last executing test programs: 43.531553552s ago: executing program 2 (id=1610): syz_usb_connect$uac2(0x5, 0x8f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102000000208c0d0c0040000102030109027d000301008008080b0101010c20060904000000010120000924010300041d000408240a05004000030c2403020703050305030001"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1009}}, {0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="2403d8c1ee2e54e39704c727ff2b0791e5fbb6f7b50637bfd181918d1eb1667cc53865ea"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) listen(0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) 41.13515071s ago: executing program 2 (id=1615): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = socket(0x2, 0x3, 0xff) sendto$inet(r2, 0x0, 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x0, 0x5, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x2, 0x2001, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x2, 0x10, "57e0e2e0b1b00763b78ad274c1823f65faeb2253656ce5164a80127357aa4ba4", 0x3132564e}) 40.882919469s ago: executing program 2 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 40.023298022s ago: executing program 2 (id=1618): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000080)) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) 36.732359679s ago: executing program 2 (id=1623): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000140)={"37ce7f07583d8ee176f1ff84573b93f549823ebb845077172f2217d45353", 0x9c8, 0x0, 0x8, [0x10002, 0x7, 0x6, 0x2, 0x5, 0x8, 0x8, 0x725, 0x2, 0x80000000, 0x1, 0x1d8, 0x4, 0x200000a, 0x5, 0x0, 0x42a70c94, 0x87]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r2}) (fail_nth: 2) 33.839927027s ago: executing program 2 (id=1625): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x1}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, 0x0, 0x580, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8669ef6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xdd, 0xa9, @random="fec6cf9260883fc99010e84ebd32d8de76582b841a8f149e790626741a25f47a9198d49e845f7403b1087b694024909efa5f908578a8ac670cbe29b84b3a3adc7a8d98ad80c925c828f17831c66794188d175c4d08dcd5a5abcc3c989bd2a655ba490313c697fcb5a4a988e7646d74b2d3db989c8d3b3298261302c54ffbaf77c5b074adf2931d48b24ef02bde41c63e54be10c4ff941bcb352af5bfe926936d2d78753f015e388057dc56c526e4e853d33c6e13ef5778b75968c060f7869351ce7930330d00e8319489beb1592c2db29db5e4169cb910428a"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000436000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff2000/0xb000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48800) 18.222328368s ago: executing program 32 (id=1625): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x1}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, 0x0, 0x580, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8669ef6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xdd, 0xa9, @random="fec6cf9260883fc99010e84ebd32d8de76582b841a8f149e790626741a25f47a9198d49e845f7403b1087b694024909efa5f908578a8ac670cbe29b84b3a3adc7a8d98ad80c925c828f17831c66794188d175c4d08dcd5a5abcc3c989bd2a655ba490313c697fcb5a4a988e7646d74b2d3db989c8d3b3298261302c54ffbaf77c5b074adf2931d48b24ef02bde41c63e54be10c4ff941bcb352af5bfe926936d2d78753f015e388057dc56c526e4e853d33c6e13ef5778b75968c060f7869351ce7930330d00e8319489beb1592c2db29db5e4169cb910428a"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000436000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff2000/0xb000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48800) 13.484096906s ago: executing program 1 (id=1654): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x3ffffffffc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) sched_setaffinity(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000020c0)=""/4086, &(0x7f0000000180)=0xff6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x40000021, 0x0, 0x400000000000000}]}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf255c00000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x48851}, 0x800) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r10, 0x3) accept4$bt_l2cap(r10, 0x0, 0x0, 0x80800) 11.043710718s ago: executing program 1 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x6) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 9.934107488s ago: executing program 1 (id=1658): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f00007ce000/0x2000)=nil, 0x2000, 0x300000c, 0x204031, r0, 0xab2a7000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_connect$midi(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmmsg(r1, &(0x7f0000000240)=[{{&(0x7f0000000080)=@ax25={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, 0x0}}], 0x1, 0x4000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, 0x0, 0x0) 9.602475487s ago: executing program 3 (id=1661): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$smack_xattr_label(r0, &(0x7f0000007400)='security.SMACK64MMAP\x00', &(0x7f0000007440)={',[:$.^'}, 0x7, 0x1) 9.322927703s ago: executing program 3 (id=1663): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) unshare(0x28000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x8000, 0x1000}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)=[0x5]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x22, 0xd, 0x2}, 0x18, 0x3) 8.591696528s ago: executing program 4 (id=1666): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='k+][$+.\xc9){$[++#%.^+\x00', 0x40000, &(0x7f0000000080)={@_ha_fsid={[0x2a16, 0x80000001]}, {0x90, 0x2, 0x3}}, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x9}, {[0xa, 0x2, 0x1, 0x80000001]}, 0x7ff, 0x11, &(0x7f00000001c0)=""/17}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x48}}, 0x0) getpid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}], 0x1, 0x8, 0x0) r8 = socket$inet(0x2, 0x3, 0x30) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x0, @multicast2}}) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, 0x0, 0x34004000) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, 0x0, 0x20000011) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000240007012ebd7000fddbdf25027c00000c0001800800020001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeefffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) 8.296511006s ago: executing program 1 (id=1667): ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = fsopen(&(0x7f0000000300)='overlay\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x14c98, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x4}, &(0x7f0000000140)=0x28) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) socket$nl_route(0x10, 0x3, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet(0x2, 0x1, 0x0) bind$inet(r9, 0x0, 0x0) 8.13644356s ago: executing program 4 (id=1669): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x524, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12003, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x6, 0x7, 0x9, 0x8, 0x1, 0x8001, 0x222a}, &(0x7f0000000180)=0x20) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000280)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x20010608) keyctl$describe(0x6, r1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_mreq(r3, 0x84, 0x15, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.019393264s ago: executing program 3 (id=1670): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x14, 0x0, 0x6a98047402e98331, 0x70bd21, 0xff9f}, 0x14}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200408c4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 7.556512175s ago: executing program 3 (id=1671): syz_emit_ethernet(0x5e, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ssrr={0x89, 0xf, 0x1b, [@empty, @rand_addr=0x64010100, @loopback]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c4600aaf900f401"], 0x440) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34324258, 0x2, @stepwise={0x9, 0x2, 0x9, 0xc80, 0x9, 0x1}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f0000000380), 0x0}, 0x20) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000840)}, {&(0x7f0000000b40)="20e10b747bd987df7139f08ff7a85650c4d1a235791950777bc24f945d94aaab7bab12e5bb945c18c19eb04c8a5e05efeea61af7a7143e8447f6c3332f457af1d3357368e5aac00e87377dadbdda70f73f132628b5d4bd495f73e1622b2236b4f34d2080a3d12b010a02a41f6d7bb6a154922ae1b16ade7c4312c434f49919b1c967f06efcf612b1a8aa22edf6a9f4becf3b5c4adfbc9659125c5e91007e6ba471684a0690dacf90108f7b98", 0xac}, {&(0x7f0000000c00)="3d56a96d8eaee56f371d70dffc6f0e5bb1e6de7a20a8271b8f285e8a14378abc7f83cacdf7848c3b410628ac099a7bc72dd8e2c67344bab74ca27d5f9814af000ef15a9831e19fc109bd777d4c12ebe8edcf05854ef4ed821b79b05a33c78e64261840b6683603622de45067f65a64b80e208cdf7e08a710373b25d43e359b", 0x7f}, {&(0x7f0000000400)="adb2afbdb879b1b7bef5e88150d80806c9c18a9dfea0cded255b266501", 0x1d}, {&(0x7f0000000f40)}], 0x5}}], 0x1, 0x4c040) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0xfffffffe, 0x3, 0x0}) r8 = io_uring_setup(0x7d53, &(0x7f00000000c0)={0x0, 0x1, 0x1000, 0x0, 0x10a}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x18, &(0x7f0000000000), 0x1) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x10003, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 6.780294691s ago: executing program 1 (id=1673): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x2f) socket(0x2, 0x80805, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x40000009, 0x83}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000300)='@\x1f\xf0b\x8e\xef\xbf\x14', &(0x7f0000000800)="3acbf5ddb939", 0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) read(0xffffffffffffffff, 0x0, 0xfffffea1) close(0xffffffffffffffff) 6.288516362s ago: executing program 3 (id=1674): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000000de81fb057ea40000006b113c00000000148510000102000000850000007600000095000000000000009500a505000000005bcb00cccd3247e1868fa731186a895d879b0b4c9b9adebd60d9082782d3ca5e1f49d01f3bf01911e45ed6ee36629f7284c74df1db2d67d6d371ea1dcd01153db47526af0f9418ce43cef470675f9b7ec9a606c5b27b487aa87910aade2592fb4e8af574d40ff0a0d017cb1563963a919d9ffa13dd28c02ff89c347b2f1419"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x2e, 0x0, 0x1000001, 0x1}, 0x28) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) kexec_load(0x0, 0x5, &(0x7f0000000480)=[{&(0x7f0000000000)="c5a47ed5689d36be88f3a027c7d5635a34e41ea6cab592595708d7241bd0225199af58a9610a21128df600a73eeb8908280d03ae2956804d6473619d4521e0c2d44cb9d8a15ecc31a2d78e62dcaef5fc4c11a6c11ab6a02ce908e27d2d750ffb9a341b3a575fe63e0c07ba7372afa34d192a0f07c7166f28a319d9ae8b7db6c6a7a0ecf938151dce73cfb594c44edb980bf29e095dfb259e7b908111cd3bc3305324dc95edd75a14dd3e4921ea13950a9e556cfccb86d8c3b65543eba07061c3", 0xc0, 0x100, 0x80}, {&(0x7f00000000c0)="4e057711a6a934d7516fc0baa1db38a5b4e6ce4e0320a1c120e8ef8e6b128a1b179ba60055725ba4f3df328db536d8dc34d199453fe8e150ed02c579c6dc0a6b787fc01f315d644ece55665a800734fb775622dfd246497876b7114a7e1be86539a98b312115efad8a3e4fc2077cfb173d8a7d5bb91c85d26637ae305323ea310b29fa706ee446904954dff813d64e888f5f888acc802870f71364536f6cf56c7c727e", 0xa3, 0x6, 0x6313}, {&(0x7f0000000180)="bf2d71fbef55c5fa8609fdf1a126af904e3234a2aa12dbaead1305d21e45c81057cefbb2e3a1193a3be7fa29582af4d84c1aa4012c1708134767ae64b0419dadcc145a7b201012ebc1e58ec18db5ae93ea2bb8d47e2ccda21e71003fa32c65fb0b8f5d75702f25726f516305c10c06a2c473e011ab550f216a7f6ba876b8244a94115f48bbe749023531dd9257181cb7ce279084dc3fcff430d1c0ef0a0a0580817204f9159ba347674522687324a417edc8090a372be1408029188b9e9c15d3a9b343a1b11cb3ff41d096a11eacd9c319f73eb926f3eb9914760ad8d7", 0xdd, 0x7, 0x34}, {&(0x7f0000000540)="983a9e24ecea946ca8734add02506b6d2a9487c58fce0c2d6306d51b5e6ffd6b1dc17aa3050e05cd30202546d5135ffa6b9a37c30771649aeb0c4409df0c5185a167aecc3bc55c6975bccd9941452344c97756cd39ef738035de588cfe471f4f2222d65fe5eac6f723624336803a8fdbbf3d4c0b6b743b8a18b20c944a9c15ee269404f107fd07fd2e66d26c55c3ed00d274d2fccf36f6e84f76ff83af23ffa8c88c93894d2fe9ea7d5b1441bf0db98b75c932c779df67fe8bb0f4fcea2224bd81a493590f7d91281c38d0660a630208205a", 0xd2, 0x0, 0x7}, {&(0x7f0000000380)="eb3ca2a7b538bcd3ff259e45a4fbe68cf7066f7e537d730959e0200913f6b013db531444509ec8eb1ffc53921b382d625edacd36157a0ec966b2f2ebc195139bea8813fac16e1b002d4253b45f59ae3204e718d8b72e836abfeab6f38b7d8444b21d55cc43ec01e1d37f329c8d5dbe04645beff03e2cc34f29e99d2cc4ada59893b0bfe4d340b7facff3461ab5fb7264398bdb9edc3ca41837f313b7083107448dcd6164fc9bb9a76f2dc2c4e742f7af1ac045d9cd025fcc02b01108eca790aae72a2a9ec6d51b519ae97c8d0896f7", 0xcf, 0x8, 0x3}], 0x1) 6.236423946s ago: executing program 1 (id=1675): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0xfe, 0x3996, 0x5, 0x1, 0x2}) socket$unix(0x1, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000100)=""/52, 0x34}], 0x2, 0x0, 0x7, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x21, &(0x7f0000000340)='/dev/fb0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) mkdir(0x0, 0x104) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r6, &(0x7f0000000080), 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.965455051s ago: executing program 3 (id=1677): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="000e02"], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000a40), 0xb76e0b6, 0x42cd11793a841149) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r3, 0x60b, 0x70bd31, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x30}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x0, 0x0, 0x2d, "ccb5acdf67b98d4faa22481af99e275d5d28ffaee025114c35b2c0a5282582caced3d73e6bea9dbbb761e0ae65"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x1, 0x0, 0x2, 0x9, 0x1, 0xfff, 0x3, 0x40, 0x7ff, 0x2, 0x5, 0xfffe}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0xef9d}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000600)={0x20, 0x89, 0x2}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4c80) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f00000006c0)={0x0, 0xf, 0x80, {0x80, 0x6, "4e319128a94a81f6e70ff1cd4b40f657964ae46213c09c4793c51e27f78348319e0de78d3904f0d87e8db89a536252a673b1e4e6d6dae61154a5f790cc4f47307ecd9aac8e7ab55cb6161a2037539e43388d940c986cd9acaa38366135772521fd6737974a73ff6bcd0557f59567f5723c635975e3b78fbff95aef9ab7d3"}}, &(0x7f0000000780)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "a70da034e0aff76e49e8f4ae7f0f65824a78df44c8e0c834cbf9f26ad81539ae55c79d8c993d000288abbf3d935404f0a3c7cefc0cbd606c0b3583c83e69fbb90f57ed553c08ceba532bcfff75f99a29b4360b46d047a80e13ac781abdabcf358d90231bee67d3afac2a6e7b7ce80496e45a47cf9ddf915cd4380c6429ba12aecc579ec729a4105eca9eceadddb86d9268a08d62773299f533db52005b4b7b256e46a1be029c348b9200adbfd36c4d5700637cc65f9bad24875ca9c7300e629927cc3b61882bc4a2652c6fa43bcb6790abab180535e5640433799d863f90df6de0d8ed284beaba2570863a194368df98055124b43ef7"}}}, &(0x7f0000000c40)={0x34, &(0x7f00000008c0)={0x40, 0xe, 0xbd, "2f3b0d98a5bd1fc7b161c3bc9047199cce3b7960cb4014545509a736e6b9fb59c52a60402d6e98ae9f4940cec6fd00eae6a793db275fe6d3beec7379153cd97a8ea135e2e237d9085a06a9549974c7b8ce04a14c01c133e3a114b6291ab449cfc74ab598f8fa9e98838c6cf7ad21567b515133ac134ad8558352452f2c826a980c8cd0dcda497eefc02d71b7df6dc686438bf1da969a715a0ac041ee17d319407ed800928cb9dbae08ba954035466c86660471699468f9cb5daf492179"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b00)={0x20, 0x0, 0x82, {0x80, "3f243f3404533e9a2bf29396f36d5c9039f62d0fec45d63150736ff51c8a744180a17535bc1009e11df4ce6cb7514f6dd10a41fc33cbb0cfd144ea8ebb6e5ab67fbc585c83e00428710d66f8302f5d681ec1cef8855193810293b3978e973c427f25d5056f6297a162e5bdcf9cb1776611700055b3acebd1bcc7db46fb4fccef"}}, &(0x7f0000000bc0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0x7a}}) 5.668976061s ago: executing program 0 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)='\b\x005-', 0x4}, {&(0x7f0000000240)="3bf4f591", 0x4}], 0x2}, 0x24008004) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}]}, 0x40}}, 0x0) 5.228155297s ago: executing program 0 (id=1679): syz_usb_connect$uac2(0x5, 0x8f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102000000208c0d0c0040000102030109027d000301008008080b0101010c20060904000000010120000924010300041d000408240a05004000030c240302070305030503000109040100000102200009040101ef68810102200009050109000408060608250182300128"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1009}}, {0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="2403d8c1ee2e54e39704c727ff2b0791e5fbb6f7b50637bfd181918d1eb1667cc53865ea"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) listen(0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) 4.610506052s ago: executing program 0 (id=1680): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x14, 0x0, 0x6a98047402e98331, 0x70bd21, 0xff9f}, 0x14}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200408c4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) 4.51062971s ago: executing program 4 (id=1681): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x402100) fsopen(0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, &(0x7f0000000580)) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:*\t\n'], 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xa) 4.481247119s ago: executing program 0 (id=1682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.132201907s ago: executing program 0 (id=1683): write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x2, 0x7, 0x6, 0x7c4, 0xf37}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x1a) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) syz_open_dev$loop(&(0x7f0000001180), 0x81, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@raw={0xc, 0x1, "47657964741c"}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) 1.220528121s ago: executing program 4 (id=1684): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x2f) socket(0x2, 0x80805, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x40000009, 0x83}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000300)='@\x1f\xf0b\x8e\xef\xbf\x14', &(0x7f0000000800)="3acbf5ddb939", 0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) read(0xffffffffffffffff, 0x0, 0xfffffea1) close(0xffffffffffffffff) 1.045894768s ago: executing program 4 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 887.255723ms ago: executing program 0 (id=1686): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028088000140000000000c0001800800014000001c02080006400400000005000500020000000500010006"], 0x70}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r2 = open(&(0x7f0000000380)='./file0\x00', 0x800003, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x110) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000640)={@private2, 0x0}, &(0x7f0000000680)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r6, 0x25, 0x8, @void}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x202482, &(0x7f0000000140)='GPL\x00') bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) r8 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) r9 = socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000004000180100002800c000180080001"], 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0xaa02cdbaf0d167f6, 0x3, 0x9, {{0x10, 0x4, 0x2, 0x3, 0x40, 0x65, 0x0, 0xc3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@generic={0x89, 0xf, "13a8248d739b6d70f44d3b28f8"}, @generic={0x86, 0xc, "2de5e667d5adef162e06"}, @ssrr={0x89, 0xf, 0xe5, [@loopback, @rand_addr=0x64010100, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x0, 0x10, 0x8, 0x9, {{0x10, 0x4, 0x1, 0x37, 0x40, 0x68, 0x0, 0x7c, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x80, [@broadcast]}, @rr={0x7, 0x13, 0xdb, [@local, @dev={0xac, 0x14, 0x14, 0x17}, @empty, @rand_addr=0x64010102]}, @generic={0x89, 0xe, "bb44e8e2cd561cb35b550013"}, @ra={0x94, 0x4, 0x1}]}}}}}) 0s ago: executing program 4 (id=1687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20120000000a01040000000000000000010000040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000b08000340000000b308000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001008000240000000120400058008a80640000000030900010073797a3000000000140000001100010000000000000000000700000a"], 0x10c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x200000180, 0x2, 0x29, 0xf1, 0x100000001, 0x10, 0x8, 0x0, 0x80, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x2ca000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x800000000003, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x3f, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x70000, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x3, 0x5}, {0x60000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0x1, 0xeeee0000, 0xf, 0x3, 0x16, 0x4, 0x14, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x0, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x80a0000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0x2c, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = io_uring_setup(0x4166, 0x0) io_uring_enter(r7, 0x0, 0xfc86, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 462.406486][ T9283] [ 462.406496][ T9283] dump_stack_lvl+0xe8/0x150 [ 462.406535][ T9283] should_fail_ex+0x46b/0x600 [ 462.406574][ T9283] _copy_to_user+0x31/0xb0 [ 462.406600][ T9283] simple_read_from_buffer+0xe1/0x170 [ 462.406634][ T9283] proc_fail_nth_read+0x1be/0x230 [ 462.406668][ T9283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.406701][ T9283] ? rw_verify_area+0x2ac/0x4e0 [ 462.406734][ T9283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.406765][ T9283] vfs_read+0x212/0xa80 [ 462.406808][ T9283] ? __pfx_vfs_read+0x10/0x10 [ 462.406845][ T9283] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 462.406871][ T9283] ? lockdep_hardirqs_on+0x7a/0x110 [ 462.406897][ T9283] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 462.406924][ T9283] ? mutex_lock_nested+0x152/0x1d0 [ 462.406957][ T9283] ? fdget_pos+0x252/0x320 [ 462.406997][ T9283] ksys_read+0x156/0x270 [ 462.407044][ T9283] ? __pfx_ksys_read+0x10/0x10 [ 462.407093][ T9283] do_syscall_64+0x14d/0xf80 [ 462.407119][ T9283] ? trace_irq_disable+0x3b/0x150 [ 462.407147][ T9283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.407171][ T9283] ? clear_bhb_loop+0x40/0x90 [ 462.407199][ T9283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.407223][ T9283] RIP: 0033:0x7f4baa4fd04e [ 462.407244][ T9283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 462.407265][ T9283] RSP: 002b:00007f4ba8753fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.407288][ T9283] RAX: ffffffffffffffda RBX: 00007f4ba87546c0 RCX: 00007f4baa4fd04e [ 462.407305][ T9283] RDX: 000000000000000f RSI: 00007f4ba87540a0 RDI: 0000000000000006 [ 462.407320][ T9283] RBP: 00007f4ba8754090 R08: 0000000000000000 R09: 0000000000000000 [ 462.407335][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.407348][ T9283] R13: 00007f4baa7b6218 R14: 00007f4baa7b6180 R15: 00007ffefc6ce078 [ 462.407384][ T9283] [ 463.148180][ T5881] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 463.148214][ T5881] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 463.148236][ T5881] usb 2-1: Product: syz [ 463.148252][ T5881] usb 2-1: Manufacturer: syz [ 463.148268][ T5881] usb 2-1: SerialNumber: syz [ 463.191432][ T5881] usb 2-1: config 0 descriptor?? [ 463.217840][ T5881] ch341 2-1:0.0: ch341-uart converter detected [ 464.049756][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.051924][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.585441][ T5881] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 466.752748][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.760870][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.990944][ T31] usb 2-1: USB disconnect, device number 46 [ 467.044237][ T31] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 467.047864][ T31] ch341 2-1:0.0: device disconnected [ 468.120505][ T9330] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 468.625658][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.626249][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.088090][ T9369] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1143'. [ 469.102151][ T5880] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 469.272785][ T5880] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 469.273035][ T5880] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 469.273059][ T5880] usb 2-1: Product: syz [ 469.273075][ T5880] usb 2-1: Manufacturer: syz [ 469.273091][ T5880] usb 2-1: SerialNumber: syz [ 469.321175][ T5880] usb 2-1: config 0 descriptor?? [ 469.333396][ T5880] ch341 2-1:0.0: ch341-uart converter detected [ 470.461119][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.461559][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.474680][ T9393] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 470.839019][ T5880] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 471.068241][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.068966][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.200674][ T5880] usb 2-1: USB disconnect, device number 47 [ 471.232502][ T5880] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 471.235258][ T5880] ch341 2-1:0.0: device disconnected [ 472.497564][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.498175][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.159143][ T9441] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1179'. [ 473.907703][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907743][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907770][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907800][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907819][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907855][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907883][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907912][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907937][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 473.907962][ T5887] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 474.251115][ T5887] hid-generic 00A0:0006:0003.0014: hidraw1: HID v0.05 Device [syz0] on syz0 [ 475.380600][ T9450] fido_id[9450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.706438][ T9476] FAULT_INJECTION: forcing a failure. [ 476.706438][ T9476] name failslab, interval 1, probability 0, space 0, times 0 [ 476.706482][ T9476] CPU: 1 UID: 0 PID: 9476 Comm: syz.0.1194 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.706517][ T9476] Tainted: [L]=SOFTLOCKUP [ 476.706525][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 476.706541][ T9476] Call Trace: [ 476.706550][ T9476] [ 476.706560][ T9476] dump_stack_lvl+0xe8/0x150 [ 476.706600][ T9476] should_fail_ex+0x46b/0x600 [ 476.706637][ T9476] should_failslab+0xa8/0x100 [ 476.706664][ T9476] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 476.706701][ T9476] ? __alloc_skb+0x1d0/0x7d0 [ 476.706722][ T9476] ? lockdep_hardirqs_on+0x7a/0x110 [ 476.706754][ T9476] __alloc_skb+0x1d0/0x7d0 [ 476.706782][ T9476] netlink_sendmsg+0x5d4/0xb40 [ 476.706847][ T9476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.706891][ T9476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.706930][ T9476] ____sys_sendmsg+0x94c/0x9c0 [ 476.706963][ T9476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.706999][ T9476] ? import_iovec+0x73/0xa0 [ 476.707025][ T9476] ___sys_sendmsg+0x2a5/0x360 [ 476.707057][ T9476] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.707144][ T9476] ? __fget_files+0x2a/0x420 [ 476.707174][ T9476] ? __fget_files+0x3a6/0x420 [ 476.707215][ T9476] __x64_sys_sendmsg+0x1c3/0x2a0 [ 476.707244][ T9476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.707281][ T9476] ? __pfx_ksys_write+0x10/0x10 [ 476.707328][ T9476] do_syscall_64+0x14d/0xf80 [ 476.707353][ T9476] ? trace_irq_disable+0x3b/0x150 [ 476.707379][ T9476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.707402][ T9476] ? clear_bhb_loop+0x40/0x90 [ 476.707430][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.707453][ T9476] RIP: 0033:0x7fe6aa88c819 [ 476.707473][ T9476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.707494][ T9476] RSP: 002b:00007fe6a8ade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.707518][ T9476] RAX: ffffffffffffffda RBX: 00007fe6aab05fa0 RCX: 00007fe6aa88c819 [ 476.707534][ T9476] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 476.707549][ T9476] RBP: 00007fe6a8ade090 R08: 0000000000000000 R09: 0000000000000000 [ 476.707561][ T9476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.707574][ T9476] R13: 00007fe6aab06038 R14: 00007fe6aab05fa0 R15: 00007ffee9808d08 [ 476.707609][ T9476] [ 477.238017][ T9480] FAULT_INJECTION: forcing a failure. [ 477.238017][ T9480] name failslab, interval 1, probability 0, space 0, times 0 [ 477.238068][ T9480] CPU: 0 UID: 0 PID: 9480 Comm: syz.0.1197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 477.238098][ T9480] Tainted: [L]=SOFTLOCKUP [ 477.238106][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 477.238120][ T9480] Call Trace: [ 477.238129][ T9480] [ 477.238139][ T9480] dump_stack_lvl+0xe8/0x150 [ 477.238177][ T9480] should_fail_ex+0x46b/0x600 [ 477.238216][ T9480] should_failslab+0xa8/0x100 [ 477.238243][ T9480] __kmalloc_noprof+0xdf/0x7b0 [ 477.238264][ T9480] ? kfree+0x4d/0x6c0 [ 477.238294][ T9480] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 477.238331][ T9480] tomoyo_realpath_from_path+0xe3/0x5d0 [ 477.238373][ T9480] ? tomoyo_path_number_perm+0x219/0x630 [ 477.238399][ T9480] tomoyo_path_number_perm+0x246/0x630 [ 477.238425][ T9480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 477.238449][ T9480] ? __lock_acquire+0x6b5/0x2cf0 [ 477.238509][ T9480] ? __fget_files+0x2a/0x420 [ 477.238542][ T9480] ? __fget_files+0x2a/0x420 [ 477.238571][ T9480] ? __fget_files+0x3a6/0x420 [ 477.238600][ T9480] ? __fget_files+0x2a/0x420 [ 477.238634][ T9480] security_file_ioctl+0xc3/0x2a0 [ 477.238663][ T9480] __se_sys_ioctl+0x47/0x170 [ 477.238689][ T9480] do_syscall_64+0x14d/0xf80 [ 477.238716][ T9480] ? trace_irq_disable+0x3b/0x150 [ 477.238743][ T9480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.238768][ T9480] ? clear_bhb_loop+0x40/0x90 [ 477.238796][ T9480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.238819][ T9480] RIP: 0033:0x7fe6aa88c819 [ 477.238841][ T9480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.238862][ T9480] RSP: 002b:00007fe6a8ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.238887][ T9480] RAX: ffffffffffffffda RBX: 00007fe6aab05fa0 RCX: 00007fe6aa88c819 [ 477.238903][ T9480] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 477.238918][ T9480] RBP: 00007fe6a8ade090 R08: 0000000000000000 R09: 0000000000000000 [ 477.238931][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.238944][ T9480] R13: 00007fe6aab06038 R14: 00007fe6aab05fa0 R15: 00007ffee9808d08 [ 477.238978][ T9480] [ 477.238988][ T9480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 477.699091][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.699657][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.232319][ T5886] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 478.397469][ T5886] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 478.397500][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.397521][ T5886] usb 2-1: config 0 has no interface number 0 [ 478.401546][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 478.401578][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.401600][ T5886] usb 2-1: Product: syz [ 478.401617][ T5886] usb 2-1: Manufacturer: syz [ 478.401632][ T5886] usb 2-1: SerialNumber: syz [ 478.438437][ T5886] usb 2-1: config 0 descriptor?? [ 478.494350][ T5886] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 478.671780][ T5886] usb 2-1: USB disconnect, device number 48 [ 480.482155][ T5886] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 480.488190][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.522256][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.589222][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.601095][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.648033][ T9534] FAULT_INJECTION: forcing a failure. [ 480.648033][ T9534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.648075][ T9534] CPU: 1 UID: 0 PID: 9534 Comm: syz.4.1217 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 480.648106][ T9534] Tainted: [L]=SOFTLOCKUP [ 480.648118][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 480.648132][ T9534] Call Trace: [ 480.648140][ T9534] [ 480.648149][ T9534] dump_stack_lvl+0xe8/0x150 [ 480.648185][ T9534] should_fail_ex+0x46b/0x600 [ 480.648217][ T9534] _copy_to_user+0x31/0xb0 [ 480.648239][ T9534] simple_read_from_buffer+0xe1/0x170 [ 480.648269][ T9534] proc_fail_nth_read+0x1be/0x230 [ 480.648297][ T9534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.648324][ T9534] ? rw_verify_area+0x2ac/0x4e0 [ 480.648351][ T9534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.648376][ T9534] vfs_read+0x212/0xa80 [ 480.648409][ T9534] ? mptcp_setsockopt+0xb39/0x36f0 [ 480.648443][ T9534] ? __pfx_vfs_read+0x10/0x10 [ 480.648477][ T9534] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 480.648512][ T9534] ? kmem_cache_free+0x185/0x6b0 [ 480.648533][ T9534] ? do_sys_openat2+0x14c/0x200 [ 480.648573][ T9534] ksys_read+0x156/0x270 [ 480.648607][ T9534] ? __pfx_ksys_read+0x10/0x10 [ 480.648653][ T9534] do_syscall_64+0x14d/0xf80 [ 480.648678][ T9534] ? trace_irq_disable+0x3b/0x150 [ 480.648706][ T9534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.648731][ T9534] ? clear_bhb_loop+0x40/0x90 [ 480.648755][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.648778][ T9534] RIP: 0033:0x7f6d1a7dd04e [ 480.648805][ T9534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 480.648825][ T9534] RSP: 002b:00007f6d18a6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.648848][ T9534] RAX: ffffffffffffffda RBX: 00007f6d18a6e6c0 RCX: 00007f6d1a7dd04e [ 480.648866][ T9534] RDX: 000000000000000f RSI: 00007f6d18a6e0a0 RDI: 0000000000000004 [ 480.648880][ T9534] RBP: 00007f6d18a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 480.648893][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.648907][ T9534] R13: 00007f6d1aa96038 R14: 00007f6d1aa95fa0 R15: 00007ffcb422a358 [ 480.648942][ T9534] [ 480.670775][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.677993][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.678075][ T5886] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 480.678129][ T5886] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.678200][ T5886] usb 3-1: config 1 interface 0 has no altsetting 0 [ 480.699592][ T5886] usb 3-1: string descriptor 0 read error: -22 [ 480.699860][ T5886] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 480.699888][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.756320][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 480.756384][ T37] audit: type=1326 audit(1775589130.722:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aa88c819 code=0x7ffc0000 [ 480.756469][ T37] audit: type=1326 audit(1775589130.772:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aa88c819 code=0x7ffc0000 [ 480.756552][ T37] audit: type=1326 audit(1775589130.772:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aa88c819 code=0x7ffc0000 [ 480.758755][ T37] audit: type=1326 audit(1775589130.772:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aa88c819 code=0x7ffc0000 [ 480.758859][ T37] audit: type=1326 audit(1775589130.772:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe6aa88c819 code=0x7ffc0000 [ 480.774075][ T9521] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 481.012336][ T5886] usb 3-1: USB disconnect, device number 41 [ 481.055217][ T37] audit: type=1326 audit(1775589131.052:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6aa84d04e code=0x7ffc0000 [ 481.055345][ T37] audit: type=1326 audit(1775589131.072:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6aa84d04e code=0x7ffc0000 [ 481.059917][ T37] audit: type=1326 audit(1775589131.072:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6aa84d04e code=0x7ffc0000 [ 481.077321][ T37] audit: type=1326 audit(1775589131.072:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9517 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6aa84d04e code=0x7ffc0000 [ 481.112523][ T37] audit: type=1326 audit(1775589131.112:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9537 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6aa84d04e code=0x7ffc0000 [ 481.816251][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803d92f400: rx timeout, send abort [ 481.816598][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803d92f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 491.513737][ T5880] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 491.835577][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 491.848918][ T5880] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.849019][ T5880] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.849064][ T5880] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 491.849089][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.861108][ T5880] usbhid 3-1:128.0: can't add hid device: -71 [ 493.861353][ T5880] usbhid 3-1:128.0: probe with driver usbhid failed with error -71 [ 493.888126][ T5880] usb 3-1: USB disconnect, device number 42 [ 494.359068][ T9640] FAULT_INJECTION: forcing a failure. [ 494.359068][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 494.359166][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.4.1260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 494.359199][ T9640] Tainted: [L]=SOFTLOCKUP [ 494.359207][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.359220][ T9640] Call Trace: [ 494.359229][ T9640] [ 494.359239][ T9640] dump_stack_lvl+0xe8/0x150 [ 494.359282][ T9640] should_fail_ex+0x46b/0x600 [ 494.359320][ T9640] should_failslab+0xa8/0x100 [ 494.359346][ T9640] __kmalloc_noprof+0xdf/0x7b0 [ 494.359368][ T9640] ? tomoyo_encode+0x28b/0x550 [ 494.359403][ T9640] tomoyo_encode+0x28b/0x550 [ 494.359440][ T9640] tomoyo_realpath_from_path+0x58d/0x5d0 [ 494.359482][ T9640] ? tomoyo_path_number_perm+0x219/0x630 [ 494.359507][ T9640] tomoyo_path_number_perm+0x246/0x630 [ 494.359534][ T9640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.359563][ T9640] ? __lock_acquire+0x6b5/0x2cf0 [ 494.359624][ T9640] ? __fget_files+0x2a/0x420 [ 494.359655][ T9640] ? __fget_files+0x2a/0x420 [ 494.359690][ T9640] ? __fget_files+0x3a6/0x420 [ 494.359718][ T9640] ? __fget_files+0x2a/0x420 [ 494.359753][ T9640] security_file_ioctl+0xc3/0x2a0 [ 494.359780][ T9640] __se_sys_ioctl+0x47/0x170 [ 494.359805][ T9640] do_syscall_64+0x14d/0xf80 [ 494.359829][ T9640] ? trace_irq_disable+0x3b/0x150 [ 494.359856][ T9640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.359879][ T9640] ? clear_bhb_loop+0x40/0x90 [ 494.359908][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.359930][ T9640] RIP: 0033:0x7f6d1a81c819 [ 494.359950][ T9640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.359971][ T9640] RSP: 002b:00007f6d18a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.359995][ T9640] RAX: ffffffffffffffda RBX: 00007f6d1aa95fa0 RCX: 00007f6d1a81c819 [ 494.360010][ T9640] RDX: 0000200000000200 RSI: 000000004008ae9c RDI: 0000000000000005 [ 494.360024][ T9640] RBP: 00007f6d18a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 494.360038][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.360051][ T9640] R13: 00007f6d1aa96038 R14: 00007f6d1aa95fa0 R15: 00007ffcb422a358 [ 494.360086][ T9640] [ 494.360178][ T9640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.692128][ T5880] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 495.422962][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 495.426085][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.426141][ T5880] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 495.426225][ T5880] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.426254][ T5880] usb 3-1: config 1 interface 0 has no altsetting 0 [ 495.430008][ T5880] usb 3-1: string descriptor 0 read error: -22 [ 495.430217][ T5880] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 495.430303][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.529696][ T9638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.610986][ T9645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1244'. [ 496.248132][ T5880] usb 3-1: USB disconnect, device number 43 [ 500.988150][ T5887] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 501.013905][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 501.065649][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1273'. [ 501.165888][ T5887] usb 5-1: No LPM exit latency info found, disabling LPM. [ 501.165967][ T5887] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 501.169993][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 501.170034][ T5887] usb 5-1: can't read configurations, error -61 [ 501.221308][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.236559][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.425575][ T5887] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 501.807142][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.104765][ T5887] usb 5-1: No LPM exit latency info found, disabling LPM. [ 502.104847][ T5887] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 502.107312][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 502.107351][ T5887] usb 5-1: can't read configurations, error -61 [ 502.312592][ T5887] usb usb5-port1: attempt power cycle [ 502.529664][ T9686] 9p: Bad value for 'wfdno' [ 502.692105][ T5887] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 502.718804][ T5887] usb 5-1: No LPM exit latency info found, disabling LPM. [ 502.718886][ T5887] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 502.720981][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 502.721018][ T5887] usb 5-1: can't read configurations, error -61 [ 502.862147][ T5887] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 502.896530][ T5887] usb 5-1: No LPM exit latency info found, disabling LPM. [ 502.896608][ T5887] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 502.898848][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 502.898888][ T5887] usb 5-1: can't read configurations, error -61 [ 502.905091][ T5887] usb usb5-port1: unable to enumerate USB device [ 505.262881][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f2cf800: rx timeout, send abort [ 505.263441][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f2cf800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 506.912291][ T9716] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 506.934599][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 506.975992][ T9719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1286'. [ 510.899261][ T5887] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 511.052263][ T5887] usb 5-1: device descriptor read/64, error -71 [ 511.312237][ T5887] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 511.432232][ T5966] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 511.447167][ T5887] usb 5-1: device descriptor read/64, error -71 [ 511.565656][ T5887] usb usb5-port1: attempt power cycle [ 511.582144][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 511.584446][ T5966] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.584527][ T5966] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.584548][ T5966] usb 3-1: config 0 interface 0 has no altsetting 0 [ 511.584573][ T5966] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 511.584704][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.640213][ T9737] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 511.641696][ T9737] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 511.664129][ T5966] usb 3-1: config 0 descriptor?? [ 511.668793][ T9737] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 511.671495][ T9737] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 511.688548][ T9737] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 511.690642][ T9737] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 511.714801][ T9737] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 511.724225][ T9737] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 511.730063][ T9737] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 511.731024][ T9737] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 511.741272][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805eae2800: rx timeout, send abort [ 511.741871][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805eae2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 511.904885][ T9759] FAULT_INJECTION: forcing a failure. [ 511.904885][ T9759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 511.904927][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.1.1298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 511.904959][ T9759] Tainted: [L]=SOFTLOCKUP [ 511.904966][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 511.904989][ T9759] Call Trace: [ 511.904997][ T9759] [ 511.905004][ T9759] dump_stack_lvl+0xe8/0x150 [ 511.905065][ T9759] should_fail_ex+0x46b/0x600 [ 511.905104][ T9759] prepare_alloc_pages+0x22a/0x6b0 [ 511.905137][ T9759] __alloc_frozen_pages_noprof+0x12f/0x380 [ 511.905169][ T9759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 511.905191][ T9759] ? __pfx_policy_nodemask+0x10/0x10 [ 511.905237][ T9759] ? irqentry_exit+0x59e/0x620 [ 511.905276][ T9759] alloc_pages_mpol+0xd1/0x380 [ 511.905304][ T9759] ___kmalloc_large_node+0x4e/0x150 [ 511.905347][ T9759] __kmalloc_large_node_noprof+0x18/0x90 [ 511.905365][ T9759] __kmalloc_noprof+0x4a3/0x7b0 [ 511.905400][ T9759] ? iovec_from_user+0x87/0x250 [ 511.905427][ T9759] iovec_from_user+0x87/0x250 [ 511.905454][ T9759] __import_iovec+0x163/0x7e0 [ 511.905479][ T9759] ? __lock_acquire+0x6b5/0x2cf0 [ 511.905505][ T9759] import_iovec+0x73/0xa0 [ 511.905531][ T9759] vfs_writev+0x1d2/0x9a0 [ 511.905574][ T9759] ? __pfx_vfs_writev+0x10/0x10 [ 511.905618][ T9759] ? __fget_files+0x2a/0x420 [ 511.905652][ T9759] ? __fget_files+0x3a6/0x420 [ 511.905679][ T9759] ? __fget_files+0x2a/0x420 [ 511.905718][ T9759] __x64_sys_pwritev+0x1a2/0x2b0 [ 511.905746][ T9759] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 511.905783][ T9759] do_syscall_64+0x14d/0xf80 [ 511.905807][ T9759] ? trace_irq_disable+0x3b/0x150 [ 511.905834][ T9759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.905856][ T9759] ? clear_bhb_loop+0x40/0x90 [ 511.905883][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.905907][ T9759] RIP: 0033:0x7f5be6eac819 [ 511.905928][ T9759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.905948][ T9759] RSP: 002b:00007f5be5106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 511.905972][ T9759] RAX: ffffffffffffffda RBX: 00007f5be7125fa0 RCX: 00007f5be6eac819 [ 511.905987][ T9759] RDX: 1000000000000336 RSI: 0000200000000600 RDI: 0000000000000003 [ 511.906002][ T9759] RBP: 00007f5be5106090 R08: 0000000000000000 R09: 0000000000000000 [ 511.906019][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.906029][ T9759] R13: 00007f5be7126038 R14: 00007f5be7125fa0 R15: 00007fff5a129fd8 [ 511.906077][ T9759] [ 511.982520][ T5887] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 512.013245][ T5887] usb 5-1: device descriptor read/8, error -71 [ 512.220293][ T5966] kye 0003:0458:5014.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 512.239354][ T5966] kye 0003:0458:5014.0015: item fetching failed at offset 5/39 [ 512.250419][ T5966] kye 0003:0458:5014.0015: parse failed [ 512.250502][ T5966] kye 0003:0458:5014.0015: probe with driver kye failed with error -22 [ 512.303582][ T5887] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 512.324241][ T5887] usb 5-1: device descriptor read/8, error -71 [ 512.432442][ T5887] usb usb5-port1: unable to enumerate USB device [ 512.460977][ T9752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.461703][ T9752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.473061][ T5887] usb 3-1: USB disconnect, device number 44 [ 512.551213][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888062432400: rx timeout, send abort [ 512.551560][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888062432400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 516.326856][ T9778] bridge_slave_0: left allmulticast mode [ 516.327184][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.028404][ T9828] FAULT_INJECTION: forcing a failure. [ 521.028404][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 521.028472][ T9828] CPU: 1 UID: 0 PID: 9828 Comm: syz.4.1322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.028504][ T9828] Tainted: [L]=SOFTLOCKUP [ 521.028512][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.028526][ T9828] Call Trace: [ 521.028534][ T9828] [ 521.028544][ T9828] dump_stack_lvl+0xe8/0x150 [ 521.028584][ T9828] should_fail_ex+0x46b/0x600 [ 521.028622][ T9828] should_failslab+0xa8/0x100 [ 521.028648][ T9828] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 521.028685][ T9828] ? __alloc_skb+0x1d0/0x7d0 [ 521.028706][ T9828] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 521.028745][ T9828] __alloc_skb+0x1d0/0x7d0 [ 521.028774][ T9828] netlink_sendmsg+0x5d4/0xb40 [ 521.028819][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.028864][ T9828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.028903][ T9828] ____sys_sendmsg+0x94c/0x9c0 [ 521.028937][ T9828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.028975][ T9828] ? import_iovec+0x73/0xa0 [ 521.029002][ T9828] ___sys_sendmsg+0x2a5/0x360 [ 521.029035][ T9828] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.029067][ T9828] ? __schedule+0x1569/0x5240 [ 521.029123][ T9828] ? __fget_files+0x2a/0x420 [ 521.029151][ T9828] ? __fget_files+0x3a6/0x420 [ 521.029193][ T9828] __x64_sys_sendmsg+0x1c3/0x2a0 [ 521.029226][ T9828] ? irqentry_exit+0x59e/0x620 [ 521.029255][ T9828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.029281][ T9828] ? rcu_is_watching+0x15/0xb0 [ 521.029333][ T9828] do_syscall_64+0x14d/0xf80 [ 521.029357][ T9828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.029380][ T9828] ? clear_bhb_loop+0x40/0x90 [ 521.029408][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.029432][ T9828] RIP: 0033:0x7f6d1a81c819 [ 521.029453][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.029473][ T9828] RSP: 002b:00007f6d18a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.029498][ T9828] RAX: ffffffffffffffda RBX: 00007f6d1aa96180 RCX: 00007f6d1a81c819 [ 521.029514][ T9828] RDX: 0000000000000000 RSI: 0000200000006680 RDI: 0000000000000009 [ 521.029529][ T9828] RBP: 00007f6d18a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 521.029544][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.029558][ T9828] R13: 00007f6d1aa96218 R14: 00007f6d1aa96180 R15: 00007ffcb422a358 [ 521.029594][ T9828] [ 524.672102][ T5881] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 524.823934][ T5881] usb 2-1: not running at top speed; connect to a high speed hub [ 524.825481][ T5881] usb 2-1: config 3 has an invalid interface number: 81 but max is 0 [ 524.825506][ T5881] usb 2-1: config 3 has no interface number 0 [ 524.825554][ T5881] usb 2-1: config 3 interface 81 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 524.825581][ T5881] usb 2-1: config 3 interface 81 altsetting 6 endpoint 0xC has invalid maxpacket 1413, setting to 64 [ 524.825608][ T5881] usb 2-1: config 3 interface 81 has no altsetting 0 [ 524.828765][ T5881] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=e5.ba [ 524.828793][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.828813][ T5881] usb 2-1: Product: syz [ 524.828829][ T5881] usb 2-1: Manufacturer: syz [ 524.828844][ T5881] usb 2-1: SerialNumber: syz [ 524.918011][ T9873] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.507839][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 525.507957][ T37] audit: type=1326 audit(1775589175.522:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.508017][ T37] audit: type=1326 audit(1775589175.522:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.510236][ T37] audit: type=1326 audit(1775589175.522:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.510871][ T37] audit: type=1326 audit(1775589175.522:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.518259][ T37] audit: type=1326 audit(1775589175.522:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.518311][ T37] audit: type=1326 audit(1775589175.532:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.535793][ T37] audit: type=1326 audit(1775589175.532:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.626455][ T37] audit: type=1326 audit(1775589175.622:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.640444][ T37] audit: type=1326 audit(1775589175.642:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.662363][ T37] audit: type=1326 audit(1775589175.662:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4baa53c819 code=0x7ffc0000 [ 525.904624][ T9886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1342'. [ 527.430061][ T5886] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 527.602278][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 527.618608][ T5886] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 527.618640][ T5886] usb 4-1: config 0 has no interface number 0 [ 527.618771][ T5886] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 527.656812][ T5886] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 527.656931][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.656951][ T5886] usb 4-1: Product: syz [ 527.656972][ T5886] usb 4-1: Manufacturer: syz [ 527.656983][ T5886] usb 4-1: SerialNumber: syz [ 527.720377][ T5886] usb 4-1: config 0 descriptor?? [ 527.819715][ T5886] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 527.819913][ T5886] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 527.926079][ T5881] redrat3 2-1:3.81: Couldn't find all endpoints [ 528.006451][ T5886] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 528.007061][ T5886] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 529.180101][ T5886] usb 4-1: USB disconnect, device number 31 [ 529.194009][ T5881] usb 2-1: USB disconnect, device number 49 [ 530.393012][ T9929] program syz.0.1358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.132638][ T9948] overlayfs: failed to resolve './file1': -2 [ 532.250074][ T9948] FAULT_INJECTION: forcing a failure. [ 532.250074][ T9948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.250223][ T9948] CPU: 0 UID: 0 PID: 9948 Comm: syz.0.1363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.250256][ T9948] Tainted: [L]=SOFTLOCKUP [ 532.250264][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.250277][ T9948] Call Trace: [ 532.250286][ T9948] [ 532.250294][ T9948] dump_stack_lvl+0xe8/0x150 [ 532.250335][ T9948] should_fail_ex+0x46b/0x600 [ 532.250373][ T9948] strncpy_from_user+0x36/0x2b0 [ 532.250405][ T9948] do_getname+0x77/0x250 [ 532.250439][ T9948] do_sys_openat2+0xca/0x200 [ 532.250460][ T9948] ? lockdep_hardirqs_on+0x7a/0x110 [ 532.250519][ T9948] ? __pfx_do_sys_openat2+0x10/0x10 [ 532.250570][ T9948] __x64_sys_openat+0x138/0x170 [ 532.250604][ T9948] do_syscall_64+0x14d/0xf80 [ 532.250632][ T9948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.250648][ T9948] ? clear_bhb_loop+0x40/0x90 [ 532.250687][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.250711][ T9948] RIP: 0033:0x7fe6aa88c819 [ 532.250732][ T9948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.250753][ T9948] RSP: 002b:00007fe6a8abd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.250776][ T9948] RAX: ffffffffffffffda RBX: 00007fe6aab06090 RCX: 00007fe6aa88c819 [ 532.250794][ T9948] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 532.250810][ T9948] RBP: 00007fe6a8abd090 R08: 0000000000000000 R09: 0000000000000000 [ 532.250819][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.250829][ T9948] R13: 00007fe6aab06128 R14: 00007fe6aab06090 R15: 00007ffee9808d08 [ 532.250874][ T9948] [ 533.196653][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.201208][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.572185][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 533.792507][ T5886] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 533.825231][ T10] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 533.825265][ T10] usb 3-1: config 0 has no interface number 0 [ 533.825319][ T10] usb 3-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.825346][ T10] usb 3-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 533.825377][ T10] usb 3-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 533.825412][ T10] usb 3-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.825462][ T10] usb 3-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 533.825491][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.854619][ T10] usb 3-1: config 0 descriptor?? [ 533.858031][ T9961] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 533.875343][ T10] em28xx 3-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 533.875387][ T10] em28xx 3-1:0.92: DVB interface 92 found: bulk [ 534.902276][ T5886] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 534.902368][ T5886] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 534.902392][ T5886] usb 4-1: Product: syz [ 534.902407][ T5886] usb 4-1: Manufacturer: syz [ 534.902422][ T5886] usb 4-1: SerialNumber: syz [ 534.977193][ T5886] usb 4-1: config 0 descriptor?? [ 534.981089][ T5886] ch341 4-1:0.0: ch341-uart converter detected [ 535.014058][ T9978] netlink: 'syz.2.1366': attribute type 3 has an invalid length. [ 535.032885][ T10] em28xx 3-1:0.92: unknown em28xx chip ID (0) [ 535.232807][ T10] em28xx 3-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 535.232844][ T10] em28xx 3-1:0.92: board has no eeprom [ 535.332075][ T10] em28xx 3-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 535.332120][ T10] em28xx 3-1:0.92: dvb set to bulk mode. [ 535.335926][ T5881] em28xx 3-1:0.92: Remote control support is not available for this card. [ 535.390743][ T10] usb 3-1: USB disconnect, device number 45 [ 535.411304][ T10] em28xx 3-1:0.92: Disconnecting em28xx [ 535.419718][ T10] em28xx 3-1:0.92: Closing input extension [ 535.780305][ T10] em28xx 3-1:0.92: Freeing device [ 536.074827][ T5886] ch341-uart ttyUSB0: break control not supported, using simulated break [ 536.102942][ T5886] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 536.264631][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.265275][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.291173][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 536.291192][ T37] audit: type=1326 audit(1775589186.282:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9958 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7fc00000 [ 536.343245][ T5886] usb 4-1: USB disconnect, device number 32 [ 536.350943][ T5886] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 536.351696][ T5886] ch341 4-1:0.0: device disconnected [ 538.112102][ T1238] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 539.222559][ T1238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.222590][ T1238] usb 4-1: config 0 has no interfaces? [ 539.256027][ T1238] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 539.256616][ T1238] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 539.256641][ T1238] usb 4-1: Product: syz [ 539.256655][ T1238] usb 4-1: Manufacturer: syz [ 539.256670][ T1238] usb 4-1: SerialNumber: syz [ 539.357368][ T1238] usb 4-1: config 0 descriptor?? [ 541.182156][ T1238] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 541.333061][ T1238] usb 3-1: Using ep0 maxpacket: 16 [ 541.338141][ T1238] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.338887][ T1238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.338927][ T1238] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 541.338950][ T1238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.415230][ T1238] usb 3-1: config 0 descriptor?? [ 542.383733][ T9917] usb 4-1: USB disconnect, device number 33 [ 542.726121][ T1238] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 542.726163][ T1238] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 542.726250][ T1238] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 542.752578][ T1238] nzxt-smart2 0003:1E71:2009.0016: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 543.112129][T10065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 543.112200][T10065] IPv6: NLM_F_CREATE should be set when creating new route [ 544.163399][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 544.258276][ T9917] usb 3-1: USB disconnect, device number 46 [ 544.330201][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 544.341547][ T10] usb 2-1: config 3 has an invalid interface number: 81 but max is 0 [ 544.341576][ T10] usb 2-1: config 3 has no interface number 0 [ 544.341624][ T10] usb 2-1: config 3 interface 81 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 544.341643][ T10] usb 2-1: config 3 interface 81 altsetting 6 endpoint 0xC has invalid maxpacket 1413, setting to 64 [ 544.341684][ T10] usb 2-1: config 3 interface 81 has no altsetting 0 [ 544.389909][ T10] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=e5.ba [ 544.389947][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.389963][ T10] usb 2-1: Product: syz [ 544.389973][ T10] usb 2-1: Manufacturer: syz [ 544.390001][ T10] usb 2-1: SerialNumber: syz [ 544.468904][T10068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 544.922645][T10073] fido_id[10073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 546.403620][ T5887] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 546.582564][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 547.132949][ T5887] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 547.132978][ T5887] usb 3-1: config 0 has no interface number 0 [ 547.134585][ T5887] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 547.134613][ T5887] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 547.236166][ T5887] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 547.236200][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.236222][ T5887] usb 3-1: Product: syz [ 547.236522][ T5887] usb 3-1: Manufacturer: syz [ 547.236539][ T5887] usb 3-1: SerialNumber: syz [ 547.955268][ T5887] usb 3-1: config 0 descriptor?? [ 547.969478][ T5887] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 548.182979][ T5887] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 548.183974][ T5887] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 548.310770][ T10] redrat3 2-1:3.81: Couldn't find all endpoints [ 548.334635][ T10] usb 2-1: USB disconnect, device number 50 [ 548.729955][T10114] netlink: 'syz.4.1421': attribute type 3 has an invalid length. [ 548.730738][T10114] netlink: 'syz.4.1421': attribute type 3 has an invalid length. [ 549.479056][T10128] overlayfs: failed to set uuid (227/file1, err=-1); falling back to uuid=null. [ 549.504642][T10128] overlayfs: failed to verify upper root origin [ 549.588245][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.605519][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.817911][ T5966] usb 3-1: USB disconnect, device number 47 [ 550.122213][ T5887] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 550.168409][T10146] FAULT_INJECTION: forcing a failure. [ 550.168409][T10146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.168450][T10146] CPU: 0 UID: 0 PID: 10146 Comm: syz.4.1434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 550.168482][T10146] Tainted: [L]=SOFTLOCKUP [ 550.168490][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 550.168502][T10146] Call Trace: [ 550.168511][T10146] [ 550.168520][T10146] dump_stack_lvl+0xe8/0x150 [ 550.168557][T10146] should_fail_ex+0x46b/0x600 [ 550.168594][T10146] _copy_from_user+0x2d/0xb0 [ 550.168619][T10146] memdup_user+0x5e/0xd0 [ 550.168653][T10146] strndup_user+0x68/0xd0 [ 550.168685][T10146] __se_sys_mount+0x9d/0x420 [ 550.168715][T10146] ? ksys_write+0x248/0x270 [ 550.168752][T10146] ? __pfx___se_sys_mount+0x10/0x10 [ 550.168788][T10146] ? __x64_sys_mount+0x20/0xc0 [ 550.168820][T10146] do_syscall_64+0x14d/0xf80 [ 550.168845][T10146] ? trace_irq_disable+0x3b/0x150 [ 550.168880][T10146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.168903][T10146] ? clear_bhb_loop+0x40/0x90 [ 550.168930][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.168954][T10146] RIP: 0033:0x7f6d1a81c819 [ 550.168975][T10146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.168995][T10146] RSP: 002b:00007f6d18a6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.169020][T10146] RAX: ffffffffffffffda RBX: 00007f6d1aa95fa0 RCX: 00007f6d1a81c819 [ 550.169036][T10146] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 550.169050][T10146] RBP: 00007f6d18a6e090 R08: 0000200000000400 R09: 0000000000000000 [ 550.169064][T10146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.169076][T10146] R13: 00007f6d1aa96038 R14: 00007f6d1aa95fa0 R15: 00007ffcb422a358 [ 550.169110][T10146] [ 550.292306][ T5887] usb 4-1: not running at top speed; connect to a high speed hub [ 550.322435][ T5887] usb 4-1: config 3 has an invalid interface number: 81 but max is 0 [ 550.322466][ T5887] usb 4-1: config 3 has no interface number 0 [ 550.322514][ T5887] usb 4-1: config 3 interface 81 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 550.322541][ T5887] usb 4-1: config 3 interface 81 altsetting 6 endpoint 0xC has invalid maxpacket 1413, setting to 64 [ 550.322569][ T5887] usb 4-1: config 3 interface 81 has no altsetting 0 [ 550.432858][ T5887] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=e5.ba [ 550.432892][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.432923][ T5887] usb 4-1: Product: syz [ 550.432939][ T5887] usb 4-1: Manufacturer: syz [ 550.432957][ T5887] usb 4-1: SerialNumber: syz [ 550.489867][T10136] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 551.921133][T10166] overlayfs: failed to set uuid (245/file1, err=-1); falling back to uuid=null. [ 551.921280][T10166] overlayfs: failed to verify upper root origin [ 553.265844][T10173] FAULT_INJECTION: forcing a failure. [ 553.265844][T10173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.265892][T10173] CPU: 0 UID: 0 PID: 10173 Comm: syz.2.1443 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 553.265923][T10173] Tainted: [L]=SOFTLOCKUP [ 553.265932][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 553.265946][T10173] Call Trace: [ 553.265955][T10173] [ 553.265965][T10173] dump_stack_lvl+0xe8/0x150 [ 553.266005][T10173] should_fail_ex+0x46b/0x600 [ 553.266043][T10173] _copy_to_user+0x31/0xb0 [ 553.266068][T10173] simple_read_from_buffer+0xe1/0x170 [ 553.266103][T10173] proc_fail_nth_read+0x1be/0x230 [ 553.266134][T10173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.266166][T10173] ? rw_verify_area+0x2ac/0x4e0 [ 553.266200][T10173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.266231][T10173] vfs_read+0x212/0xa80 [ 553.266275][T10173] ? __pfx_vfs_read+0x10/0x10 [ 553.266312][T10173] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 553.266341][T10173] ? lockdep_hardirqs_on+0x7a/0x110 [ 553.266366][T10173] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 553.266392][T10173] ? mutex_lock_nested+0x152/0x1d0 [ 553.266424][T10173] ? fdget_pos+0x252/0x320 [ 553.266462][T10173] ksys_read+0x156/0x270 [ 553.266499][T10173] ? __pfx_ksys_read+0x10/0x10 [ 553.266546][T10173] do_syscall_64+0x14d/0xf80 [ 553.266570][T10173] ? trace_irq_disable+0x3b/0x150 [ 553.266595][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.266619][T10173] ? clear_bhb_loop+0x40/0x90 [ 553.266648][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.266671][T10173] RIP: 0033:0x7fd50ef9d04e [ 553.266691][T10173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 553.266710][T10173] RSP: 002b:00007fd50d235fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.266733][T10173] RAX: ffffffffffffffda RBX: 00007fd50d2366c0 RCX: 00007fd50ef9d04e [ 553.266749][T10173] RDX: 000000000000000f RSI: 00007fd50d2360a0 RDI: 0000000000000003 [ 553.266761][T10173] RBP: 00007fd50d236090 R08: 0000000000000000 R09: 0000000000000000 [ 553.266775][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.266788][T10173] R13: 00007fd50f256038 R14: 00007fd50f255fa0 R15: 00007ffd33fdcd98 [ 553.266824][T10173] [ 553.514014][ T5887] redrat3 4-1:3.81: Couldn't find all endpoints [ 553.530599][ T5887] usb 4-1: USB disconnect, device number 34 [ 553.603637][T10176] all: renamed from bridge_slave_1 (while UP) [ 557.413404][T10207] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 557.718284][T10211] FAULT_INJECTION: forcing a failure. [ 557.718284][T10211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.718326][T10211] CPU: 0 UID: 0 PID: 10211 Comm: syz.4.1457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.718358][T10211] Tainted: [L]=SOFTLOCKUP [ 557.718365][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 557.718378][T10211] Call Trace: [ 557.718387][T10211] [ 557.718397][T10211] dump_stack_lvl+0xe8/0x150 [ 557.718437][T10211] should_fail_ex+0x46b/0x600 [ 557.718483][T10211] _copy_from_iter+0x1d3/0x1670 [ 557.718530][T10211] ? __pfx__copy_from_iter+0x10/0x10 [ 557.718562][T10211] ? trace_kmalloc+0x2a/0x110 [ 557.718602][T10211] ? rcu_is_watching+0x15/0xb0 [ 557.718640][T10211] file_tty_write+0x4ca/0xa30 [ 557.718683][T10211] vfs_write+0x629/0xba0 [ 557.718729][T10211] ? __pfx_vfs_write+0x10/0x10 [ 557.718777][T10211] ? __fget_files+0x2a/0x420 [ 557.718819][T10211] ksys_write+0x156/0x270 [ 557.718856][T10211] ? __pfx_ksys_write+0x10/0x10 [ 557.718904][T10211] do_syscall_64+0x14d/0xf80 [ 557.718929][T10211] ? trace_irq_disable+0x3b/0x150 [ 557.718957][T10211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.718981][T10211] ? clear_bhb_loop+0x40/0x90 [ 557.719009][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.719032][T10211] RIP: 0033:0x7f6d1a81c819 [ 557.719054][T10211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.719076][T10211] RSP: 002b:00007f6d18a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 557.719100][T10211] RAX: ffffffffffffffda RBX: 00007f6d1aa95fa0 RCX: 00007f6d1a81c819 [ 557.719118][T10211] RDX: 00000000fffffedf RSI: 0000200000000000 RDI: 0000000000000004 [ 557.719133][T10211] RBP: 00007f6d18a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 557.719147][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.719159][T10211] R13: 00007f6d1aa96038 R14: 00007f6d1aa95fa0 R15: 00007ffcb422a358 [ 557.719195][T10211] [ 557.966985][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888062433400: rx timeout, send abort [ 557.967307][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888062433400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 557.971781][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.001174][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.442170][ T5966] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 558.595482][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.595503][ T5966] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.599174][ T5966] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 558.599260][ T5966] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 558.599276][ T5966] usb 4-1: Product: syz [ 558.599286][ T5966] usb 4-1: Manufacturer: syz [ 558.599297][ T5966] usb 4-1: SerialNumber: syz [ 558.629607][ T5966] usb 4-1: config 0 descriptor?? [ 559.582095][ T5887] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 559.753403][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 559.758127][ T5887] usb 2-1: config index 0 descriptor too short (expected 46593, got 71) [ 559.758156][ T5887] usb 2-1: config 0 has too many interfaces: 158, using maximum allowed: 32 [ 559.758289][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.758310][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 158 [ 559.758331][ T5887] usb 2-1: config 0 has no interface number 0 [ 559.796126][ T5887] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 559.796161][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.796184][ T5887] usb 2-1: Product: syz [ 559.796200][ T5887] usb 2-1: Manufacturer: syz [ 559.796216][ T5887] usb 2-1: SerialNumber: syz [ 559.855303][ T5887] usb 2-1: config 0 descriptor?? [ 559.891631][ T5887] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 559.891681][ T5887] uvcvideo 2-1:0.105: No valid video chain found. [ 561.235343][ T5886] usb 4-1: USB disconnect, device number 35 [ 562.289567][T10290] FAULT_INJECTION: forcing a failure. [ 562.289567][T10290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.289606][T10290] CPU: 0 UID: 0 PID: 10290 Comm: syz.4.1490 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.289635][T10290] Tainted: [L]=SOFTLOCKUP [ 562.289644][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.289657][T10290] Call Trace: [ 562.289666][T10290] [ 562.289677][T10290] dump_stack_lvl+0xe8/0x150 [ 562.289718][T10290] should_fail_ex+0x46b/0x600 [ 562.289756][T10290] _copy_to_user+0x31/0xb0 [ 562.289780][T10290] simple_read_from_buffer+0xe1/0x170 [ 562.289815][T10290] proc_fail_nth_read+0x1be/0x230 [ 562.289844][T10290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.289886][T10290] ? rw_verify_area+0x2ac/0x4e0 [ 562.289918][T10290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.289948][T10290] vfs_read+0x212/0xa80 [ 562.289989][T10290] ? __pfx_vfs_read+0x10/0x10 [ 562.290026][T10290] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.290053][T10290] ? lockdep_hardirqs_on+0x7a/0x110 [ 562.290077][T10290] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 562.290103][T10290] ? mutex_lock_nested+0x152/0x1d0 [ 562.290135][T10290] ? fdget_pos+0x252/0x320 [ 562.290175][T10290] ksys_read+0x156/0x270 [ 562.290213][T10290] ? __pfx_ksys_read+0x10/0x10 [ 562.290259][T10290] do_syscall_64+0x14d/0xf80 [ 562.290283][T10290] ? trace_irq_disable+0x3b/0x150 [ 562.290309][T10290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.290332][T10290] ? clear_bhb_loop+0x40/0x90 [ 562.290360][T10290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.290382][T10290] RIP: 0033:0x7f6d1a7dd04e [ 562.290404][T10290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 562.290424][T10290] RSP: 002b:00007f6d18a6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.290448][T10290] RAX: ffffffffffffffda RBX: 00007f6d18a6e6c0 RCX: 00007f6d1a7dd04e [ 562.290465][T10290] RDX: 000000000000000f RSI: 00007f6d18a6e0a0 RDI: 0000000000000004 [ 562.290479][T10290] RBP: 00007f6d18a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 562.290493][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.290506][T10290] R13: 00007f6d1aa96038 R14: 00007f6d1aa95fa0 R15: 00007ffcb422a358 [ 562.290540][T10290] [ 562.422055][ T5886] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 562.619200][ T9917] usb 2-1: USB disconnect, device number 51 [ 562.622855][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 562.635031][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 562.635062][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 562.638538][ T5886] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 562.638570][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.638593][ T5886] usb 4-1: Product: syz [ 562.638608][ T5886] usb 4-1: Manufacturer: syz [ 562.638625][ T5886] usb 4-1: SerialNumber: syz [ 562.706408][ T5886] usb 4-1: config 0 descriptor?? [ 562.954666][T10293] FAULT_INJECTION: forcing a failure. [ 562.954666][T10293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.954705][T10293] CPU: 0 UID: 0 PID: 10293 Comm: syz.0.1491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.954738][T10293] Tainted: [L]=SOFTLOCKUP [ 562.954746][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.954759][T10293] Call Trace: [ 562.954767][T10293] [ 562.954776][T10293] dump_stack_lvl+0xe8/0x150 [ 562.954814][T10293] should_fail_ex+0x46b/0x600 [ 562.954860][T10293] _copy_to_user+0x31/0xb0 [ 562.954887][T10293] simple_read_from_buffer+0xe1/0x170 [ 562.954921][T10293] proc_fail_nth_read+0x1be/0x230 [ 562.954950][T10293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.954978][T10293] ? rw_verify_area+0x2ac/0x4e0 [ 562.955010][T10293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.955040][T10293] vfs_read+0x212/0xa80 [ 562.955075][T10293] ? __pfx_vfs_read+0x10/0x10 [ 562.955104][T10293] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.955124][T10293] ? lockdep_hardirqs_on+0x7a/0x110 [ 562.955143][T10293] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 562.955162][T10293] ? mutex_lock_nested+0x152/0x1d0 [ 562.955186][T10293] ? fdget_pos+0x252/0x320 [ 562.955216][T10293] ksys_read+0x156/0x270 [ 562.955244][T10293] ? __pfx_ksys_read+0x10/0x10 [ 562.955279][T10293] do_syscall_64+0x14d/0xf80 [ 562.955298][T10293] ? trace_irq_disable+0x3b/0x150 [ 562.955319][T10293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.955337][T10293] ? clear_bhb_loop+0x40/0x90 [ 562.955359][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.955377][T10293] RIP: 0033:0x7fe6aa84d04e [ 562.955395][T10293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 562.955410][T10293] RSP: 002b:00007fe6a8addfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.955432][T10293] RAX: ffffffffffffffda RBX: 00007fe6a8ade6c0 RCX: 00007fe6aa84d04e [ 562.955445][T10293] RDX: 000000000000000f RSI: 00007fe6a8ade0a0 RDI: 0000000000000005 [ 562.955456][T10293] RBP: 00007fe6a8ade090 R08: 0000000000000000 R09: 0000000000000000 [ 562.955467][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.955478][T10293] R13: 00007fe6aab06038 R14: 00007fe6aab05fa0 R15: 00007ffee9808d08 [ 562.955509][T10293] [ 563.217518][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.244567][ T5966] usb 4-1: USB disconnect, device number 36 [ 563.970521][T10319] 9p: Bad value for 'wfdno' [ 564.131076][T10318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1502'. [ 564.170791][T10324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1504'. [ 565.053259][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880382f7400: rx timeout, send abort [ 565.053572][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880382f7400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 565.200649][T10348] FAULT_INJECTION: forcing a failure. [ 565.200649][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 565.200688][T10348] CPU: 1 UID: 0 PID: 10348 Comm: syz.4.1513 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.200719][T10348] Tainted: [L]=SOFTLOCKUP [ 565.200727][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 565.200742][T10348] Call Trace: [ 565.200750][T10348] [ 565.200760][T10348] dump_stack_lvl+0xe8/0x150 [ 565.200798][T10348] should_fail_ex+0x46b/0x600 [ 565.200836][T10348] should_failslab+0xa8/0x100 [ 565.200863][T10348] __kmalloc_noprof+0xdf/0x7b0 [ 565.200886][T10348] ? tomoyo_encode+0x28b/0x550 [ 565.200920][T10348] tomoyo_encode+0x28b/0x550 [ 565.200963][T10348] tomoyo_realpath_from_path+0x58d/0x5d0 [ 565.201006][T10348] ? tomoyo_path_number_perm+0x219/0x630 [ 565.201031][T10348] tomoyo_path_number_perm+0x246/0x630 [ 565.201059][T10348] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 565.201087][T10348] ? __lock_acquire+0x6b5/0x2cf0 [ 565.201147][T10348] ? __fget_files+0x2a/0x420 [ 565.201180][T10348] ? __fget_files+0x2a/0x420 [ 565.201207][T10348] ? __fget_files+0x3a6/0x420 [ 565.201236][T10348] ? __fget_files+0x2a/0x420 [ 565.201269][T10348] security_file_ioctl+0xc3/0x2a0 [ 565.201297][T10348] __se_sys_ioctl+0x47/0x170 [ 565.201324][T10348] do_syscall_64+0x14d/0xf80 [ 565.201348][T10348] ? trace_irq_disable+0x3b/0x150 [ 565.201375][T10348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.201398][T10348] ? clear_bhb_loop+0x40/0x90 [ 565.201425][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.201467][T10348] RIP: 0033:0x7f6d1a81c819 [ 565.201487][T10348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.201507][T10348] RSP: 002b:00007f6d18a4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.201531][T10348] RAX: ffffffffffffffda RBX: 00007f6d1aa96090 RCX: 00007f6d1a81c819 [ 565.201547][T10348] RDX: 0000000000000000 RSI: 00000000000054a0 RDI: 0000000000000003 [ 565.201560][T10348] RBP: 00007f6d18a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 565.201573][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.201585][T10348] R13: 00007f6d1aa96128 R14: 00007f6d1aa96090 R15: 00007ffcb422a358 [ 565.201620][T10348] [ 565.201646][T10348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 565.782107][ T1238] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 565.932247][ T1238] usb 4-1: Using ep0 maxpacket: 8 [ 565.936909][ T1238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 565.937167][ T1238] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 565.977477][ T1238] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 565.977897][ T1238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.977922][ T1238] usb 4-1: Product: syz [ 565.977938][ T1238] usb 4-1: Manufacturer: syz [ 565.977953][ T1238] usb 4-1: SerialNumber: syz [ 566.055271][ T1238] usb 4-1: config 0 descriptor?? [ 566.190712][T10354] create_pit_timer: 3 callbacks suppressed [ 566.190734][T10354] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 566.191377][T10354] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 566.214192][T10354] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 566.479664][ T5886] usb 4-1: USB disconnect, device number 37 [ 567.065714][T10357] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 567.066331][T10357] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 567.067198][T10357] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 567.068568][T10357] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 567.070047][T10357] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 567.113436][T10357] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 567.682346][ T5886] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 567.852102][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 567.854533][ T5886] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 567.854563][ T5886] usb 4-1: config 0 has no interface number 0 [ 567.858250][ T5886] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 567.858278][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.858297][ T5886] usb 4-1: Product: syz [ 567.858309][ T5886] usb 4-1: Manufacturer: syz [ 567.858322][ T5886] usb 4-1: SerialNumber: syz [ 567.934224][ T5886] usb 4-1: config 0 descriptor?? [ 567.957023][ T5886] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 568.192056][ T5886] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 568.248186][ T5886] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 568.279911][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803cca0400: rx timeout, send abort [ 568.280254][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803cca0400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 568.595772][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 568.618267][ T5886] usb 4-1: USB disconnect, device number 38 [ 568.675504][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 568.697534][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 568.698492][ T5886] quatech2 4-1:0.51: device disconnected [ 568.782883][T10404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.805127][T10404] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.807442][T10404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 568.809035][T10404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 568.809901][T10404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.352077][ T5886] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 569.563687][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 569.566571][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 569.566601][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 569.576788][ T5886] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 569.576820][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.576842][ T5886] usb 2-1: Product: syz [ 569.576857][ T5886] usb 2-1: Manufacturer: syz [ 569.576872][ T5886] usb 2-1: SerialNumber: syz [ 569.744601][ T5886] usb 2-1: config 0 descriptor?? [ 570.584274][ T5886] usb 2-1: USB disconnect, device number 52 [ 570.962087][T10404] Bluetooth: hci5: command tx timeout [ 571.073286][T10403] chnl_net:caif_netlink_parms(): no params data found [ 572.453883][T10424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1542'. [ 573.043528][T10404] Bluetooth: hci5: command tx timeout [ 573.834624][ T3581] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.608314][ T3581] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.459311][T10404] Bluetooth: hci5: command tx timeout [ 575.541742][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.550449][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.550716][T10403] bridge_slave_0: entered allmulticast mode [ 575.567290][T10403] bridge_slave_0: entered promiscuous mode [ 575.578855][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.579069][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.579327][T10403] bridge_slave_1: entered allmulticast mode [ 575.607299][T10403] bridge_slave_1: entered promiscuous mode [ 575.951734][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803cca7c00: rx timeout, send abort [ 575.952497][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803cca7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 576.252449][ T3581] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.295144][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.419731][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.654985][ T3581] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.762032][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 576.912234][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 576.914647][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 576.914718][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 576.917480][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 576.917506][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.917526][ T10] usb 4-1: Product: syz [ 576.917539][ T10] usb 4-1: Manufacturer: syz [ 576.917553][ T10] usb 4-1: SerialNumber: syz [ 576.986375][T10403] team0: Port device team_slave_0 added [ 576.998700][T10403] team0: Port device team_slave_1 added [ 577.017043][ T10] usb 4-1: config 0 descriptor?? [ 577.345879][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.345898][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.345927][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.438289][ T5886] usb 4-1: USB disconnect, device number 39 [ 577.522466][T10404] Bluetooth: hci5: command tx timeout [ 577.562935][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.563847][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.563872][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.657480][T10403] hsr_slave_0: entered promiscuous mode [ 578.659106][T10403] hsr_slave_1: entered promiscuous mode [ 578.660138][T10403] debugfs: 'hsr0' already exists in 'hsr' [ 578.660164][T10403] Cannot create hsr debugfs directory [ 578.779224][ T3581] bridge_slave_1: left allmulticast mode [ 578.779413][ T3581] bridge_slave_1: left promiscuous mode [ 578.797444][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.885903][ T3581] bridge_slave_0: left allmulticast mode [ 578.885936][ T3581] bridge_slave_0: left promiscuous mode [ 578.887913][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.642976][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.723550][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.771623][ T3581] bond0 (unregistering): Released all slaves [ 582.506927][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f5ed400: rx timeout, send abort [ 582.542289][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f5ed400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 583.776664][T10499] FAULT_INJECTION: forcing a failure. [ 583.776664][T10499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.776739][T10499] CPU: 1 UID: 0 PID: 10499 Comm: syz.1.1563 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.776773][T10499] Tainted: [L]=SOFTLOCKUP [ 583.776782][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 583.776796][T10499] Call Trace: [ 583.776806][T10499] [ 583.776815][T10499] dump_stack_lvl+0xe8/0x150 [ 583.776855][T10499] should_fail_ex+0x46b/0x600 [ 583.776893][T10499] _copy_from_user+0x2d/0xb0 [ 583.776918][T10499] core_sys_select+0x6ff/0xc30 [ 583.776964][T10499] ? __pfx_core_sys_select+0x10/0x10 [ 583.776989][T10499] ? rcu_is_watching+0x15/0xb0 [ 583.777042][T10499] ? __pfx_set_user_sigmask+0x10/0x10 [ 583.777073][T10499] ? rt_mutex_slowunlock+0x1cb/0x300 [ 583.777108][T10499] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 583.777152][T10499] __se_sys_pselect6+0x267/0x320 [ 583.777186][T10499] ? __pfx___se_sys_pselect6+0x10/0x10 [ 583.777209][T10499] ? __pfx_ksys_write+0x10/0x10 [ 583.777249][T10499] ? __x64_sys_pselect6+0x21/0xf0 [ 583.777281][T10499] do_syscall_64+0x14d/0xf80 [ 583.777307][T10499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.777331][T10499] ? clear_bhb_loop+0x40/0x90 [ 583.777359][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.777383][T10499] RIP: 0033:0x7f5be6eac819 [ 583.777404][T10499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.777424][T10499] RSP: 002b:00007f5be50e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 583.777455][T10499] RAX: ffffffffffffffda RBX: 00007f5be7126090 RCX: 00007f5be6eac819 [ 583.777472][T10499] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 583.777487][T10499] RBP: 00007f5be50e5090 R08: 0000000000000000 R09: 0000000000000000 [ 583.777501][T10499] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 583.777516][T10499] R13: 00007f5be7126128 R14: 00007f5be7126090 R15: 00007fff5a129fd8 [ 583.777550][T10499] [ 588.191837][T10531] FAULT_INJECTION: forcing a failure. [ 588.191837][T10531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.191879][T10531] CPU: 0 UID: 0 PID: 10531 Comm: syz.2.1571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 588.191917][T10531] Tainted: [L]=SOFTLOCKUP [ 588.191924][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 588.191938][T10531] Call Trace: [ 588.191947][T10531] [ 588.191956][T10531] dump_stack_lvl+0xe8/0x150 [ 588.191989][T10531] should_fail_ex+0x46b/0x600 [ 588.192021][T10531] strncpy_from_user+0x36/0x2b0 [ 588.192052][T10531] do_getname+0x77/0x250 [ 588.192079][T10531] do_sys_openat2+0xca/0x200 [ 588.192108][T10531] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.192134][T10531] ? ksys_write+0x248/0x270 [ 588.192162][T10531] ? __pfx_ksys_write+0x10/0x10 [ 588.192185][T10531] ? __task_pid_nr_ns+0x28/0x470 [ 588.192207][T10531] __x64_sys_openat+0x138/0x170 [ 588.192233][T10531] do_syscall_64+0x14d/0xf80 [ 588.192253][T10531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.192271][T10531] ? clear_bhb_loop+0x40/0x90 [ 588.192292][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.192308][T10531] RIP: 0033:0x7fd50ef9d04e [ 588.192325][T10531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.192340][T10531] RSP: 002b:00007fd50d235b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.192359][T10531] RAX: ffffffffffffffda RBX: 00007fd50d2366c0 RCX: 00007fd50ef9d04e [ 588.192371][T10531] RDX: 0000000000000002 RSI: 00007fd50d235c00 RDI: ffffffffffffff9c [ 588.192383][T10531] RBP: 00007fd50d235c00 R08: 0000000000000000 R09: 0000000000000000 [ 588.192393][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 588.192404][T10531] R13: 00007fd50f256038 R14: 00007fd50f255fa0 R15: 00007ffd33fdcd98 [ 588.192431][T10531] [ 588.527590][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.545662][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.804456][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 588.942084][ T10] usb 3-1: device descriptor read/64, error -71 [ 589.094471][ T3581] hsr_slave_0: left promiscuous mode [ 589.132276][ T3581] hsr_slave_1: left promiscuous mode [ 589.159961][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.178635][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.202089][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 589.255538][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.255571][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.352282][ T10] usb 3-1: device descriptor read/64, error -71 [ 589.484489][ T10] usb usb3-port1: attempt power cycle [ 589.503436][ T3581] veth1_macvtap: left promiscuous mode [ 589.503937][ T3581] veth0_macvtap: left promiscuous mode [ 589.504411][ T3581] veth1_vlan: left promiscuous mode [ 589.504681][ T3581] veth0_vlan: left promiscuous mode [ 589.832092][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 589.855314][ T10] usb 3-1: device descriptor read/8, error -71 [ 590.130101][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 590.143018][ T10] usb 3-1: device descriptor read/8, error -71 [ 590.252807][ T10] usb usb3-port1: unable to enumerate USB device [ 591.983414][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 592.167509][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 592.937630][T10568] netlink: 'syz.2.1580': attribute type 7 has an invalid length. [ 592.937653][T10568] netlink: 'syz.2.1580': attribute type 8 has an invalid length. [ 593.372618][T10576] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1581'. [ 593.663171][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.712043][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.760963][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 594.041602][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 594.041638][ T10] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 594.041661][ T10] usb 3-1: Product: syz [ 594.041676][ T10] usb 3-1: Manufacturer: syz [ 594.041692][ T10] usb 3-1: SerialNumber: syz [ 594.053584][ T10] usb 3-1: config 0 descriptor?? [ 594.112628][ T10] ch341 3-1:0.0: ch341-uart converter detected [ 594.461489][ T5880] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 594.630867][ T5880] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 594.630902][ T5880] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 594.630979][ T5880] usb 2-1: Product: syz [ 594.630996][ T5880] usb 2-1: Manufacturer: syz [ 594.631011][ T5880] usb 2-1: SerialNumber: syz [ 594.673737][ T5880] usb 2-1: config 0 descriptor?? [ 594.685540][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.717180][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.721761][ T5880] ch341 2-1:0.0: ch341-uart converter detected [ 594.892604][ T5880] usb 2-1: failed to receive control message: -32 [ 594.893207][ T5880] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -32 [ 595.205489][ T10] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 595.394679][ T5880] usb 2-1: USB disconnect, device number 53 [ 595.440873][ T5880] ch341 2-1:0.0: device disconnected [ 595.524351][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.542347][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.658487][ T5968] usb 3-1: USB disconnect, device number 52 [ 595.747071][ T5968] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 595.750015][ T5968] ch341 3-1:0.0: device disconnected [ 598.422085][ T5887] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 598.422306][ T5866] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 598.576596][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 598.748057][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 598.770580][ T5866] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 598.770606][ T5866] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 598.770625][ T5866] usb 2-1: config 8 has no interface number 0 [ 598.770719][ T5866] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 598.770746][ T5866] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 598.770774][ T5866] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.770858][ T5866] usb 2-1: config 8 interface 206 has no altsetting 0 [ 598.794792][ T5866] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 598.794956][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.794980][ T5866] usb 2-1: Product: syz [ 598.794995][ T5866] usb 2-1: Manufacturer: syz [ 598.795012][ T5866] usb 2-1: SerialNumber: syz [ 598.866913][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.866999][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.867040][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 598.867065][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.867181][ T5887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.867214][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.915792][ T5887] usb 3-1: config 0 descriptor?? [ 598.950188][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 598.960760][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 599.033488][ T10] usb 4-1: config 255 has an invalid descriptor of length 225, skipping remainder of the config [ 599.033544][ T10] usb 4-1: config 255 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.040566][ T10] usb 4-1: string descriptor 0 read error: -22 [ 599.040713][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 599.040738][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.231705][ T10] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 599.231738][ T10] usb 4-1: no configuration chosen from 1 choice [ 599.355263][T10614] input: syz0 as /devices/virtual/input/input20 [ 599.556717][ T5866] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 599.563229][ T5887] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 599.582048][ T5866] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 599.617401][ T5866] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 599.655411][ T5866] usb 2-1: USB disconnect, device number 54 [ 599.659334][ T5866] garmin_gps 2-1:8.206: device disconnected [ 599.690792][ T5887] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 599.794113][T10403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.863783][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.864375][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.865577][ T37] audit: type=1326 audit(1775589249.882:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 599.865744][ T37] audit: type=1326 audit(1775589249.882:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 599.882585][T10403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 599.954617][ T37] audit: type=1326 audit(1775589249.882:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 599.954741][ T37] audit: type=1326 audit(1775589249.882:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 599.954791][ T37] audit: type=1326 audit(1775589249.902:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 599.954901][ T37] audit: type=1326 audit(1775589249.932:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 599.976935][ T37] audit: type=1326 audit(1775589249.982:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10633 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd50ef9d04e code=0x7ffc0000 [ 599.978771][ T37] audit: type=1326 audit(1775589249.982:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 600.082486][ T37] audit: type=1326 audit(1775589250.092:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd50ef9d04e code=0x7ffc0000 [ 600.082592][ T37] audit: type=1326 audit(1775589249.992:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10620 comm="syz.2.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50efdc819 code=0x7ffc0000 [ 600.216357][T10403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.493441][T10403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.703568][T10635] option changes via remount are deprecated (pid=10634 comm=syz.0.1593) [ 600.794046][T10635] syz.0.1593 (10635) used greatest stack depth: 14944 bytes left [ 601.039218][T10645] loop7: detected capacity change from 0 to 7 [ 601.059188][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.059347][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.071983][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.072022][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.080484][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.080522][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.085308][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.085375][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.085978][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.086011][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.086528][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.086560][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.088763][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.088835][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.089019][T10645] ldm_validate_partition_table(): Disk read failed. [ 601.089335][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.089368][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.090178][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.090211][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.095359][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 601.095448][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 601.102128][T10645] Dev loop7: unable to read RDB block 0 [ 601.104586][T10645] loop7: unable to read partition table [ 601.104837][T10645] loop7: partition table beyond EOD, truncated [ 601.104875][T10645] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 601.529705][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.605122][ T9917] usb 4-1: USB disconnect, device number 40 [ 601.624507][ T5866] usb 3-1: USB disconnect, device number 53 [ 601.912112][ T5881] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 602.177485][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.184465][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 602.209726][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 602.211791][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.211817][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.272381][ T5881] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 602.272416][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.272438][ T5881] usb 2-1: Product:  [ 602.272455][ T5881] usb 2-1: Manufacturer: 쇘⻮җ⟇⯿鄇ﯥڵ뼷臑趑넞籦㣅 [ 602.272473][ T5881] usb 2-1: SerialNumber: syz [ 602.395515][ T5866] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 602.415007][T10653] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1598'. [ 602.568494][ T5881] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 602.625961][ T5866] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 602.625995][ T5866] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 602.626018][ T5866] usb 3-1: Product: syz [ 602.626034][ T5866] usb 3-1: Manufacturer: syz [ 602.626049][ T5866] usb 3-1: SerialNumber: syz [ 602.836313][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.840785][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.897051][ T5866] usb 3-1: config 0 descriptor?? [ 602.917652][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.932908][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.948664][ T5866] ch341 3-1:0.0: ch341-uart converter detected [ 603.118096][ T5866] usb 3-1: failed to receive control message: -32 [ 603.118158][ T5866] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 603.274786][ T5881] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 603.299312][ T5881] usb 2-1: USB disconnect, device number 55 [ 603.414529][ T9843] udevd[9843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.457679][ T5866] usb 3-1: USB disconnect, device number 54 [ 603.459856][ T5866] ch341 3-1:0.0: device disconnected [ 604.232948][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.241032][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.370889][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.371034][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.571870][T10671] hfs: unable to load iocharset "io#harsets: 02 [ 604.571870][T10671] mnt_id: 12 [ 604.571870][T10671] ino: 29618 [ 604.571870][T10671] " [ 606.172072][ T5867] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 606.324737][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.324827][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 606.324856][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 606.324878][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 606.324921][ T5867] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.324996][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.518670][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.526285][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.610376][ T5867] usb 2-1: config 0 descriptor?? [ 607.002302][T10693] 9p: Bad value for 'rfdno' [ 607.597500][ T5867] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 607.688736][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.871139][ T5867] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 608.996693][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.997275][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.334080][T10700] input: syz1 as /devices/virtual/input/input21 [ 609.715371][ T5886] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 609.842066][ T5886] usb 2-1: device descriptor read/64, error -32 [ 610.082992][ T5886] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 610.083299][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 610.522061][ T5881] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 610.672982][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 610.676565][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 610.678120][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.678145][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.729287][ T5881] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 610.729320][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.729341][ T5881] usb 3-1: Product:  [ 610.729357][ T5881] usb 3-1: Manufacturer: 쇘⻮җ⟇⯿鄇ﯥڵ뼷臑趑넞籦㣅 [ 610.729376][ T5881] usb 3-1: SerialNumber: syz [ 610.893043][ T5867] usb 2-1: USB disconnect, device number 56 [ 611.056130][ T5881] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 611.295352][ T5881] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 611.336660][ T5881] usb 3-1: USB disconnect, device number 55 [ 611.388833][ T9843] udevd[9843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.542293][T10403] veth0_vlan: entered promiscuous mode [ 612.538057][T10403] veth1_vlan: entered promiscuous mode [ 612.926503][T10403] veth0_macvtap: entered promiscuous mode [ 612.962785][T10403] veth1_macvtap: entered promiscuous mode [ 613.118752][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.207190][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.305086][ T6001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.309722][ T993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.341176][ T5968] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 613.356665][ T993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.372925][ T993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.502132][ T5968] usb 2-1: Using ep0 maxpacket: 32 [ 613.506188][ T5968] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 613.506218][ T5968] usb 2-1: config 0 has no interface number 0 [ 613.509057][ T5968] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 613.509149][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.509174][ T5968] usb 2-1: Product: syz [ 613.509189][ T5968] usb 2-1: Manufacturer: syz [ 613.509204][ T5968] usb 2-1: SerialNumber: syz [ 613.577433][ T5968] usb 2-1: config 0 descriptor?? [ 613.684553][ T5968] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 613.958283][ T5968] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 613.986717][ T5968] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 614.290815][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.290838][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.322804][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 614.323759][ T5968] usb 2-1: USB disconnect, device number 57 [ 614.546432][ T5968] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 614.615572][ T5968] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 614.624468][ T5968] quatech2 2-1:0.51: device disconnected [ 614.978812][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.982137][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.184052][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.186330][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.853509][ T5866] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 617.984760][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.984795][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.984822][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 617.984847][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.984896][ T5866] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.984921][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.990557][T10752] FAULT_INJECTION: forcing a failure. [ 617.990557][T10752] name failslab, interval 1, probability 0, space 0, times 0 [ 617.990616][T10752] CPU: 0 UID: 0 PID: 10752 Comm: syz.2.1623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.990649][T10752] Tainted: [L]=SOFTLOCKUP [ 617.990656][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 617.990669][T10752] Call Trace: [ 617.990677][T10752] [ 617.990686][T10752] dump_stack_lvl+0xe8/0x150 [ 617.990725][T10752] should_fail_ex+0x46b/0x600 [ 617.990768][T10752] should_failslab+0xa8/0x100 [ 617.990796][T10752] __kmalloc_noprof+0xdf/0x7b0 [ 617.990819][T10752] ? tomoyo_encode+0x28b/0x550 [ 617.990853][T10752] tomoyo_encode+0x28b/0x550 [ 617.990891][T10752] tomoyo_realpath_from_path+0x58d/0x5d0 [ 617.990920][T10752] ? tomoyo_path_number_perm+0x219/0x630 [ 617.990956][T10752] tomoyo_path_number_perm+0x246/0x630 [ 617.990984][T10752] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 617.991012][T10752] ? __lock_acquire+0x6b5/0x2cf0 [ 617.991072][T10752] ? __fget_files+0x2a/0x420 [ 617.991105][T10752] ? __fget_files+0x2a/0x420 [ 617.991134][T10752] ? __fget_files+0x3a6/0x420 [ 617.991163][T10752] ? __fget_files+0x2a/0x420 [ 617.991195][T10752] security_file_ioctl+0xc3/0x2a0 [ 617.991222][T10752] __se_sys_ioctl+0x47/0x170 [ 617.991247][T10752] do_syscall_64+0x14d/0xf80 [ 617.991273][T10752] ? trace_irq_disable+0x3b/0x150 [ 617.991300][T10752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.991332][T10752] ? clear_bhb_loop+0x40/0x90 [ 617.991360][T10752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.991382][T10752] RIP: 0033:0x7fd50efdc819 [ 617.991403][T10752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.991421][T10752] RSP: 002b:00007fd50d215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.991444][T10752] RAX: ffffffffffffffda RBX: 00007fd50f256090 RCX: 00007fd50efdc819 [ 617.991460][T10752] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 617.991474][T10752] RBP: 00007fd50d215090 R08: 0000000000000000 R09: 0000000000000000 [ 617.991488][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.991501][T10752] R13: 00007fd50f256128 R14: 00007fd50f256090 R15: 00007ffd33fdcd98 [ 617.991536][T10752] [ 618.034793][T10752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 618.906252][ T5866] usb 2-1: config 0 descriptor?? [ 618.934556][T10749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.081078][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 620.088511][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 620.121757][ T5866] usb 2-1: USB disconnect, device number 58 [ 622.793674][T10771] loop7: detected capacity change from 0 to 7 [ 622.795935][ C0] blk_print_req_error: 11 callbacks suppressed [ 622.795956][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.795987][ C0] buffer_io_error: 10 callbacks suppressed [ 622.796001][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.796420][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.796452][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.796837][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.796868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.797289][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.797318][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.797637][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.797666][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.798007][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.798037][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.798351][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.798381][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.798489][T10771] ldm_validate_partition_table(): Disk read failed. [ 622.798716][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.798747][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.799062][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.799092][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.799466][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 622.799496][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.800092][T10771] Dev loop7: unable to read RDB block 0 [ 622.801295][T10771] loop7: unable to read partition table [ 622.801489][T10771] loop7: partition table beyond EOD, truncated [ 622.801503][T10771] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 623.042229][ T5881] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 623.042503][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 623.244601][ T5881] usb 5-1: device descriptor read/64, error -32 [ 623.557704][ T5881] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 625.016213][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.121243][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.121281][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.121324][ T5881] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 625.121350][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.409493][ T5881] usb 5-1: config 0 descriptor?? [ 625.837669][ T5881] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 625.837711][ T5881] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 625.837740][ T5881] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 625.837769][ T5881] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 625.837798][ T5881] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 625.880188][ T5881] hid-steam 0003:28DE:1142.0019: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 626.538999][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 628.392654][ T5881] usb 5-1: USB disconnect, device number 27 [ 629.772108][ T5867] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 629.932208][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.932249][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 629.932278][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 629.932302][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 629.932572][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 629.932599][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.032886][ T5867] usb 5-1: config 0 descriptor?? [ 630.522420][ T5867] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max [ 630.780186][ T5867] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 630.815611][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.835264][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.012214][T10804] use of bytesused == 0 is deprecated and will be removed in the future, [ 631.012231][T10804] use the actual size instead. [ 631.165357][T10805] loop6: detected capacity change from 0 to 7 [ 631.392304][ C1] blk_print_req_error: 11 callbacks suppressed [ 631.392326][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.392359][ C1] buffer_io_error: 10 callbacks suppressed [ 631.392372][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.392839][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.392942][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.434427][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.434471][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.555056][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.555173][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.583835][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.583877][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.616959][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.617001][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.640986][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.641025][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.641102][T10805] ldm_validate_partition_table(): Disk read failed. [ 631.658408][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.658462][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.661286][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.661333][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.662025][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 631.662061][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.663658][T10805] Dev loop6: unable to read RDB block 0 [ 631.815913][T10805] loop6: unable to read partition table [ 631.816124][T10805] loop6: partition table beyond EOD, truncated [ 631.816171][T10805] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 631.863094][ T5887] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 632.727270][ T5881] usb 5-1: USB disconnect, device number 28 [ 633.482165][ T5881] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 634.163660][ T5881] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 634.163690][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.163712][ T5881] usb 5-1: config 0 has no interface number 0 [ 634.163762][ T5881] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 634.163786][ T5881] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.186331][ T5881] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 634.186365][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.186387][ T5881] usb 5-1: Product: syz [ 634.186426][ T5881] usb 5-1: Manufacturer: syz [ 634.186462][ T5881] usb 5-1: SerialNumber: syz [ 634.215218][ T5881] usb 5-1: config 0 descriptor?? [ 634.511786][ T37] kauditd_printk_skb: 198 callbacks suppressed [ 634.511806][ T37] audit: type=1326 audit(1775589284.522:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10810 comm="syz.4.1643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257933c819 code=0x0 [ 634.622072][ T5867] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 634.772027][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 634.777452][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 634.777497][ T5867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 634.811601][ T5867] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 634.811637][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.811659][ T5867] usb 4-1: Product: syz [ 634.811674][ T5867] usb 4-1: Manufacturer: syz [ 634.811689][ T5867] usb 4-1: SerialNumber: syz [ 634.914203][ T5867] usb 4-1: config 0 descriptor?? [ 635.484812][ T5887] usb 4-1: USB disconnect, device number 41 [ 636.361159][ T5881] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 636.465287][ T5881] usb 5-1: USB disconnect, device number 29 [ 640.223738][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.245633][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.540841][ T5867] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 640.541158][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 640.541714][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.568396][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.574097][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.662957][ T5867] usb 5-1: device descriptor read/64, error -32 [ 640.891001][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 640.922035][ T5867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 641.362474][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.366008][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 641.366046][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 641.366073][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 641.366097][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 641.366136][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.366205][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 641.366232][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.460946][ T5867] usb 5-1: config 0 descriptor?? [ 641.946250][ T5867] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 642.031313][ T5867] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 642.280304][T10845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.362504][T10845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.723586][T10404] Bluetooth: hci3: command tx timeout [ 643.557009][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.969582][ T9917] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 644.096489][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.132101][ T9917] usb 2-1: Using ep0 maxpacket: 8 [ 644.135830][ T9917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 644.135862][ T9917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 644.139035][ T9917] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 644.139065][ T9917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.139087][ T9917] usb 2-1: Product: syz [ 644.139103][ T9917] usb 2-1: Manufacturer: syz [ 644.139119][ T9917] usb 2-1: SerialNumber: syz [ 644.181677][ T5887] usb 5-1: USB disconnect, device number 31 [ 644.223034][ T9917] usb 2-1: config 0 descriptor?? [ 644.464468][T10879] fuse: Bad value for 'fd' [ 644.611011][T10882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.621726][T10882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.652192][ T9917] usb 2-1: USB disconnect, device number 59 [ 644.745264][T10882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.745910][T10882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.789237][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.802371][T10404] Bluetooth: hci3: command tx timeout [ 645.192349][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.549562][T10898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.573352][T10898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.372129][ T9917] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 646.594346][ T9917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 646.594384][ T9917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 646.594412][ T9917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 646.594435][ T9917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.594483][ T9917] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.594521][ T9917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.686838][ T9917] usb 5-1: config 0 descriptor?? [ 646.856213][T10839] chnl_net:caif_netlink_parms(): no params data found [ 646.882011][T10404] Bluetooth: hci3: command tx timeout [ 647.033710][T10908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.242244][ T9917] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 647.384891][ T9917] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 647.611345][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.644597][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.191157][T10929] sch_fq: defrate 0 ignored. [ 648.282147][ T5880] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 648.349810][ T68] bridge_slave_1: left allmulticast mode [ 648.350088][ T68] bridge_slave_1: left promiscuous mode [ 648.351052][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.404050][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.406171][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.467120][ T5880] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 648.467611][ T5880] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 648.467632][ T5880] usb 4-1: Product: syz [ 648.467662][ T5880] usb 4-1: Manufacturer: syz [ 648.467677][ T5880] usb 4-1: SerialNumber: syz [ 648.468155][ T68] : left allmulticast mode [ 648.468193][ T68] : left promiscuous mode [ 648.469379][ T68] bridge0: port 1() entered disabled state [ 648.528262][ T5880] usb 4-1: config 0 descriptor?? [ 648.542523][ T5880] ch341 4-1:0.0: ch341-uart converter detected [ 648.742162][ T68] bond_slave_0: left promiscuous mode [ 648.742282][ T68] bond_slave_1: left promiscuous mode [ 648.972148][T10404] Bluetooth: hci3: command tx timeout [ 650.426978][ T5880] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 650.592575][ T9917] usb 5-1: USB disconnect, device number 32 [ 650.712477][T10944] Bluetooth: MGMT ver 1.23 [ 650.788178][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.818957][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.872099][ T9917] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 650.896519][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.898776][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.012035][ T9917] usb 5-1: device descriptor read/64, error -71 [ 651.274169][ T9917] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 651.403838][ T9917] usb 5-1: device descriptor read/64, error -71 [ 651.514629][ T9917] usb usb5-port1: attempt power cycle [ 651.856953][ T9917] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 651.894477][ T9917] usb 5-1: device descriptor read/8, error -71 [ 652.148954][ T9917] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 652.274066][ T9917] usb 5-1: device descriptor read/8, error -71 [ 652.385854][ T9917] usb usb5-port1: unable to enumerate USB device [ 652.851678][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 654.553786][ T68] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 654.553839][ T68] ------------[ cut here ]------------ [ 654.553849][ T68] lockdep bfs error:-1 [ 654.553867][ T68] WARNING: kernel/locking/lockdep.c:2059 at print_bfs_bug+0x20/0x40, CPU#0: kworker/u8:4/68 [ 654.553912][ T68] Modules linked in: [ 654.553935][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.553965][ T68] Tainted: [L]=SOFTLOCKUP [ 654.553973][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.553989][ T68] Workqueue: netns cleanup_net [ 654.554012][ T68] RIP: 0010:print_bfs_bug+0x22/0x40 [ 654.554037][ T68] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 47 a3 fa 02 89 c5 e8 30 8a ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d 90 0d cd 0d 89 de <67> 48 0f b9 3a 5b 5d e9 12 63 87 09 cc 48 c7 c7 9f de 6d 8d e8 15 [ 654.554056][ T68] RSP: 0018:ffffc9000153ebb0 EFLAGS: 00010046 [ 654.554075][ T68] RAX: 000000000000003b RBX: 00000000ffffffff RCX: b12ffa4e272a7a00 [ 654.554091][ T68] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8f6d9d10 [ 654.554106][ T68] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 654.554119][ T68] R10: dffffc0000000000 R11: fffff520002a7d25 R12: ffffffff960f3078 [ 654.554135][ T68] R13: ffffffff930a2410 R14: ffff88801cb3bd00 R15: 0000000000000028 [ 654.554150][ T68] FS: 0000000000000000(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 654.554168][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.554182][ T68] CR2: 00007f85151ecd09 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 654.554202][ T68] Call Trace: [ 654.554210][ T68] [ 654.554221][ T68] __lock_acquire+0x2550/0x2cf0 [ 654.554247][ T68] ? lockdep_unlock+0x5d/0xd0 [ 654.554277][ T68] ? __lock_acquire+0x146e/0x2cf0 [ 654.554307][ T68] lock_acquire+0xf0/0x2e0 [ 654.554327][ T68] ? raw_spin_rq_lock_nested+0xb6/0x150 [ 654.554360][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 654.554393][ T68] _raw_spin_lock_nested+0x32/0x50 [ 654.554419][ T68] ? raw_spin_rq_lock_nested+0xb6/0x150 [ 654.554448][ T68] raw_spin_rq_lock_nested+0xb6/0x150 [ 654.554481][ T68] _task_rq_lock+0xbc/0x470 [ 654.554516][ T68] __schedule+0x16d3/0x5240 [ 654.554539][ T68] ? arch_stack_walk+0x11b/0x150 [ 654.554563][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 654.554587][ T68] ? stack_trace_save+0xa9/0x100 [ 654.554617][ T68] ? __pfx_stack_trace_save+0x10/0x10 [ 654.554659][ T68] ? __pfx___schedule+0x10/0x10 [ 654.554681][ T68] ? add_lock_to_list+0xc7/0x100 [ 654.554710][ T68] preempt_schedule_irq+0x4d/0xa0 [ 654.554733][ T68] irqentry_exit+0x599/0x620 [ 654.554758][ T68] ? trace_irq_disable+0x3b/0x150 [ 654.554789][ T68] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.554814][ T68] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 654.554836][ T68] Code: e9 30 ff ff ff e8 75 fd 83 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 aa ae 10 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 46 bd 87 09 cc 48 8d 3d be 61 cd [ 654.554856][ T68] RSP: 0018:ffffc9000153f160 EFLAGS: 00000296 [ 654.554875][ T68] RAX: b12ffa4e272a7a00 RBX: 0000000000000246 RCX: 0000000000000046 [ 654.554890][ T68] RDX: 0000000000000009 RSI: ffffffff8d7c2056 RDI: ffffffff8ba67a00 [ 654.554907][ T68] RBP: 0000000000000000 R08: 0000000000000002 R09: ffffffff95969020 [ 654.554921][ T68] R10: 00000000d4defbb3 R11: 00000000b47dbea9 R12: 0000000000000000 [ 654.554936][ T68] R13: ffff888072708230 R14: 0000000000000000 R15: 0000000000000001 [ 654.554962][ T68] rt_spin_lock+0x83/0x400 [ 654.554996][ T68] ? dev_reset_queue+0x160/0x1f0 [ 654.555032][ T68] ? __pfx_rt_spin_lock+0x10/0x10 [ 654.555064][ T68] ? dev_reset_queue+0xe7/0x1f0 [ 654.555097][ T68] ? __local_bh_disable_ip+0x5b/0x420 [ 654.555131][ T68] ? dev_reset_queue+0xe7/0x1f0 [ 654.555165][ T68] ? dev_reset_queue+0xe7/0x1f0 [ 654.555199][ T68] dev_reset_queue+0x160/0x1f0 [ 654.555235][ T68] dev_deactivate_many+0x71f/0xd40 [ 654.555273][ T68] ? dev_deactivate_many+0x255/0xd40 [ 654.555311][ T68] __dev_close_many+0x17b/0x6d0 [ 654.555345][ T68] ? __pfx___netdev_update_lower_level+0x10/0x10 [ 654.555381][ T68] ? __pfx___netdev_walk_all_upper_dev+0x10/0x10 [ 654.555416][ T68] ? __pfx___dev_close_many+0x10/0x10 [ 654.555455][ T68] netif_close_many+0x225/0x420 [ 654.555493][ T68] ? __pfx_netif_close_many+0x10/0x10 [ 654.555529][ T68] ? __netdev_upper_dev_unlink+0x63b/0x790 [ 654.555553][ T68] unregister_netdevice_many_notify+0xb47/0x2360 [ 654.555587][ T68] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 654.555615][ T68] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 654.555656][ T68] ? netdev_upper_dev_unlink+0x99/0xe0 [ 654.555693][ T68] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 654.555730][ T68] ? macvlan_dellink+0x3e2/0x470 [ 654.555757][ T68] macvlan_device_event+0x7ec/0x890 [ 654.555786][ T68] ? __pfx_macvlan_device_event+0x10/0x10 [ 654.555812][ T68] ? xsk_notifier+0x211/0x230 [ 654.555851][ T68] notifier_call_chain+0x1be/0x400 [ 654.555881][ T68] unregister_netdevice_many_notify+0x186a/0x2360 [ 654.555920][ T68] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 654.555953][ T68] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 654.555983][ T68] ? net_generic+0x1e/0x240 [ 654.556016][ T68] ? net_generic+0x1e/0x240 [ 654.556051][ T68] ? nexthop_net_exit_rtnl+0x232/0x270 [ 654.556087][ T68] ops_undo_list+0x3d3/0x940 [ 654.556112][ T68] ? rt_spin_unlock+0x1f0/0x200 [ 654.556145][ T68] ? __pfx_ops_undo_list+0x10/0x10 [ 654.556166][ T68] ? rt_spin_unlock+0x14f/0x200 [ 654.556201][ T68] ? idr_destroy+0x21b/0x2a0 [ 654.556222][ T68] ? rt_spin_unlock+0x160/0x200 [ 654.556255][ T68] cleanup_net+0x56e/0x800 [ 654.556278][ T68] ? __pfx_cleanup_net+0x10/0x10 [ 654.556303][ T68] ? process_scheduled_works+0xa8d/0x18c0 [ 654.556336][ T68] ? process_scheduled_works+0xa8d/0x18c0 [ 654.556369][ T68] process_scheduled_works+0xb6e/0x18c0 [ 654.556417][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 654.556451][ T68] ? assign_work+0x3d5/0x5e0 [ 654.556483][ T68] worker_thread+0xa53/0xfc0 [ 654.556530][ T68] kthread+0x388/0x470 [ 654.556555][ T68] ? __pfx_worker_thread+0x10/0x10 [ 654.556587][ T68] ? __pfx_kthread+0x10/0x10 [ 654.556610][ T68] ret_from_fork+0x51e/0xb90 [ 654.556651][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 654.556681][ T68] ? __switch_to+0xc7d/0x1450 [ 654.556709][ T68] ? __pfx_kthread+0x10/0x10 [ 654.556733][ T68] ret_from_fork_asm+0x1a/0x30 [ 654.556764][ T68] [ 654.556785][ T68] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 654.556806][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.556839][ T68] Tainted: [L]=SOFTLOCKUP [ 654.556848][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 654.556865][ T68] Workqueue: netns cleanup_net [ 654.556889][ T68] Call Trace: [ 654.556899][ T68] [ 654.556908][ T68] vpanic+0x56c/0xa60 [ 654.556944][ T68] ? __pfx__printk+0x10/0x10 [ 654.556969][ T68] ? __pfx_vpanic+0x10/0x10 [ 654.557000][ T68] ? is_bpf_text_address+0x292/0x2b0 [ 654.557034][ T68] ? is_bpf_text_address+0x26/0x2b0 [ 654.557071][ T68] panic+0xc5/0xd0 [ 654.557104][ T68] ? __pfx_panic+0x10/0x10 [ 654.557143][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 654.557167][ T68] __warn+0x315/0x4f0 [ 654.557199][ T68] ? print_bfs_bug+0x20/0x40 [ 654.557225][ T68] ? print_bfs_bug+0x20/0x40 [ 654.557249][ T68] __report_bug+0x29a/0x540 [ 654.557276][ T68] ? print_bfs_bug+0x20/0x40 [ 654.557301][ T68] ? __pfx___report_bug+0x10/0x10 [ 654.557327][ T68] ? __pfx_vprintk_emit+0x10/0x10 [ 654.557356][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 654.557377][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 654.557402][ T68] report_bug_entry+0x19a/0x290 [ 654.557427][ T68] ? print_bfs_bug+0x22/0x40 [ 654.557450][ T68] ? print_bfs_bug+0x27/0x40 [ 654.557473][ T68] handle_bug+0xce/0x200 [ 654.557503][ T68] exc_invalid_op+0x1a/0x50 [ 654.557532][ T68] asm_exc_invalid_op+0x1a/0x20 [ 654.557555][ T68] RIP: 0010:print_bfs_bug+0x22/0x40 [ 654.557580][ T68] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 47 a3 fa 02 89 c5 e8 30 8a ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d 90 0d cd 0d 89 de <67> 48 0f b9 3a 5b 5d e9 12 63 87 09 cc 48 c7 c7 9f de 6d 8d e8 15 [ 654.557600][ T68] RSP: 0018:ffffc9000153ebb0 EFLAGS: 00010046 [ 654.557619][ T68] RAX: 000000000000003b RBX: 00000000ffffffff RCX: b12ffa4e272a7a00 [ 654.557643][ T68] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8f6d9d10 [ 654.557658][ T68] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 654.557671][ T68] R10: dffffc0000000000 R11: fffff520002a7d25 R12: ffffffff960f3078 [ 654.557688][ T68] R13: ffffffff930a2410 R14: ffff88801cb3bd00 R15: 0000000000000028 [ 654.557716][ T68] __lock_acquire+0x2550/0x2cf0 [ 654.557742][ T68] ? lockdep_unlock+0x5d/0xd0 [ 654.557775][ T68] ? __lock_acquire+0x146e/0x2cf0 [ 654.557807][ T68] lock_acquire+0xf0/0x2e0 [ 654.557828][ T68] ? raw_spin_rq_lock_nested+0xb6/0x150 [ 654.557862][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 654.557897][ T68] _raw_spin_lock_nested+0x32/0x50 [ 654.557923][ T68] ? raw_spin_rq_lock_nested+0xb6/0x150 [ 654.557955][ T68] raw_spin_rq_lock_nested+0xb6/0x150 [ 654.557989][ T68] _task_rq_lock+0xbc/0x470 [ 654.558023][ T68] __schedule+0x16d3/0x5240 [ 654.558046][ T68] ? arch_stack_walk+0x11b/0x150 [ 654.558072][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 654.558096][ T68] ? stack_trace_save+0xa9/0x100 [ 654.558127][ T68] ? __pfx_stack_trace_save+0x10/0x10 [ 654.558161][ T68] ? __pfx___schedule+0x10/0x10 [ 654.558184][ T68] ? add_lock_to_list+0xc7/0x100 [ 654.558218][ T68] preempt_schedule_irq+0x4d/0xa0 [ 654.558243][ T68] irqentry_exit+0x599/0x620 [ 654.558267][ T68] ? trace_irq_disable+0x3b/0x150 [ 654.558298][ T68] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.558324][ T68] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 654.558346][ T68] Code: e9 30 ff ff ff e8 75 fd 83 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 aa ae 10 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 46 bd 87 09 cc 48 8d 3d be 61 cd [ 654.558368][ T68] RSP: 0018:ffffc9000153f160 EFLAGS: 00000296 [ 654.558388][ T68] RAX: b12ffa4e272a7a00 RBX: 0000000000000246 RCX: 0000000000000046 [ 654.558404][ T68] RDX: 0000000000000009 RSI: ffffffff8d7c2056 RDI: ffffffff8ba67a00 [ 654.558419][ T68] RBP: 0000000000000000 R08: 0000000000000002 R09: ffffffff95969020 [ 654.558434][ T68] R10: 00000000d4defbb3 R11: 00000000b47dbea9 R12: 0000000000000000 [ 654.558448][ T68] R13: ffff888072708230 R14: 0000000000000000 R15: 0000000000000001 [ 654.558475][ T68] rt_spin_lock+0x83/0x400 [ 654.558509][ T68] ? dev_reset_queue+0x160/0x1f0 [ 654.558546][ T68] ? __pfx_rt_spin_lock+0x10/0x10 [ 654.558579][ T68] ? dev_reset_queue+0xe7/0x1f0 [ 654.558613][ T68] ? __local_bh_disable_ip+0x5b/0x420 [ 654.558653][ T68] ? dev_reset_queue+0xe7/0x1f0 [ 654.558689][ T68] ? dev_reset_queue+0xe7/0x1f0 [ 654.558723][ T68] dev_reset_queue+0x160/0x1f0 [ 654.558760][ T68] dev_deactivate_many+0x71f/0xd40 [ 654.558797][ T68] ? dev_deactivate_many+0x255/0xd40 [ 654.558835][ T68] __dev_close_many+0x17b/0x6d0 [ 654.558869][ T68] ? __pfx___netdev_update_lower_level+0x10/0x10 [ 654.558905][ T68] ? __pfx___netdev_walk_all_upper_dev+0x10/0x10 [ 654.558940][ T68] ? __pfx___dev_close_many+0x10/0x10 [ 654.558980][ T68] netif_close_many+0x225/0x420 [ 654.559017][ T68] ? __pfx_netif_close_many+0x10/0x10 [ 654.559052][ T68] ? __netdev_upper_dev_unlink+0x63b/0x790 [ 654.559077][ T68] unregister_netdevice_many_notify+0xb47/0x2360 [ 654.559111][ T68] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 654.559140][ T68] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 654.559176][ T68] ? netdev_upper_dev_unlink+0x99/0xe0 [ 654.559212][ T68] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 654.559249][ T68] ? macvlan_dellink+0x3e2/0x470 [ 654.559274][ T68] macvlan_device_event+0x7ec/0x890 [ 654.559302][ T68] ? __pfx_macvlan_device_event+0x10/0x10 [ 654.559329][ T68] ? xsk_notifier+0x211/0x230 [ 654.559369][ T68] notifier_call_chain+0x1be/0x400 [ 654.559398][ T68] unregister_netdevice_many_notify+0x186a/0x2360 [ 654.559438][ T68] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 654.559471][ T68] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 654.559500][ T68] ? net_generic+0x1e/0x240 [ 654.559533][ T68] ? net_generic+0x1e/0x240 [ 654.559568][ T68] ? nexthop_net_exit_rtnl+0x232/0x270 [ 654.559605][ T68] ops_undo_list+0x3d3/0x940 [ 654.559636][ T68] ? rt_spin_unlock+0x1f0/0x200 [ 654.559671][ T68] ? __pfx_ops_undo_list+0x10/0x10 [ 654.559693][ T68] ? rt_spin_unlock+0x14f/0x200 [ 654.559729][ T68] ? idr_destroy+0x21b/0x2a0 [ 654.559751][ T68] ? rt_spin_unlock+0x160/0x200 [ 654.559786][ T68] cleanup_net+0x56e/0x800 [ 654.559809][ T68] ? __pfx_cleanup_net+0x10/0x10 [ 654.559837][ T68] ? process_scheduled_works+0xa8d/0x18c0 [ 654.559870][ T68] ? process_scheduled_works+0xa8d/0x18c0 [ 654.559902][ T68] process_scheduled_works+0xb6e/0x18c0 [ 654.559951][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 654.559988][ T68] ? assign_work+0x3d5/0x5e0 [ 654.560022][ T68] worker_thread+0xa53/0xfc0 [ 654.560069][ T68] kthread+0x388/0x470 [ 654.560094][ T68] ? __pfx_worker_thread+0x10/0x10 [ 654.560126][ T68] ? __pfx_kthread+0x10/0x10 [ 654.560152][ T68] ret_from_fork+0x51e/0xb90 [ 654.560186][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 654.560217][ T68] ? __switch_to+0xc7d/0x1450 [ 654.560246][ T68] ? __pfx_kthread+0x10/0x10 [ 654.560270][ T68] ret_from_fork_asm+0x1a/0x30 [ 654.560301][ T68] [ 654.560913][ T68] Kernel Offset: disabled