failure. [ 275.155788][ T7510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.155833][ T7510] CPU: 1 UID: 0 PID: 7510 Comm: syz.0.516 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.155880][ T7510] Tainted: [L]=SOFTLOCKUP [ 275.155886][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.155897][ T7510] Call Trace: [ 275.155905][ T7510] [ 275.155912][ T7510] dump_stack_lvl+0xe8/0x150 [ 275.155938][ T7510] should_fail_ex+0x46b/0x600 [ 275.155971][ T7510] _copy_from_iter+0x1d3/0x1670 [ 275.156001][ T7510] ? rcu_is_watching+0x15/0xb0 [ 275.156025][ T7510] ? __pfx__copy_from_iter+0x10/0x10 [ 275.156040][ T7510] ? trace_kmalloc+0x2a/0xf0 [ 275.156062][ T7510] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 275.156084][ T7510] ? proc_sys_call_handler+0x3d2/0x830 [ 275.156112][ T7510] proc_sys_call_handler+0x426/0x830 [ 275.156139][ T7510] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 275.156170][ T7510] vfs_write+0x629/0xba0 [ 275.156199][ T7510] ? __pfx_vfs_write+0x10/0x10 [ 275.156221][ T7510] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.156244][ T7510] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.156267][ T7510] ? mutex_lock_nested+0x152/0x1d0 [ 275.156290][ T7510] ? fdget_pos+0x252/0x320 [ 275.156316][ T7510] ksys_write+0x156/0x270 [ 275.156339][ T7510] ? __pfx_ksys_write+0x10/0x10 [ 275.156367][ T7510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.156387][ T7510] do_syscall_64+0x15f/0xf80 [ 275.156407][ T7510] ? trace_irq_disable+0x3b/0x140 [ 275.156427][ T7510] ? clear_bhb_loop+0x40/0x90 [ 275.156449][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.156467][ T7510] RIP: 0033:0x7f1e96ddcdd9 [ 275.156483][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.156498][ T7510] RSP: 002b:00007f1e95036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.156515][ T7510] RAX: ffffffffffffffda RBX: 00007f1e97055fa0 RCX: 00007f1e96ddcdd9 [ 275.156528][ T7510] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 275.156540][ T7510] RBP: 00007f1e95036090 R08: 0000000000000000 R09: 0000000000000000 [ 275.156551][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.156562][ T7510] R13: 00007f1e97056038 R14: 00007f1e97055fa0 R15: 00007fff849bb098 [ 275.156593][ T7510] [ 275.491334][ T5600] usbhid 3-1:0.0: can't add hid device: -71 [ 275.491446][ T5600] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 275.521769][ T5600] usb 3-1: USB disconnect, device number 22 [ 275.614225][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 275.620763][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.620787][ T9] usb 5-1: config 0 has no interfaces? [ 275.627097][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 275.627121][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 275.627139][ T9] usb 5-1: Product: syz [ 275.627152][ T9] usb 5-1: Manufacturer: syz [ 275.627165][ T9] usb 5-1: SerialNumber: syz [ 275.886564][ T9] usb 5-1: config 0 descriptor?? [ 276.358332][ T7507] fido_id[7507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 276.474351][ T5600] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 276.508379][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.508933][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.677211][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 276.694234][ T5600] usb 3-1: Using ep0 maxpacket: 32 [ 276.697050][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.697077][ T5600] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 276.697089][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.701627][ T5600] usb 3-1: config 0 descriptor?? [ 276.744775][ T5614] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 276.783148][ T7529] FAULT_INJECTION: forcing a failure. [ 276.783148][ T7529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.783203][ T7529] CPU: 0 UID: 0 PID: 7529 Comm: syz.1.522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.783229][ T7529] Tainted: [L]=SOFTLOCKUP [ 276.783235][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.783246][ T7529] Call Trace: [ 276.783258][ T7529] [ 276.783265][ T7529] dump_stack_lvl+0xe8/0x150 [ 276.783291][ T7529] should_fail_ex+0x46b/0x600 [ 276.783323][ T7529] _copy_from_user+0x2d/0xb0 [ 276.783344][ T7529] ucma_listen+0xa0/0x440 [ 276.783369][ T7529] ? __pfx_ucma_listen+0x10/0x10 [ 276.783391][ T7529] ? __pfx_ucma_listen+0x10/0x10 [ 276.783420][ T7529] ucma_write+0x257/0x2f0 [ 276.783442][ T7529] ? __pfx_ucma_write+0x10/0x10 [ 276.783464][ T7529] ? rw_verify_area+0x25b/0x4e0 [ 276.783483][ T7529] ? __pfx_ucma_write+0x10/0x10 [ 276.783505][ T7529] vfs_write+0x2a3/0xba0 [ 276.783532][ T7529] ? __pfx_vfs_write+0x10/0x10 [ 276.783553][ T7529] ? __fget_files+0x2a/0x420 [ 276.783572][ T7529] ? __fget_files+0x2a/0x420 [ 276.783587][ T7529] ? __fget_files+0x3a6/0x420 [ 276.783602][ T7529] ? __fget_files+0x2a/0x420 [ 276.783626][ T7529] ksys_write+0x156/0x270 [ 276.783648][ T7529] ? __pfx_ksys_write+0x10/0x10 [ 276.783665][ T7529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.783692][ T7529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.783711][ T7529] do_syscall_64+0x15f/0xf80 [ 276.783734][ T7529] ? clear_bhb_loop+0x40/0x90 [ 276.783757][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.783774][ T7529] RIP: 0033:0x7f350e2dcdd9 [ 276.783791][ T7529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.783806][ T7529] RSP: 002b:00007f350c4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.783826][ T7529] RAX: ffffffffffffffda RBX: 00007f350e556180 RCX: 00007f350e2dcdd9 [ 276.783840][ T7529] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 276.783852][ T7529] RBP: 00007f350c4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 276.783867][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.783884][ T7529] R13: 00007f350e556218 R14: 00007f350e556180 R15: 00007ffed9fa2bf8 [ 276.783913][ T7529] [ 277.548659][ T5600] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 277.612352][ T5700] usb 5-1: USB disconnect, device number 32 [ 277.626560][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 277.627285][ T5614] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 277.627310][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.629014][ T31] usb 4-1: config 0 has no interfaces? [ 277.629042][ T31] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 277.629061][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.636425][ T7531] FAULT_INJECTION: forcing a failure. [ 277.636425][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 277.636455][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.1.523 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 277.636480][ T7531] Tainted: [L]=SOFTLOCKUP [ 277.636486][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.636495][ T7531] Call Trace: [ 277.636502][ T7531] [ 277.636509][ T7531] dump_stack_lvl+0xe8/0x150 [ 277.636534][ T7531] should_fail_ex+0x46b/0x600 [ 277.636574][ T7531] should_failslab+0xa8/0x100 [ 277.636596][ T7531] __kmalloc_noprof+0xdf/0x7b0 [ 277.636615][ T7531] ? tomoyo_encode+0x28b/0x550 [ 277.636644][ T7531] tomoyo_encode+0x28b/0x550 [ 277.636673][ T7531] tomoyo_realpath_from_path+0x58d/0x5d0 [ 277.636707][ T7531] ? tomoyo_path_number_perm+0x219/0x630 [ 277.636729][ T7531] tomoyo_path_number_perm+0x246/0x630 [ 277.636753][ T7531] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.636773][ T7531] ? __lock_acquire+0x6b5/0x2cf0 [ 277.636797][ T7531] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.636846][ T7531] ? __fget_files+0x2a/0x420 [ 277.636865][ T7531] ? __fget_files+0x2a/0x420 [ 277.636880][ T7531] ? __fget_files+0x3a6/0x420 [ 277.636894][ T7531] ? __fget_files+0x2a/0x420 [ 277.636912][ T7531] security_file_ioctl+0xc3/0x2a0 [ 277.636937][ T7531] __se_sys_ioctl+0x47/0x170 [ 277.636957][ T7531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.636976][ T7531] do_syscall_64+0x15f/0xf80 [ 277.636996][ T7531] ? trace_irq_disable+0x3b/0x140 [ 277.637014][ T7531] ? clear_bhb_loop+0x40/0x90 [ 277.637035][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.637052][ T7531] RIP: 0033:0x7f350e2dcdd9 [ 277.637072][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.637087][ T7531] RSP: 002b:00007f350c536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.637106][ T7531] RAX: ffffffffffffffda RBX: 00007f350e555fa0 RCX: 00007f350e2dcdd9 [ 277.637118][ T7531] RDX: 0000200000000080 RSI: 00000000c1105517 RDI: 0000000000000005 [ 277.637129][ T7531] RBP: 00007f350c536090 R08: 0000000000000000 R09: 0000000000000000 [ 277.637140][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.637150][ T7531] R13: 00007f350e556038 R14: 00007f350e555fa0 R15: 00007ffed9fa2bf8 [ 277.637179][ T7531] [ 277.654414][ T7531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.664065][ T5600] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 277.936370][ T7537] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 277.936435][ T7537] netlink: 96 bytes leftover after parsing attributes in process `syz.4.524'. [ 277.936472][ T7537] netlink: 1 bytes leftover after parsing attributes in process `syz.4.524'. [ 277.936486][ T7537] netlink: 'syz.4.524': attribute type 8 has an invalid length. [ 277.936502][ T7537] netlink: 630 bytes leftover after parsing attributes in process `syz.4.524'. [ 278.860345][ T7542] FAULT_INJECTION: forcing a failure. [ 278.860345][ T7542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.860384][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.4.527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 278.860408][ T7542] Tainted: [L]=SOFTLOCKUP [ 278.860415][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.860425][ T7542] Call Trace: [ 278.860432][ T7542] [ 278.860440][ T7542] dump_stack_lvl+0xe8/0x150 [ 278.860471][ T7542] should_fail_ex+0x46b/0x600 [ 278.860503][ T7542] _copy_to_user+0x31/0xb0 [ 278.860524][ T7542] copy_siginfo_to_user+0x22/0xc0 [ 278.860545][ T7542] x64_setup_rt_frame+0x77c/0xcb0 [ 278.860569][ T7542] ? rt_spin_unlock+0x14f/0x200 [ 278.860605][ T7542] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 278.860639][ T7542] arch_do_signal_or_restart+0x44b/0x850 [ 278.860666][ T7542] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 278.860709][ T7542] exit_to_user_mode_loop+0x8c/0x4d0 [ 278.860729][ T7542] ? rcu_is_watching+0x15/0xb0 [ 278.860753][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.860771][ T7542] do_syscall_64+0x33e/0xf80 [ 278.860791][ T7542] ? trace_irq_disable+0x3b/0x140 [ 278.860810][ T7542] ? clear_bhb_loop+0x40/0x90 [ 278.860831][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.860847][ T7542] RIP: 0033:0x7fed9f4fcdd7 [ 278.860864][ T7542] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 278.860878][ T7542] RSP: 002b:00007fed9d756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 278.860897][ T7542] RAX: 0000000000000114 RBX: 00007fed9f775fa0 RCX: 00007fed9f4fcdd9 [ 278.860908][ T7542] RDX: 0000060000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 278.860919][ T7542] RBP: 00007fed9d756090 R08: 0000000000000000 R09: 0000000000000000 [ 278.860930][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.860940][ T7542] R13: 00007fed9f776038 R14: 00007fed9f775fa0 R15: 00007ffcde00adb8 [ 278.860968][ T7542] [ 279.103089][ T5600] usb 3-1: USB disconnect, device number 23 [ 279.156209][ T31] usb 4-1: config 0 descriptor?? [ 279.187877][ T31] usb 4-1: can't set config #0, error -71 [ 279.200366][ T5600] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 279.216010][ T5614] usb 1-1: config 0 descriptor?? [ 279.263511][ T31] usb 4-1: USB disconnect, device number 15 [ 279.299827][ T5614] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 279.713014][ T7549] 9pnet_virtio: no channels available for device syz [ 280.374223][ T5614] gspca_cpia1: usb_control_msg 05, error -71 [ 280.377217][ T5614] gspca_cpia1: usb_control_msg 01, error -71 [ 280.377232][ T5614] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 281.225997][ T7540] ------------[ cut here ]------------ [ 281.226011][ T7540] debug_locks && !(!get_current()->pi_blocked_on) [ 281.226023][ T7540] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#0: syz.1.526/7540 [ 281.226058][ T7540] Modules linked in: [ 281.226079][ T7540] CPU: 0 UID: 0 PID: 7540 Comm: syz.1.526 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.226104][ T7540] Tainted: [L]=SOFTLOCKUP [ 281.226111][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.226122][ T7540] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 281.226140][ T7540] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fa 20 14 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 de 20 14 f6 [ 281.226156][ T7540] RSP: 0018:ffffc9000601f5a0 EFLAGS: 00010282 [ 281.226171][ T7540] RAX: 1ffff1100bfc153f RBX: 1ffff92000c03eb8 RCX: 0000000000000046 [ 281.226185][ T7540] RDX: 0000000000000000 RSI: ffffffff8d86313b RDI: ffffffff8ba74fe0 [ 281.226197][ T7540] RBP: ffffc9000601f660 R08: ffffffff8220f7d4 R09: ffff88801a02a758 [ 281.226211][ T7540] R10: dffffc0000000000 R11: fffffbfff1f11ddf R12: ffff88805fe0a9f8 [ 281.226225][ T7540] R13: dffffc0000000000 R14: ffff88801a02a700 R15: ffffc9000601f5e0 [ 281.226240][ T7540] FS: 00007f350c5366c0(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 281.226256][ T7540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.226269][ T7540] CR2: 00007ffd5245efa8 CR3: 000000003c758000 CR4: 00000000003526f0 [ 281.226286][ T7540] Call Trace: [ 281.226294][ T7540] [ 281.226306][ T7540] ? __pfx_rt_spin_lock+0x10/0x10 [ 281.226327][ T7540] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 281.226350][ T7540] ? lockdep_hardirqs_on+0x7a/0x110 [ 281.226372][ T7540] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 281.226398][ T7540] ? fill_pool+0x156/0x580 [ 281.226415][ T7540] get_from_partial_node+0x54/0x480 [ 281.226450][ T7540] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 281.226477][ T7540] ? fill_pool+0x156/0x580 [ 281.226493][ T7540] ___slab_alloc+0xb2/0x670 [ 281.226530][ T7540] kmem_cache_alloc_noprof+0xea/0x680 [ 281.226551][ T7540] ? fill_pool+0x156/0x580 [ 281.226572][ T7540] fill_pool+0x156/0x580 [ 281.226596][ T7540] ? __pfx_fill_pool+0x10/0x10 [ 281.226619][ T7540] ? debug_objects_fill_pool+0x6f/0xd0 [ 281.226644][ T7540] ? debug_objects_fill_pool+0x6f/0xd0 [ 281.226671][ T7540] debug_objects_fill_pool+0x97/0xd0 [ 281.226711][ T7540] debug_object_assert_init+0x34/0x340 [ 281.226744][ T7540] hrtimer_start_range_ns+0x3f/0xef0 [ 281.226781][ T7540] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.226807][ T7540] futex_lock_pi+0x8df/0xb10 [ 281.226839][ T7540] ? __pfx_futex_lock_pi+0x10/0x10 [ 281.226865][ T7540] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 281.226884][ T7540] ? __lock_acquire+0x6b5/0x2cf0 [ 281.226930][ T7540] ? __pfx_futex_wake_mark+0x10/0x10 [ 281.226974][ T7540] do_futex+0x292/0x420 [ 281.227006][ T7540] ? __pfx_do_futex+0x10/0x10 [ 281.227041][ T7540] __se_sys_futex+0x3a8/0x450 [ 281.227074][ T7540] ? __pfx___se_sys_futex+0x10/0x10 [ 281.227100][ T7540] ? __task_pid_nr_ns+0x28/0x470 [ 281.227129][ T7540] ? __x64_sys_futex+0x21/0xf0 [ 281.227176][ T7540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.227198][ T7540] do_syscall_64+0x15f/0xf80 [ 281.227222][ T7540] ? clear_bhb_loop+0x40/0x90 [ 281.227246][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.227264][ T7540] RIP: 0033:0x7f350e2dcdd9 [ 281.227281][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.227297][ T7540] RSP: 002b:00007f350c536028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.227316][ T7540] RAX: ffffffffffffffda RBX: 00007f350e555fa0 RCX: 00007f350e2dcdd9 [ 281.227331][ T7540] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 281.227343][ T7540] RBP: 00007f350e372d69 R08: 0000000000000000 R09: 0000000000000001 [ 281.227355][ T7540] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 281.227367][ T7540] R13: 00007f350e556038 R14: 00007f350e555fa0 R15: 00007ffed9fa2bf8 [ 281.227400][ T7540] [ 281.227410][ T7540] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 281.227425][ T7540] CPU: 0 UID: 0 PID: 7540 Comm: syz.1.526 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.227456][ T7540] Tainted: [L]=SOFTLOCKUP [ 281.227462][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.227473][ T7540] Call Trace: [ 281.227481][ T7540] [ 281.227488][ T7540] vpanic+0x56c/0xa60 [ 281.227512][ T7540] ? __pfx__printk+0x10/0x10 [ 281.227537][ T7540] ? __pfx_vpanic+0x10/0x10 [ 281.227557][ T7540] ? is_bpf_text_address+0x292/0x2b0 [ 281.227580][ T7540] ? is_bpf_text_address+0x26/0x2b0 [ 281.227612][ T7540] panic+0xc5/0xd0 [ 281.227633][ T7540] ? __pfx_panic+0x10/0x10 [ 281.227671][ T7540] __warn+0x315/0x4c0 [ 281.227692][ T7540] ? rt_spin_lock+0x31c/0x400 [ 281.227711][ T7540] ? rt_spin_lock+0x31c/0x400 [ 281.227730][ T7540] __report_bug+0x29a/0x540 [ 281.227751][ T7540] ? __lock_acquire+0x6b5/0x2cf0 [ 281.227779][ T7540] ? rt_spin_lock+0x31c/0x400 [ 281.227798][ T7540] ? __pfx___report_bug+0x10/0x10 [ 281.227820][ T7540] ? __lock_acquire+0x6b5/0x2cf0 [ 281.227846][ T7540] ? __lock_acquire+0x6b5/0x2cf0 [ 281.227875][ T7540] ? __lock_acquire+0x6b5/0x2cf0 [ 281.227900][ T7540] ? rt_spin_lock+0x31c/0x400 [ 281.227918][ T7540] report_bug+0x16a/0x220 [ 281.227940][ T7540] ? rt_spin_lock+0x31c/0x400 [ 281.227956][ T7540] ? rt_spin_lock+0x31e/0x400 [ 281.227972][ T7540] handle_bug+0x9c/0x200 [ 281.227997][ T7540] exc_invalid_op+0x1a/0x50 [ 281.228022][ T7540] asm_exc_invalid_op+0x1a/0x20 [ 281.228040][ T7540] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 281.228057][ T7540] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fa 20 14 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 de 20 14 f6 [ 281.228073][ T7540] RSP: 0018:ffffc9000601f5a0 EFLAGS: 00010282 [ 281.228089][ T7540] RAX: 1ffff1100bfc153f RBX: 1ffff92000c03eb8 RCX: 0000000000000046 [ 281.228102][ T7540] RDX: 0000000000000000 RSI: ffffffff8d86313b RDI: ffffffff8ba74fe0 [ 281.228115][ T7540] RBP: ffffc9000601f660 R08: ffffffff8220f7d4 R09: ffff88801a02a758 [ 281.228128][ T7540] R10: dffffc0000000000 R11: fffffbfff1f11ddf R12: ffff88805fe0a9f8 [ 281.228142][ T7540] R13: dffffc0000000000 R14: ffff88801a02a700 R15: ffffc9000601f5e0 [ 281.228162][ T7540] ? get_from_partial_node+0x54/0x480 [ 281.228199][ T7540] ? __pfx_rt_spin_lock+0x10/0x10 [ 281.228218][ T7540] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 281.228240][ T7540] ? lockdep_hardirqs_on+0x7a/0x110 [ 281.228262][ T7540] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 281.228287][ T7540] ? fill_pool+0x156/0x580 [ 281.228303][ T7540] get_from_partial_node+0x54/0x480 [ 281.228331][ T7540] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 281.228358][ T7540] ? fill_pool+0x156/0x580 [ 281.228374][ T7540] ___slab_alloc+0xb2/0x670 [ 281.228410][ T7540] kmem_cache_alloc_noprof+0xea/0x680 [ 281.228433][ T7540] ? fill_pool+0x156/0x580 [ 281.228461][ T7540] fill_pool+0x156/0x580 [ 281.228485][ T7540] ? __pfx_fill_pool+0x10/0x10 [ 281.228508][ T7540] ? debug_objects_fill_pool+0x6f/0xd0 [ 281.228533][ T7540] ? debug_objects_fill_pool+0x6f/0xd0 [ 281.228561][ T7540] debug_objects_fill_pool+0x97/0xd0 [ 281.228587][ T7540] debug_object_assert_init+0x34/0x340 [ 281.228618][ T7540] hrtimer_start_range_ns+0x3f/0xef0 [ 281.228652][ T7540] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.228677][ T7540] futex_lock_pi+0x8df/0xb10 [ 281.228709][ T7540] ? __pfx_futex_lock_pi+0x10/0x10 [ 281.228734][ T7540] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 281.228753][ T7540] ? __lock_acquire+0x6b5/0x2cf0 [ 281.228798][ T7540] ? __pfx_futex_wake_mark+0x10/0x10 [ 281.228842][ T7540] do_futex+0x292/0x420 [ 281.228873][ T7540] ? __pfx_do_futex+0x10/0x10 [ 281.228908][ T7540] __se_sys_futex+0x3a8/0x450 [ 281.228940][ T7540] ? __pfx___se_sys_futex+0x10/0x10 [ 281.228967][ T7540] ? __task_pid_nr_ns+0x28/0x470 [ 281.228995][ T7540] ? __x64_sys_futex+0x21/0xf0 [ 281.229021][ T7540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.229041][ T7540] do_syscall_64+0x15f/0xf80 [ 281.229064][ T7540] ? clear_bhb_loop+0x40/0x90 [ 281.229087][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.229105][ T7540] RIP: 0033:0x7f350e2dcdd9 [ 281.229120][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.229135][ T7540] RSP: 002b:00007f350c536028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.229152][ T7540] RAX: ffffffffffffffda RBX: 00007f350e555fa0 RCX: 00007f350e2dcdd9 [ 281.229166][ T7540] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 281.229178][ T7540] RBP: 00007f350e372d69 R08: 0000000000000000 R09: 0000000000000001 [ 281.229189][ T7540] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 281.229201][ T7540] R13: 00007f350e556038 R14: 00007f350e555fa0 R15: 00007ffed9fa2bf8 [ 281.229233][ T7540] [ 281.229633][ T7540] Kernel Offset: disabled